$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft File: A-8OOQoxXl88RhsKcrIYvuIj4A4.mft (raw, json) Hash identifier: paPpuYdec+BMVVNuYWMJH4vswxwH4XmYTM+zywYvPAk= Subject key identifier: 98:8E:C2:A8:8C:38:88:7C:FE:9A:20:8C:CC:95:3F:77:E2:C4:98:93 Authority key identifier: 03:EF:0E:39:0A:31:5E:5F:3C:46:1B:0A:72:B2:18:BE:E2:23:E0:0E Certificate issuer: /CN=A91A0FC0/serialNumber=03EF0E390A315E5F3C461B0A72B218BEE223E00E Certificate serial: BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A-8OOQoxXl88RhsKcrIYvuIj4A4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft Manifest number: 044F Signing time: Fri 25 Apr 2025 00:32:26 +0000 Manifest this update: Fri 25 Apr 2025 00:32:26 +0000 Manifest next update: Fri 02 May 2025 00:32:26 +0000 Files and hashes: 1: A-8OOQoxXl88RhsKcrIYvuIj4A4.crl (hash: jvacMSeaYnTuDcMfHdpRFt1dL6MQr8RbRwXsPeiXV9c=) 2: 9190CF9E2E7811EFB7206224C4F9AE02.roa (hash: h88YKkcazjRoHLRQFSfgpu+Eo1A4vft9VL2aQVc7RoU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.crl rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A-8OOQoxXl88RhsKcrIYvuIj4A4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:32:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 187 (0xbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0FC0, serialNumber=03EF0E390A315E5F3C461B0A72B218BEE223E00E Validity Not Before: Apr 25 00:32:26 2025 GMT Not After : May 2 00:32:26 2025 GMT Subject: CN=680ad81a-5a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cb:87:5a:50:39:47:26:11:84:1a:21:4b:2f: c2:37:89:95:7d:cd:04:48:b6:73:39:81:74:d3:1a: e6:c9:b2:72:88:7a:30:e4:01:37:fe:2e:a2:cb:1d: 2a:4e:ca:a9:2d:3d:9c:b1:9b:d8:2a:a8:9b:6f:45: 63:2a:52:60:bc:63:9b:bd:9a:27:e7:41:e6:bf:d8: 98:c2:f7:71:e3:2d:2a:1e:45:d0:26:e3:aa:40:20: cc:72:42:84:83:ae:99:ca:58:b9:e3:13:b7:96:81: e8:ff:05:67:3a:f0:16:eb:1c:1e:ef:62:f0:d3:52: c4:30:85:09:93:69:d6:78:1a:54:de:e9:fa:ac:b2: 06:ee:45:d8:20:ba:58:87:94:e1:64:3a:5a:78:f2: a0:bb:24:f0:fd:5c:c2:ef:44:f3:c1:56:ea:ce:83: 61:6b:d4:2a:f2:00:c3:68:ef:99:de:76:15:db:6f: 24:6b:89:5b:0c:49:38:b5:d4:65:bc:cd:44:e7:65: 3f:e9:df:d7:54:69:27:3b:42:64:81:fd:8f:9e:a3: 5d:64:c0:1d:de:7a:7f:77:91:04:2e:52:62:16:4b: 57:5d:22:f1:d9:21:a2:ff:fe:35:ad:4b:ba:2c:99: f8:35:50:09:49:47:6d:3c:5a:c2:73:e9:da:67:83: 0a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:8E:C2:A8:8C:38:88:7C:FE:9A:20:8C:CC:95:3F:77:E2:C4:98:93 X509v3 Authority Key Identifier: keyid:03:EF:0E:39:0A:31:5E:5F:3C:46:1B:0A:72:B2:18:BE:E2:23:E0:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A-8OOQoxXl88RhsKcrIYvuIj4A4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:f6:df:f0:4d:3d:69:d7:f2:97:d2:68:80:4d:eb:44:ec:57: 37:8f:90:bb:52:b3:58:53:6c:b7:8d:5e:7f:3f:d4:cf:ce:61: ad:11:a5:c3:5e:b6:49:fc:a0:87:91:77:1e:17:bd:2b:aa:e2: fd:1c:f8:49:81:d8:5d:a2:d5:ce:0c:c7:9d:4a:db:7b:a2:33: b7:59:2c:8d:86:ff:48:46:03:b2:9a:a1:46:04:ef:7d:a7:e2: 12:77:30:68:a7:22:ad:82:08:6e:79:2c:e4:89:b0:5c:7b:8f: a5:21:90:a9:4f:71:e9:e4:40:61:0b:7d:be:4e:a4:18:b2:a6: d5:56:46:36:29:a0:ad:ae:41:a9:0b:f4:07:2f:e9:f4:c6:fe: ec:a3:4c:f8:5f:fc:17:6e:0b:88:5b:75:73:42:df:62:c8:4d: 2e:99:e8:52:84:f7:fc:7b:02:e6:a5:e5:ba:84:6b:73:64:b4: a0:8e:1f:5b:8c:ba:d3:db:71:3b:d9:09:4e:a5:43:65:eb:09: a2:cc:48:88:74:2f:61:f7:62:d5:fe:aa:b2:a9:7d:47:eb:c5: 64:03:3e:7b:57:51:27:72:f8:b4:a9:89:95:02:7a:82:3c:4d: 55:45:a0:4c:f6:69:2f:b7:e0:40:c1:cc:ff:c5:e8:cf:cf:25: 64:00:73:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBGQzAxMTAvBgNVBAUTKDAzRUYwRTM5MEEzMTVFNUYzQzQ2MUIwQTcyQjIxOEJF RTIyM0UwMEUwHhcNMjUwNDI1MDAzMjI2WhcNMjUwNTAyMDAzMjI2WjAYMRYwFAYD VQQDEw02ODBhZDgxYS01YTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv8uHWlA5RyYRhBohSy/CN4mVfc0ESLZzOYF00xrmybJyiHow5AE3/i6iyx0q TsqpLT2csZvYKqibb0VjKlJgvGObvZon50Hmv9iYwvdx4y0qHkXQJuOqQCDMckKE g66Zyli54xO3loHo/wVnOvAW6xwe72Lw01LEMIUJk2nWeBpU3un6rLIG7kXYILpY h5ThZDpaePKguyTw/VzC70TzwVbqzoNha9Qq8gDDaO+Z3nYV228ka4lbDEk4tdRl vM1E52U/6d/XVGknO0Jkgf2PnqNdZMAd3np/d5EELlJiFktXXSLx2SGi//41rUu6 LJn4NVAJSUdtPFrCc+naZ4MK+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJiOwqiM OIh8/pogjMyVP3fixJiTMB8GA1UdIwQYMBaAFAPvDjkKMV5fPEYbCnKyGL7iI+AO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEZDMC9DREUwOTg3Njk1 NzgxMUVDQTMyQ0NGNTVDNEY5QUUwMi9BLThPT1FveFhsODhSaHNLY3JJWXZ1SWo0 QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EtOE9PUW94WGw4OFJoc0tjcklZdnVJajRBNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEZDMC9DREUwOTg3Njk1NzgxMUVDQTMyQ0NGNTVDNEY5QUUwMi9BLThPT1FveFhs ODhSaHNLY3JJWXZ1SWo0QTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCI9t/wTT1p1/KX0miATetE7Fc3j5C7UrNYU2y3jV5/P9TPzmGtEaXD XrZJ/KCHkXceF70rquL9HPhJgdhdotXODMedStt7ojO3WSyNhv9IRgOymqFGBO99 p+ISdzBopyKtgghueSzkibBce4+lIZCpT3Hp5EBhC32+TqQYsqbVVkY2KaCtrkGp C/QHL+n0xv7so0z4X/wXbguIW3VzQt9iyE0umehShPf8ewLmpeW6hGtzZLSgjh9b jLrT23E72QlOpUNl6wmizEiIdC9h92LV/qqyqX1H68VkAz57V1Encvi0qYmVAnqC PE1VRaBM9mkvt+BAwcz/xejPzyVkAHNV -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:57 2025 by rpki-client