$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.mft File: vO4SgFOJtXjDX9i0JVpggdJoP3w.mft (raw, json) Hash identifier: ghCnja7x1DmSClzHwX2cRNC1NhM77YOI+w+HJCgft2k= Subject key identifier: 73:65:FB:C9:6D:9B:67:05:73:2D:71:AB:E8:37:9A:53:56:29:92:DB Authority key identifier: BC:EE:12:80:53:89:B5:78:C3:5F:D8:B4:25:5A:60:81:D2:68:3F:7C Certificate issuer: /CN=A91B4B33/serialNumber=BCEE12805389B578C35FD8B4255A6081D2683F7C Certificate serial: B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vO4SgFOJtXjDX9i0JVpggdJoP3w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.mft Manifest number: B2 Signing time: Thu 15 May 2025 05:18:43 +0000 Manifest this update: Thu 15 May 2025 05:18:42 +0000 Manifest next update: Thu 22 May 2025 05:18:42 +0000 Files and hashes: 1: vO4SgFOJtXjDX9i0JVpggdJoP3w.crl (hash: 7qm87b+VmvtjOVEnP9ZdhfFd50RnJjq3FcpbEhV9rS4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.crl rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vO4SgFOJtXjDX9i0JVpggdJoP3w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 05:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4B33, serialNumber=BCEE12805389B578C35FD8B4255A6081D2683F7C Validity Not Before: May 15 05:18:42 2025 GMT Not After : May 22 05:18:42 2025 GMT Subject: CN=68257932-d601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e9:6e:7a:cf:3d:4d:87:92:ec:3a:93:2f:ac: 28:b8:01:41:a8:7c:20:82:1e:3f:f6:99:64:6d:7f: 7b:1a:c2:96:bb:3d:4b:dc:d1:26:5a:4c:01:cf:2b: 65:d1:97:9b:90:1d:f3:25:45:1d:9a:72:c3:07:4c: a0:2e:6e:f3:55:d2:03:56:79:e1:0f:df:94:b8:8f: 7b:e8:ed:52:4c:f6:ee:25:86:7a:b5:ac:96:c1:53: 87:6a:90:d4:ff:7c:68:4a:44:27:c6:c2:be:69:50: 62:59:83:c0:23:6d:80:2c:92:1a:46:b3:f9:e0:f4: ae:89:94:f2:72:dd:9d:b5:6f:7b:b3:53:1f:29:92: 69:db:c7:8c:45:dd:ce:4f:77:ae:3f:08:e2:49:c9: 74:1d:67:0c:13:4c:d0:5e:6a:49:23:f0:b8:bf:c4: bb:4e:c1:d9:c9:2a:0a:81:fb:83:88:12:5e:76:d3: 93:50:b3:1a:88:14:58:1b:41:a7:b7:eb:fe:53:e3: 1f:c7:17:a1:66:4b:0e:0d:da:93:80:dc:6a:05:f4: ba:df:94:ea:e9:33:1c:5b:7d:f4:d0:e9:62:f3:a4: ce:19:87:51:82:a5:7f:69:1f:63:84:56:76:56:f1: d4:ee:e4:5a:a9:96:e6:3b:63:5b:db:d6:d8:80:7c: 3f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:65:FB:C9:6D:9B:67:05:73:2D:71:AB:E8:37:9A:53:56:29:92:DB X509v3 Authority Key Identifier: keyid:BC:EE:12:80:53:89:B5:78:C3:5F:D8:B4:25:5A:60:81:D2:68:3F:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vO4SgFOJtXjDX9i0JVpggdJoP3w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e6:e9:7b:0b:a5:75:66:65:f3:e3:3e:42:e4:3d:47:cc:b5:05: 5b:be:32:94:dd:4a:e1:f3:e1:23:ab:3d:b6:c8:5c:02:90:d4: e1:45:be:77:7b:6f:4c:34:de:16:65:62:5d:d1:22:f7:57:6c: e8:ff:9a:08:17:34:6a:7c:a2:ea:f4:a9:d3:d3:5f:34:37:c3: 5c:75:05:10:ff:11:ac:d2:e0:a0:69:56:76:e0:4f:ae:69:29: 1d:f3:59:fc:bf:e9:fa:7c:3f:df:98:7b:ef:c7:54:e7:17:97: 0c:21:cb:50:b0:37:b8:f1:41:94:14:e7:71:e1:f3:f7:b1:63: ea:e0:e1:89:87:ac:a5:71:5d:0d:5e:a5:bd:0c:16:0d:e1:b5: 35:9b:34:80:b9:2c:a9:45:9b:ca:41:52:8d:ed:ff:46:98:92: 2f:5b:77:dd:d0:34:47:39:b2:7d:98:ee:3e:0c:e5:93:bc:46: 6b:8f:c0:72:fd:9e:72:ba:b9:22:48:40:92:ea:66:c0:ea:b3: 31:a0:4b:51:e4:0d:34:7d:11:82:e7:82:7a:2c:5f:bf:d1:ae: 06:ca:e5:5f:26:85:19:35:fb:89:2f:95:61:1c:fd:04:2c:ff: 0d:a6:8d:99:7c:07:7d:3c:38:17:2b:95:ef:5b:6f:35:9c:e5: eb:c4:d1:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRCMzMxMTAvBgNVBAUTKEJDRUUxMjgwNTM4OUI1NzhDMzVGRDhCNDI1NUE2MDgx RDI2ODNGN0MwHhcNMjUwNTE1MDUxODQyWhcNMjUwNTIyMDUxODQyWjAYMRYwFAYD VQQDEw02ODI1NzkzMi1kNjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt+lues89TYeS7DqTL6wouAFBqHwggh4/9plkbX97GsKWuz1L3NEmWkwBzytl 0ZebkB3zJUUdmnLDB0ygLm7zVdIDVnnhD9+UuI976O1STPbuJYZ6tayWwVOHapDU /3xoSkQnxsK+aVBiWYPAI22ALJIaRrP54PSuiZTyct2dtW97s1MfKZJp28eMRd3O T3euPwjiScl0HWcME0zQXmpJI/C4v8S7TsHZySoKgfuDiBJedtOTULMaiBRYG0Gn t+v+U+MfxxehZksODdqTgNxqBfS635Tq6TMcW3300Oli86TOGYdRgqV/aR9jhFZ2 VvHU7uRaqZbmO2Nb29bYgHw/DQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHNl+8lt m2cFcy1xq+g3mlNWKZLbMB8GA1UdIwQYMBaAFLzuEoBTibV4w1/YtCVaYIHSaD98 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEIzMy8yNDRGODQ5QTIy MUUxMUVGOTM0NEEzMDlDNEY5QUUwMi92TzRTZ0ZPSnRYakRYOWkwSlZwZ2dkSm9Q M3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZPNFNnRk9KdFhqRFg5aTBKVnBnZ2RKb1Azdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEIzMy8yNDRGODQ5QTIyMUUxMUVGOTM0NEEzMDlDNEY5QUUwMi92TzRTZ0ZPSnRY akRYOWkwSlZwZ2dkSm9QM3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDm6XsLpXVmZfPjPkLkPUfMtQVbvjKU3Urh8+Ejqz22yFwCkNThRb53 e29MNN4WZWJd0SL3V2zo/5oIFzRqfKLq9KnT0180N8NcdQUQ/xGs0uCgaVZ24E+u aSkd81n8v+n6fD/fmHvvx1TnF5cMIctQsDe48UGUFOdx4fP3sWPq4OGJh6ylcV0N XqW9DBYN4bU1mzSAuSypRZvKQVKN7f9GmJIvW3fd0DRHObJ9mO4+DOWTvEZrj8By /Z5yurkiSECS6mbA6rMxoEtR5A00fRGC54J6LF+/0a4GyuVfJoUZNfuJL5VhHP0E LP8Npo2ZfAd9PDgXK5XvW281nOXrxNGd -----END CERTIFICATE-----Generated at Fri May 16 23:38:10 2025 by rpki-client