$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft File: A-8OOQoxXl88RhsKcrIYvuIj4A4.mft (raw, json) Hash identifier: wgxFFV2wXu7/OPcUHOdA9liJd5W3HEnx7Wk2JI/PGtg= Subject key identifier: 4C:4B:62:8D:FC:5B:24:22:6B:5D:B1:E8:FE:40:B7:B5:4A:DB:09:05 Authority key identifier: 03:EF:0E:39:0A:31:5E:5F:3C:46:1B:0A:72:B2:18:BE:E2:23:E0:0E Certificate issuer: /CN=A91A0FC0/serialNumber=03EF0E390A315E5F3C461B0A72B218BEE223E00E Certificate serial: C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A-8OOQoxXl88RhsKcrIYvuIj4A4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft Manifest number: 045F Signing time: Sun 11 May 2025 00:19:03 +0000 Manifest this update: Sun 11 May 2025 00:19:02 +0000 Manifest next update: Sun 18 May 2025 00:19:02 +0000 Files and hashes: 1: A-8OOQoxXl88RhsKcrIYvuIj4A4.crl (hash: 85Lta4otegNH6CCqRIdabtGLFKY/0evE7MwjIfhF5cM=) 2: 9190CF9E2E7811EFB7206224C4F9AE02.roa (hash: h88YKkcazjRoHLRQFSfgpu+Eo1A4vft9VL2aQVc7RoU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.crl rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A-8OOQoxXl88RhsKcrIYvuIj4A4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 00:19:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 195 (0xc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0FC0, serialNumber=03EF0E390A315E5F3C461B0A72B218BEE223E00E Validity Not Before: May 11 00:19:02 2025 GMT Not After : May 18 00:19:02 2025 GMT Subject: CN=681fecf7-bd27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:83:0e:ec:77:7b:e6:dc:06:ac:80:43:72:56: f8:17:8c:f4:82:0a:66:0d:51:3f:a4:fa:d5:91:e4: a1:8f:e1:e9:e4:85:f2:b8:dd:d6:00:24:e1:30:61: 3f:2e:10:c5:95:77:ce:b7:16:8b:c9:84:ae:63:5e: 23:df:a1:65:93:c0:47:94:a9:5c:53:7a:f8:94:e3: 74:eb:69:9e:de:85:bd:13:01:30:b2:92:f7:1f:b2: 25:e8:a4:59:57:27:73:f8:6b:5d:30:cf:d0:80:0a: 1c:c8:40:51:4f:4d:8a:f5:ce:bb:41:47:5c:77:9b: da:f1:d9:4e:94:3b:af:90:84:69:2e:34:41:56:da: cd:a7:29:f5:39:79:32:0a:5b:e5:93:e6:23:8d:3c: 15:1d:9f:b9:29:47:47:c5:00:67:1e:06:b0:d6:34: bb:e2:24:0d:46:0e:dc:6c:24:be:b2:b4:c7:e0:6b: 5c:86:5f:40:1e:8d:e6:ec:c4:2e:a9:9f:ea:11:5e: 58:45:10:1c:1d:2e:4f:3a:06:80:04:b3:de:8f:01: b8:bb:3b:97:8e:b3:a2:d4:62:99:9f:29:0a:ac:c9: 8d:ab:cc:02:bb:3c:5f:07:e1:49:bf:94:1d:ea:ca: 45:6a:fd:15:77:91:1d:53:f9:35:e5:01:f5:a8:70: 2f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:4B:62:8D:FC:5B:24:22:6B:5D:B1:E8:FE:40:B7:B5:4A:DB:09:05 X509v3 Authority Key Identifier: keyid:03:EF:0E:39:0A:31:5E:5F:3C:46:1B:0A:72:B2:18:BE:E2:23:E0:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A-8OOQoxXl88RhsKcrIYvuIj4A4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:e4:12:b3:90:f3:3c:5b:16:9d:7e:d7:48:e2:e2:fb:d8:cb: 67:81:3a:a5:ce:99:0a:fe:2d:8c:22:fb:2c:27:59:76:53:b3: 7c:cd:59:b8:fa:4e:cf:c5:b9:96:b7:94:71:40:4f:ee:79:18: 26:28:06:f5:75:47:ac:b7:5e:a0:7b:2f:ce:61:84:ca:03:52: fc:0d:c7:23:82:1c:b9:98:32:9d:9e:b5:61:8b:4f:04:79:a2: e0:4d:34:00:55:84:89:52:0d:78:d5:ac:2b:3d:b1:d3:61:67: 92:16:1d:84:a8:e9:62:c6:63:13:56:f4:0c:78:f6:d8:4f:ed: f4:0a:4b:53:22:1d:3c:34:e5:06:1a:1f:72:e5:f6:a4:48:38: cd:66:b1:a2:23:ef:e4:68:ec:31:fb:b2:df:d8:8b:1c:fe:cb: 72:4e:01:3c:7c:bc:21:50:6a:e8:f5:0d:e2:08:f0:ea:2f:46: 24:67:f6:fe:84:a2:e3:e6:46:7a:8d:ed:ab:87:aa:b9:41:7c: a9:f6:5c:f6:61:93:19:88:c0:76:a1:6a:40:29:e1:92:09:f3: 63:e7:ac:26:d2:b4:c6:ed:92:22:e5:fa:77:1a:d2:17:ca:c9: 9f:36:ee:38:dd:eb:a4:aa:6f:d1:16:67:b3:22:19:ed:e6:30: 27:e3:f2:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBGQzAxMTAvBgNVBAUTKDAzRUYwRTM5MEEzMTVFNUYzQzQ2MUIwQTcyQjIxOEJF RTIyM0UwMEUwHhcNMjUwNTExMDAxOTAyWhcNMjUwNTE4MDAxOTAyWjAYMRYwFAYD VQQDEw02ODFmZWNmNy1iZDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzYMO7Hd75twGrIBDclb4F4z0ggpmDVE/pPrVkeShj+Hp5IXyuN3WACThMGE/ LhDFlXfOtxaLyYSuY14j36Flk8BHlKlcU3r4lON062me3oW9EwEwspL3H7Il6KRZ Vydz+GtdMM/QgAocyEBRT02K9c67QUdcd5va8dlOlDuvkIRpLjRBVtrNpyn1OXky Clvlk+YjjTwVHZ+5KUdHxQBnHgaw1jS74iQNRg7cbCS+srTH4Gtchl9AHo3m7MQu qZ/qEV5YRRAcHS5POgaABLPejwG4uzuXjrOi1GKZnykKrMmNq8wCuzxfB+FJv5Qd 6spFav0Vd5EdU/k15QH1qHAv5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFExLYo38 WyQia12x6P5At7VK2wkFMB8GA1UdIwQYMBaAFAPvDjkKMV5fPEYbCnKyGL7iI+AO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEZDMC9DREUwOTg3Njk1 NzgxMUVDQTMyQ0NGNTVDNEY5QUUwMi9BLThPT1FveFhsODhSaHNLY3JJWXZ1SWo0 QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EtOE9PUW94WGw4OFJoc0tjcklZdnVJajRBNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEZDMC9DREUwOTg3Njk1NzgxMUVDQTMyQ0NGNTVDNEY5QUUwMi9BLThPT1FveFhs ODhSaHNLY3JJWXZ1SWo0QTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCb5BKzkPM8WxadftdI4uL72MtngTqlzpkK/i2MIvssJ1l2U7N8zVm4 +k7PxbmWt5RxQE/ueRgmKAb1dUest16gey/OYYTKA1L8Dccjghy5mDKdnrVhi08E eaLgTTQAVYSJUg141awrPbHTYWeSFh2EqOlixmMTVvQMePbYT+30CktTIh08NOUG Gh9y5fakSDjNZrGiI+/kaOwx+7Lf2Isc/styTgE8fLwhUGro9Q3iCPDqL0YkZ/b+ hKLj5kZ6je2rh6q5QXyp9lz2YZMZiMB2oWpAKeGSCfNj56wm0rTG7ZIi5fp3GtIX ysmfNu443eukqm/RFmezIhnt5jAn4/Kr -----END CERTIFICATE-----Generated at Sun May 11 22:11:17 2025 by rpki-client