$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.mft File: O6SMSvsA9zNCJMBRU6rG8mhoQ7c.mft (raw, json) Hash identifier: DeJJ+0dm5Ots1Pp6JDuAnP31ONa4GSbDihdBqwcBck4= Subject key identifier: 44:9A:98:87:56:AA:58:0F:FB:14:94:37:56:3B:0F:15:F9:97:55:7B Authority key identifier: 3B:A4:8C:4A:FB:00:F7:33:42:24:C0:51:53:AA:C6:F2:68:68:43:B7 Certificate issuer: /CN=A91AB92D/serialNumber=3BA48C4AFB00F7334224C05153AAC6F2686843B7 Certificate serial: E0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.mft Manifest number: E0 Signing time: Fri 25 Apr 2025 02:38:00 +0000 Manifest this update: Fri 25 Apr 2025 02:37:59 +0000 Manifest next update: Fri 02 May 2025 02:37:59 +0000 Files and hashes: 1: O6SMSvsA9zNCJMBRU6rG8mhoQ7c.crl (hash: 9m/YzBjmaryCFZYS0VLcoWz/gSs9BjTjQh3Jins448c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.crl rsync://rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:37:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 224 (0xe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB92D, serialNumber=3BA48C4AFB00F7334224C05153AAC6F2686843B7 Validity Not Before: Apr 25 02:37:59 2025 GMT Not After : May 2 02:37:59 2025 GMT Subject: CN=680af587-6901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:28:bc:a8:91:ab:53:a7:61:db:d4:f8:25:0d: f5:da:a6:e4:e4:a8:0d:1d:9d:20:b6:02:b7:e5:a2: 54:73:98:f6:f4:2f:96:96:c6:6f:f0:7c:eb:fe:89: 58:ed:9e:a5:b9:06:16:eb:39:27:c7:4f:4a:39:0b: 69:0f:89:16:27:ab:a6:3a:4a:32:ad:70:49:7d:ba: 4d:7e:ed:3a:61:79:a0:08:13:eb:64:11:4c:51:56: b1:72:4f:15:57:12:74:a5:78:ba:16:cf:02:eb:bb: 0f:fc:6b:d0:da:93:e4:a2:44:f8:4f:21:f1:be:07: 8f:0d:de:9b:ba:5f:88:7c:8e:9f:6d:7e:ce:39:8f: 33:39:1b:5a:36:f3:13:48:0d:e1:d5:8a:16:c7:cb: 7a:a5:92:37:c7:a1:a0:29:77:2c:91:6a:01:d1:87: 9e:19:29:98:ba:0c:fa:fc:49:8f:a7:dc:54:1b:3e: 33:0c:b9:65:45:50:c0:ef:bd:da:19:c2:0f:be:de: 3a:42:86:f1:ee:6c:4b:ea:79:0a:96:fc:61:60:74: 65:12:c7:76:e0:c5:27:72:01:a5:87:1c:a3:78:61: 18:0a:b5:02:49:1a:54:fd:71:f3:11:aa:62:02:de: 9a:67:b2:3b:1f:71:4f:20:04:f0:08:ef:ca:3c:26: 70:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:9A:98:87:56:AA:58:0F:FB:14:94:37:56:3B:0F:15:F9:97:55:7B X509v3 Authority Key Identifier: keyid:3B:A4:8C:4A:FB:00:F7:33:42:24:C0:51:53:AA:C6:F2:68:68:43:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:ba:43:ea:bb:50:c9:2a:ff:a6:b1:77:fc:bf:5c:c7:1e:ee: f3:cf:32:ba:c3:81:34:26:f0:45:c4:43:27:7e:09:7d:04:b8: 99:f1:5a:79:75:04:74:df:4d:59:34:76:91:a8:5b:74:56:91: 5d:d6:e2:0b:0e:54:52:c0:6d:17:e1:8c:e2:9c:85:78:0e:06: 58:08:f2:9d:0c:c5:7f:91:77:60:11:bc:0e:2c:e2:8b:0f:6f: 20:ec:8a:70:20:9e:df:65:de:23:58:1e:dc:42:5d:7d:0c:ab: b3:c0:bf:1c:84:21:fd:74:59:62:51:45:59:71:e5:37:ca:1d: 0c:b4:59:53:84:81:1d:e0:3f:a8:0a:fd:33:e7:db:8c:c0:4b: f8:00:d6:6a:60:f9:ec:98:7d:e4:7f:ed:02:de:46:3d:8e:42: 46:b9:24:b1:7e:5d:de:f8:2c:32:77:ba:e9:ed:7e:52:d3:e8: 62:a7:91:e1:4d:8e:34:e9:5f:13:95:06:1b:ba:57:46:e0:ad: 52:dd:71:1e:8c:22:43:47:51:68:04:86:4d:5d:3f:3f:04:9f: 12:e3:fc:d5:39:0d:23:75:09:3f:c5:c3:e8:36:63:65:ec:b7: a6:75:94:6e:6e:97:05:b4:32:c2:0f:e1:f3:d7:72:50:df:85: 9f:b7:94:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI5MkQxMTAvBgNVBAUTKDNCQTQ4QzRBRkIwMEY3MzM0MjI0QzA1MTUzQUFDNkYy Njg2ODQzQjcwHhcNMjUwNDI1MDIzNzU5WhcNMjUwNTAyMDIzNzU5WjAYMRYwFAYD VQQDEw02ODBhZjU4Ny02OTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnyi8qJGrU6dh29T4JQ312qbk5KgNHZ0gtgK35aJUc5j29C+WlsZv8Hzr/olY 7Z6luQYW6zknx09KOQtpD4kWJ6umOkoyrXBJfbpNfu06YXmgCBPrZBFMUVaxck8V VxJ0pXi6Fs8C67sP/GvQ2pPkokT4TyHxvgePDd6bul+IfI6fbX7OOY8zORtaNvMT SA3h1YoWx8t6pZI3x6GgKXcskWoB0YeeGSmYugz6/EmPp9xUGz4zDLllRVDA773a GcIPvt46Qobx7mxL6nkKlvxhYHRlEsd24MUncgGlhxyjeGEYCrUCSRpU/XHzEapi At6aZ7I7H3FPIATwCO/KPCZwswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFESamIdW qlgP+xSUN1Y7DxX5l1V7MB8GA1UdIwQYMBaAFDukjEr7APczQiTAUVOqxvJoaEO3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjkyRC84MEI4MTcxQUNF RDExMUVFOEJGNjRCNzNDNEY5QUUwMi9PNlNNU3ZzQTl6TkNKTUJSVTZyRzhtaG9R N2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL082U01TdnNBOXpOQ0pNQlJVNnJHOG1ob1E3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjkyRC84MEI4MTcxQUNFRDExMUVFOEJGNjRCNzNDNEY5QUUwMi9PNlNNU3ZzQTl6 TkNKTUJSVTZyRzhtaG9RN2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4ukPqu1DJKv+msXf8v1zHHu7zzzK6w4E0JvBFxEMnfgl9BLiZ8Vp5 dQR0301ZNHaRqFt0VpFd1uILDlRSwG0X4YzinIV4DgZYCPKdDMV/kXdgEbwOLOKL D28g7IpwIJ7fZd4jWB7cQl19DKuzwL8chCH9dFliUUVZceU3yh0MtFlThIEd4D+o Cv0z59uMwEv4ANZqYPnsmH3kf+0C3kY9jkJGuSSxfl3e+Cwyd7rp7X5S0+hip5Hh TY406V8TlQYbuldG4K1S3XEejCJDR1FoBIZNXT8/BJ8S4/zVOQ0jdQk/xcPoNmNl 7LemdZRubpcFtDLCD+Hz13JQ34Wft5Q9 -----END CERTIFICATE-----Generated at Sat Apr 26 16:39:58 2025 by rpki-client