$ rpki-client -vvf rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft File: o9--Ea-KeOViz7RXkAzKuQkMK1k.mft (raw, json) Hash identifier: SiecjTg2zIic1or3O3pbdf7j0xf2MDP3BT4wfMNBPLQ= Subject key identifier: BE:E9:C9:09:25:28:6A:6E:9F:CF:E6:29:98:1F:92:34:C3:6B:E3:B1 Authority key identifier: A3:DF:BE:11:AF:8A:78:E5:62:CF:B4:57:90:0C:CA:B9:09:0C:2B:59 Certificate issuer: /CN=A9145604/serialNumber=A3DFBE11AF8A78E562CFB457900CCAB9090C2B59 Certificate serial: 090D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9--Ea-KeOViz7RXkAzKuQkMK1k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft Manifest number: 0907 Signing time: Mon 12 May 2025 20:09:45 +0000 Manifest this update: Mon 12 May 2025 20:09:45 +0000 Manifest next update: Mon 19 May 2025 20:09:45 +0000 Files and hashes: 1: o9--Ea-KeOViz7RXkAzKuQkMK1k.crl (hash: N7u6twOYNLwfxE6kWJzmIJJQJf4pHJ+FM65+L5QjlkM=) 2: C0A21C70A4A711EA835CCA70C4F9AE02.roa (hash: oh99riu32xDufqLh4s49Z+OfJBlHg4YCfXKo4NVguOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.crl rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9--Ea-KeOViz7RXkAzKuQkMK1k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:09:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2317 (0x90d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145604, serialNumber=A3DFBE11AF8A78E562CFB457900CCAB9090C2B59 Validity Not Before: May 12 20:09:45 2025 GMT Not After : May 19 20:09:45 2025 GMT Subject: CN=68225589-dcd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a9:96:fc:70:9f:77:d3:ea:f7:04:36:3d:a8: 37:67:8d:f6:f6:29:23:9a:4f:1a:3e:f3:3a:f6:a9: 16:7e:71:82:32:d5:97:20:65:f7:83:e9:9d:15:6d: b2:24:53:5e:d4:4f:1b:a9:a0:3f:a2:68:fd:81:62: 6e:d8:b6:91:16:d8:a6:45:91:54:27:b3:d2:1b:54: 21:3f:87:9e:7c:6b:3b:81:7d:ec:58:15:1f:fe:f7: d6:fd:a3:e2:15:02:b3:f8:5f:c8:d0:ae:c9:01:a8: 49:0c:bc:33:9c:89:c1:78:d4:cf:52:c7:6c:89:24: 2a:dd:6e:87:96:23:35:f1:ce:ee:6d:52:37:4c:ea: d6:bd:b8:d4:23:f9:bb:7c:fc:1b:38:b1:aa:6c:61: 6a:1e:b7:51:05:c8:17:43:fe:f5:3a:51:b7:2b:3d: c7:d9:1a:43:c2:88:b4:98:20:27:4d:b1:30:97:4c: 07:c4:3e:d9:04:07:f9:5d:00:12:0b:0a:cf:b4:96: 68:b8:f5:aa:16:80:41:fd:28:5c:35:a0:63:bb:a5: b0:13:30:cb:04:5b:40:4f:9b:13:26:65:64:69:10: 32:ce:3c:d2:45:92:89:c7:9b:f1:74:f2:25:37:80: ab:de:35:48:a6:cb:6b:be:e3:03:d0:c5:17:5c:5f: 25:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:E9:C9:09:25:28:6A:6E:9F:CF:E6:29:98:1F:92:34:C3:6B:E3:B1 X509v3 Authority Key Identifier: keyid:A3:DF:BE:11:AF:8A:78:E5:62:CF:B4:57:90:0C:CA:B9:09:0C:2B:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9--Ea-KeOViz7RXkAzKuQkMK1k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:59:72:6f:ee:71:7a:b5:b9:2a:05:5e:9b:b7:db:a7:ef:d1: 97:5d:a6:56:06:cf:d9:f8:fd:f9:6f:57:89:56:30:aa:94:3f: 13:c5:82:30:25:93:6a:98:62:fc:46:b7:ea:bf:98:4c:89:cb: 8f:27:67:fa:a0:d8:f7:a2:0e:62:b6:b5:11:13:f6:67:92:c3: b9:f6:a6:71:13:46:9d:af:bb:49:24:d5:56:e9:31:15:ce:da: 53:78:7b:3a:41:ea:4e:f3:0d:77:55:40:65:f6:8e:5f:42:9d: fa:4a:5f:de:07:5e:73:de:58:ae:db:a4:a7:5d:d6:6f:b7:dd: 05:ce:ad:95:2a:3a:0c:20:0c:de:70:9f:17:f1:cf:9c:b9:37: b1:9d:25:5b:78:e8:68:ca:dd:d3:02:a2:57:66:88:49:03:88: 92:00:38:30:d5:8c:7d:e2:6c:d1:43:a7:86:8a:b4:3d:f5:e0: 2e:b0:7b:c2:c7:67:90:d4:e9:1e:2d:9c:a4:96:45:e1:77:cd: 18:d0:46:06:01:c7:bb:c3:6a:ab:b5:65:f7:f0:a6:71:d1:fe: 19:8d:aa:c7:cf:db:f5:60:27:10:25:2a:4c:65:df:80:c0:33: a5:01:13:91:fe:d3:a4:d5:88:b0:5a:2a:6e:0c:ef:df:41:21: d3:b7:d9:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU2MDQxMTAvBgNVBAUTKEEzREZCRTExQUY4QTc4RTU2MkNGQjQ1NzkwMENDQUI5 MDkwQzJCNTkwHhcNMjUwNTEyMjAwOTQ1WhcNMjUwNTE5MjAwOTQ1WjAYMRYwFAYD VQQDEw02ODIyNTU4OS1kY2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz6mW/HCfd9Pq9wQ2Pag3Z4329ikjmk8aPvM69qkWfnGCMtWXIGX3g+mdFW2y JFNe1E8bqaA/omj9gWJu2LaRFtimRZFUJ7PSG1QhP4eefGs7gX3sWBUf/vfW/aPi FQKz+F/I0K7JAahJDLwznInBeNTPUsdsiSQq3W6HliM18c7ubVI3TOrWvbjUI/m7 fPwbOLGqbGFqHrdRBcgXQ/71OlG3Kz3H2RpDwoi0mCAnTbEwl0wHxD7ZBAf5XQAS CwrPtJZouPWqFoBB/ShcNaBju6WwEzDLBFtAT5sTJmVkaRAyzjzSRZKJx5vxdPIl N4Cr3jVIpstrvuMD0MUXXF8lOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL7pyQkl KGpun8/mKZgfkjTDa+OxMB8GA1UdIwQYMBaAFKPfvhGvinjlYs+0V5AMyrkJDCtZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTYwNC9CQ0VDNkM1RUE0 QTAxMUVBOEZCQUI0NURDNEY5QUUwMi9vOS0tRWEtS2VPVml6N1JYa0F6S3VRa01L MWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL285LS1FYS1LZU9WaXo3UlhrQXpLdVFrTUsxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTYwNC9CQ0VDNkM1RUE0QTAxMUVBOEZCQUI0NURDNEY5QUUwMi9vOS0tRWEtS2VP Vml6N1JYa0F6S3VRa01LMWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIWXJv7nF6tbkqBV6bt9un79GXXaZWBs/Z+P35b1eJVjCqlD8TxYIw JZNqmGL8Rrfqv5hMicuPJ2f6oNj3og5itrURE/ZnksO59qZxE0adr7tJJNVW6TEV ztpTeHs6QepO8w13VUBl9o5fQp36Sl/eB15z3liu26SnXdZvt90Fzq2VKjoMIAze cJ8X8c+cuTexnSVbeOhoyt3TAqJXZohJA4iSADgw1Yx94mzRQ6eGirQ99eAusHvC x2eQ1OkeLZyklkXhd80Y0EYGAce7w2qrtWX38KZx0f4ZjarHz9v1YCcQJSpMZd+A wDOlAROR/tOk1YiwWipuDO/fQSHTt9ls -----END CERTIFICATE-----Generated at Wed May 14 17:29:03 2025 by rpki-client