$ rpki-client -vvf rpki.apnic.net/member_repository/A91B915D/7109EFC47DC911ECBBFB6F24C4F9AE02/o5jf1NOXXquW_TgDOWgkbkdeKLM.mft File: o5jf1NOXXquW_TgDOWgkbkdeKLM.mft (raw, json) Hash identifier: qpyTH0wGgISYvsU5ppUu7vbhHEoHT3UWgsm2OKJ8bhk= Subject key identifier: CC:37:7C:E0:56:F7:36:59:D9:90:A9:F3:B0:EA:F7:D8:4C:B7:D7:F7 Authority key identifier: A3:98:DF:D4:D3:97:5E:AB:96:FD:38:03:39:68:24:6E:47:5E:28:B3 Certificate issuer: /CN=A91B915D/serialNumber=A398DFD4D3975EAB96FD38033968246E475E28B3 Certificate serial: 03DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5jf1NOXXquW_TgDOWgkbkdeKLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B915D/7109EFC47DC911ECBBFB6F24C4F9AE02/o5jf1NOXXquW_TgDOWgkbkdeKLM.mft Manifest number: 03D7 Signing time: Fri 25 Apr 2025 00:20:15 +0000 Manifest this update: Fri 25 Apr 2025 00:20:15 +0000 Manifest next update: Fri 02 May 2025 00:20:15 +0000 Files and hashes: 1: o5jf1NOXXquW_TgDOWgkbkdeKLM.crl (hash: YLzhlFUVt56Lunj+QRujNJFt7JPloWmu9kJ8oEvtLoo=) 2: 8CA3BAEC7DCB11EC99806E25C4F9AE02.roa (hash: 7VcZosPp1uH1LHkRjpyCPhzaiPyFOlncH9YUjxzCpg4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B915D/7109EFC47DC911ECBBFB6F24C4F9AE02/o5jf1NOXXquW_TgDOWgkbkdeKLM.crl rsync://rpki.apnic.net/member_repository/A91B915D/7109EFC47DC911ECBBFB6F24C4F9AE02/o5jf1NOXXquW_TgDOWgkbkdeKLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5jf1NOXXquW_TgDOWgkbkdeKLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:20:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 988 (0x3dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B915D, serialNumber=A398DFD4D3975EAB96FD38033968246E475E28B3 Validity Not Before: Apr 25 00:20:15 2025 GMT Not After : May 2 00:20:15 2025 GMT Subject: CN=680ad53f-e7db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b1:5c:82:36:ce:87:04:ba:2c:2f:5f:d2:8d: 7d:e4:9b:6a:62:ef:47:fd:7e:53:25:de:8d:2c:d3: 2a:b3:62:86:f9:56:19:56:00:68:4f:4d:de:76:8c: 78:35:7e:d9:00:99:6e:e2:32:5f:76:b2:a0:57:17: 41:b8:11:2a:d7:e2:d2:ef:25:e4:1f:fe:ba:89:5b: a0:4d:52:65:5a:77:38:ac:ca:c1:e4:40:f8:82:63: a0:f2:03:6c:ac:ae:05:94:76:2c:97:9f:09:40:0a: 05:a3:58:aa:36:9b:6c:54:14:f7:3b:28:09:9c:ec: cc:55:b0:2a:b2:8f:59:db:2f:e1:87:58:0f:d4:0d: fc:38:a8:15:f0:7e:e8:e1:ce:a0:c2:02:fe:fb:75: 90:e1:44:63:f8:68:6a:a3:49:c5:ee:78:16:f7:d9: 78:36:83:5c:89:b5:59:1b:5c:d5:0c:c5:51:e4:42: e1:78:03:0d:f8:1f:02:4b:3d:06:83:ec:51:e5:be: 5a:90:75:04:38:bd:4d:16:71:37:e9:3a:38:b2:40: 0c:20:b6:7f:b4:7a:ba:8f:b8:4f:9d:00:ca:9a:9b: 6f:b2:13:6d:34:b4:fc:de:4a:83:27:b0:aa:55:e9: 68:19:72:96:23:ed:01:a7:f6:2d:83:1c:a7:15:01: 61:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:37:7C:E0:56:F7:36:59:D9:90:A9:F3:B0:EA:F7:D8:4C:B7:D7:F7 X509v3 Authority Key Identifier: keyid:A3:98:DF:D4:D3:97:5E:AB:96:FD:38:03:39:68:24:6E:47:5E:28:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B915D/7109EFC47DC911ECBBFB6F24C4F9AE02/o5jf1NOXXquW_TgDOWgkbkdeKLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5jf1NOXXquW_TgDOWgkbkdeKLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B915D/7109EFC47DC911ECBBFB6F24C4F9AE02/o5jf1NOXXquW_TgDOWgkbkdeKLM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:db:f5:c0:8b:43:3d:01:1e:b8:80:e8:fe:a2:6d:68:89:43: af:02:1a:06:1b:f9:62:3f:e7:d3:2e:34:06:e4:d8:ba:44:56: fd:d8:ca:a2:6c:3b:fb:2f:96:b4:72:f2:99:30:f9:35:95:5c: ce:4c:f7:54:f9:e3:9b:48:27:f0:5c:e8:4c:00:05:e2:b1:9e: 52:4d:37:aa:a3:c7:d3:74:c8:bc:9d:5c:3e:44:e9:41:95:e6: b7:17:9b:ff:f7:c9:b2:75:e7:af:5d:c8:8d:8b:ba:76:e7:aa: de:de:75:42:43:86:b9:24:d7:8e:43:18:fb:6b:02:a0:87:57: c3:07:87:f0:b4:48:e0:11:35:e6:df:ad:ee:97:be:fa:45:f4: 1f:1a:6a:7c:0b:d5:72:55:b2:2e:f8:f6:2f:ff:1c:0a:69:c5: 13:49:12:a8:91:f2:9f:0b:7d:49:42:b8:55:e3:a1:33:3f:cb: 94:8a:d1:1e:1f:79:f1:c7:09:b6:3b:c6:43:12:33:1f:a4:48: 91:03:0e:26:98:3d:83:2b:de:a6:fe:6e:24:e4:7a:53:c6:c6: 24:c4:a5:ab:bd:8a:af:c0:09:e7:ad:ce:0b:d9:34:a2:d4:d5: 6e:af:20:c1:96:6d:a0:b2:6b:51:6f:f1:2d:3c:1d:3a:fc:55: b4:71:54:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkxNUQxMTAvBgNVBAUTKEEzOThERkQ0RDM5NzVFQUI5NkZEMzgwMzM5NjgyNDZF NDc1RTI4QjMwHhcNMjUwNDI1MDAyMDE1WhcNMjUwNTAyMDAyMDE1WjAYMRYwFAYD VQQDEw02ODBhZDUzZi1lN2RiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyrFcgjbOhwS6LC9f0o195JtqYu9H/X5TJd6NLNMqs2KG+VYZVgBoT03edox4 NX7ZAJlu4jJfdrKgVxdBuBEq1+LS7yXkH/66iVugTVJlWnc4rMrB5ED4gmOg8gNs rK4FlHYsl58JQAoFo1iqNptsVBT3OygJnOzMVbAqso9Z2y/hh1gP1A38OKgV8H7o 4c6gwgL++3WQ4URj+Ghqo0nF7ngW99l4NoNcibVZG1zVDMVR5ELheAMN+B8CSz0G g+xR5b5akHUEOL1NFnE36To4skAMILZ/tHq6j7hPnQDKmptvshNtNLT83kqDJ7Cq VeloGXKWI+0Bp/YtgxynFQFh8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMw3fOBW 9zZZ2ZCp87Dq99hMt9f3MB8GA1UdIwQYMBaAFKOY39TTl16rlv04AzloJG5HXiiz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTE1RC83MTA5RUZDNDdE QzkxMUVDQkJGQjZGMjRDNEY5QUUwMi9vNWpmMU5PWFhxdVdfVGdET1dna2JrZGVL TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL281amYxTk9YWHF1V19UZ0RPV2drYmtkZUtMTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTE1RC83MTA5RUZDNDdEQzkxMUVDQkJGQjZGMjRDNEY5QUUwMi9vNWpmMU5PWFhx dVdfVGdET1dna2JrZGVLTE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCq2/XAi0M9AR64gOj+om1oiUOvAhoGG/liP+fTLjQG5Ni6RFb92Mqi bDv7L5a0cvKZMPk1lVzOTPdU+eObSCfwXOhMAAXisZ5STTeqo8fTdMi8nVw+ROlB lea3F5v/98mydeevXciNi7p256re3nVCQ4a5JNeOQxj7awKgh1fDB4fwtEjgETXm 363ul776RfQfGmp8C9VyVbIu+PYv/xwKacUTSRKokfKfC31JQrhV46EzP8uUitEe H3nxxwm2O8ZDEjMfpEiRAw4mmD2DK96m/m4k5HpTxsYkxKWrvYqvwAnnrc4L2TSi 1NVuryDBlm2gsmtRb/EtPB06/FW0cVRd -----END CERTIFICATE-----Generated at Sat Apr 26 04:36:58 2025 by rpki-client