$ rpki-client -vvf rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft File: o9XPQ95bPYucND7UScFpDr40Fw4.mft (raw, json) Hash identifier: i5TT8t1rA1zXDus8u317NcON8pIZJ/jJ4GoR1eUGujk= Subject key identifier: B1:11:BD:0A:B1:39:B9:68:12:D1:06:B8:5F:7D:3C:C5:A6:DC:2B:3C Authority key identifier: A3:D5:CF:43:DE:5B:3D:8B:9C:34:3E:D4:49:C1:69:0E:BE:34:17:0E Certificate issuer: /CN=A914CCD1/serialNumber=A3D5CF43DE5B3D8B9C343ED449C1690EBE34170E Certificate serial: 05EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9XPQ95bPYucND7UScFpDr40Fw4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft Manifest number: 05C8 Signing time: Mon 12 May 2025 22:59:44 +0000 Manifest this update: Mon 12 May 2025 22:59:44 +0000 Manifest next update: Mon 19 May 2025 22:59:44 +0000 Files and hashes: 1: o9XPQ95bPYucND7UScFpDr40Fw4.crl (hash: iZLIDNYwicQatoYwJGyLRZ5DUqyIqnYm9EAa18fDOtM=) 2: 96E3EB58B2B711EEAE882255C4F9AE02.roa (hash: tzTNsTyay71DnZ6Tdbo+sDlbNh8WzoY7t1vlYqQ5Tec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.crl rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9XPQ95bPYucND7UScFpDr40Fw4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 22:59:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1516 (0x5ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CCD1, serialNumber=A3D5CF43DE5B3D8B9C343ED449C1690EBE34170E Validity Not Before: May 12 22:59:44 2025 GMT Not After : May 19 22:59:44 2025 GMT Subject: CN=68227d60-b175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a6:cd:89:46:45:36:e4:57:f7:34:66:32:27: 90:e9:7e:1c:27:ac:22:2f:f3:80:b0:3f:9e:e7:c9: f1:75:1b:8a:41:79:c4:5e:e9:fe:0a:59:97:2b:9c: a6:e9:72:35:d3:cf:c2:30:3e:b7:03:60:9b:fb:43: db:35:8c:7d:45:1c:04:05:43:4c:21:6e:7e:51:23: 51:a2:82:7a:50:78:4b:52:7f:a3:90:40:6b:c7:74: 5d:c2:69:80:8c:af:99:b8:58:e1:a7:2b:ab:c4:c0: a5:60:c7:21:c8:ef:6f:d0:9f:20:ad:c2:3e:f2:73: b5:31:0d:ec:bf:f2:73:cc:e0:d1:dd:c7:5d:f3:9d: ec:85:7f:ac:6d:92:bd:39:c2:51:13:7c:6b:c9:6d: 69:a7:54:8d:f5:b2:97:ad:be:98:f3:a9:97:41:0a: 9d:7d:76:87:11:48:d8:89:cd:0e:6d:d6:31:39:0e: 16:8c:46:2d:98:5d:ef:f7:f7:03:45:ea:d9:3f:52: 6c:b3:87:a7:f5:06:0d:8d:60:96:00:67:d4:15:58: 8f:55:e3:3c:73:e8:7d:f0:06:bf:43:dd:84:b3:d1: d7:09:c7:73:10:0f:0a:bd:87:25:b8:d2:86:58:db: c0:cd:9c:ba:06:fb:d0:a4:93:fd:80:5a:a5:b6:c6: cd:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:11:BD:0A:B1:39:B9:68:12:D1:06:B8:5F:7D:3C:C5:A6:DC:2B:3C X509v3 Authority Key Identifier: keyid:A3:D5:CF:43:DE:5B:3D:8B:9C:34:3E:D4:49:C1:69:0E:BE:34:17:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9XPQ95bPYucND7UScFpDr40Fw4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:ee:58:ef:18:f2:ee:fc:60:41:99:ee:7b:71:b5:e7:28:75: 49:8f:f3:70:b5:8e:1b:b0:df:24:88:20:aa:c2:05:39:35:5f: a8:4d:49:c1:2a:3f:fe:87:c0:56:08:53:60:b2:6a:c3:52:ff: 71:81:1d:6a:ec:2a:c7:9e:98:6d:28:35:fb:54:9d:19:a4:d3: d7:8b:a3:56:84:bd:70:b4:20:da:a8:43:08:0d:81:e5:37:85: ec:f4:2a:58:af:82:67:9b:02:b2:b3:d9:cd:c6:e3:27:1b:de: 84:5b:a1:5b:01:88:cc:bf:53:31:35:ab:da:dd:4f:33:01:dd: d7:d2:28:0b:48:d3:73:89:10:0c:d8:cd:bc:bc:66:62:b1:5b: 38:72:04:f5:69:bc:52:40:db:da:01:9c:a4:f9:34:c9:e6:36: 94:be:9a:da:ec:39:30:84:87:19:96:bf:ee:fe:11:fd:30:35: 4b:61:b4:2a:bb:86:c4:b3:b6:7d:db:f2:ac:83:15:ca:17:9b: 05:07:c6:47:be:0f:a7:ca:15:b5:48:7e:2e:95:47:7f:2b:e3: be:e3:5d:5c:c8:90:9e:3f:dd:5d:bf:5b:0d:0c:89:0d:83:61: 9a:70:b1:21:58:5e:a9:d7:00:82:45:f8:09:0d:50:a6:9b:53: a9:eb:aa:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENDRDExMTAvBgNVBAUTKEEzRDVDRjQzREU1QjNEOEI5QzM0M0VENDQ5QzE2OTBF QkUzNDE3MEUwHhcNMjUwNTEyMjI1OTQ0WhcNMjUwNTE5MjI1OTQ0WjAYMRYwFAYD VQQDEw02ODIyN2Q2MC1iMTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApKbNiUZFNuRX9zRmMieQ6X4cJ6wiL/OAsD+e58nxdRuKQXnEXun+ClmXK5ym 6XI108/CMD63A2Cb+0PbNYx9RRwEBUNMIW5+USNRooJ6UHhLUn+jkEBrx3RdwmmA jK+ZuFjhpyurxMClYMchyO9v0J8grcI+8nO1MQ3sv/JzzODR3cdd853shX+sbZK9 OcJRE3xryW1pp1SN9bKXrb6Y86mXQQqdfXaHEUjYic0ObdYxOQ4WjEYtmF3v9/cD RerZP1Jss4en9QYNjWCWAGfUFViPVeM8c+h98Aa/Q92Es9HXCcdzEA8KvYcluNKG WNvAzZy6BvvQpJP9gFqltsbN5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLERvQqx ObloEtEGuF99PMWm3Cs8MB8GA1UdIwQYMBaAFKPVz0PeWz2LnDQ+1EnBaQ6+NBcO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0NEMS9BRDdGNDVBNENE QzQxMUVCQjVGNDgzNTVDNEY5QUUwMi9vOVhQUTk1YlBZdWNORDdVU2NGcERyNDBG dzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL285WFBROTViUFl1Y05EN1VTY0ZwRHI0MEZ3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0NEMS9BRDdGNDVBNENEQzQxMUVCQjVGNDgzNTVDNEY5QUUwMi9vOVhQUTk1YlBZ dWNORDdVU2NGcERyNDBGdzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBo7ljvGPLu/GBBme57cbXnKHVJj/NwtY4bsN8kiCCqwgU5NV+oTUnB Kj/+h8BWCFNgsmrDUv9xgR1q7CrHnphtKDX7VJ0ZpNPXi6NWhL1wtCDaqEMIDYHl N4Xs9CpYr4JnmwKys9nNxuMnG96EW6FbAYjMv1MxNava3U8zAd3X0igLSNNziRAM 2M28vGZisVs4cgT1abxSQNvaAZyk+TTJ5jaUvpra7DkwhIcZlr/u/hH9MDVLYbQq u4bEs7Z92/KsgxXKF5sFB8ZHvg+nyhW1SH4ulUd/K+O+411cyJCeP91dv1sNDIkN g2GacLEhWF6p1wCCRfgJDVCmm1Op66rr -----END CERTIFICATE-----Generated at Tue May 13 23:00:32 2025 by rpki-client