$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/o9wYjy1VW0FacV8lkDahpg_8uNk.mft File: o9wYjy1VW0FacV8lkDahpg_8uNk.mft (raw, json) Hash identifier: hrLhDomU7sO0VIZUP49nhDFfF0D+Fa/9V/FNEB4wlPI= Subject key identifier: 94:B1:7B:42:8B:7B:BF:4E:58:58:17:20:B0:58:07:F6:87:2A:BA:B4 Authority key identifier: A3:DC:18:8F:2D:55:5B:41:5A:71:5F:25:90:36:A1:A6:0F:FC:B8:D9 Certificate issuer: /CN=A91C8F68/serialNumber=A3DC188F2D555B415A715F259036A1A60FFCB8D9 Certificate serial: 01F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9wYjy1VW0FacV8lkDahpg_8uNk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/o9wYjy1VW0FacV8lkDahpg_8uNk.mft Manifest number: 01F5 Signing time: Fri 25 Apr 2025 01:50:19 +0000 Manifest this update: Fri 25 Apr 2025 01:50:18 +0000 Manifest next update: Fri 02 May 2025 01:50:18 +0000 Files and hashes: 1: o9wYjy1VW0FacV8lkDahpg_8uNk.crl (hash: 1RemBvOvf+aDuLuDcUeUECPb5VX+DUkkNgaID1+p3RA=) 2: 2A766EA23A3411EDA1B7D863C4F9AE02.roa (hash: JUU9x04r0AO1GN2PUUX6ELgHywTKgyrE2nXs4Tcl03M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/o9wYjy1VW0FacV8lkDahpg_8uNk.crl rsync://rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/o9wYjy1VW0FacV8lkDahpg_8uNk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9wYjy1VW0FacV8lkDahpg_8uNk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 505 (0x1f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8F68, serialNumber=A3DC188F2D555B415A715F259036A1A60FFCB8D9 Validity Not Before: Apr 25 01:50:18 2025 GMT Not After : May 2 01:50:18 2025 GMT Subject: CN=680aea5b-926f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:12:b2:43:0a:54:76:4f:51:bb:83:61:d1:93: e3:23:af:25:e3:cf:ca:a4:27:f6:0c:a0:d5:49:19: 7d:5a:ce:6e:81:93:e5:b8:59:51:ad:ea:74:05:27: 5c:68:ab:73:2f:8f:2b:5a:ad:cb:18:0d:30:fa:34: d9:91:9a:78:76:5e:1e:6f:10:81:23:00:ca:6e:14: 4c:a1:bd:17:39:c4:50:02:1d:bc:4f:e0:ec:c1:ec: a7:06:85:e8:13:8d:c2:51:41:4a:9f:4f:fc:c8:56: 02:d0:d7:ca:3c:98:89:50:2f:98:de:5e:0b:ba:de: 05:18:1d:e7:e7:36:8f:90:c9:a3:6e:87:2a:81:96: 77:6e:e3:dd:10:5b:1f:fc:9f:02:5c:a9:a3:5a:b9: 5d:4b:f1:37:37:9f:d5:cd:7b:a9:af:d2:c0:06:ad: cb:62:50:b3:ff:0c:3b:3b:a9:5e:f7:68:df:b5:f9: 3a:e6:ff:22:60:46:e0:f5:b7:04:b3:58:40:bf:99: 2e:ff:8e:e7:21:22:11:b7:82:08:6f:82:e4:4f:e8: 18:21:96:6a:bf:cf:4f:7f:8c:52:29:97:11:b3:40: f0:29:b7:2b:79:0d:3a:dd:c1:b8:9b:31:4a:be:33: 00:90:f5:88:bc:6a:af:9a:3b:9a:15:58:87:27:05: db:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:B1:7B:42:8B:7B:BF:4E:58:58:17:20:B0:58:07:F6:87:2A:BA:B4 X509v3 Authority Key Identifier: keyid:A3:DC:18:8F:2D:55:5B:41:5A:71:5F:25:90:36:A1:A6:0F:FC:B8:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/o9wYjy1VW0FacV8lkDahpg_8uNk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9wYjy1VW0FacV8lkDahpg_8uNk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/o9wYjy1VW0FacV8lkDahpg_8uNk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:c2:37:2b:01:c5:fc:c4:eb:8c:04:f3:d7:05:34:e8:13:d8: 4d:40:9e:d7:97:d9:34:0d:47:f4:af:9c:ca:41:62:9b:15:4b: 17:63:c1:5d:62:56:0d:5d:ad:78:43:32:f0:15:82:21:f5:d5: a3:39:34:21:95:65:4d:5e:eb:f9:21:6f:14:2c:35:ce:f9:20: fd:02:ac:6f:8d:6e:6c:02:5e:3a:15:fb:30:1e:91:fb:71:ce: 1b:a2:67:d6:e8:a6:76:71:30:27:7c:7c:a7:8e:ce:57:e7:80: 52:50:c9:b5:38:05:a9:c4:49:32:92:1b:b5:63:81:a9:f5:3d: 14:28:a9:29:b0:a6:4d:fa:0a:01:35:99:ea:29:88:77:ee:a3: a4:2b:fe:49:85:3b:8f:46:75:d5:b1:87:11:e6:f4:55:c2:f4: 6f:59:68:69:74:94:d1:74:39:ab:df:86:de:38:f1:f1:a5:9b: 7d:fc:ad:98:31:32:a2:a3:5f:af:c5:38:c7:f4:82:ec:be:05: 06:cb:86:29:02:b9:fc:e4:1f:72:a0:1f:9a:e6:30:94:ab:e9: bd:2d:8e:69:aa:ee:23:cd:80:36:31:f2:64:87:d2:4c:91:28: ab:33:87:a8:48:64:66:f8:ab:21:58:ad:32:4e:68:09:ba:48: 39:08:cd:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhGNjgxMTAvBgNVBAUTKEEzREMxODhGMkQ1NTVCNDE1QTcxNUYyNTkwMzZBMUE2 MEZGQ0I4RDkwHhcNMjUwNDI1MDE1MDE4WhcNMjUwNTAyMDE1MDE4WjAYMRYwFAYD VQQDEw02ODBhZWE1Yi05MjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAshKyQwpUdk9Ru4Nh0ZPjI68l48/KpCf2DKDVSRl9Ws5ugZPluFlRrep0BSdc aKtzL48rWq3LGA0w+jTZkZp4dl4ebxCBIwDKbhRMob0XOcRQAh28T+DsweynBoXo E43CUUFKn0/8yFYC0NfKPJiJUC+Y3l4Lut4FGB3n5zaPkMmjbocqgZZ3buPdEFsf /J8CXKmjWrldS/E3N5/VzXupr9LABq3LYlCz/ww7O6le92jftfk65v8iYEbg9bcE s1hAv5ku/47nISIRt4IIb4LkT+gYIZZqv89Pf4xSKZcRs0DwKbcreQ063cG4mzFK vjMAkPWIvGqvmjuaFViHJwXb9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJSxe0KL e79OWFgXILBYB/aHKrq0MB8GA1UdIwQYMBaAFKPcGI8tVVtBWnFfJZA2oaYP/LjZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEY2OC82QjYwQkZCQTNB MzExMUVEQTEwQ0E3NjFDNEY5QUUwMi9vOXdZankxVlcwRmFjVjhsa0RhaHBnXzh1 TmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL285d1lqeTFWVzBGYWNWOGxrRGFocGdfOHVOay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEY2OC82QjYwQkZCQTNBMzExMUVEQTEwQ0E3NjFDNEY5QUUwMi9vOXdZankxVlcw RmFjVjhsa0RhaHBnXzh1TmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUwjcrAcX8xOuMBPPXBTToE9hNQJ7Xl9k0DUf0r5zKQWKbFUsXY8Fd YlYNXa14QzLwFYIh9dWjOTQhlWVNXuv5IW8ULDXO+SD9AqxvjW5sAl46FfswHpH7 cc4bomfW6KZ2cTAnfHynjs5X54BSUMm1OAWpxEkykhu1Y4Gp9T0UKKkpsKZN+goB NZnqKYh37qOkK/5JhTuPRnXVsYcR5vRVwvRvWWhpdJTRdDmr34beOPHxpZt9/K2Y MTKio1+vxTjH9ILsvgUGy4YpArn85B9yoB+a5jCUq+m9LY5pqu4jzYA2MfJkh9JM kSirM4eoSGRm+KshWK0yTmgJukg5CM2x -----END CERTIFICATE-----Generated at Sat Apr 26 17:06:30 2025 by rpki-client