$ rpki-client -vvf rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft File: o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft (raw, json) Hash identifier: quWx2wgw456nlgkGIFKZefG79xEJRByHY97mZCIwaL8= Subject key identifier: 00:C5:CC:B0:74:F6:7F:87:A6:56:A1:19:5C:9F:40:BC:DA:EA:B4:B2 Authority key identifier: A3:EB:7C:43:50:63:BC:54:D3:57:3D:81:DB:DC:18:73:98:76:63:E0 Certificate issuer: /CN=A91C77BD/serialNumber=A3EB7C435063BC54D3573D81DBDC1873987663E0 Certificate serial: 216B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft Manifest number: 2162 Signing time: Fri 16 May 2025 16:08:12 +0000 Manifest this update: Fri 16 May 2025 16:08:11 +0000 Manifest next update: Fri 23 May 2025 16:08:11 +0000 Files and hashes: 1: o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl (hash: Frz9hVL9PCxCv32YCurhDvsrdxIqAZYY4eEIjEYym/M=) 2: A257A95EA9DC11E9AA03780DC4F9AE02.roa (hash: Kqxe3AlQssfHaUaGQ94xh+g433EOzW+NAhxS/kOyvHs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 16:08:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8555 (0x216b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C77BD, serialNumber=A3EB7C435063BC54D3573D81DBDC1873987663E0 Validity Not Before: May 16 16:08:11 2025 GMT Not After : May 23 16:08:11 2025 GMT Subject: CN=682762ec-7d22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:dd:8c:13:b7:86:1f:5f:09:08:69:1c:9a:77: 1f:0d:6a:f4:33:c9:3d:a2:4c:2a:9d:94:aa:d5:fe: a0:af:46:25:16:47:f7:52:69:d8:b3:4c:8b:bf:e2: aa:8e:27:9f:b2:40:50:bb:22:ef:9d:10:f1:f2:a8: c2:7a:71:a5:1b:50:64:98:7c:c1:83:02:b0:e5:e8: 99:3c:c4:fa:a8:dd:5c:e7:e5:3d:a4:6b:25:51:06: 66:87:f4:79:4a:0e:e8:ed:d3:13:5b:c1:e5:0f:97: 51:ec:99:62:81:11:b2:69:88:c4:06:2c:04:9f:b7: 8c:df:c9:1c:32:38:da:ba:db:41:4a:01:a3:54:67: 9b:4c:d0:23:a5:76:4c:48:bc:77:ff:4d:13:1c:b1: d3:44:11:9f:2c:d2:50:4f:fd:1e:20:af:00:da:ae: fb:f0:22:5c:5a:da:c6:95:5f:6c:49:f4:fe:4c:b9: 1e:b3:87:48:59:fb:52:57:3b:33:16:85:15:f3:7c: f5:ce:ad:58:aa:f3:fb:14:14:b0:93:11:fa:57:f0: df:3b:2f:07:74:65:77:89:75:33:f0:49:63:1b:c6: 2a:62:75:6a:ca:5c:cb:2a:0b:e6:7e:07:96:1a:56: 77:e5:bb:92:22:0c:ca:93:84:93:71:24:b2:48:a7: 8f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C5:CC:B0:74:F6:7F:87:A6:56:A1:19:5C:9F:40:BC:DA:EA:B4:B2 X509v3 Authority Key Identifier: keyid:A3:EB:7C:43:50:63:BC:54:D3:57:3D:81:DB:DC:18:73:98:76:63:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ea:43:1b:2a:b0:59:7e:0f:06:9f:62:87:5d:43:d9:96:f3:8e: d0:1c:e7:7f:7a:b5:c8:e9:3d:e6:09:00:d5:3e:dc:48:8b:44: 8b:0e:a6:ba:b1:17:69:db:e8:66:a3:b7:24:7a:74:72:25:fb: 99:c4:58:6b:de:4a:78:7a:07:47:83:a8:1a:e6:50:e8:2f:58: eb:47:f4:8c:ca:54:7b:41:45:b5:ca:05:ed:e9:cb:b4:4c:7e: 29:44:95:73:82:c7:de:c0:8b:f2:62:87:76:21:9a:a5:5c:71: 6b:32:1f:5f:ae:ab:07:e9:25:33:fb:62:06:be:81:30:02:fa: af:ff:5e:1b:b6:25:ea:b5:11:da:1c:4b:7a:ec:2b:80:0d:82: 14:8f:2b:a2:40:da:2e:99:a3:b0:a3:b3:a7:d3:6e:63:95:d2: 15:d2:45:c7:0b:84:b0:6b:34:65:30:cd:10:2c:c8:8f:02:3c: df:00:3c:f9:86:ff:fc:80:82:97:e3:0e:aa:d2:dd:cc:27:c7: d0:71:2c:94:50:a6:11:e8:24:dc:8d:22:ce:01:9b:e4:0a:05: b3:cb:c9:b0:68:cd:21:20:5e:6d:9f:2a:31:08:1c:81:df:b6: 56:19:c3:a0:47:90:9d:e5:43:46:80:cf:5e:1d:c0:82:cc:07: be:e0:ac:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc3QkQxMTAvBgNVBAUTKEEzRUI3QzQzNTA2M0JDNTREMzU3M0Q4MURCREMxODcz OTg3NjYzRTAwHhcNMjUwNTE2MTYwODExWhcNMjUwNTIzMTYwODExWjAYMRYwFAYD VQQDEw02ODI3NjJlYy03ZDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4t2ME7eGH18JCGkcmncfDWr0M8k9okwqnZSq1f6gr0YlFkf3UmnYs0yLv+Kq jiefskBQuyLvnRDx8qjCenGlG1BkmHzBgwKw5eiZPMT6qN1c5+U9pGslUQZmh/R5 Sg7o7dMTW8HlD5dR7JligRGyaYjEBiwEn7eM38kcMjjauttBSgGjVGebTNAjpXZM SLx3/00THLHTRBGfLNJQT/0eIK8A2q778CJcWtrGlV9sSfT+TLkes4dIWftSVzsz FoUV83z1zq1YqvP7FBSwkxH6V/DfOy8HdGV3iXUz8EljG8YqYnVqylzLKgvmfgeW GlZ35buSIgzKk4STcSSySKePHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFADFzLB0 9n+HplahGVyfQLza6rSyMB8GA1UdIwQYMBaAFKPrfENQY7xU01c9gdvcGHOYdmPg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzdCRC8zODkzNzE5OERG NDAxMUU1ODIzMjczNEFDNEY5QUUwMi9vLXQ4UTFCanZGVFRWejJCMjl3WWM1aDJZ LUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28tdDhRMUJqdkZUVFZ6MkIyOXdZYzVoMlktQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzdCRC8zODkzNzE5OERGNDAxMUU1ODIzMjczNEFDNEY5QUUwMi9vLXQ4UTFCanZG VFRWejJCMjl3WWM1aDJZLUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDqQxsqsFl+DwafYoddQ9mW847QHOd/erXI6T3mCQDVPtxIi0SLDqa6 sRdp2+hmo7ckenRyJfuZxFhr3kp4egdHg6ga5lDoL1jrR/SMylR7QUW1ygXt6cu0 TH4pRJVzgsfewIvyYod2IZqlXHFrMh9frqsH6SUz+2IGvoEwAvqv/14btiXqtRHa HEt67CuADYIUjyuiQNoumaOwo7On025jldIV0kXHC4SwazRlMM0QLMiPAjzfADz5 hv/8gIKX4w6q0t3MJ8fQcSyUUKYR6CTcjSLOAZvkCgWzy8mwaM0hIF5tnyoxCByB 37ZWGcOgR5Cd5UNGgM9eHcCCzAe+4Kyd -----END CERTIFICATE-----Generated at Fri May 16 22:30:14 2025 by rpki-client