$ rpki-client -vvf rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft File: 0C2Q-5EqWWC75Wy051NRaiTG73s.mft (raw, json) Hash identifier: MqaAEKsoJLsDqbR593KKylUpTdcHdMyBj5P6Wv3vCmo= Subject key identifier: 4B:65:63:BF:3B:26:EC:D7:BA:98:27:60:17:3F:4A:CF:7F:31:66:47 Authority key identifier: D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B Certificate issuer: /CN=A9148FE8/serialNumber=D02D90FB912A5960BBE56CB4E753516A24C6EF7B Certificate serial: 0AD0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft Manifest number: 0AC4 Signing time: Sat 10 May 2025 19:13:55 +0000 Manifest this update: Sat 10 May 2025 19:13:55 +0000 Manifest next update: Sat 17 May 2025 19:13:55 +0000 Files and hashes: 1: 0C2Q-5EqWWC75Wy051NRaiTG73s.crl (hash: j2vsgLS4DwTeLa1CCDivahYptj2N9hQELA2oSRJ7rs0=) 2: 4AEE5D144EFC11EA9D00310FC4F9AE02.roa (hash: rFiMZXa2OxD0Ej0KwFsbxfHbUbN1ZogDT7O8NAGWwno=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.crl rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 19:13:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2768 (0xad0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148FE8, serialNumber=D02D90FB912A5960BBE56CB4E753516A24C6EF7B Validity Not Before: May 10 19:13:55 2025 GMT Not After : May 17 19:13:55 2025 GMT Subject: CN=681fa573-4dfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1e:46:ad:2f:92:7b:ad:2e:79:b2:ac:10:e6: 7c:a1:51:8d:03:cd:4c:3a:2f:d3:df:00:7b:7f:77: f3:2c:05:cf:6c:2b:85:95:be:ea:3f:3c:cf:8c:e7: 2d:00:a6:70:91:27:e7:81:e4:46:56:fa:3a:f6:5a: 3d:e6:2c:d3:98:f3:4c:43:86:58:ce:ef:ff:29:db: 93:c1:d5:72:aa:05:2e:d1:e7:ea:15:18:2a:9f:53: 20:5a:69:c2:cc:02:50:d5:ac:b2:ae:7b:a3:de:3e: 32:20:a6:b1:b2:c3:3d:c8:7e:a6:b4:e9:48:45:d8: 61:a5:31:1d:5f:fc:71:86:95:a5:46:ab:1e:dd:58: 70:4a:ca:91:10:4e:aa:79:cb:72:2d:62:29:42:e0: b8:b6:e0:3e:c3:bf:48:9b:41:1d:c9:ca:66:9f:98: 8f:8c:06:44:41:ae:0b:40:47:66:c0:cf:c6:dc:e3: ab:e7:e8:73:70:fb:90:40:8d:ff:fa:80:fe:6b:8e: 50:85:8f:16:ed:38:56:f1:28:75:ee:0c:f9:1e:cb: cd:b5:ae:e6:6f:b5:ca:e4:f3:75:3f:5b:a8:8d:4b: c4:85:a1:cb:d6:bf:86:89:61:ec:99:10:64:9b:cb: 8c:44:4e:a3:63:c4:38:09:a8:45:a1:e8:c5:91:0e: 48:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:65:63:BF:3B:26:EC:D7:BA:98:27:60:17:3F:4A:CF:7F:31:66:47 X509v3 Authority Key Identifier: keyid:D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:29:50:18:98:51:77:b1:5e:02:8c:99:ef:ca:c1:b6:d6:55: 80:d9:87:6d:65:c0:5f:a4:f7:29:5e:45:7f:79:98:5d:59:d8: c5:ae:62:45:d7:1e:2d:ac:7f:e0:a4:60:06:3a:d7:e7:9c:0f: 8f:92:19:30:84:ed:1b:0b:4c:96:b9:4c:20:57:69:1d:75:1f: 3f:75:86:3a:5e:96:86:8e:bf:31:a2:36:e6:8c:f6:59:c9:43: 99:58:e4:54:e6:37:0c:d7:e3:84:ad:15:64:15:2b:9c:60:3f: 82:f6:70:f6:c3:cd:97:68:0c:43:f8:58:6a:d1:f1:c7:c8:1c: 22:1b:f1:ae:4e:4a:5a:dd:87:2a:c6:7a:e4:d0:fe:46:6b:08: cb:96:d1:14:12:63:49:bd:13:0d:c8:29:aa:ee:c0:65:25:e1: 62:1f:25:8a:e7:de:1b:2a:e4:da:cc:34:2a:90:7b:6b:e5:e1: 64:73:b5:fb:5a:f0:ee:d5:a1:94:8f:97:82:2b:76:5f:99:23: 3c:f5:92:f6:02:6d:95:61:13:99:ce:2f:cc:ba:e4:03:15:09: 75:08:3c:d2:83:9f:b4:7c:e1:14:af:0c:8f:96:c9:60:a5:2f: 89:aa:59:ba:f1:9c:f5:1c:92:b6:7d:32:98:0d:8a:db:e6:ad: 7f:5b:9a:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCtAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhGRTgxMTAvBgNVBAUTKEQwMkQ5MEZCOTEyQTU5NjBCQkU1NkNCNEU3NTM1MTZB MjRDNkVGN0IwHhcNMjUwNTEwMTkxMzU1WhcNMjUwNTE3MTkxMzU1WjAYMRYwFAYD VQQDEw02ODFmYTU3My00ZGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1x5GrS+Se60uebKsEOZ8oVGNA81MOi/T3wB7f3fzLAXPbCuFlb7qPzzPjOct AKZwkSfngeRGVvo69lo95izTmPNMQ4ZYzu//KduTwdVyqgUu0efqFRgqn1MgWmnC zAJQ1ayyrnuj3j4yIKaxssM9yH6mtOlIRdhhpTEdX/xxhpWlRqse3VhwSsqREE6q ectyLWIpQuC4tuA+w79Im0Edycpmn5iPjAZEQa4LQEdmwM/G3OOr5+hzcPuQQI3/ +oD+a45QhY8W7ThW8Sh17gz5HsvNta7mb7XK5PN1P1uojUvEhaHL1r+GiWHsmRBk m8uMRE6jY8Q4CahFoejFkQ5IWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEtlY787 JuzXupgnYBc/Ss9/MWZHMB8GA1UdIwQYMBaAFNAtkPuRKllgu+VstOdTUWokxu97 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEZFOC8xMkY5NkZCMjRF RkIxMUVBOEQ2OTREMERDNEY5QUUwMi8wQzJRLTVFcVdXQzc1V3kwNTFOUmFpVEc3 M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBDMlEtNUVxV1dDNzVXeTA1MU5SYWlURzczcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEZFOC8xMkY5NkZCMjRFRkIxMUVBOEQ2OTREMERDNEY5QUUwMi8wQzJRLTVFcVdX Qzc1V3kwNTFOUmFpVEc3M3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIKVAYmFF3sV4CjJnvysG21lWA2YdtZcBfpPcpXkV/eZhdWdjFrmJF 1x4trH/gpGAGOtfnnA+PkhkwhO0bC0yWuUwgV2kddR8/dYY6XpaGjr8xojbmjPZZ yUOZWORU5jcM1+OErRVkFSucYD+C9nD2w82XaAxD+Fhq0fHHyBwiG/GuTkpa3Ycq xnrk0P5GawjLltEUEmNJvRMNyCmq7sBlJeFiHyWK594bKuTazDQqkHtr5eFkc7X7 WvDu1aGUj5eCK3ZfmSM89ZL2Am2VYROZzi/MuuQDFQl1CDzSg5+0fOEUrwyPlslg pS+Jqlm68Zz1HJK2fTKYDYrb5q1/W5pX -----END CERTIFICATE-----Generated at Mon May 12 18:25:54 2025 by rpki-client