$ rpki-client -vvf rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.mft File: O0irhhZS-u7X4dElg_Frt_uyiRM.mft (raw, json) Hash identifier: +MHygp0V6ks82cE9WMnARosJDXG0n+iP3Kacu93A9YI= Subject key identifier: C3:8B:38:40:D6:56:83:8E:F1:C5:4C:F7:11:51:C5:69:1E:BF:DF:DC Authority key identifier: 3B:48:AB:86:16:52:FA:EE:D7:E1:D1:25:83:F1:6B:B7:FB:B2:89:13 Certificate issuer: /CN=A9176909/serialNumber=3B48AB861652FAEED7E1D12583F16BB7FBB28913 Certificate serial: 0203 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.mft Manifest number: 01F3 Signing time: Tue 13 May 2025 01:56:27 +0000 Manifest this update: Tue 13 May 2025 01:56:27 +0000 Manifest next update: Tue 20 May 2025 01:56:27 +0000 Files and hashes: 1: O0irhhZS-u7X4dElg_Frt_uyiRM.crl (hash: wI0rpKaWjpP+kTGjIXfazfvwADFuA/pcEBmxEawIJcA=) 2: EDE89884DB1711EF8929832EC4F9AE02.roa (hash: tqa1Ixra7BMwCWoNM3olfzFpbEkXEWmJXa4eDjgnFBc=) 3: 8FFF9C5AAF1A11EFAF122A6AC4F9AE02.roa (hash: oSZdhfGWwwKdH63s+SExbmyRtKVUZJS009bBjLK65o0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.crl rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:56:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 515 (0x203) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176909, serialNumber=3B48AB861652FAEED7E1D12583F16BB7FBB28913 Validity Not Before: May 13 01:56:27 2025 GMT Not After : May 20 01:56:27 2025 GMT Subject: CN=6822a6cb-370e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:5e:f9:c0:04:7a:40:0e:6e:1b:ef:76:77:c1: d8:30:1a:ae:46:be:3c:5b:cb:3c:39:e2:5c:bf:a5: 06:92:73:b6:80:a1:36:68:ee:6b:07:55:23:76:dc: c0:f8:79:78:a8:a9:c4:7f:db:3d:00:7a:87:b0:8f: 77:4d:9f:28:99:23:46:f6:4c:4e:ea:d6:6c:10:e3: d7:23:99:89:26:fc:1c:16:bd:14:22:0b:f3:17:7c: aa:f3:4d:1f:fa:40:52:7a:e9:96:21:98:04:24:be: 50:e8:b9:f3:d1:dc:c4:b1:77:48:39:be:e2:08:95: d4:fe:7c:6f:1a:96:88:44:09:2d:43:25:f3:93:14: 73:61:a4:4d:55:3c:76:f4:96:54:a0:44:8f:5f:2b: d4:5b:34:53:62:18:f7:0c:cd:a8:91:a3:ed:c7:d7: 2c:9f:9b:b3:bc:dc:3f:77:2c:b9:a5:92:bd:ef:3b: 22:d5:c3:9a:be:e2:2f:6a:7b:6b:59:88:cb:e9:b8: f7:e6:5a:0c:08:af:99:d4:02:65:05:7d:ec:a5:4d: 39:e4:5a:11:62:b4:c9:eb:02:9c:15:2a:0e:7d:46: 82:8c:58:df:75:21:7e:7a:74:b6:4f:f4:6d:98:a7: c0:be:16:2f:73:9f:b3:6f:0d:52:9e:6a:09:ae:e7: bd:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:8B:38:40:D6:56:83:8E:F1:C5:4C:F7:11:51:C5:69:1E:BF:DF:DC X509v3 Authority Key Identifier: keyid:3B:48:AB:86:16:52:FA:EE:D7:E1:D1:25:83:F1:6B:B7:FB:B2:89:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:c1:9c:77:18:7d:07:17:be:37:13:15:12:49:1d:74:e5:b1: b2:27:8a:c5:f6:5c:ae:6c:bc:51:7e:79:2f:14:08:34:2d:e1: 39:c5:b8:b5:e0:92:2b:3b:84:fe:3c:ed:32:39:f3:8e:f0:bb: b5:83:c7:f8:24:f6:63:7b:75:50:80:04:82:a0:b6:18:f8:53: 65:5a:08:6f:15:7a:a7:df:6a:80:10:09:43:af:c7:c5:71:ae: 36:60:d4:e9:d9:dd:8f:cf:ca:67:39:b2:fd:05:ad:d9:0b:ae: 34:20:1e:08:57:b8:ae:43:7d:7b:2e:d8:74:54:d4:a9:cc:b0: 69:af:cf:6d:1a:a0:e6:33:74:67:3a:76:f6:b9:8d:c7:20:5f: c1:f8:c1:80:f5:62:48:7a:7a:8f:6b:e4:fa:35:c4:33:3e:76: 1a:7c:b9:18:dd:04:1f:1b:ef:7d:84:f1:e7:49:a2:80:c6:aa: a7:ec:2c:63:ee:6d:ac:58:c6:82:da:d0:25:9a:a6:75:c0:8d: e6:f0:de:7c:63:2c:62:ca:5c:2d:1e:67:56:1f:16:8e:29:cd: 40:39:53:b3:4f:f2:55:e6:11:17:e1:d8:7c:21:f8:40:24:42: 5c:ae:2d:05:e5:9f:07:6f:ec:b7:fd:bd:cc:4c:06:d7:81:ef: 02:d6:42:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY5MDkxMTAvBgNVBAUTKDNCNDhBQjg2MTY1MkZBRUVEN0UxRDEyNTgzRjE2QkI3 RkJCMjg5MTMwHhcNMjUwNTEzMDE1NjI3WhcNMjUwNTIwMDE1NjI3WjAYMRYwFAYD VQQDEw02ODIyYTZjYi0zNzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6175wAR6QA5uG+92d8HYMBquRr48W8s8OeJcv6UGknO2gKE2aO5rB1UjdtzA +Hl4qKnEf9s9AHqHsI93TZ8omSNG9kxO6tZsEOPXI5mJJvwcFr0UIgvzF3yq800f +kBSeumWIZgEJL5Q6Lnz0dzEsXdIOb7iCJXU/nxvGpaIRAktQyXzkxRzYaRNVTx2 9JZUoESPXyvUWzRTYhj3DM2okaPtx9csn5uzvNw/dyy5pZK97zsi1cOavuIvantr WYjL6bj35loMCK+Z1AJlBX3spU055FoRYrTJ6wKcFSoOfUaCjFjfdSF+enS2T/Rt mKfAvhYvc5+zbw1SnmoJrue9XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMOLOEDW VoOO8cVM9xFRxWkev9/cMB8GA1UdIwQYMBaAFDtIq4YWUvru1+HRJYPxa7f7sokT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjkwOS85QUJBQ0FDODRE Q0IxMUVEODI5NjFCMzZDNEY5QUUwMi9PMGlyaGhaUy11N1g0ZEVsZ19GcnRfdXlp Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL08waXJoaFpTLXU3WDRkRWxnX0ZydF91eWlSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjkwOS85QUJBQ0FDODREQ0IxMUVEODI5NjFCMzZDNEY5QUUwMi9PMGlyaGhaUy11 N1g0ZEVsZ19GcnRfdXlpUk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjwZx3GH0HF743ExUSSR105bGyJ4rF9lyubLxRfnkvFAg0LeE5xbi1 4JIrO4T+PO0yOfOO8Lu1g8f4JPZje3VQgASCoLYY+FNlWghvFXqn32qAEAlDr8fF ca42YNTp2d2Pz8pnObL9Ba3ZC640IB4IV7iuQ317Lth0VNSpzLBpr89tGqDmM3Rn Onb2uY3HIF/B+MGA9WJIenqPa+T6NcQzPnYafLkY3QQfG+99hPHnSaKAxqqn7Cxj 7m2sWMaC2tAlmqZ1wI3m8N58YyxiylwtHmdWHxaOKc1AOVOzT/JV5hEX4dh8IfhA JEJcri0F5Z8Hb+y3/b3MTAbXge8C1kKr -----END CERTIFICATE-----Generated at Tue May 13 14:14:55 2025 by rpki-client