$ rpki-client -vvf rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.mft File: o1EXGLQporBD5kW_sWUO5nd-QXI.mft (raw, json) Hash identifier: LlBOYyq3YuJuiVCYd2RtEe5fCt1UdAl/jUs66DDAjs4= Subject key identifier: B0:75:F3:19:52:46:29:2E:73:82:D6:0A:C6:69:55:BF:B6:5B:47:92 Authority key identifier: A3:51:17:18:B4:29:A2:B0:43:E6:45:BF:B1:65:0E:E6:77:7E:41:72 Certificate issuer: /CN=A919ACF6/serialNumber=A3511718B429A2B043E645BFB1650EE6777E4172 Certificate serial: 0807 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1EXGLQporBD5kW_sWUO5nd-QXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.mft Manifest number: 0800 Signing time: Fri 16 May 2025 21:12:22 +0000 Manifest this update: Fri 16 May 2025 21:12:21 +0000 Manifest next update: Fri 23 May 2025 21:12:21 +0000 Files and hashes: 1: o1EXGLQporBD5kW_sWUO5nd-QXI.crl (hash: f2uwAdBWZr3+tydCC233JiMtwkVTwSknXmI3k1c+Vqs=) 2: F48207E6DB8711EAA446B360C4F9AE02.roa (hash: wGBFb60F2aF0B9pOX18btxm9jl1WJHVfOK5kaTJxavY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.crl rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1EXGLQporBD5kW_sWUO5nd-QXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 21:12:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2055 (0x807) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919ACF6, serialNumber=A3511718B429A2B043E645BFB1650EE6777E4172 Validity Not Before: May 16 21:12:21 2025 GMT Not After : May 23 21:12:21 2025 GMT Subject: CN=6827aa35-cf35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e1:51:7c:33:bd:2d:12:7e:7a:13:3e:84:1c: a7:cf:eb:2b:6c:9e:57:3b:7d:d5:b2:46:22:0f:5f: 5e:0f:46:90:e9:cb:d9:a5:cc:15:68:c9:be:38:91: 57:2c:d1:30:f6:62:be:1f:1a:f9:3f:ce:ab:4d:39: 44:e5:2e:f8:0b:a1:e2:62:21:d2:ca:6e:76:fa:1c: 61:2f:c4:c7:f9:ea:3f:19:66:05:7b:11:0e:25:ae: 31:89:e0:60:ab:df:1c:1f:2f:ff:eb:73:82:c5:0a: e1:54:81:39:85:77:c5:65:70:bc:93:0c:4f:bd:0f: e4:51:98:a2:ca:31:46:e9:ef:b9:f2:89:ad:4a:21: c1:52:d0:87:11:8b:1e:55:30:53:71:09:96:7c:2e: b1:09:20:9d:c9:f3:a4:bf:2f:50:a5:82:2b:d4:dd: bb:c5:59:97:be:bc:08:a0:91:cc:4e:88:a4:d2:00: 9d:1f:97:b7:10:3c:13:f1:77:ee:49:53:54:de:aa: 95:4e:e4:f1:11:8f:a7:dc:ab:6b:f6:00:d9:7c:79: cf:4e:73:d9:9b:f2:6b:49:05:fd:75:fa:b3:3b:4c: 2c:d6:e9:c1:c6:2c:5e:40:3a:6f:68:ed:2c:f7:b4: 52:98:51:53:66:4f:9d:f8:48:84:fb:81:fc:b1:e3: 31:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:75:F3:19:52:46:29:2E:73:82:D6:0A:C6:69:55:BF:B6:5B:47:92 X509v3 Authority Key Identifier: keyid:A3:51:17:18:B4:29:A2:B0:43:E6:45:BF:B1:65:0E:E6:77:7E:41:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1EXGLQporBD5kW_sWUO5nd-QXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:cf:59:c4:ba:d1:b4:f5:ec:bf:a6:43:3c:b3:da:0b:72:8b: 0b:be:83:02:4d:43:64:11:5c:89:4c:14:32:6b:25:1b:80:37: 4a:ec:a2:42:48:6d:31:46:6d:05:00:4d:8d:73:fa:86:9b:fe: 42:07:2e:63:82:ed:b2:cc:e0:f0:db:44:2b:d3:8a:5a:96:f6: e0:51:a6:fe:6d:6d:67:1e:e1:e9:2b:d6:a4:77:ff:c6:3c:ef: e4:81:13:4b:2a:aa:25:cb:70:d7:4a:06:34:67:06:5a:f5:c6: ba:f3:a7:34:a7:d2:58:1e:38:45:10:3d:bb:00:64:1f:fe:ff: bf:12:aa:d0:ee:18:33:da:53:ac:82:d0:54:f1:be:67:9c:2a: f5:c4:ef:9c:20:73:d8:6e:40:41:1b:37:c3:e7:4f:3f:63:84: e7:68:35:fc:cb:7d:27:b3:db:a0:38:78:54:8d:42:f2:eb:c4: b8:c7:9f:49:ad:0d:e4:95:11:74:b0:43:88:7d:67:c9:95:76: 97:fe:14:cd:a1:2a:a5:95:2a:ed:a0:17:31:98:3a:63:c7:8f: 8f:97:04:09:e0:c5:6b:7d:2b:b1:f5:6c:38:2f:bb:b5:6f:5f: 13:4d:42:6a:7c:26:56:6f:b5:0e:e1:e6:d6:ba:b7:bf:e7:a6: 52:4d:b6:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUFDRjYxMTAvBgNVBAUTKEEzNTExNzE4QjQyOUEyQjA0M0U2NDVCRkIxNjUwRUU2 Nzc3RTQxNzIwHhcNMjUwNTE2MjExMjIxWhcNMjUwNTIzMjExMjIxWjAYMRYwFAYD VQQDEw02ODI3YWEzNS1jZjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyuFRfDO9LRJ+ehM+hBynz+srbJ5XO33VskYiD19eD0aQ6cvZpcwVaMm+OJFX LNEw9mK+Hxr5P86rTTlE5S74C6HiYiHSym52+hxhL8TH+eo/GWYFexEOJa4xieBg q98cHy//63OCxQrhVIE5hXfFZXC8kwxPvQ/kUZiiyjFG6e+58omtSiHBUtCHEYse VTBTcQmWfC6xCSCdyfOkvy9QpYIr1N27xVmXvrwIoJHMToik0gCdH5e3EDwT8Xfu SVNU3qqVTuTxEY+n3Ktr9gDZfHnPTnPZm/JrSQX9dfqzO0ws1unBxixeQDpvaO0s 97RSmFFTZk+d+EiE+4H8seMxjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLB18xlS Rikuc4LWCsZpVb+2W0eSMB8GA1UdIwQYMBaAFKNRFxi0KaKwQ+ZFv7FlDuZ3fkFy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QUNGNi8zNDk3ODNFRURC ODYxMUVBODU1OTQyNUVDNEY5QUUwMi9vMUVYR0xRcG9yQkQ1a1dfc1dVTzVuZC1R WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28xRVhHTFFwb3JCRDVrV19zV1VPNW5kLVFYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QUNGNi8zNDk3ODNFRURCODYxMUVBODU1OTQyNUVDNEY5QUUwMi9vMUVYR0xRcG9y QkQ1a1dfc1dVTzVuZC1RWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAz1nEutG09ey/pkM8s9oLcosLvoMCTUNkEVyJTBQyayUbgDdK7KJC SG0xRm0FAE2Nc/qGm/5CBy5jgu2yzODw20Qr04palvbgUab+bW1nHuHpK9akd//G PO/kgRNLKqoly3DXSgY0ZwZa9ca686c0p9JYHjhFED27AGQf/v+/EqrQ7hgz2lOs gtBU8b5nnCr1xO+cIHPYbkBBGzfD508/Y4TnaDX8y30ns9ugOHhUjULy68S4x59J rQ3klRF0sEOIfWfJlXaX/hTNoSqllSrtoBcxmDpjx4+PlwQJ4MVrfSux9Ww4L7u1 b18TTUJqfCZWb7UO4ebWure/56ZSTbZK -----END CERTIFICATE-----Generated at Sat May 17 07:25:59 2025 by rpki-client