$ rpki-client -vvf rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft File: oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft (raw, json) Hash identifier: D97rZvBjUynCSsZquPQg9SoWaHJgHQiSBIChTNMRYl0= Subject key identifier: AC:9E:92:21:80:5C:47:90:80:DA:DC:DA:3B:68:28:EB:1C:A5:A1:2B Authority key identifier: A1:06:03:30:2B:FE:C8:2A:07:F8:C5:D4:2E:45:8B:76:C5:FF:91:A4 Certificate issuer: /CN=A916A3BE/serialNumber=A10603302BFEC82A07F8C5D42E458B76C5FF91A4 Certificate serial: 09D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft Manifest number: 09BE Signing time: Fri 16 May 2025 20:17:53 +0000 Manifest this update: Fri 16 May 2025 20:17:53 +0000 Manifest next update: Fri 23 May 2025 20:17:53 +0000 Files and hashes: 1: oQYDMCv-yCoH-MXULkWLdsX_kaQ.crl (hash: vTgXJmB0yBRYl2ZA9E38iBb2vE8F1gjqtzq9FMbESXQ=) 2: 9FC3DC92883311EDB7271C62C4F9AE02.roa (hash: Cf8bqRacvTWl+UzpH6e1kxekXSzzSxIQ9wSazOTj5Ck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.crl rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 20:17:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2512 (0x9d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A3BE, serialNumber=A10603302BFEC82A07F8C5D42E458B76C5FF91A4 Validity Not Before: May 16 20:17:53 2025 GMT Not After : May 23 20:17:53 2025 GMT Subject: CN=68279d71-ae20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:17:c5:c7:89:52:04:de:3a:90:f4:94:41:b5: 50:cf:9e:c2:8a:0b:7b:7c:5a:5d:91:8f:4b:11:33: 07:9b:c6:4e:01:c2:27:71:33:cd:22:5c:57:d5:22: 79:a7:43:b3:dc:b3:f2:5e:a9:f4:65:28:7f:3e:b4: 73:b5:ad:88:21:d5:a1:57:86:dd:26:80:be:89:45: 96:bd:09:fe:93:39:d6:55:51:00:5a:54:75:d1:72: a4:bc:87:95:d1:f3:11:4b:fb:6a:25:cb:b4:3e:58: 7f:de:d5:d7:cb:51:cc:19:ea:60:36:fe:85:92:88: ec:f9:59:e1:e1:00:68:38:7c:5a:3e:68:28:e0:24: 05:be:f7:21:13:08:59:58:d5:f7:71:f6:b4:0f:fd: 7f:1b:a1:ae:c6:56:d4:66:58:4d:9a:28:b0:23:48: 6c:0f:71:b6:b4:f9:f9:78:bd:b5:27:e3:32:85:08: 10:74:3b:9a:e7:5e:10:93:52:49:00:4d:11:55:5f: ef:58:98:f1:88:67:23:e4:0d:0b:92:df:fc:16:4d: e8:e9:e3:02:16:24:f9:41:00:d1:3f:a9:3a:8a:ff: 46:7f:d6:6a:b1:13:d6:24:d5:78:4b:7f:fe:c4:7b: 38:96:61:19:ce:d6:22:43:0d:e0:e8:68:c8:bb:8a: 81:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:9E:92:21:80:5C:47:90:80:DA:DC:DA:3B:68:28:EB:1C:A5:A1:2B X509v3 Authority Key Identifier: keyid:A1:06:03:30:2B:FE:C8:2A:07:F8:C5:D4:2E:45:8B:76:C5:FF:91:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:c7:08:09:fc:79:0e:13:d0:b6:5f:ad:20:60:24:91:c3:ba: de:ae:12:27:09:b0:f2:ea:75:61:dc:6f:e1:89:03:6b:88:31: 3a:38:39:66:fa:72:48:92:3c:6f:46:c1:00:2e:38:fe:0f:7c: 1e:fb:2d:c9:e5:6f:50:cd:04:45:da:61:76:1e:a4:a6:03:83: cb:e3:dc:d6:c8:c9:ce:c3:60:cb:33:a1:43:6f:20:a2:8c:45: ce:02:f3:dd:c9:cc:f1:7d:ba:75:e4:9c:44:68:cf:c1:85:48: 2d:a7:2f:82:27:48:a6:19:58:27:5b:63:ba:3a:d5:8a:4b:1a: 02:e7:80:b3:6a:dd:e4:89:e7:a4:b3:b3:a1:6f:b4:92:b1:59: 6e:e5:ed:39:8a:41:7f:82:fe:cb:b9:2b:01:39:83:3a:72:da: 39:5f:13:47:bb:c9:b9:a4:c6:38:55:29:99:4f:47:07:f4:c9: 33:64:e6:97:74:59:51:ab:f2:5e:c8:90:79:98:95:60:88:c0: 53:4d:8a:ed:07:2a:01:39:9d:f8:ec:a8:48:0b:41:55:0e:c2: 85:ae:41:b3:5c:8d:22:d4:37:3d:da:44:aa:80:9d:73:b0:4d: fe:6d:93:4d:2a:4e:58:38:67:71:e7:61:3f:d8:17:2c:81:8b: f8:bb:8d:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEzQkUxMTAvBgNVBAUTKEExMDYwMzMwMkJGRUM4MkEwN0Y4QzVENDJFNDU4Qjc2 QzVGRjkxQTQwHhcNMjUwNTE2MjAxNzUzWhcNMjUwNTIzMjAxNzUzWjAYMRYwFAYD VQQDEw02ODI3OWQ3MS1hZTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1xfFx4lSBN46kPSUQbVQz57Cigt7fFpdkY9LETMHm8ZOAcIncTPNIlxX1SJ5 p0Oz3LPyXqn0ZSh/PrRzta2IIdWhV4bdJoC+iUWWvQn+kznWVVEAWlR10XKkvIeV 0fMRS/tqJcu0Plh/3tXXy1HMGepgNv6Fkojs+Vnh4QBoOHxaPmgo4CQFvvchEwhZ WNX3cfa0D/1/G6GuxlbUZlhNmiiwI0hsD3G2tPn5eL21J+MyhQgQdDua514Qk1JJ AE0RVV/vWJjxiGcj5A0Lkt/8Fk3o6eMCFiT5QQDRP6k6iv9Gf9ZqsRPWJNV4S3/+ xHs4lmEZztYiQw3g6GjIu4qBnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKyekiGA XEeQgNrc2jtoKOscpaErMB8GA1UdIwQYMBaAFKEGAzAr/sgqB/jF1C5Fi3bF/5Gk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTNCRS84OUI0RjY3ODg0 MTkxMUVBOThGRjA2MzdDNEY5QUUwMi9vUVlETUN2LXlDb0gtTVhVTGtXTGRzWF9r YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29RWURNQ3YteUNvSC1NWFVMa1dMZHNYX2thUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTNCRS84OUI0RjY3ODg0MTkxMUVBOThGRjA2MzdDNEY5QUUwMi9vUVlETUN2LXlD b0gtTVhVTGtXTGRzWF9rYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnxwgJ/HkOE9C2X60gYCSRw7rerhInCbDy6nVh3G/hiQNriDE6ODlm +nJIkjxvRsEALjj+D3we+y3J5W9QzQRF2mF2HqSmA4PL49zWyMnOw2DLM6FDbyCi jEXOAvPdyczxfbp15JxEaM/BhUgtpy+CJ0imGVgnW2O6OtWKSxoC54Czat3kieek s7Ohb7SSsVlu5e05ikF/gv7LuSsBOYM6cto5XxNHu8m5pMY4VSmZT0cH9MkzZOaX dFlRq/JeyJB5mJVgiMBTTYrtByoBOZ347KhIC0FVDsKFrkGzXI0i1Dc92kSqgJ1z sE3+bZNNKk5YOGdx52E/2BcsgYv4u40y -----END CERTIFICATE-----Generated at Sun May 18 06:38:31 2025 by rpki-client