$ rpki-client -vvf rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft File: O2jmA9GPVutmXvcukmQF8MEL4-c.mft (raw, json) Hash identifier: BXUN64rFQ9ah8ye6z8oQrtw1Ko2KEeKg+9opWVrIIdo= Subject key identifier: D6:A9:F3:3E:94:77:EC:E0:7A:21:2E:52:53:A7:6C:38:51:99:3F:CC Authority key identifier: 3B:68:E6:03:D1:8F:56:EB:66:5E:F7:2E:92:64:05:F0:C1:0B:E3:E7 Certificate issuer: /CN=A912D1D1/serialNumber=3B68E603D18F56EB665EF72E926405F0C10BE3E7 Certificate serial: 0873 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft Manifest number: 086D Signing time: Sun 04 May 2025 20:25:16 +0000 Manifest this update: Sun 04 May 2025 20:25:15 +0000 Manifest next update: Sun 11 May 2025 20:25:15 +0000 Files and hashes: 1: O2jmA9GPVutmXvcukmQF8MEL4-c.crl (hash: Q3ExPQ8c3qLqewrSdsUJiYlBPPWxdOxgcJdpejxvJkw=) 2: 30CB037EC18E11EA8BF4FB68C4F9AE02.roa (hash: d1mOeGTfFGoxO3FpLGtyELB1KUYkFiEXG3WDXupnmMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.crl rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 20:25:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2163 (0x873) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D1D1, serialNumber=3B68E603D18F56EB665EF72E926405F0C10BE3E7 Validity Not Before: May 4 20:25:15 2025 GMT Not After : May 11 20:25:15 2025 GMT Subject: CN=6817cd2b-4aa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d5:e8:40:e3:7c:b5:5a:b9:fc:bc:b0:0f:9f: 38:eb:c0:77:fe:9f:51:01:3b:4d:1c:29:6f:55:3c: 31:22:94:7c:6a:a5:00:bf:d4:f1:1d:50:0b:1f:fe: 62:44:1a:fd:29:0d:25:4a:f5:0e:7d:da:79:5c:5c: 21:03:f5:f2:3e:b8:be:77:36:7d:3f:f1:69:2c:8a: df:cc:ba:6a:21:c0:c4:5f:30:e1:09:da:79:a2:1f: a4:08:e5:94:4e:12:e5:4f:99:37:f7:fb:89:fa:8f: cc:7e:99:cf:eb:7b:c4:52:33:b1:ab:9b:69:c9:a1: c1:49:74:5e:65:e7:5b:a6:19:18:8e:8c:76:d6:79: df:c4:48:1c:83:17:ab:cc:d4:b2:1a:40:6b:69:12: 57:66:0c:0a:da:56:23:e5:a0:22:84:3f:fe:e3:09: 41:55:8b:7c:8b:9c:d0:b1:45:90:c8:35:04:c8:70: 8e:22:c5:74:e3:07:1d:cc:bb:71:f4:45:5a:52:38: 94:d8:d2:84:a4:2b:38:aa:69:f0:81:a9:cd:21:05: 27:53:3a:4a:2c:39:dd:2e:f9:09:de:65:95:0a:93: 67:53:13:f2:fb:eb:48:fb:69:78:8d:e5:6d:09:2d: 85:e0:9e:10:be:23:85:6e:80:8e:14:eb:1b:5a:58: 8d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:A9:F3:3E:94:77:EC:E0:7A:21:2E:52:53:A7:6C:38:51:99:3F:CC X509v3 Authority Key Identifier: keyid:3B:68:E6:03:D1:8F:56:EB:66:5E:F7:2E:92:64:05:F0:C1:0B:E3:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:5d:9f:05:96:b1:e8:13:ab:a8:b7:89:c1:3d:82:61:f1:55: d6:59:8e:dd:29:b9:39:bd:d8:5a:c2:06:58:fd:b6:48:9b:20: cc:c1:68:bc:20:57:70:18:e7:17:15:f1:e9:2b:f7:68:e5:54: ef:f4:75:47:4d:78:38:26:49:cb:73:b4:42:e8:e0:ea:dd:3f: 9a:58:43:51:ce:15:f0:cd:c9:ee:12:74:60:60:3e:bf:b9:5e: 1b:84:78:1c:66:bb:31:f6:4e:35:37:4f:13:da:a9:20:b5:b5: 6c:42:7c:23:03:04:98:6e:f3:f3:cd:c5:b2:6d:da:66:54:d8: ce:d5:51:b4:85:a7:fd:46:a4:e3:28:3f:47:14:99:85:b2:d1: d7:cf:fe:aa:97:0b:61:d7:4a:d6:19:66:45:94:10:37:fb:e1: 90:54:0b:21:68:7c:44:9c:81:87:54:6f:72:1c:23:cf:63:06: 79:ab:69:49:67:4e:2e:bb:13:2a:b0:fb:b0:91:77:2b:71:ea: cd:f6:25:ac:6f:59:c2:93:00:a5:70:6f:54:2a:59:ff:52:aa: ae:2b:2e:db:da:5d:41:0e:72:3c:34:ea:9f:e7:9b:01:6c:74: 0e:3c:51:a8:83:2d:92:ce:29:92:ff:0c:ca:62:b1:fe:6d:1b: 04:ee:ef:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQxRDExMTAvBgNVBAUTKDNCNjhFNjAzRDE4RjU2RUI2NjVFRjcyRTkyNjQwNUYw QzEwQkUzRTcwHhcNMjUwNTA0MjAyNTE1WhcNMjUwNTExMjAyNTE1WjAYMRYwFAYD VQQDEw02ODE3Y2QyYi00YWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3NXoQON8tVq5/LywD58468B3/p9RATtNHClvVTwxIpR8aqUAv9TxHVALH/5i RBr9KQ0lSvUOfdp5XFwhA/XyPri+dzZ9P/FpLIrfzLpqIcDEXzDhCdp5oh+kCOWU ThLlT5k39/uJ+o/MfpnP63vEUjOxq5tpyaHBSXReZedbphkYjox21nnfxEgcgxer zNSyGkBraRJXZgwK2lYj5aAihD/+4wlBVYt8i5zQsUWQyDUEyHCOIsV04wcdzLtx 9EVaUjiU2NKEpCs4qmnwganNIQUnUzpKLDndLvkJ3mWVCpNnUxPy++tI+2l4jeVt CS2F4J4QviOFboCOFOsbWliNvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNap8z6U d+zgeiEuUlOnbDhRmT/MMB8GA1UdIwQYMBaAFDto5gPRj1brZl73LpJkBfDBC+Pn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDFEMS9DMTYwMDZGQ0Mx OEMxMUVBOEYzNjQxNjZDNEY5QUUwMi9PMmptQTlHUFZ1dG1YdmN1a21RRjhNRUw0 LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL08yam1BOUdQVnV0bVh2Y3VrbVFGOE1FTDQtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDFEMS9DMTYwMDZGQ0MxOEMxMUVBOEYzNjQxNjZDNEY5QUUwMi9PMmptQTlHUFZ1 dG1YdmN1a21RRjhNRUw0LWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5XZ8FlrHoE6uot4nBPYJh8VXWWY7dKbk5vdhawgZY/bZImyDMwWi8 IFdwGOcXFfHpK/do5VTv9HVHTXg4JknLc7RC6ODq3T+aWENRzhXwzcnuEnRgYD6/ uV4bhHgcZrsx9k41N08T2qkgtbVsQnwjAwSYbvPzzcWybdpmVNjO1VG0haf9RqTj KD9HFJmFstHXz/6qlwth10rWGWZFlBA3++GQVAshaHxEnIGHVG9yHCPPYwZ5q2lJ Z04uuxMqsPuwkXcrcerN9iWsb1nCkwClcG9UKln/UqquKy7b2l1BDnI8NOqf55sB bHQOPFGogy2SzimS/wzKYrH+bRsE7u8f -----END CERTIFICATE-----Generated at Mon May 5 08:00:30 2025 by rpki-client