$ rpki-client -vvf rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.mft File: _ONoVUVgesO8wzQNA5shaIJxJ74.mft (raw, json) Hash identifier: 54YCTkB/eGirhD+L71ZLsmC4TbSB8WYYSDugGhFkcQE= Subject key identifier: 25:94:F6:DA:B0:65:9C:81:A2:8E:10:89:8A:FC:B4:4D:99:B4:87:45 Authority key identifier: FC:E3:68:55:45:60:7A:C3:BC:C3:34:0D:03:9B:21:68:82:71:27:BE Certificate issuer: /CN=A9198D02/serialNumber=FCE3685545607AC3BCC3340D039B2168827127BE Certificate serial: 0823 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ONoVUVgesO8wzQNA5shaIJxJ74.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.mft Manifest number: 080E Signing time: Thu 24 Apr 2025 20:43:34 +0000 Manifest this update: Thu 24 Apr 2025 20:43:33 +0000 Manifest next update: Thu 01 May 2025 20:43:33 +0000 Files and hashes: 1: _ONoVUVgesO8wzQNA5shaIJxJ74.crl (hash: uHHP4BXAMBYSRikzhNp18ukK92iPKCBBkasziIPf6Yk=) 2: 3BF0A4D868F511ECAB15DE18C4F9AE02.roa (hash: ZWM4HJUjC3JgAEYknxCATq6PGI5BXk42LHpdEZQRJ0I=) 3: 51A7E3C28EB711EBB8A7B01DC4F9AE02.roa (hash: oVaIkIIp594wdZKn2XCmHgy069EyuIaCAvG8B279YGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.crl rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ONoVUVgesO8wzQNA5shaIJxJ74.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:43:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2083 (0x823) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198D02, serialNumber=FCE3685545607AC3BCC3340D039B2168827127BE Validity Not Before: Apr 24 20:43:33 2025 GMT Not After : May 1 20:43:33 2025 GMT Subject: CN=680aa276-5b3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ea:73:41:d5:c9:0a:8a:e2:19:be:e1:b2:4f: 8a:f5:05:63:8e:39:98:9f:d2:06:f8:20:6b:98:89: 04:a9:9a:9c:e6:65:72:00:40:42:9b:61:3b:bb:6c: 6d:91:59:8e:3e:0b:82:8d:03:bf:bc:d0:3a:bb:3e: 96:3a:1e:79:e6:09:ba:47:1a:ef:b1:0b:18:88:7d: df:ae:df:d1:c7:38:b4:eb:e5:6e:b1:af:cf:13:fb: 6e:96:16:06:09:37:63:21:57:62:c1:be:70:11:35: eb:c4:b4:17:c2:5b:d5:49:9e:92:00:e8:86:c4:58: c0:2c:44:28:d9:26:15:2d:35:48:12:75:6c:eb:0f: 23:ba:a9:7d:3f:5f:9a:ea:7b:c7:1f:77:8d:db:9e: be:32:65:99:51:23:09:88:57:13:69:83:f3:bf:1b: 27:ba:48:1e:84:8f:3a:7e:42:b4:7b:f9:72:ec:9f: 57:e0:e8:80:d9:0e:ff:63:c9:45:bd:1c:f0:ac:27: 3b:c1:f4:b2:cc:a8:f7:0b:99:5a:76:58:b5:ab:2c: 4e:08:3d:8a:a4:35:c1:51:63:45:1a:6f:0f:7d:63: d4:36:2f:26:ad:92:ad:ee:89:15:bd:c2:a5:cc:a0: 37:68:77:21:a6:47:3f:5a:a8:0b:86:e2:dc:44:87: a2:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:94:F6:DA:B0:65:9C:81:A2:8E:10:89:8A:FC:B4:4D:99:B4:87:45 X509v3 Authority Key Identifier: keyid:FC:E3:68:55:45:60:7A:C3:BC:C3:34:0D:03:9B:21:68:82:71:27:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ONoVUVgesO8wzQNA5shaIJxJ74.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:8f:bd:04:a9:95:cd:6a:2d:17:f6:74:dc:f7:5d:f3:c9:91: ab:dd:b9:73:23:04:cd:1d:17:6a:ec:5d:51:0c:23:33:40:2b: ca:34:75:da:d6:2e:f1:2f:dd:d2:e7:cf:18:c7:54:01:77:38: e8:87:b2:3e:b1:e0:ba:99:40:38:97:14:4a:9e:82:32:80:70: 0b:c8:f3:5e:43:ce:e0:66:1f:9a:12:66:fc:1b:51:5b:7c:eb: bf:ae:9c:ce:78:ef:b0:65:e7:b0:8e:e2:b0:8a:b1:71:b1:ab: 97:84:16:58:e7:bd:77:1a:8a:a9:8c:72:ec:5d:8d:8f:88:ab: 61:92:94:af:d2:b9:6b:c0:22:7e:43:f4:7e:47:f0:bd:69:c8: bd:20:b2:ab:78:af:b8:99:89:88:b0:05:2c:ef:b7:94:c2:46: f3:23:c7:88:91:3e:f4:9d:69:42:a6:64:d8:54:b3:62:dc:3d: 18:73:52:2e:bd:3d:ba:d8:68:a0:a8:be:13:ac:90:7f:23:4a: b9:35:a2:f5:61:23:19:b8:34:75:12:97:9d:ca:6c:97:85:e7: 3b:34:23:a8:78:43:1b:22:a2:ad:27:dc:c5:79:bd:26:5a:e2: 5a:95:53:1f:7c:cd:e3:a9:0a:4d:61:f0:7e:51:8f:ca:be:57: 2c:22:81:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OThEMDIxMTAvBgNVBAUTKEZDRTM2ODU1NDU2MDdBQzNCQ0MzMzQwRDAzOUIyMTY4 ODI3MTI3QkUwHhcNMjUwNDI0MjA0MzMzWhcNMjUwNTAxMjA0MzMzWjAYMRYwFAYD VQQDEw02ODBhYTI3Ni01YjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2+pzQdXJCoriGb7hsk+K9QVjjjmYn9IG+CBrmIkEqZqc5mVyAEBCm2E7u2xt kVmOPguCjQO/vNA6uz6WOh555gm6RxrvsQsYiH3frt/Rxzi06+Vusa/PE/tulhYG CTdjIVdiwb5wETXrxLQXwlvVSZ6SAOiGxFjALEQo2SYVLTVIEnVs6w8juql9P1+a 6nvHH3eN256+MmWZUSMJiFcTaYPzvxsnukgehI86fkK0e/ly7J9X4OiA2Q7/Y8lF vRzwrCc7wfSyzKj3C5ladli1qyxOCD2KpDXBUWNFGm8PfWPUNi8mrZKt7okVvcKl zKA3aHchpkc/WqgLhuLcRIeizQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCWU9tqw ZZyBoo4QiYr8tE2ZtIdFMB8GA1UdIwQYMBaAFPzjaFVFYHrDvMM0DQObIWiCcSe+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OEQwMi8yOEE1MDZGQUQ4 NjcxMUVBOEI1MTYyMERDNEY5QUUwMi9fT05vVlVWZ2VzTzh3elFOQTVzaGFJSnhK NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19PTm9WVVZnZXNPOHd6UU5BNXNoYUlKeEo3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OEQwMi8yOEE1MDZGQUQ4NjcxMUVBOEI1MTYyMERDNEY5QUUwMi9fT05vVlVWZ2Vz Tzh3elFOQTVzaGFJSnhKNzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNj70EqZXNai0X9nTc913zyZGr3blzIwTNHRdq7F1RDCMzQCvKNHXa 1i7xL93S588Yx1QBdzjoh7I+seC6mUA4lxRKnoIygHALyPNeQ87gZh+aEmb8G1Fb fOu/rpzOeO+wZeewjuKwirFxsauXhBZY5713GoqpjHLsXY2PiKthkpSv0rlrwCJ+ Q/R+R/C9aci9ILKreK+4mYmIsAUs77eUwkbzI8eIkT70nWlCpmTYVLNi3D0Yc1Iu vT262GigqL4TrJB/I0q5NaL1YSMZuDR1EpedymyXhec7NCOoeEMbIqKtJ9zFeb0m WuJalVMffM3jqQpNYfB+UY/KvlcsIoE4 -----END CERTIFICATE-----Generated at Sat Apr 26 04:36:45 2025 by rpki-client