$ rpki-client -vvf rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft File: O4dpDvQFVnODtvcv3TARYM6CHys.mft (raw, json) Hash identifier: iiXZzk2I+cgrvY1qn5xzdA0XyW0kZv7ao4LpvsUSk7o= Subject key identifier: 74:9E:88:90:DC:D3:F7:32:4A:48:6D:B4:6F:63:C9:61:FF:4F:A7:AB Authority key identifier: 3B:87:69:0E:F4:05:56:73:83:B6:F7:2F:DD:30:11:60:CE:82:1F:2B Certificate issuer: /CN=A91F81AD/serialNumber=3B87690EF405567383B6F72FDD301160CE821F2B Certificate serial: 021C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft Manifest number: 0216 Signing time: Fri 25 Apr 2025 01:45:12 +0000 Manifest this update: Fri 25 Apr 2025 01:45:12 +0000 Manifest next update: Fri 02 May 2025 01:45:12 +0000 Files and hashes: 1: O4dpDvQFVnODtvcv3TARYM6CHys.crl (hash: c8ZpMkmM4HSLGT7Z0Okbo+0W8EjBZDGVAHyowBxRXEM=) 2: F9424C6C80FA11ED9B35954DC4F9AE02.roa (hash: GNMO+8voOxNBOb5ixsUP/MtpdlZbS27Vb7o1TavyMdI=) 3: F86A2F7680FA11ED9B35954DC4F9AE02.roa (hash: vq0srwLbA5KHVy52W5biflCYsAzYNYb+3xV7SnajFW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.crl rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:45:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 540 (0x21c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F81AD, serialNumber=3B87690EF405567383B6F72FDD301160CE821F2B Validity Not Before: Apr 25 01:45:12 2025 GMT Not After : May 2 01:45:12 2025 GMT Subject: CN=680ae928-538d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:91:a5:09:12:4a:a6:2b:7a:0e:6a:46:76:b6: 7c:03:10:af:71:dc:b0:2f:f2:89:20:8b:94:49:18: d3:f9:60:e5:05:d6:96:0e:48:7d:56:7c:35:ba:0b: 47:14:2b:22:29:64:f8:f4:6e:e1:03:aa:00:50:a1: 31:71:05:80:aa:d4:9e:a4:1e:7d:5e:bd:98:96:60: 7d:ed:97:41:e6:9f:ce:7b:1a:17:20:82:d4:0a:e8: 5a:61:d7:60:01:ef:13:1e:30:1f:56:73:a4:fb:41: fc:33:bb:32:47:7c:1b:3d:af:20:28:fa:1e:43:c0: 00:1b:ec:d0:10:7b:ab:37:03:45:18:30:a9:09:df: 5d:1e:fb:6b:f0:5a:e1:32:ed:9d:97:9b:17:3f:93: 75:40:63:5f:e1:3b:a6:27:9e:a3:57:c7:be:10:37: 32:71:59:ba:9f:14:f2:11:14:55:e0:53:3e:a4:ac: 9d:1a:14:ca:c6:66:89:14:e7:4c:85:dd:2d:fb:77: 43:e9:73:c6:07:f3:5c:f7:07:48:d6:be:5e:87:f7: ba:8f:4c:64:44:c2:b4:4b:fd:12:ab:12:e8:ae:2f: 3f:86:a5:06:a3:6c:b3:89:cb:bd:2d:db:12:6d:a8: 1b:a5:9b:2d:29:58:e3:0f:ff:01:7d:ce:23:a5:72: af:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:9E:88:90:DC:D3:F7:32:4A:48:6D:B4:6F:63:C9:61:FF:4F:A7:AB X509v3 Authority Key Identifier: keyid:3B:87:69:0E:F4:05:56:73:83:B6:F7:2F:DD:30:11:60:CE:82:1F:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:0e:85:34:a9:0a:96:82:9c:c2:05:c5:25:9b:31:26:e0:87: 13:77:8b:8e:de:79:64:1a:26:f0:95:45:4e:16:3e:37:d1:da: 8b:b6:b9:a0:07:0f:87:19:f8:0a:ce:b2:c6:be:ab:14:c1:e3: fc:31:a7:ad:db:b4:cc:5b:b0:22:9a:44:07:26:02:3c:3e:d3: ea:6a:54:44:19:fd:69:03:d8:70:66:89:e0:82:3a:98:22:21: f7:41:ff:b7:ea:0e:bf:e8:ec:b7:b9:18:c2:a3:e9:c0:bb:2e: e2:82:d4:d0:5a:c8:5f:62:f2:56:e7:a9:bf:b8:d4:2b:d0:57: d9:ab:a8:29:4e:cc:2a:d7:80:c3:28:db:aa:2b:cd:08:62:07: 5d:1e:b2:0f:63:92:e1:21:17:10:5c:da:66:78:91:61:5b:f2: 00:d8:a1:cc:16:26:19:9d:cf:06:55:21:6b:2a:70:d5:f9:fe: 44:75:9e:e7:bc:dd:c1:f5:aa:59:74:e1:b3:72:23:12:eb:88: d3:3a:1d:24:ff:f5:df:90:45:40:34:e1:b4:63:8f:f6:11:96: ec:37:cf:31:33:f1:3f:9f:97:66:47:47:de:a8:42:55:85:ed: 75:d2:78:ea:98:e7:88:4f:80:81:f2:a3:2b:e2:9b:5d:9a:64: cc:16:29:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgxQUQxMTAvBgNVBAUTKDNCODc2OTBFRjQwNTU2NzM4M0I2RjcyRkREMzAxMTYw Q0U4MjFGMkIwHhcNMjUwNDI1MDE0NTEyWhcNMjUwNTAyMDE0NTEyWjAYMRYwFAYD VQQDEw02ODBhZTkyOC01MzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5GlCRJKpit6DmpGdrZ8AxCvcdywL/KJIIuUSRjT+WDlBdaWDkh9Vnw1ugtH FCsiKWT49G7hA6oAUKExcQWAqtSepB59Xr2YlmB97ZdB5p/OexoXIILUCuhaYddg Ae8THjAfVnOk+0H8M7syR3wbPa8gKPoeQ8AAG+zQEHurNwNFGDCpCd9dHvtr8Frh Mu2dl5sXP5N1QGNf4TumJ56jV8e+EDcycVm6nxTyERRV4FM+pKydGhTKxmaJFOdM hd0t+3dD6XPGB/Nc9wdI1r5eh/e6j0xkRMK0S/0SqxLori8/hqUGo2yzicu9LdsS bagbpZstKVjjD/8Bfc4jpXKvRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHSeiJDc 0/cySkhttG9jyWH/T6erMB8GA1UdIwQYMBaAFDuHaQ70BVZzg7b3L90wEWDOgh8r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODFBRC80M0E1MTFBRTJD QkUxMUVEOTk4MjRCNENDNEY5QUUwMi9PNGRwRHZRRlZuT0R0dmN2M1RBUllNNkNI eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL080ZHBEdlFGVm5PRHR2Y3YzVEFSWU02Q0h5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODFBRC80M0E1MTFBRTJDQkUxMUVEOTk4MjRCNENDNEY5QUUwMi9PNGRwRHZRRlZu T0R0dmN2M1RBUllNNkNIeXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKDoU0qQqWgpzCBcUlmzEm4IcTd4uO3nlkGibwlUVOFj430dqLtrmg Bw+HGfgKzrLGvqsUweP8Maet27TMW7AimkQHJgI8PtPqalREGf1pA9hwZonggjqY IiH3Qf+36g6/6Oy3uRjCo+nAuy7igtTQWshfYvJW56m/uNQr0FfZq6gpTswq14DD KNuqK80IYgddHrIPY5LhIRcQXNpmeJFhW/IA2KHMFiYZnc8GVSFrKnDV+f5EdZ7n vN3B9apZdOGzciMS64jTOh0k//XfkEVANOG0Y4/2EZbsN88xM/E/n5dmR0feqEJV he110njqmOeIT4CB8qMr4ptdmmTMFik2 -----END CERTIFICATE-----Generated at Sat Apr 26 13:36:30 2025 by rpki-client