$ rpki-client -vvf rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft File: o3Aww1ljBAWOL5lPP9FHGjooPrM.mft (raw, json) Hash identifier: WxCs+6LhYFjQsHKylQvxziosRx8FRD0+Vv3hOgJajaA= Subject key identifier: 3A:6D:12:24:6E:99:2D:8E:C9:2D:25:4C:84:1E:83:39:2C:26:E2:4A Authority key identifier: A3:70:30:C3:59:63:04:05:8E:2F:99:4F:3F:D1:47:1A:3A:28:3E:B3 Certificate issuer: /CN=A9163695/serialNumber=A37030C3596304058E2F994F3FD1471A3A283EB3 Certificate serial: 018A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o3Aww1ljBAWOL5lPP9FHGjooPrM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft Manifest number: 0187 Signing time: Thu 15 May 2025 03:01:35 +0000 Manifest this update: Thu 15 May 2025 03:01:35 +0000 Manifest next update: Thu 22 May 2025 03:01:35 +0000 Files and hashes: 1: o3Aww1ljBAWOL5lPP9FHGjooPrM.crl (hash: N63YvUrH1xNBqs9YbGTb+S0hxihueV+6zAL9Pdrx3VE=) 2: A8006A74DA9511ED8DC28C24C4F9AE02.roa (hash: XonPHnI9n9dqc1tom7Es5BpnOeOt7wPnQuvQZ6j9Tf8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.crl rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o3Aww1ljBAWOL5lPP9FHGjooPrM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 03:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 394 (0x18a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163695, serialNumber=A37030C3596304058E2F994F3FD1471A3A283EB3 Validity Not Before: May 15 03:01:35 2025 GMT Not After : May 22 03:01:35 2025 GMT Subject: CN=6825590f-e269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:42:24:12:98:4f:b8:83:ef:d7:79:eb:09:aa: 33:c8:b5:68:84:5b:55:2e:d8:62:4f:99:d7:5c:4c: 43:41:21:23:cb:84:c2:1e:7d:07:b5:f9:43:db:71: 6b:40:25:d9:74:1f:10:98:03:2f:90:93:56:a4:75: 20:29:45:75:91:45:1f:13:af:d6:19:da:c9:0d:2b: 9d:1d:84:a7:ce:15:9a:d2:1c:04:ed:8c:5e:86:96: 02:12:80:8d:81:9c:18:fb:c1:04:50:4f:79:62:b9: e3:56:0b:49:1b:7b:73:49:1b:25:1c:8d:fe:dd:5a: a0:fd:e6:29:33:d5:c2:35:c7:75:66:4f:bf:94:bb: d5:80:0c:94:05:58:50:a2:fa:0d:21:37:a9:58:0e: a2:98:1e:16:34:eb:94:d6:11:34:37:6b:b0:9e:64: cf:e7:73:61:2d:7c:d7:67:3b:da:86:6b:b4:00:ce: 25:e1:b1:59:17:6d:c2:a5:20:a8:a3:65:4c:a1:fb: 5b:8e:2e:4f:73:25:04:66:35:ef:c7:06:b4:54:18: 9a:70:1e:6b:f8:b6:83:6b:1f:71:32:6b:3e:38:ec: c1:8d:eb:ae:76:6e:8a:ab:2e:85:ef:80:ae:12:00: 6d:f6:11:ca:bf:6a:00:38:a1:37:46:da:b7:d5:91: 6c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:6D:12:24:6E:99:2D:8E:C9:2D:25:4C:84:1E:83:39:2C:26:E2:4A X509v3 Authority Key Identifier: keyid:A3:70:30:C3:59:63:04:05:8E:2F:99:4F:3F:D1:47:1A:3A:28:3E:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o3Aww1ljBAWOL5lPP9FHGjooPrM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:c4:d8:af:f3:06:de:ac:cd:d2:45:bc:d7:7b:25:75:5d:f4: ff:ea:91:7a:67:b3:cd:c0:d9:08:42:13:d5:85:1f:92:2e:b1: 28:ca:9c:27:40:3e:eb:13:75:e0:6c:12:f8:5a:7d:8d:a0:60: 22:f6:34:50:06:b3:af:db:4d:15:3b:9f:cf:11:7d:1f:81:5b: d5:48:10:43:8a:a4:75:da:5e:92:b9:bf:62:41:d0:46:0f:f2: e0:ef:f7:0f:3d:8e:c8:73:76:4b:3d:64:c7:fb:a5:69:ee:a4: 05:d6:9d:2d:19:dc:a5:8e:e8:6d:54:68:ab:73:98:3f:5d:b7: 60:ff:e5:73:bc:fa:49:ee:65:9b:1b:9c:ca:50:a0:fc:02:07: ae:cc:cb:d3:a2:bc:cf:3f:d6:c5:38:83:5e:85:5c:64:11:c0: d1:af:cf:8f:f3:f8:49:3a:56:aa:f7:92:3f:36:da:99:fd:42: fa:dd:02:a8:73:a9:22:26:ea:c3:30:dd:88:7e:f6:53:dc:9e: 25:90:3d:ae:fb:52:0c:eb:fe:8b:07:b9:7d:1e:db:df:84:55: 7a:e8:25:d0:8d:ad:9a:b2:45:55:b5:1a:bc:94:cb:49:12:00: 47:49:7f:55:e8:89:ac:a8:b9:33:fb:71:52:4d:cd:f6:64:e2: 7d:fb:fe:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM2OTUxMTAvBgNVBAUTKEEzNzAzMEMzNTk2MzA0MDU4RTJGOTk0RjNGRDE0NzFB M0EyODNFQjMwHhcNMjUwNTE1MDMwMTM1WhcNMjUwNTIyMDMwMTM1WjAYMRYwFAYD VQQDEw02ODI1NTkwZi1lMjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArEIkEphPuIPv13nrCaozyLVohFtVLthiT5nXXExDQSEjy4TCHn0HtflD23Fr QCXZdB8QmAMvkJNWpHUgKUV1kUUfE6/WGdrJDSudHYSnzhWa0hwE7YxehpYCEoCN gZwY+8EEUE95YrnjVgtJG3tzSRslHI3+3Vqg/eYpM9XCNcd1Zk+/lLvVgAyUBVhQ ovoNITepWA6imB4WNOuU1hE0N2uwnmTP53NhLXzXZzvahmu0AM4l4bFZF23CpSCo o2VMoftbji5PcyUEZjXvxwa0VBiacB5r+LaDax9xMms+OOzBjeuudm6Kqy6F74Cu EgBt9hHKv2oAOKE3Rtq31ZFsVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDptEiRu mS2OyS0lTIQegzksJuJKMB8GA1UdIwQYMBaAFKNwMMNZYwQFji+ZTz/RRxo6KD6z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzY5NS84NzNBNjgwMERB OEUxMUVEQkFDRkNBMjRDNEY5QUUwMi9vM0F3dzFsakJBV09MNWxQUDlGSEdqb29Q ck0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28zQXd3MWxqQkFXT0w1bFBQOUZIR2pvb1ByTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzY5NS84NzNBNjgwMERBOEUxMUVEQkFDRkNBMjRDNEY5QUUwMi9vM0F3dzFsakJB V09MNWxQUDlGSEdqb29Qck0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKxNiv8wberM3SRbzXeyV1XfT/6pF6Z7PNwNkIQhPVhR+SLrEoypwn QD7rE3XgbBL4Wn2NoGAi9jRQBrOv200VO5/PEX0fgVvVSBBDiqR12l6Sub9iQdBG D/Lg7/cPPY7Ic3ZLPWTH+6Vp7qQF1p0tGdyljuhtVGirc5g/Xbdg/+VzvPpJ7mWb G5zKUKD8AgeuzMvTorzPP9bFOINehVxkEcDRr8+P8/hJOlaq95I/NtqZ/UL63QKo c6kiJurDMN2IfvZT3J4lkD2u+1IM6/6LB7l9HtvfhFV66CXQja2askVVtRq8lMtJ EgBHSX9V6ImsqLkz+3FSTc32ZOJ9+/7v -----END CERTIFICATE-----Generated at Thu May 15 15:52:52 2025 by rpki-client