$ rpki-client -vvf rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft File: o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft (raw, json) Hash identifier: FoARrmJ2zEKRn92YhicnPhPlGU1RFOgtfuuyjXD+6yE= Subject key identifier: 32:9A:0F:DB:CB:E0:38:4C:45:96:CB:E8:B2:27:10:82:7D:01:9F:61 Authority key identifier: A3:EB:7C:43:50:63:BC:54:D3:57:3D:81:DB:DC:18:73:98:76:63:E0 Certificate issuer: /CN=A91C77BD/serialNumber=A3EB7C435063BC54D3573D81DBDC1873987663E0 Certificate serial: 2160 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft Manifest number: 2157 Signing time: Thu 24 Apr 2025 15:56:15 +0000 Manifest this update: Thu 24 Apr 2025 15:56:15 +0000 Manifest next update: Thu 01 May 2025 15:56:15 +0000 Files and hashes: 1: o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl (hash: 7w8bm068mMmpebu+pzcFcLzLFVUhkJ8AKxV3UbmqKdY=) 2: A257A95EA9DC11E9AA03780DC4F9AE02.roa (hash: Kqxe3AlQssfHaUaGQ94xh+g433EOzW+NAhxS/kOyvHs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:56:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8544 (0x2160) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C77BD, serialNumber=A3EB7C435063BC54D3573D81DBDC1873987663E0 Validity Not Before: Apr 24 15:56:15 2025 GMT Not After : May 1 15:56:15 2025 GMT Subject: CN=680a5f1f-5683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:db:10:82:8d:70:85:da:90:91:f8:9a:9c:7f: b2:31:a0:48:ee:85:a8:7e:fb:3f:1c:0d:84:c1:40: 2a:29:e0:1b:c9:ef:c5:0a:c2:9f:de:c0:74:14:40: 27:40:08:b6:f1:28:93:99:3a:e5:4c:4c:76:e4:85: 5a:88:52:a9:75:08:42:94:83:a5:c0:b7:de:0f:21: ab:ec:2d:f8:2e:6b:f7:2d:1f:77:10:3a:79:c0:ad: 22:d7:96:39:b8:46:9a:50:6e:fe:bf:27:36:64:7c: 30:dd:1c:97:17:09:ed:b0:51:68:89:2d:48:9e:b0: 87:52:45:37:20:16:0d:eb:f2:40:49:29:34:c2:76: 9c:08:ba:b4:4a:d6:94:de:1e:99:f0:75:9c:7b:ac: a3:5e:b4:da:66:9d:f4:d1:5a:a0:c9:6d:4b:f1:f6: 8f:ae:4d:cd:77:15:96:eb:b2:66:e2:b5:4e:19:1d: 16:03:b2:ae:e3:38:6c:4c:82:ae:f2:4b:5f:b2:5a: b5:6f:78:63:8d:0f:3d:ad:11:94:36:02:a4:3f:44: 04:8e:f2:57:c0:4f:df:43:2d:fe:7b:90:4e:ce:37: 68:08:64:2f:51:c2:1b:fe:15:2e:87:6e:f4:84:6d: c8:41:b6:67:5d:6f:d3:d3:ef:71:0d:38:62:d1:0b: 60:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:9A:0F:DB:CB:E0:38:4C:45:96:CB:E8:B2:27:10:82:7D:01:9F:61 X509v3 Authority Key Identifier: keyid:A3:EB:7C:43:50:63:BC:54:D3:57:3D:81:DB:DC:18:73:98:76:63:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:6c:7f:b4:74:d2:7d:db:10:68:3f:45:b6:a8:72:71:12:ea: 1a:60:6e:8f:dc:85:96:b4:19:b6:6e:8f:30:0b:e4:f2:1d:14: 9b:b5:d7:3c:d7:44:26:ed:3a:31:fb:25:19:c0:08:c1:20:95: 0d:9c:f1:01:1a:70:32:34:2a:59:a1:df:61:c9:86:14:ce:85: cc:a0:51:77:9e:b3:be:c5:a9:86:b8:02:66:dd:07:72:af:29: 20:44:c4:8a:a1:94:f6:5f:d0:92:f4:68:1a:d0:d4:97:10:6b: f6:45:32:75:ce:02:22:51:cf:12:e9:ef:10:e8:1e:c3:a8:be: 31:2a:82:c5:59:64:7b:e7:2c:49:05:ce:8e:c9:c5:16:b2:54: 48:04:72:9d:ac:d0:54:ac:0d:29:0a:29:e6:52:bc:2c:82:8e: ec:e8:37:a5:07:e6:4e:8a:81:61:5a:8d:08:c3:41:4c:72:fe: 49:32:f0:58:2b:47:e9:40:90:98:9e:f3:f3:81:ea:5a:01:33: 45:79:93:b0:3d:30:c4:33:4d:dd:a5:6e:bf:93:46:98:c8:65: 6c:b6:84:cf:2d:38:4c:67:49:b9:00:28:73:4a:7f:99:91:d9: 31:4c:35:c6:9c:90:8c:42:33:8a:27:cb:34:d0:fa:36:72:29: 5f:53:ea:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc3QkQxMTAvBgNVBAUTKEEzRUI3QzQzNTA2M0JDNTREMzU3M0Q4MURCREMxODcz OTg3NjYzRTAwHhcNMjUwNDI0MTU1NjE1WhcNMjUwNTAxMTU1NjE1WjAYMRYwFAYD VQQDEw02ODBhNWYxZi01NjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo9sQgo1whdqQkfianH+yMaBI7oWofvs/HA2EwUAqKeAbye/FCsKf3sB0FEAn QAi28SiTmTrlTEx25IVaiFKpdQhClIOlwLfeDyGr7C34Lmv3LR93EDp5wK0i15Y5 uEaaUG7+vyc2ZHww3RyXFwntsFFoiS1InrCHUkU3IBYN6/JASSk0wnacCLq0StaU 3h6Z8HWce6yjXrTaZp300VqgyW1L8faPrk3NdxWW67Jm4rVOGR0WA7Ku4zhsTIKu 8ktfslq1b3hjjQ89rRGUNgKkP0QEjvJXwE/fQy3+e5BOzjdoCGQvUcIb/hUuh270 hG3IQbZnXW/T0+9xDThi0QtgLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDKaD9vL 4DhMRZbL6LInEIJ9AZ9hMB8GA1UdIwQYMBaAFKPrfENQY7xU01c9gdvcGHOYdmPg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzdCRC8zODkzNzE5OERG NDAxMUU1ODIzMjczNEFDNEY5QUUwMi9vLXQ4UTFCanZGVFRWejJCMjl3WWM1aDJZ LUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28tdDhRMUJqdkZUVFZ6MkIyOXdZYzVoMlktQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzdCRC8zODkzNzE5OERGNDAxMUU1ODIzMjczNEFDNEY5QUUwMi9vLXQ4UTFCanZG VFRWejJCMjl3WWM1aDJZLUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8bH+0dNJ92xBoP0W2qHJxEuoaYG6P3IWWtBm2bo8wC+TyHRSbtdc8 10Qm7Tox+yUZwAjBIJUNnPEBGnAyNCpZod9hyYYUzoXMoFF3nrO+xamGuAJm3Qdy rykgRMSKoZT2X9CS9Gga0NSXEGv2RTJ1zgIiUc8S6e8Q6B7DqL4xKoLFWWR75yxJ Bc6OycUWslRIBHKdrNBUrA0pCinmUrwsgo7s6DelB+ZOioFhWo0Iw0FMcv5JMvBY K0fpQJCYnvPzgepaATNFeZOwPTDEM03dpW6/k0aYyGVstoTPLThMZ0m5AChzSn+Z kdkxTDXGnJCMQjOKJ8s00Po2cilfU+qb -----END CERTIFICATE-----Generated at Sat Apr 26 13:10:51 2025 by rpki-client