$ rpki-client -vvf rpki.apnic.net/member_repository/A9191989/587414D2863B11EDB57E7C35C4F9AE02/mOVO1XJQxhJ0fjyiloU-r5GQWfU.mft File: mOVO1XJQxhJ0fjyiloU-r5GQWfU.mft (raw, json) Hash identifier: Lv731i0HwZpAt1HRLi/9xZVYpQoCieVJZUIpxVG8IT4= Subject key identifier: F6:2C:C4:CD:3E:17:9A:84:0B:55:84:8B:3D:9A:D2:F4:D8:A4:B2:38 Authority key identifier: 98:E5:4E:D5:72:50:C6:12:74:7E:3C:A2:96:85:3E:AF:91:90:59:F5 Certificate issuer: /CN=A9191989/serialNumber=98E54ED57250C612747E3CA296853EAF919059F5 Certificate serial: 01D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOVO1XJQxhJ0fjyiloU-r5GQWfU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191989/587414D2863B11EDB57E7C35C4F9AE02/mOVO1XJQxhJ0fjyiloU-r5GQWfU.mft Manifest number: 01D0 Signing time: Sat 17 May 2025 02:43:29 +0000 Manifest this update: Sat 17 May 2025 02:43:29 +0000 Manifest next update: Sat 24 May 2025 02:43:29 +0000 Files and hashes: 1: mOVO1XJQxhJ0fjyiloU-r5GQWfU.crl (hash: qZMKAnauJYPPju8JSlLpUiXRZFLaLZ/NT4I5moIvzws=) 2: 40EF3C8690CE11ED98F4C344C4F9AE02.roa (hash: P9D/nziK9AMdOvj2LYszQtonPVIk8D2X2+l0ieGppXA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191989/587414D2863B11EDB57E7C35C4F9AE02/mOVO1XJQxhJ0fjyiloU-r5GQWfU.crl rsync://rpki.apnic.net/member_repository/A9191989/587414D2863B11EDB57E7C35C4F9AE02/mOVO1XJQxhJ0fjyiloU-r5GQWfU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOVO1XJQxhJ0fjyiloU-r5GQWfU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 02:43:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 469 (0x1d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191989, serialNumber=98E54ED57250C612747E3CA296853EAF919059F5 Validity Not Before: May 17 02:43:29 2025 GMT Not After : May 24 02:43:29 2025 GMT Subject: CN=6827f7d1-e052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e3:62:51:91:ea:9a:59:c4:67:91:92:fd:33: cd:7b:c0:ca:08:15:04:8c:34:d5:7d:ec:51:c7:a4: 92:c4:6f:8c:39:d3:bc:92:3a:3b:51:35:da:2b:72: 32:2f:5b:f1:5e:f2:e7:d5:ed:6d:5d:63:d1:68:25: 9d:8a:d5:07:07:bc:44:e0:4f:cd:89:81:b7:90:50: 18:74:6b:8a:8e:34:d1:3d:a6:95:df:ed:b4:58:1d: fb:66:7e:2f:6d:68:cc:e4:0d:13:77:de:3e:13:ff: e7:d6:0a:eb:d1:c5:f8:f5:fe:5d:fe:7f:45:28:38: 53:34:61:a1:90:83:33:a9:f0:c7:86:46:37:54:95: d6:b5:c2:39:42:8d:71:23:05:50:25:67:56:0e:37: 9e:d4:20:16:d0:fe:55:08:e2:c2:3b:f4:3c:58:a5: 70:cf:06:9a:df:72:da:a6:4e:83:67:38:9b:fb:0a: 61:d1:b2:6e:14:90:4b:d5:f1:54:2c:28:fe:68:85: c0:d2:5f:d0:1a:92:12:41:a4:55:59:bd:4d:30:a3: 68:52:dc:3f:4c:c3:4b:47:84:7a:2c:95:71:6a:d7: e8:c0:1e:20:0b:e7:42:2f:8a:57:65:dc:66:1b:b3: 13:d1:0f:66:3f:56:cd:2b:9f:c1:57:9a:f1:66:d5: fa:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:2C:C4:CD:3E:17:9A:84:0B:55:84:8B:3D:9A:D2:F4:D8:A4:B2:38 X509v3 Authority Key Identifier: keyid:98:E5:4E:D5:72:50:C6:12:74:7E:3C:A2:96:85:3E:AF:91:90:59:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191989/587414D2863B11EDB57E7C35C4F9AE02/mOVO1XJQxhJ0fjyiloU-r5GQWfU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOVO1XJQxhJ0fjyiloU-r5GQWfU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191989/587414D2863B11EDB57E7C35C4F9AE02/mOVO1XJQxhJ0fjyiloU-r5GQWfU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:f6:5c:16:e1:c8:0a:b3:e5:66:9f:ee:69:43:c5:cc:84:33: 8f:d1:5b:6a:4f:54:7a:e8:78:8b:c0:39:cd:84:e6:a8:66:8c: 0c:e7:9d:ab:4b:50:d8:f5:68:db:b3:ef:25:58:21:e1:ca:88: aa:9d:9f:dd:a0:7b:ec:bb:34:bc:82:35:c9:71:73:64:96:9c: 35:bf:18:d5:b9:05:b5:13:65:ab:ec:07:11:8e:7f:66:79:15: 83:51:12:63:f2:a5:21:c6:a7:e8:94:c8:70:4c:f5:9f:6b:c9: e0:49:8c:18:9d:b4:9b:3c:30:29:59:59:4b:5c:d0:b9:ef:26: 5d:0b:d6:2e:60:9a:d4:1c:2d:e9:d0:2f:f7:e4:72:76:57:53: ef:27:16:dc:ad:88:f1:a0:3c:33:ab:1d:bd:15:3b:86:52:e6: 75:75:fa:08:23:41:4f:40:24:ff:7b:2f:bd:98:e9:d3:5b:29: c2:75:84:57:10:2c:48:d6:72:73:f8:23:85:07:dc:57:08:f0: 2a:2f:ab:39:5d:89:6a:83:1c:71:d0:7c:46:bb:e8:13:7a:d2: ec:fb:15:a0:be:6c:6d:e7:ad:75:05:9e:01:1c:b1:02:57:dc: 88:ba:ac:6b:56:10:60:93:be:73:f5:a6:26:25:83:90:3c:4c: 22:08:b3:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE5ODkxMTAvBgNVBAUTKDk4RTU0RUQ1NzI1MEM2MTI3NDdFM0NBMjk2ODUzRUFG OTE5MDU5RjUwHhcNMjUwNTE3MDI0MzI5WhcNMjUwNTI0MDI0MzI5WjAYMRYwFAYD VQQDEw02ODI3ZjdkMS1lMDUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2uNiUZHqmlnEZ5GS/TPNe8DKCBUEjDTVfexRx6SSxG+MOdO8kjo7UTXaK3Iy L1vxXvLn1e1tXWPRaCWditUHB7xE4E/NiYG3kFAYdGuKjjTRPaaV3+20WB37Zn4v bWjM5A0Td94+E//n1grr0cX49f5d/n9FKDhTNGGhkIMzqfDHhkY3VJXWtcI5Qo1x IwVQJWdWDjee1CAW0P5VCOLCO/Q8WKVwzwaa33Lapk6DZzib+wph0bJuFJBL1fFU LCj+aIXA0l/QGpISQaRVWb1NMKNoUtw/TMNLR4R6LJVxatfowB4gC+dCL4pXZdxm G7MT0Q9mP1bNK5/BV5rxZtX6wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPYsxM0+ F5qEC1WEiz2a0vTYpLI4MB8GA1UdIwQYMBaAFJjlTtVyUMYSdH48opaFPq+RkFn1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTk4OS81ODc0MTREMjg2 M0IxMUVEQjU3RTdDMzVDNEY5QUUwMi9tT1ZPMVhKUXhoSjBmanlpbG9VLXI1R1FX ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21PVk8xWEpReGhKMGZqeWlsb1UtcjVHUVdmVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTk4OS81ODc0MTREMjg2M0IxMUVEQjU3RTdDMzVDNEY5QUUwMi9tT1ZPMVhKUXho SjBmanlpbG9VLXI1R1FXZlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAe9lwW4cgKs+Vmn+5pQ8XMhDOP0VtqT1R66HiLwDnNhOaoZowM552r S1DY9Wjbs+8lWCHhyoiqnZ/doHvsuzS8gjXJcXNklpw1vxjVuQW1E2Wr7AcRjn9m eRWDURJj8qUhxqfolMhwTPWfa8ngSYwYnbSbPDApWVlLXNC57yZdC9YuYJrUHC3p 0C/35HJ2V1PvJxbcrYjxoDwzqx29FTuGUuZ1dfoII0FPQCT/ey+9mOnTWynCdYRX ECxI1nJz+COFB9xXCPAqL6s5XYlqgxxx0HxGu+gTetLs+xWgvmxt5611BZ4BHLEC V9yIuqxrVhBgk75z9aYmJYOQPEwiCLPa -----END CERTIFICATE-----Generated at Sat May 17 14:11:38 2025 by rpki-client