$ rpki-client -vvf rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft File: o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft (raw, json) Hash identifier: K/hXyQGSgDlEfaiq2Ld8LzeiKKgpiU1b/Og+/NncUpY= Subject key identifier: F5:66:AB:87:2B:1D:4A:29:E9:43:49:B8:FD:9C:61:D8:3E:27:AD:09 Authority key identifier: A3:65:2D:9E:54:E9:64:68:B2:30:47:93:73:17:FA:4E:CD:7B:36:48 Certificate issuer: /CN=A91A36A7/serialNumber=A3652D9E54E96468B23047937317FA4ECD7B3648 Certificate serial: 05D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft Manifest number: 05CB Signing time: Thu 24 Apr 2025 22:50:14 +0000 Manifest this update: Thu 24 Apr 2025 22:50:13 +0000 Manifest next update: Thu 01 May 2025 22:50:13 +0000 Files and hashes: 1: o2UtnlTpZGiyMEeTcxf6Ts17Nkg.crl (hash: 0QaGZEKpyARn0jPa4rR0ZYDreZv9bYTgOySHWe7PIc0=) 2: F0CA090EB94A11EBAF5BDD5AC4F9AE02.roa (hash: AxnCXioU+pzcVhOQczSiGNqFZn1BtxYji3/Mt/svcQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.crl rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1490 (0x5d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A36A7, serialNumber=A3652D9E54E96468B23047937317FA4ECD7B3648 Validity Not Before: Apr 24 22:50:13 2025 GMT Not After : May 1 22:50:13 2025 GMT Subject: CN=680ac025-e835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:22:1a:2d:0b:84:cf:d0:50:38:01:02:5f:e9: b3:bd:2d:7e:02:ed:d4:98:be:bc:de:15:fb:0a:5c: be:36:c0:c4:17:a7:6d:3c:6a:c1:b0:04:68:1e:07: f9:29:a3:65:c6:59:50:3a:a4:c0:83:14:50:e5:99: 58:ba:ce:6f:07:6e:13:ce:7d:50:24:bc:c6:bb:9f: cd:09:1a:12:f2:ff:30:25:2d:5b:1e:f8:6d:85:40: 2e:7d:18:66:59:84:b0:6a:02:2e:1b:35:c6:a1:04: a1:8d:16:ec:7f:ae:73:a8:11:0b:42:f8:a5:80:1e: 1c:b8:26:21:fc:2f:5f:41:29:5b:f1:d3:4e:7b:d9: 84:1f:ad:3d:36:30:06:44:7b:59:80:26:1f:a1:c1: 3c:b2:94:31:88:00:c6:15:a1:d5:e5:55:7c:27:b5: 8d:5b:a3:a2:4a:b7:e3:a7:bd:1f:b5:29:f5:57:1c: 81:b2:13:b1:c2:c6:5d:c3:4f:c9:f0:74:60:88:5a: ae:75:63:c0:54:c0:32:be:16:b4:3a:69:95:43:8e: e3:02:33:49:86:0e:36:e1:f6:c9:bf:73:66:af:f8: c0:6b:d9:ab:bb:15:fa:c6:72:05:9d:e9:23:80:10: f8:45:3d:2d:45:f1:57:7a:db:e7:e3:2a:8d:a2:3e: 9d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:66:AB:87:2B:1D:4A:29:E9:43:49:B8:FD:9C:61:D8:3E:27:AD:09 X509v3 Authority Key Identifier: keyid:A3:65:2D:9E:54:E9:64:68:B2:30:47:93:73:17:FA:4E:CD:7B:36:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:22:66:fa:69:7d:eb:9e:6e:97:b3:67:08:79:fc:3f:e7:6e: 66:ec:c8:d5:12:1d:d2:bb:67:bb:77:56:3d:8f:ef:a5:75:37: fe:c2:20:ce:95:fd:d5:a8:6d:ec:a6:46:e0:a5:0c:34:ca:b6: e5:ee:e6:e9:6a:b1:08:6a:0c:b9:64:a8:ee:04:5d:4a:eb:6a: 0e:77:9b:46:2b:fa:ca:87:22:85:8e:69:28:d0:15:0b:e9:48: e6:ac:8d:16:cc:65:cc:74:8f:f6:11:06:43:49:49:1a:2e:70: 86:d8:8f:f1:6d:e8:e1:22:40:72:49:43:8d:13:33:b9:51:17: e0:41:bc:30:cb:8f:98:6b:19:82:28:82:58:3f:82:51:30:a8: 21:d5:92:6f:e4:6d:31:2c:76:9c:a7:25:bb:80:f4:88:42:c1: 28:4e:30:52:10:bc:b8:ef:fc:30:e0:d1:3e:0e:a6:9f:47:54: 7c:14:e6:89:7c:68:00:84:2d:5b:9a:c4:dc:68:b5:76:ef:1c: d2:09:16:10:0e:bb:6c:7c:00:0c:1b:e0:a5:aa:72:52:6e:f7: 48:f7:20:c0:c4:89:2e:d3:ee:7b:25:2b:0d:8a:67:45:49:57: cc:51:53:3f:d5:47:f7:aa:26:50:38:27:fe:25:ba:38:56:a9: 7c:e4:33:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM2QTcxMTAvBgNVBAUTKEEzNjUyRDlFNTRFOTY0NjhCMjMwNDc5MzczMTdGQTRF Q0Q3QjM2NDgwHhcNMjUwNDI0MjI1MDEzWhcNMjUwNTAxMjI1MDEzWjAYMRYwFAYD VQQDEw02ODBhYzAyNS1lODM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzCIaLQuEz9BQOAECX+mzvS1+Au3UmL683hX7Cly+NsDEF6dtPGrBsARoHgf5 KaNlxllQOqTAgxRQ5ZlYus5vB24Tzn1QJLzGu5/NCRoS8v8wJS1bHvhthUAufRhm WYSwagIuGzXGoQShjRbsf65zqBELQvilgB4cuCYh/C9fQSlb8dNOe9mEH609NjAG RHtZgCYfocE8spQxiADGFaHV5VV8J7WNW6OiSrfjp70ftSn1VxyBshOxwsZdw0/J 8HRgiFqudWPAVMAyvha0OmmVQ47jAjNJhg424fbJv3Nmr/jAa9mruxX6xnIFnekj gBD4RT0tRfFXetvn4yqNoj6d/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPVmq4cr HUop6UNJuP2cYdg+J60JMB8GA1UdIwQYMBaAFKNlLZ5U6WRosjBHk3MX+k7NezZI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzZBNy84QUE2NUFGQ0I5 NDkxMUVCQkJCMzI1NUFDNEY5QUUwMi9vMlV0bmxUcFpHaXlNRWVUY3hmNlRzMTdO a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28yVXRubFRwWkdpeU1FZVRjeGY2VHMxN05rZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzZBNy84QUE2NUFGQ0I5NDkxMUVCQkJCMzI1NUFDNEY5QUUwMi9vMlV0bmxUcFpH aXlNRWVUY3hmNlRzMTdOa2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzImb6aX3rnm6Xs2cIefw/525m7MjVEh3Su2e7d1Y9j++ldTf+wiDO lf3VqG3spkbgpQw0yrbl7ubparEIagy5ZKjuBF1K62oOd5tGK/rKhyKFjmko0BUL 6UjmrI0WzGXMdI/2EQZDSUkaLnCG2I/xbejhIkBySUONEzO5URfgQbwwy4+YaxmC KIJYP4JRMKgh1ZJv5G0xLHacpyW7gPSIQsEoTjBSELy47/ww4NE+DqafR1R8FOaJ fGgAhC1bmsTcaLV27xzSCRYQDrtsfAAMG+ClqnJSbvdI9yDAxIku0+57JSsNimdF SVfMUVM/1Uf3qiZQOCf+Jbo4Vql85DNb -----END CERTIFICATE-----Generated at Sat Apr 26 15:07:12 2025 by rpki-client