$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft File: OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft (raw, json) Hash identifier: f1efU+VSvfFVPTgouLCMoTTwvfyWjjKEuPc8kAAdVQo= Subject key identifier: 3C:C1:E4:A9:5B:58:25:DA:DD:9E:00:F0:87:A8:DC:AF:39:18:0F:61 Authority key identifier: 39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD Certificate issuer: /CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD Certificate serial: 0B20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft Manifest number: 0975 Signing time: Wed 14 May 2025 22:01:01 +0000 Manifest this update: Wed 14 May 2025 22:01:00 +0000 Manifest next update: Wed 21 May 2025 22:01:00 +0000 Files and hashes: 1: OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl (hash: l9v6EZXhqkNXEkXe/WGdQe5YXcjIyvJFSPrmeThF1TM=) 2: 93EE047E4BB511EE9309AA4EC4F9AE02.roa (hash: cKLqzBD3UNEjua94H34t+S8hZV/aOFg8bXhQVhmFTLs=) 3: 72C9BE36950211EFAC892C5EC4F9AE02.roa (hash: Bpq9dhCpjI1cT2kel0jPo45D0NBWXD/qIfwghmBzSyI=) 4: 263DB02C4BB611EE9B959267C4F9AE02.roa (hash: Sc37SATsVjDUvoeuant9XpguxSfk6BLAFRWRVkPZh+Q=) 5: 01A34AA220D911F08E8B910BC4F9AE02.roa (hash: rRSZwuyNniJRhYgMcIbEH1c39jOVJWRBcxSW3fXY+nI=) 6: 183EB332F56911EFA13C606AC4F9AE02.roa (hash: /9QKDX3FStORICkoflQCZVxfwpI3R14TnJXoMA+IsWE=) 7: AB96EF3852CD11ECAB209C5FC4F9AE02.roa (hash: PTN3D9DukvxulJCnZfplXeEJi7h63+XDY8ZJvEz9E/c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 22:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2848 (0xb20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D67, serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD Validity Not Before: May 14 22:01:00 2025 GMT Not After : May 21 22:01:00 2025 GMT Subject: CN=6825129d-cd3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:49:4e:29:7c:a3:2d:b8:ca:d9:17:5c:9e:b8: 2a:1c:2b:4a:37:b5:25:7e:05:78:de:6e:90:9c:8c: d5:6a:32:33:82:8f:c8:62:6f:1b:cf:75:b5:d9:a5: 81:85:9b:c3:5e:19:4c:16:27:c4:23:7a:5f:52:7b: 4b:9e:0b:fd:d8:c1:6a:27:a1:3f:45:40:a9:65:bf: 95:93:82:4c:83:24:4e:77:a2:4a:23:46:2c:9b:0d: 8a:e5:4f:be:3c:72:f5:fa:0b:19:f1:dd:f4:e9:88: 4b:e6:ba:72:bd:ce:0b:2e:b9:5d:6e:c9:31:40:19: 93:de:0c:6b:15:c3:d9:c0:80:3a:2b:cf:02:ec:61: 5c:ea:9d:46:f4:b8:58:a1:df:1a:9d:03:bd:c8:1b: f7:2b:ef:a5:fd:09:04:9c:3a:76:25:a9:4a:6a:77: 11:61:a0:1c:47:e9:ee:9d:91:f8:12:d3:62:87:70: 66:37:61:3f:5e:64:9c:73:b6:18:fb:d6:e7:96:88: 45:0b:df:75:19:d0:fd:c0:d9:dd:b6:2a:0c:e9:4c: f0:9e:ac:fd:ab:82:46:e8:20:48:a4:db:03:16:51: b6:a5:8c:71:aa:4a:ab:c5:c0:51:86:01:e8:13:f0: 84:ba:23:e4:68:9c:32:16:6f:94:45:c1:5f:ab:f6: 1a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C1:E4:A9:5B:58:25:DA:DD:9E:00:F0:87:A8:DC:AF:39:18:0F:61 X509v3 Authority Key Identifier: keyid:39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:54:86:b3:fd:ee:53:57:c5:66:76:53:80:b6:53:b0:fb:e0: d5:50:8a:a6:46:1b:1d:9f:d6:ea:36:c7:1b:7a:42:05:c5:bf: 53:b8:01:b1:5f:4a:39:f6:98:2f:f2:c3:9d:9a:58:e6:83:da: 71:2c:a6:ee:e4:51:c0:c4:73:06:b5:3e:0b:df:44:64:af:5c: 1a:38:f4:0e:d6:48:fc:64:c0:ed:96:a0:b7:d7:88:0c:b8:a4: 61:f6:ae:aa:1a:f4:ed:eb:8c:d1:27:c6:ec:cc:2e:67:91:8f: 1b:bf:42:48:39:d1:7a:b9:60:85:a4:b7:a9:d2:d9:a5:75:a9: 13:3b:11:d6:dc:69:92:e0:96:f1:c8:14:1a:db:49:e8:52:00: 00:ef:55:ca:73:4b:d5:0b:41:b9:c8:10:a9:f5:84:0e:92:dd: 40:7b:11:eb:c8:07:22:d0:f8:0a:f5:36:ad:2a:43:2f:dd:86: f4:c8:20:59:46:c7:75:ae:6b:4e:35:01:75:76:c0:e1:dd:8a: 70:43:cc:59:dd:47:a7:95:f6:4a:cc:64:a8:13:ac:9d:4d:0e: 85:73:45:71:b0:ff:8d:bc:73:d1:e5:a9:ca:10:a8:a9:90:49: 77:d6:d5:9e:a7:3f:4a:0f:63:b9:32:6f:96:8e:f1:41:dd:5a: c0:d0:71:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCyAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdENjcxMTAvBgNVBAUTKDM5QzQzOTY3NTcwMDg3RjU4M0U0MjVBOUZFOUI2OUI5 NTA2QTU5QkQwHhcNMjUwNTE0MjIwMTAwWhcNMjUwNTIxMjIwMTAwWjAYMRYwFAYD VQQDEw02ODI1MTI5ZC1jZDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyUlOKXyjLbjK2RdcnrgqHCtKN7UlfgV43m6QnIzVajIzgo/IYm8bz3W12aWB hZvDXhlMFifEI3pfUntLngv92MFqJ6E/RUCpZb+Vk4JMgyROd6JKI0Ysmw2K5U++ PHL1+gsZ8d306YhL5rpyvc4LLrldbskxQBmT3gxrFcPZwIA6K88C7GFc6p1G9LhY od8anQO9yBv3K++l/QkEnDp2JalKancRYaAcR+nunZH4EtNih3BmN2E/XmScc7YY +9bnlohFC991GdD9wNndtioM6Uzwnqz9q4JG6CBIpNsDFlG2pYxxqkqrxcBRhgHo E/CEuiPkaJwyFm+URcFfq/Ya6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDzB5Klb WCXa3Z4A8Ieo3K85GA9hMB8GA1UdIwQYMBaAFDnEOWdXAIf1g+Qlqf6bablQalm9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2Ny82OUU2QzE2QTQ0 MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9PY1E1WjFjQWhfV0Q1Q1dwX3B0cHVWQnFX YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09jUTVaMWNBaF9XRDVDV3BfcHRwdVZCcVdiMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0Q2Ny82OUU2QzE2QTQ0MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9PY1E1WjFjQWhf V0Q1Q1dwX3B0cHVWQnFXYjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdVIaz/e5TV8VmdlOAtlOw++DVUIqmRhsdn9bqNscbekIFxb9TuAGx X0o59pgv8sOdmljmg9pxLKbu5FHAxHMGtT4L30Rkr1waOPQO1kj8ZMDtlqC314gM uKRh9q6qGvTt64zRJ8bszC5nkY8bv0JIOdF6uWCFpLep0tmldakTOxHW3GmS4Jbx yBQa20noUgAA71XKc0vVC0G5yBCp9YQOkt1AexHryAci0PgK9TatKkMv3Yb0yCBZ Rsd1rmtONQF1dsDh3YpwQ8xZ3UenlfZKzGSoE6ydTQ6Fc0VxsP+NvHPR5anKEKip kEl31tWepz9KD2O5Mm+WjvFB3VrA0HG4 -----END CERTIFICATE-----Generated at Thu May 15 05:15:22 2025 by rpki-client