$ rpki-client -vvf rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft File: Op4IQWhX5XRXw49Tbg1usjbf-2E.mft (raw, json) Hash identifier: AtVZugu8Lf1rUHe1PZTSiFqOE4QpPD61s2+ubNHGKvs= Subject key identifier: ED:4A:BB:59:88:C2:B5:54:EC:5C:20:D2:36:62:A9:EA:E9:FB:03:6B Authority key identifier: 3A:9E:08:41:68:57:E5:74:57:C3:8F:53:6E:0D:6E:B2:36:DF:FB:61 Certificate issuer: /CN=A9197CED/serialNumber=3A9E08416857E57457C38F536E0D6EB236DFFB61 Certificate serial: 35F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft Manifest number: 3547 Signing time: Mon 12 May 2025 14:23:54 +0000 Manifest this update: Mon 12 May 2025 14:23:53 +0000 Manifest next update: Mon 19 May 2025 14:23:53 +0000 Files and hashes: 1: Op4IQWhX5XRXw49Tbg1usjbf-2E.crl (hash: NEVX7qstPHy6+vF80ygKmW8tHlhO1v4vs5BjKpiZs5U=) 2: A6991FB82CB511F0B4148C43C4F9AE02.roa (hash: 1mMbMNN7NS37S60UQD0Kn9fWsL1XdNbxI/GHK3j8Ugs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.crl rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 14:23:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13808 (0x35f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197CED, serialNumber=3A9E08416857E57457C38F536E0D6EB236DFFB61 Validity Not Before: May 12 14:23:53 2025 GMT Not After : May 19 14:23:53 2025 GMT Subject: CN=68220479-1804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:44:5a:27:3e:c4:ca:da:02:bd:42:b2:f5:6d: 13:cf:f2:02:79:af:a7:0c:af:37:99:67:6b:91:13: 5e:7d:1d:e1:f6:80:79:9e:a4:d9:42:14:b6:ac:3b: c3:c5:86:3e:43:02:64:b1:c3:a2:83:7f:52:b2:7d: 32:fb:32:f3:95:3a:28:6d:2c:a7:a9:7b:6b:8d:74: 11:c5:2d:54:33:31:0a:4d:50:32:0a:51:6f:56:3d: fe:da:66:1c:ac:46:75:3d:fc:9e:6e:9b:db:c0:2f: b4:4a:94:94:b1:3e:a2:a3:01:d7:84:24:0b:f9:cf: f2:5c:30:11:15:d8:13:06:0a:47:78:72:3f:dd:06: e8:3f:4f:02:f6:c0:88:68:e9:1f:cb:f4:80:9c:99: d9:33:1c:06:8e:e7:5f:79:2e:4b:42:39:a0:1e:7f: ee:c3:42:57:8b:4c:28:0c:28:6d:00:1c:74:15:5c: 9d:1e:56:22:4f:95:59:66:a9:89:a0:88:5d:e0:94: d0:ee:d3:2d:4b:02:75:e5:b1:df:72:61:6e:f4:79: 8e:c5:83:bb:25:22:e7:f9:fd:45:d6:fa:9a:66:aa: f6:c7:4a:3b:a7:03:7a:b6:cb:99:a7:56:35:87:16: c2:fa:63:60:7e:2e:a5:6d:03:8a:14:06:68:bb:d9: 8f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:4A:BB:59:88:C2:B5:54:EC:5C:20:D2:36:62:A9:EA:E9:FB:03:6B X509v3 Authority Key Identifier: keyid:3A:9E:08:41:68:57:E5:74:57:C3:8F:53:6E:0D:6E:B2:36:DF:FB:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:77:9e:63:a2:11:96:1b:78:f9:21:c0:f0:be:9c:ee:bc:bb: f4:02:9b:18:6d:96:97:14:10:0e:69:d3:50:36:06:bc:f1:3e: 05:5b:8c:da:f9:ee:13:7e:f7:da:0c:ae:d2:5e:a3:b2:ee:f5: 88:af:3e:a6:a4:0b:09:e1:d9:d6:46:49:0f:a7:dc:95:29:ad: d2:a3:c9:5d:ba:75:0d:57:37:c1:f2:1f:91:3d:a0:9a:d4:25: 34:10:fe:31:6f:62:c9:36:9c:85:a4:af:17:4d:8e:77:d6:3d: fd:12:b5:a0:a0:dd:77:4e:b7:a4:ed:a0:df:fb:2a:67:f0:a6: 07:00:e8:15:f7:12:87:97:dc:cb:a8:9b:88:3e:e5:f4:72:62: c7:fd:07:35:cd:d2:c8:6f:53:09:ea:91:92:ed:21:d4:0a:95: b1:7c:53:dd:c1:1d:61:d8:20:bb:57:df:0a:87:f0:32:07:f5: f3:b4:72:d4:44:2a:6d:64:02:2d:cf:8b:5e:57:e8:74:34:6a: 7e:b6:09:b3:18:bf:17:a4:55:f0:6e:26:26:1c:b8:e4:e5:2f: 59:a0:03:f1:9b:4f:47:da:e6:17:95:7b:59:ed:f1:c3:51:38: 4e:83:41:ed:3d:0b:9d:2f:f9:5e:f3:b6:a6:bd:a7:6a:08:e6: 78:7a:61:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdDRUQxMTAvBgNVBAUTKDNBOUUwODQxNjg1N0U1NzQ1N0MzOEY1MzZFMEQ2RUIy MzZERkZCNjEwHhcNMjUwNTEyMTQyMzUzWhcNMjUwNTE5MTQyMzUzWjAYMRYwFAYD VQQDEw02ODIyMDQ3OS0xODA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApURaJz7EytoCvUKy9W0Tz/ICea+nDK83mWdrkRNefR3h9oB5nqTZQhS2rDvD xYY+QwJkscOig39Ssn0y+zLzlToobSynqXtrjXQRxS1UMzEKTVAyClFvVj3+2mYc rEZ1PfyebpvbwC+0SpSUsT6iowHXhCQL+c/yXDARFdgTBgpHeHI/3QboP08C9sCI aOkfy/SAnJnZMxwGjudfeS5LQjmgHn/uw0JXi0woDChtABx0FVydHlYiT5VZZqmJ oIhd4JTQ7tMtSwJ15bHfcmFu9HmOxYO7JSLn+f1F1vqaZqr2x0o7pwN6tsuZp1Y1 hxbC+mNgfi6lbQOKFAZou9mPuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO1Ku1mI wrVU7Fwg0jZiqerp+wNrMB8GA1UdIwQYMBaAFDqeCEFoV+V0V8OPU24NbrI23/th MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0NFRC84M0Y1NkRBQzFE ODQxMUUyOTEwNjg5REEwOEIwMkNEMi9PcDRJUVdoWDVYUlh3NDlUYmcxdXNqYmYt MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09wNElRV2hYNVhSWHc0OVRiZzF1c2piZi0yRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0NFRC84M0Y1NkRBQzFEODQxMUUyOTEwNjg5REEwOEIwMkNEMi9PcDRJUVdoWDVY Ulh3NDlUYmcxdXNqYmYtMkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/d55johGWG3j5IcDwvpzuvLv0ApsYbZaXFBAOadNQNga88T4FW4za +e4TfvfaDK7SXqOy7vWIrz6mpAsJ4dnWRkkPp9yVKa3So8ldunUNVzfB8h+RPaCa 1CU0EP4xb2LJNpyFpK8XTY531j39ErWgoN13Trek7aDf+ypn8KYHAOgV9xKHl9zL qJuIPuX0cmLH/Qc1zdLIb1MJ6pGS7SHUCpWxfFPdwR1h2CC7V98Kh/AyB/XztHLU RCptZAItz4teV+h0NGp+tgmzGL8XpFXwbiYmHLjk5S9ZoAPxm09H2uYXlXtZ7fHD UThOg0HtPQudL/le87amvadqCOZ4emEO -----END CERTIFICATE-----Generated at Tue May 13 05:08:43 2025 by rpki-client