$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft File: O9MC-nouhmpnmxtglttnRToDq4Y.mft (raw, json) Hash identifier: pAJ0ETVGfnvIAlHvCM39jJxI+jfA51eQ4EpluLhlcPQ= Subject key identifier: 70:20:33:7B:F8:40:1F:97:9F:F5:AB:AF:73:20:9C:15:64:82:C4:27 Authority key identifier: 3B:D3:02:FA:7A:2E:86:6A:67:9B:1B:60:96:DB:67:45:3A:03:AB:86 Certificate issuer: /CN=A91F7DCD/serialNumber=3BD302FA7A2E866A679B1B6096DB67453A03AB86 Certificate serial: 0A25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft Manifest number: 0A0F Signing time: Sat 10 May 2025 19:34:40 +0000 Manifest this update: Sat 10 May 2025 19:34:39 +0000 Manifest next update: Sat 17 May 2025 19:34:39 +0000 Files and hashes: 1: O9MC-nouhmpnmxtglttnRToDq4Y.crl (hash: YfvIGmiao+SZG4UP9sBH9ukWKMhDtv/BsUGASakaU7M=) 2: 0791DE6034A511ED9D82D13BC4F9AE02.roa (hash: juMQ71UzLGU0NVMfjPJ2FFyOOWRBZEQJenhZ2xiR7QE=) 3: 62512E2C73D311EABC99D63AC4F9AE02.roa (hash: DFYge5dHCEqKdjq6qJwiRBDOxqQ6gIZRO7JP5sPeXVk=) 4: 27323072FF0E11EFB014CB3CC4F9AE02.roa (hash: Fcw453Ezb9efQnwUieSmXg5daSqXlucP3XjYZWFxjYQ=) 5: 855AECF29B3A11EB9B73EB7BC4F9AE02.roa (hash: R3iQDjS1xmyA/Ti9pGMuv3ByraTjewOpXnxZ6reYInQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.crl rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 19:34:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2597 (0xa25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7DCD, serialNumber=3BD302FA7A2E866A679B1B6096DB67453A03AB86 Validity Not Before: May 10 19:34:39 2025 GMT Not After : May 17 19:34:39 2025 GMT Subject: CN=681faa50-cecc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:84:0c:d9:7e:6e:7c:c2:5c:b3:34:21:bf:57: 04:b9:d4:f4:96:6a:99:84:98:d7:1c:6a:67:63:28: cf:35:01:4c:dd:0f:3e:f5:81:ce:a4:80:e9:60:24: 71:60:7e:83:49:ca:4b:4e:cf:1f:3f:cc:17:ac:d2: c7:3d:81:02:90:1f:a4:64:a7:be:44:ed:e8:e4:76: 65:58:d2:d1:02:3e:2c:3c:fe:6f:e3:88:fb:bb:7d: 16:78:e4:4e:de:db:21:3f:c9:a9:b4:47:ed:c2:4b: 37:9a:28:44:18:f8:2e:4b:60:09:04:db:72:3e:dc: 28:96:7c:2e:9d:18:e1:a4:82:68:44:39:3d:6a:86: 4e:b8:44:d9:f7:21:17:e9:e8:b6:f6:ba:40:a5:1a: 81:fc:da:89:b9:91:01:be:ad:53:66:0d:f6:cf:9a: e4:40:69:2a:ab:9c:12:82:14:6e:d2:7f:62:c9:79: 26:6b:00:85:a9:6c:83:c9:61:60:e2:e0:90:22:72: b8:30:fb:c2:b8:2e:d2:97:6a:2d:a2:e7:1e:72:c8: 6d:bf:7e:06:3e:8a:62:f0:11:b1:ab:56:c5:05:7f: 7a:7e:b6:93:2a:78:90:78:25:f0:fb:04:8e:13:e0: a1:bc:f9:2f:5e:fa:e2:fb:2d:e8:c2:ac:21:d5:90: fe:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:20:33:7B:F8:40:1F:97:9F:F5:AB:AF:73:20:9C:15:64:82:C4:27 X509v3 Authority Key Identifier: keyid:3B:D3:02:FA:7A:2E:86:6A:67:9B:1B:60:96:DB:67:45:3A:03:AB:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:f2:25:64:ab:cb:db:ab:dd:c5:ea:81:53:94:a9:82:f8:0a: a8:67:8c:ab:33:48:53:b1:36:21:8e:5d:f5:87:14:22:d7:5f: ba:5e:19:12:fb:5e:02:7b:ae:60:01:df:a6:5e:33:83:95:23: 3b:20:4a:19:4f:45:d9:3e:d1:4f:f1:0b:ed:70:f0:69:0f:5e: dc:42:89:86:4a:4a:ec:fb:54:eb:79:25:0a:39:71:23:41:00: 60:36:8e:9a:d7:0d:fe:54:f0:79:3a:df:ca:a3:9d:c7:0b:b0: 91:38:68:72:9b:86:1a:b4:4e:e6:d5:30:93:29:17:06:ad:3f: d3:ad:2a:e4:04:f5:20:e0:36:6a:9b:b2:fc:97:61:be:8f:a7: da:76:82:e9:5f:80:c2:8e:02:72:98:af:c0:7c:0f:3a:d9:42: 05:77:24:8f:8a:3e:48:5c:17:d8:33:4f:68:0b:53:3d:ac:7b: 55:d8:99:e3:ba:3e:4b:87:6d:ef:70:9f:c8:bd:74:72:98:c6: 15:d5:57:2f:76:d6:eb:26:de:57:f3:8e:46:9a:04:3e:d4:a8: fe:c2:d4:5d:f2:a6:55:e9:58:95:1a:db:18:d5:88:8c:e7:7c: e8:a6:b5:ec:1c:f6:a5:07:c1:7f:66:16:fe:f1:93:4d:65:fb: d9:9b:98:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdEQ0QxMTAvBgNVBAUTKDNCRDMwMkZBN0EyRTg2NkE2NzlCMUI2MDk2REI2NzQ1 M0EwM0FCODYwHhcNMjUwNTEwMTkzNDM5WhcNMjUwNTE3MTkzNDM5WjAYMRYwFAYD VQQDEw02ODFmYWE1MC1jZWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyYQM2X5ufMJcszQhv1cEudT0lmqZhJjXHGpnYyjPNQFM3Q8+9YHOpIDpYCRx YH6DScpLTs8fP8wXrNLHPYECkB+kZKe+RO3o5HZlWNLRAj4sPP5v44j7u30WeORO 3tshP8mptEftwks3mihEGPguS2AJBNtyPtwolnwunRjhpIJoRDk9aoZOuETZ9yEX 6ei29rpApRqB/NqJuZEBvq1TZg32z5rkQGkqq5wSghRu0n9iyXkmawCFqWyDyWFg 4uCQInK4MPvCuC7Sl2otoucecshtv34GPopi8BGxq1bFBX96fraTKniQeCXw+wSO E+ChvPkvXvri+y3owqwh1ZD+9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHAgM3v4 QB+Xn/Wrr3MgnBVkgsQnMB8GA1UdIwQYMBaAFDvTAvp6LoZqZ5sbYJbbZ0U6A6uG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0RDRC84NDQyOEIwRTcz RDExMUVBOUNERUM1MzRDNEY5QUUwMi9POU1DLW5vdWhtcG5teHRnbHR0blJUb0Rx NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL085TUMtbm91aG1wbm14dGdsdHRuUlRvRHE0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0RDRC84NDQyOEIwRTczRDExMUVBOUNERUM1MzRDNEY5QUUwMi9POU1DLW5vdWht cG5teHRnbHR0blJUb0RxNFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCd8iVkq8vbq93F6oFTlKmC+AqoZ4yrM0hTsTYhjl31hxQi11+6XhkS +14Ce65gAd+mXjODlSM7IEoZT0XZPtFP8QvtcPBpD17cQomGSkrs+1TreSUKOXEj QQBgNo6a1w3+VPB5Ot/Ko53HC7CROGhym4YatE7m1TCTKRcGrT/TrSrkBPUg4DZq m7L8l2G+j6fadoLpX4DCjgJymK/AfA862UIFdySPij5IXBfYM09oC1M9rHtV2Jnj uj5Lh23vcJ/IvXRymMYV1VcvdtbrJt5X845GmgQ+1Kj+wtRd8qZV6ViVGtsY1YiM 53zoprXsHPalB8F/Zhb+8ZNNZfvZm5jo -----END CERTIFICATE-----Generated at Mon May 12 13:28:14 2025 by rpki-client