$ rpki-client -vvf rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft File: O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft (raw, json) Hash identifier: IJoBT4TanP4vC39ddkZXPxXiFnnD8pqyQuvYxbSqHz8= Subject key identifier: 83:54:B1:52:E9:78:AB:5E:63:00:1A:7F:1A:34:10:A3:8A:06:0B:32 Authority key identifier: 3B:62:40:7E:2E:54:F4:2F:80:90:E2:C0:D8:6F:D2:C3:A6:13:30:B3 Certificate issuer: /CN=A91579E2/serialNumber=3B62407E2E54F42F8090E2C0D86FD2C3A61330B3 Certificate serial: 017A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft Manifest number: 0175 Signing time: Thu 15 May 2025 03:09:38 +0000 Manifest this update: Thu 15 May 2025 03:09:38 +0000 Manifest next update: Thu 22 May 2025 03:09:38 +0000 Files and hashes: 1: O2JAfi5U9C-AkOLA2G_Sw6YTMLM.crl (hash: FMs7A7BlVT01z74WEL9KuojfAMGH0QMUL4L0rcZJ/ec=) 2: 62923A1EF2B711EDAA29717AC4F9AE02.roa (hash: ZZdPnVowwXd341PXeuTZoAzmaTvlltdwYKchQCyVQrk=) 3: 631D6D82F2B711EDAA29717AC4F9AE02.roa (hash: qWWNyKzcmb7NGh+jIMofc7R/HFDVXogw0r/eVAACwfs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.crl rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 03:09:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 378 (0x17a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91579E2, serialNumber=3B62407E2E54F42F8090E2C0D86FD2C3A61330B3 Validity Not Before: May 15 03:09:38 2025 GMT Not After : May 22 03:09:38 2025 GMT Subject: CN=68255af2-07f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:0d:ee:ca:dd:64:67:54:c3:87:9e:ee:8a:93: c2:a2:43:50:e5:78:81:32:bb:46:8c:31:84:fa:fd: 4a:12:a7:3a:c5:56:24:86:e6:b0:00:49:6b:ca:cc: 81:8f:83:74:4d:4a:a1:7c:3c:b0:85:b3:f8:39:06: f9:5d:38:ac:c7:72:94:ad:33:23:b0:62:bb:d6:9a: 71:49:9a:a7:3e:80:3a:c1:01:10:f0:c7:dc:83:5a: 7a:e9:85:1d:d8:67:56:24:ac:70:fa:80:8a:57:12: 01:8b:57:20:a2:95:c6:41:cb:1e:e5:a3:5c:c3:b2: 11:0e:f3:dd:55:26:73:4c:25:8d:58:49:c3:39:2d: e7:13:4b:03:18:a1:50:b0:00:c9:69:7f:3c:6a:d4: ff:ff:0e:99:b7:08:3e:c4:31:51:74:dc:f4:d5:d2: 06:1c:c8:2f:a4:b0:c8:a5:f6:a6:6f:90:c7:84:3a: 29:b6:44:e2:e8:db:63:b8:8c:1f:af:07:f3:03:70: 3d:95:dc:60:f2:29:78:f2:5f:6a:e0:34:50:40:7c: b7:36:b3:69:8d:99:cf:b0:01:a2:83:1a:b5:ac:c8: e9:67:15:56:96:f0:71:52:eb:f0:11:41:65:91:2c: 8b:3b:9f:ac:ca:20:23:cc:65:05:f8:3e:69:d3:c0: b3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:54:B1:52:E9:78:AB:5E:63:00:1A:7F:1A:34:10:A3:8A:06:0B:32 X509v3 Authority Key Identifier: keyid:3B:62:40:7E:2E:54:F4:2F:80:90:E2:C0:D8:6F:D2:C3:A6:13:30:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:0e:f5:59:d6:28:dc:19:6c:6a:a3:91:1f:d3:ef:6e:af:e5: 8e:fb:dd:24:0c:b1:82:56:38:e6:14:09:4c:a2:37:43:54:d3: 41:07:e8:54:a7:09:40:60:e3:b4:b0:84:55:2b:b7:7b:83:0a: c5:97:ea:5f:80:0d:1d:70:1f:5c:71:3a:5b:d5:40:c6:f3:f1: be:4a:96:5c:d3:be:34:52:6b:2c:6a:bd:ca:19:35:31:c8:0d: cf:b3:ff:d3:47:16:1c:0b:12:b1:18:54:2c:d0:03:71:30:c9: e0:38:56:f8:53:97:b3:30:39:36:57:21:17:fb:96:6e:59:7f: dd:ad:ed:4d:5f:e7:26:f9:1e:5d:18:39:c1:9b:d6:fe:fb:14: 1f:c5:8a:29:e7:e7:11:66:eb:ff:6f:af:54:2b:ac:c4:00:ec: 11:c9:dd:a8:91:65:53:c6:7e:86:8b:1f:d6:91:9a:4c:62:d5: fd:b8:88:f6:ec:25:be:62:a8:5f:b8:44:21:4a:51:60:e5:da: 74:44:b9:0e:68:95:9f:e1:7b:94:fe:57:bc:72:56:d0:35:57: 03:52:fd:d0:99:29:32:80:c2:32:75:2a:f8:fc:90:c4:2e:db: 02:9c:7d:22:5e:19:02:e5:b2:3f:ec:cf:49:cc:d8:7f:95:c9: e2:5a:4a:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc5RTIxMTAvBgNVBAUTKDNCNjI0MDdFMkU1NEY0MkY4MDkwRTJDMEQ4NkZEMkMz QTYxMzMwQjMwHhcNMjUwNTE1MDMwOTM4WhcNMjUwNTIyMDMwOTM4WjAYMRYwFAYD VQQDEw02ODI1NWFmMi0wN2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2g3uyt1kZ1TDh57uipPCokNQ5XiBMrtGjDGE+v1KEqc6xVYkhuawAElrysyB j4N0TUqhfDywhbP4OQb5XTisx3KUrTMjsGK71ppxSZqnPoA6wQEQ8Mfcg1p66YUd 2GdWJKxw+oCKVxIBi1cgopXGQcse5aNcw7IRDvPdVSZzTCWNWEnDOS3nE0sDGKFQ sADJaX88atT//w6Ztwg+xDFRdNz01dIGHMgvpLDIpfamb5DHhDoptkTi6NtjuIwf rwfzA3A9ldxg8il48l9q4DRQQHy3NrNpjZnPsAGigxq1rMjpZxVWlvBxUuvwEUFl kSyLO5+syiAjzGUF+D5p08Cz5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFINUsVLp eKteYwAafxo0EKOKBgsyMB8GA1UdIwQYMBaAFDtiQH4uVPQvgJDiwNhv0sOmEzCz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzlFMi83M0FGMkY3QUYy QjAxMUVEQTQyQjQ0NzBDNEY5QUUwMi9PMkpBZmk1VTlDLUFrT0xBMkdfU3c2WVRN TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL08ySkFmaTVVOUMtQWtPTEEyR19TdzZZVE1MTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzlFMi83M0FGMkY3QUYyQjAxMUVEQTQyQjQ0NzBDNEY5QUUwMi9PMkpBZmk1VTlD LUFrT0xBMkdfU3c2WVRNTE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnDvVZ1ijcGWxqo5Ef0+9ur+WO+90kDLGCVjjmFAlMojdDVNNBB+hU pwlAYOO0sIRVK7d7gwrFl+pfgA0dcB9ccTpb1UDG8/G+SpZc0740Umssar3KGTUx yA3Ps//TRxYcCxKxGFQs0ANxMMngOFb4U5ezMDk2VyEX+5ZuWX/dre1NX+cm+R5d GDnBm9b++xQfxYop5+cRZuv/b69UK6zEAOwRyd2okWVTxn6Gix/WkZpMYtX9uIj2 7CW+YqhfuEQhSlFg5dp0RLkOaJWf4XuU/le8clbQNVcDUv3QmSkygMIydSr4/JDE LtsCnH0iXhkC5bI/7M9JzNh/lcniWkqI -----END CERTIFICATE-----Generated at Thu May 15 13:36:20 2025 by rpki-client