$ rpki-client -vvf rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft File: O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft (raw, json) Hash identifier: lx7dIZp4srg97lQT49UVEW+YXens0I7Cb9pNAWBhBvk= Subject key identifier: 83:A0:A6:2B:DA:4D:8B:4F:4E:43:33:17:88:E6:34:C5:93:BE:39:D5 Authority key identifier: 3B:B0:51:A7:DA:BA:68:7F:E3:A5:61:E3:8F:47:B9:50:46:7C:57:1E Certificate issuer: /CN=A9194CBE/serialNumber=3BB051A7DABA687FE3A561E38F47B950467C571E Certificate serial: 0761 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft Manifest number: 0755 Signing time: Mon 12 May 2025 21:26:52 +0000 Manifest this update: Mon 12 May 2025 21:26:51 +0000 Manifest next update: Mon 19 May 2025 21:26:51 +0000 Files and hashes: 1: O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.crl (hash: JzqzdvOAh+mpZAxRXWJSlbvVca0h/IK+260gR0EfRhQ=) 2: C329F1CE2AB611EDB5BBD62BC4F9AE02.roa (hash: KbjbjWfa/W/SeFQrbonVtHmtNH6PFYaGP9XG75HjJGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.crl rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 21:26:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1889 (0x761) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194CBE, serialNumber=3BB051A7DABA687FE3A561E38F47B950467C571E Validity Not Before: May 12 21:26:51 2025 GMT Not After : May 19 21:26:51 2025 GMT Subject: CN=6822679b-ecf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:bd:4e:dc:3a:8e:3c:4e:6c:44:27:60:63:0c: 75:09:e7:13:1f:54:50:76:a3:2e:57:0a:50:39:da: b5:4f:37:e3:be:4f:45:9e:c5:96:2c:9d:fa:93:3e: 65:cb:be:79:14:11:9e:87:2e:b4:fc:d8:d8:5f:d8: 4f:c6:68:5d:1b:62:22:e8:38:77:d6:2a:3e:3f:27: a7:5b:08:a0:d7:64:3d:ef:b6:81:26:69:7e:e1:f6: 5e:fe:4f:50:a9:b0:3e:dc:a2:a8:cd:c4:82:c0:39: 68:f5:4d:ef:f1:d5:ea:e2:c2:b1:b3:9c:23:d4:75: 76:e6:5d:a4:fb:d3:39:99:3e:a2:a1:66:c1:dd:1e: 12:7c:05:3d:69:7c:a2:47:e7:a7:53:dd:e2:bb:8f: 10:c3:e5:b1:8e:08:73:f6:2a:b2:ea:cb:87:0e:8a: 78:21:8a:e0:91:d2:08:30:df:7f:ea:7a:5b:49:54: cb:5f:d7:39:10:de:59:e9:d0:5c:f0:53:63:49:8b: 0e:c5:e7:75:25:a8:6c:41:69:d1:7d:81:3f:c2:77: dd:e2:94:69:f9:59:d0:34:15:f5:22:37:70:5b:68: b3:90:dd:cf:a1:48:a4:42:f2:4f:7a:d3:51:28:60: fd:cf:de:05:45:32:e0:54:93:e6:85:a6:4e:74:f4: f1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:A0:A6:2B:DA:4D:8B:4F:4E:43:33:17:88:E6:34:C5:93:BE:39:D5 X509v3 Authority Key Identifier: keyid:3B:B0:51:A7:DA:BA:68:7F:E3:A5:61:E3:8F:47:B9:50:46:7C:57:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:ad:76:e5:e8:b0:bf:76:5e:26:13:43:d9:90:1f:60:9d:7b: 87:1c:5d:1a:82:07:f8:ee:4d:aa:a5:65:82:a1:ae:2b:8f:47: a4:a7:0d:68:25:31:eb:76:33:58:41:ba:ca:2d:b8:a2:1e:be: ba:07:4a:54:f1:53:5d:b9:10:79:76:81:b0:ae:ec:6c:8f:85: 13:03:ec:a6:30:fe:11:88:11:79:66:15:cf:70:43:c9:ea:f3: 20:80:de:fa:74:b7:b2:09:e9:ef:8d:a7:7c:0f:7f:49:e4:a7: 28:b1:2d:e4:fc:79:36:b6:53:92:fe:41:9f:75:92:fd:9a:35: ca:92:6b:26:1a:e1:c1:43:76:ec:73:ad:40:e1:9d:37:6f:cd: 73:00:f0:c2:bd:03:0a:c8:2f:74:42:56:b2:3c:54:a3:f2:32: b6:aa:63:a3:46:8f:50:38:43:02:8b:d1:eb:af:8e:cc:49:2c: 8d:c8:6a:ce:4e:1b:29:f4:3c:de:61:f6:2b:61:f4:50:13:5a: 67:f8:e6:fa:f5:2b:ef:37:26:d1:94:b9:d5:61:c6:2c:9b:1d: 53:d3:70:d0:81:16:90:11:04:55:1c:80:e7:3b:d3:c0:34:a5: 8d:4c:98:8e:ed:2b:18:92:ab:1b:0e:57:a9:95:9c:8b:2a:a3: 51:1c:de:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRDQkUxMTAvBgNVBAUTKDNCQjA1MUE3REFCQTY4N0ZFM0E1NjFFMzhGNDdCOTUw NDY3QzU3MUUwHhcNMjUwNTEyMjEyNjUxWhcNMjUwNTE5MjEyNjUxWjAYMRYwFAYD VQQDEw02ODIyNjc5Yi1lY2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6L1O3DqOPE5sRCdgYwx1CecTH1RQdqMuVwpQOdq1Tzfjvk9FnsWWLJ36kz5l y755FBGehy60/NjYX9hPxmhdG2Ii6Dh31io+PyenWwig12Q977aBJml+4fZe/k9Q qbA+3KKozcSCwDlo9U3v8dXq4sKxs5wj1HV25l2k+9M5mT6ioWbB3R4SfAU9aXyi R+enU93iu48Qw+Wxjghz9iqy6suHDop4IYrgkdIIMN9/6npbSVTLX9c5EN5Z6dBc 8FNjSYsOxed1JahsQWnRfYE/wnfd4pRp+VnQNBX1IjdwW2izkN3PoUikQvJPetNR KGD9z94FRTLgVJPmhaZOdPTxxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIOgpiva TYtPTkMzF4jmNMWTvjnVMB8GA1UdIwQYMBaAFDuwUafaumh/46Vh449HuVBGfFce MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NENCRS8wNjdGNDcyMDIz MzAxMUVCQkE4Qzc3NEJDNEY5QUUwMi9PN0JScDlxNmFIX2pwV0hqajBlNVVFWjhW eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL083QlJwOXE2YUhfanBXSGpqMGU1VUVaOFZ4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NENCRS8wNjdGNDcyMDIzMzAxMUVCQkE4Qzc3NEJDNEY5QUUwMi9PN0JScDlxNmFI X2pwV0hqajBlNVVFWjhWeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5rXbl6LC/dl4mE0PZkB9gnXuHHF0aggf47k2qpWWCoa4rj0ekpw1o JTHrdjNYQbrKLbiiHr66B0pU8VNduRB5doGwruxsj4UTA+ymMP4RiBF5ZhXPcEPJ 6vMggN76dLeyCenvjad8D39J5KcosS3k/Hk2tlOS/kGfdZL9mjXKkmsmGuHBQ3bs c61A4Z03b81zAPDCvQMKyC90QlayPFSj8jK2qmOjRo9QOEMCi9Hrr47MSSyNyGrO Thsp9DzeYfYrYfRQE1pn+Ob69SvvNybRlLnVYcYsmx1T03DQgRaQEQRVHIDnO9PA NKWNTJiO7SsYkqsbDleplZyLKqNRHN47 -----END CERTIFICATE-----Generated at Wed May 14 17:31:23 2025 by rpki-client