$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.mft File: O6SMSvsA9zNCJMBRU6rG8mhoQ7c.mft (raw, json) Hash identifier: n4NZm4t91/Ilzc56tgkX0x4rHQyy/sHBzsgOHQgbE9w= Subject key identifier: A5:8C:09:CC:B5:35:03:94:02:AF:3C:B3:66:45:EB:80:3A:E5:A3:AD Authority key identifier: 3B:A4:8C:4A:FB:00:F7:33:42:24:C0:51:53:AA:C6:F2:68:68:43:B7 Certificate issuer: /CN=A91AB92D/serialNumber=3BA48C4AFB00F7334224C05153AAC6F2686843B7 Certificate serial: E8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.mft Manifest number: E8 Signing time: Sun 11 May 2025 02:21:23 +0000 Manifest this update: Sun 11 May 2025 02:21:23 +0000 Manifest next update: Sun 18 May 2025 02:21:23 +0000 Files and hashes: 1: O6SMSvsA9zNCJMBRU6rG8mhoQ7c.crl (hash: BglZO+D+KYWXj2/i3bPKiIYUYJ8BCyz3puWJaKLECrg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.crl rsync://rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:21:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 232 (0xe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB92D, serialNumber=3BA48C4AFB00F7334224C05153AAC6F2686843B7 Validity Not Before: May 11 02:21:23 2025 GMT Not After : May 18 02:21:23 2025 GMT Subject: CN=682009a3-0cbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:35:cb:1e:58:9e:47:5c:06:3f:8f:d0:1e:3f: 63:d3:6b:7c:68:8d:1b:06:8c:32:28:a8:9b:1a:82: 70:01:af:44:b9:e7:86:7d:e7:d7:ab:26:8e:a1:ba: 67:2d:40:4c:12:ba:13:10:33:2f:4e:bd:21:82:cf: 5a:aa:ea:35:17:d7:c9:ec:2e:fb:5e:9c:55:dc:df: 46:36:d2:1f:4a:94:fe:d7:36:39:7a:e6:4e:aa:70: 13:88:4c:16:b0:d9:8a:35:61:ce:36:5a:5c:f0:f5: 86:94:f0:c3:7d:72:9c:5a:a0:7f:76:de:4f:87:38: 35:75:0c:95:5b:f1:af:22:5d:6f:b3:b2:bf:ba:b1: ae:4e:25:f5:ea:cc:7d:9f:11:36:fc:f0:40:fc:d5: 0e:33:33:db:30:1a:14:9b:cc:4a:35:cb:0a:32:7a: 3c:96:b5:f2:fb:90:d4:af:93:96:5f:87:fa:2c:66: 20:cb:32:1d:af:0b:73:a6:d7:2a:6c:87:6e:f9:a1: 0a:da:8b:e4:07:da:fe:a2:da:a8:f0:84:5f:7d:7e: 67:8c:58:31:b4:53:fa:79:75:b0:27:a5:04:03:b7: b2:0f:d0:64:7a:fb:f7:8a:45:2f:04:3c:34:38:16: 1c:e4:fb:d6:a7:22:93:7a:7e:8c:06:c6:b2:cd:fe: ee:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:8C:09:CC:B5:35:03:94:02:AF:3C:B3:66:45:EB:80:3A:E5:A3:AD X509v3 Authority Key Identifier: keyid:3B:A4:8C:4A:FB:00:F7:33:42:24:C0:51:53:AA:C6:F2:68:68:43:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:9c:d6:83:a9:d4:4e:b5:5e:d8:f8:86:9c:fd:fb:90:20:45: 83:97:62:8b:4f:af:36:ff:a5:81:c1:29:4a:c2:a8:8d:7d:33: 2c:9e:47:2b:e9:65:3d:e1:5e:45:43:84:4a:10:bd:80:9a:b5: 22:2e:14:fd:9e:24:85:a9:86:7b:6b:23:73:bb:72:4c:47:56: 2c:ad:5f:8f:a0:fc:9d:71:ce:40:fd:6f:f7:f3:b2:5f:c2:6e: 05:4d:2d:b2:e8:33:9a:b4:ec:2d:4b:ab:f9:03:4f:48:cf:17: 95:d9:52:d5:75:0e:3e:2f:3c:59:6f:02:67:bf:d3:b4:72:f0: e3:f7:6f:eb:97:80:4d:5b:e6:42:cf:27:11:5b:5e:5a:3d:54: d2:59:05:c5:bb:07:83:60:20:cd:23:c4:16:95:63:c3:6b:c6: aa:e2:83:9d:28:9a:4f:53:20:fd:94:e8:20:4a:c1:c1:ab:a7: fd:36:f6:e1:2b:2e:4f:cb:b8:00:c3:dc:e7:ad:a3:e6:7f:63: 9d:de:3b:ab:65:3f:5f:e2:ac:3b:fe:26:aa:7e:29:ca:db:14: a1:de:94:89:35:51:7e:57:79:00:c0:22:cd:91:1c:45:7d:b7: d5:2d:36:c0:3b:f9:42:fd:c0:2c:6f:1d:d7:b1:19:1a:7c:12: 4a:8d:b4:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI5MkQxMTAvBgNVBAUTKDNCQTQ4QzRBRkIwMEY3MzM0MjI0QzA1MTUzQUFDNkYy Njg2ODQzQjcwHhcNMjUwNTExMDIyMTIzWhcNMjUwNTE4MDIyMTIzWjAYMRYwFAYD VQQDEw02ODIwMDlhMy0wY2JkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4TXLHlieR1wGP4/QHj9j02t8aI0bBowyKKibGoJwAa9EueeGfefXqyaOobpn LUBMEroTEDMvTr0hgs9aquo1F9fJ7C77XpxV3N9GNtIfSpT+1zY5euZOqnATiEwW sNmKNWHONlpc8PWGlPDDfXKcWqB/dt5Phzg1dQyVW/GvIl1vs7K/urGuTiX16sx9 nxE2/PBA/NUOMzPbMBoUm8xKNcsKMno8lrXy+5DUr5OWX4f6LGYgyzIdrwtzptcq bIdu+aEK2ovkB9r+otqo8IRffX5njFgxtFP6eXWwJ6UEA7eyD9Bkevv3ikUvBDw0 OBYc5PvWpyKTen6MBsayzf7uTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKWMCcy1 NQOUAq88s2ZF64A65aOtMB8GA1UdIwQYMBaAFDukjEr7APczQiTAUVOqxvJoaEO3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjkyRC84MEI4MTcxQUNF RDExMUVFOEJGNjRCNzNDNEY5QUUwMi9PNlNNU3ZzQTl6TkNKTUJSVTZyRzhtaG9R N2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL082U01TdnNBOXpOQ0pNQlJVNnJHOG1ob1E3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjkyRC84MEI4MTcxQUNFRDExMUVFOEJGNjRCNzNDNEY5QUUwMi9PNlNNU3ZzQTl6 TkNKTUJSVTZyRzhtaG9RN2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDnNaDqdROtV7Y+Iac/fuQIEWDl2KLT682/6WBwSlKwqiNfTMsnkcr 6WU94V5FQ4RKEL2AmrUiLhT9niSFqYZ7ayNzu3JMR1YsrV+PoPydcc5A/W/387Jf wm4FTS2y6DOatOwtS6v5A09IzxeV2VLVdQ4+LzxZbwJnv9O0cvDj92/rl4BNW+ZC zycRW15aPVTSWQXFuweDYCDNI8QWlWPDa8aq4oOdKJpPUyD9lOggSsHBq6f9Nvbh Ky5Py7gAw9znraPmf2Od3jurZT9f4qw7/iaqfinK2xSh3pSJNVF+V3kAwCLNkRxF fbfVLTbAO/lC/cAsbx3XsRkafBJKjbTI -----END CERTIFICATE-----Generated at Sun May 11 15:25:30 2025 by rpki-client