$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft File: 40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft (raw, json) Hash identifier: 9OrCuW3CcYIuyKFyjOUTBiECL7lvHUpDf7Ku/uD6pWs= Subject key identifier: 2B:5A:AE:37:17:13:E4:FA:3E:AF:96:FA:A2:F4:95:E5:30:FC:15:BB Authority key identifier: E3:43:84:05:47:64:02:A3:AA:8F:98:7C:3A:FA:06:90:D9:6E:D4:74 Certificate issuer: /CN=A91E9406/serialNumber=E3438405476402A3AA8F987C3AFA0690D96ED474 Certificate serial: 025B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OEBUdkAqOqj5h8OvoGkNlu1HQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft Manifest number: 0256 Signing time: Tue 13 May 2025 01:37:13 +0000 Manifest this update: Tue 13 May 2025 01:37:13 +0000 Manifest next update: Tue 20 May 2025 01:37:13 +0000 Files and hashes: 1: 40OEBUdkAqOqj5h8OvoGkNlu1HQ.crl (hash: 4II4nrtLf1ay3vWo8hx7yN4K4qokEqnoiTKSB7iIH5c=) 2: F76D8A5C170D11EDA7EC2F87C4F9AE02.roa (hash: bEQWXluQGkjHtzXhhM0LUOXQhLNvUEvMyEXkpICCpAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.crl rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OEBUdkAqOqj5h8OvoGkNlu1HQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:37:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 603 (0x25b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9406, serialNumber=E3438405476402A3AA8F987C3AFA0690D96ED474 Validity Not Before: May 13 01:37:13 2025 GMT Not After : May 20 01:37:13 2025 GMT Subject: CN=6822a249-d2e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9f:e2:33:ff:8c:ab:18:66:dc:e0:1b:2a:80: fe:c2:f4:e3:39:05:e5:67:20:05:74:d8:61:08:50: a7:0e:44:68:19:8f:16:5d:2b:1e:a4:b5:64:f7:f2: 4a:84:70:14:d5:89:93:21:b0:49:23:9e:62:f4:a9: 4a:97:14:cb:b7:a1:55:46:27:7e:3a:b4:1b:c3:a8: 52:2d:e7:cf:e4:22:10:68:ac:9b:93:97:6a:d5:bd: ce:a2:30:44:8b:bb:1c:00:1f:ae:e0:9f:12:de:63: dd:eb:7b:16:4c:7c:76:7a:e7:42:c7:fb:71:1b:80: 2f:77:4a:55:93:65:33:74:3d:13:54:77:05:b8:d9: 1e:ae:ae:d0:04:ed:af:c4:cb:fe:b8:4b:1d:07:05: 26:4a:20:45:c0:c3:87:61:7d:d9:a8:a9:8b:27:46: f7:b0:89:b0:16:54:21:a3:cf:d3:c9:67:01:1b:6b: d3:4f:b0:94:92:92:b1:ba:41:db:8c:a6:08:b0:c9: 9c:fe:b2:57:09:c8:d7:f1:db:3a:a9:a5:29:0e:84: 48:b5:d1:a2:c9:6a:32:44:e2:fd:7d:ee:d3:c2:59: 3a:4c:13:21:eb:09:9b:5c:c4:f4:7c:2a:e5:8d:cb: 73:af:2a:6b:ca:79:17:17:0c:3b:b5:0b:de:77:94: c0:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:5A:AE:37:17:13:E4:FA:3E:AF:96:FA:A2:F4:95:E5:30:FC:15:BB X509v3 Authority Key Identifier: keyid:E3:43:84:05:47:64:02:A3:AA:8F:98:7C:3A:FA:06:90:D9:6E:D4:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OEBUdkAqOqj5h8OvoGkNlu1HQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:6b:be:1b:99:34:2d:99:df:95:05:3f:92:5e:19:38:f7:20: df:34:66:4e:f5:79:d6:37:93:b7:f8:73:36:81:db:71:29:ba: a4:5c:fa:e5:ad:f9:b9:1d:51:73:51:0f:9c:70:32:3a:68:fa: 47:d6:3f:c4:66:7c:04:00:18:3f:c3:72:b4:04:cd:d0:8b:15: 7a:4b:99:0c:25:7d:db:3c:ea:db:d2:08:db:73:75:07:f4:5e: 20:a4:3a:e1:10:12:f6:5b:52:8e:5c:8c:8c:7b:98:17:30:27: 49:20:24:47:3f:1a:99:ac:01:89:d8:c3:e5:2e:1e:ff:05:ed: 01:cc:ac:0e:0d:78:88:72:e7:35:58:d2:80:89:8d:c7:b2:e0: ad:c9:00:5b:29:e0:88:0b:b3:fd:68:cb:e1:19:29:50:5b:cf: 2b:0a:4c:09:58:2c:cb:74:e1:22:20:35:8d:6a:01:64:e4:e8: ef:25:02:b9:e7:dd:23:80:2d:bf:7a:5e:02:c0:b9:47:c9:36: 05:32:00:b7:78:5a:da:a0:66:e1:64:b5:88:bd:49:e3:29:2f: 2d:a5:a5:80:3a:63:5a:28:ce:c5:f0:e6:ff:84:05:9a:0e:96: 51:78:32:dd:fe:c8:bf:e7:3f:74:9f:5e:a1:5c:aa:c2:06:9b: a2:b9:c4:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk0MDYxMTAvBgNVBAUTKEUzNDM4NDA1NDc2NDAyQTNBQThGOTg3QzNBRkEwNjkw RDk2RUQ0NzQwHhcNMjUwNTEzMDEzNzEzWhcNMjUwNTIwMDEzNzEzWjAYMRYwFAYD VQQDEw02ODIyYTI0OS1kMmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0p/iM/+Mqxhm3OAbKoD+wvTjOQXlZyAFdNhhCFCnDkRoGY8WXSsepLVk9/JK hHAU1YmTIbBJI55i9KlKlxTLt6FVRid+OrQbw6hSLefP5CIQaKybk5dq1b3OojBE i7scAB+u4J8S3mPd63sWTHx2eudCx/txG4Avd0pVk2UzdD0TVHcFuNkerq7QBO2v xMv+uEsdBwUmSiBFwMOHYX3ZqKmLJ0b3sImwFlQho8/TyWcBG2vTT7CUkpKxukHb jKYIsMmc/rJXCcjX8ds6qaUpDoRItdGiyWoyROL9fe7Twlk6TBMh6wmbXMT0fCrl jctzryprynkXFww7tQved5TAzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCtarjcX E+T6Pq+W+qL0leUw/BW7MB8GA1UdIwQYMBaAFONDhAVHZAKjqo+YfDr6BpDZbtR0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTQwNi85ODY4QTlGMDE3 MDkxMUVEQjZGODA4NjhDNEY5QUUwMi80ME9FQlVka0FxT3FqNWg4T3ZvR2tObHUx SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQwT0VCVWRrQXFPcWo1aDhPdm9Ha05sdTFIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTQwNi85ODY4QTlGMDE3MDkxMUVEQjZGODA4NjhDNEY5QUUwMi80ME9FQlVka0Fx T3FqNWg4T3ZvR2tObHUxSFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8a74bmTQtmd+VBT+SXhk49yDfNGZO9XnWN5O3+HM2gdtxKbqkXPrl rfm5HVFzUQ+ccDI6aPpH1j/EZnwEABg/w3K0BM3QixV6S5kMJX3bPOrb0gjbc3UH 9F4gpDrhEBL2W1KOXIyMe5gXMCdJICRHPxqZrAGJ2MPlLh7/Be0BzKwODXiIcuc1 WNKAiY3HsuCtyQBbKeCIC7P9aMvhGSlQW88rCkwJWCzLdOEiIDWNagFk5OjvJQK5 590jgC2/el4CwLlHyTYFMgC3eFraoGbhZLWIvUnjKS8tpaWAOmNaKM7F8Ob/hAWa DpZReDLd/si/5z90n16hXKrCBpuiucS3 -----END CERTIFICATE-----Generated at Tue May 13 09:17:29 2025 by rpki-client