$ rpki-client -vvf rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft File: O4dpDvQFVnODtvcv3TARYM6CHys.mft (raw, json) Hash identifier: I6UgPNjAr4sGZvy1dANGNoJ+i24gKfVTUvS+G4N4gEg= Subject key identifier: CD:DC:9C:5D:E7:DC:6A:E1:68:6D:56:42:7F:CF:3C:8B:E0:AC:39:AA Authority key identifier: 3B:87:69:0E:F4:05:56:73:83:B6:F7:2F:DD:30:11:60:CE:82:1F:2B Certificate issuer: /CN=A91F81AD/serialNumber=3B87690EF405567383B6F72FDD301160CE821F2B Certificate serial: 0224 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft Manifest number: 021E Signing time: Sun 11 May 2025 01:29:14 +0000 Manifest this update: Sun 11 May 2025 01:29:14 +0000 Manifest next update: Sun 18 May 2025 01:29:14 +0000 Files and hashes: 1: O4dpDvQFVnODtvcv3TARYM6CHys.crl (hash: NXU0qdI2qbzO6Rpuwrj3MHoypkKO58mXBRLfrmC5CRg=) 2: F9424C6C80FA11ED9B35954DC4F9AE02.roa (hash: GNMO+8voOxNBOb5ixsUP/MtpdlZbS27Vb7o1TavyMdI=) 3: F86A2F7680FA11ED9B35954DC4F9AE02.roa (hash: vq0srwLbA5KHVy52W5biflCYsAzYNYb+3xV7SnajFW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.crl rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 01:29:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 548 (0x224) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F81AD, serialNumber=3B87690EF405567383B6F72FDD301160CE821F2B Validity Not Before: May 11 01:29:14 2025 GMT Not After : May 18 01:29:14 2025 GMT Subject: CN=681ffd6a-24d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:cb:35:e5:24:79:5f:61:0e:35:af:d0:cf:8b: d7:15:c0:cb:d6:e2:0e:c4:b1:8f:cd:b9:86:e2:2d: 61:e7:1c:a7:14:5a:97:8b:17:36:0f:e8:18:69:01: f8:c4:21:76:d7:a0:03:b1:43:af:9f:ef:f1:cb:21: db:20:89:45:b7:14:32:39:04:62:67:c6:02:6a:a7: 6b:99:d7:12:c4:8b:6d:5d:96:6d:89:16:02:cc:35: a2:95:35:08:67:54:d5:a5:cb:2f:5d:75:1b:ea:91: cd:56:0d:e8:f7:ee:95:ec:52:17:a2:fc:af:b6:0d: 88:17:91:7a:f4:b9:dd:88:1f:34:0f:f8:ba:32:1b: 01:42:9d:a2:7c:6a:2f:f6:15:5a:da:c9:7c:a9:54: 81:51:bf:a1:f5:60:49:14:87:b3:73:1c:c9:e0:6d: d2:b2:49:4e:b8:50:9a:82:18:c6:7e:07:eb:88:00: bb:55:e2:50:34:58:e0:f8:e9:ea:36:4d:8e:ce:8a: ca:64:c9:80:23:e4:32:f1:41:f2:f0:c0:12:1e:d6: 38:21:9b:0c:9c:d6:73:70:f6:d5:20:08:1d:30:49: b1:79:62:a5:79:3d:dc:03:c1:f5:ed:42:a2:5a:8b: e3:e7:18:c0:88:66:eb:6a:4b:ef:b4:4a:6f:41:3e: 98:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:DC:9C:5D:E7:DC:6A:E1:68:6D:56:42:7F:CF:3C:8B:E0:AC:39:AA X509v3 Authority Key Identifier: keyid:3B:87:69:0E:F4:05:56:73:83:B6:F7:2F:DD:30:11:60:CE:82:1F:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:43:64:fd:b2:84:00:21:08:66:a0:6a:b9:36:0a:c6:7e:6f: ef:33:b5:58:46:e8:26:7a:dd:85:34:ac:df:a5:65:69:55:b0: 63:e3:cf:7d:1d:e7:c6:72:7d:2b:d6:da:9d:d0:ba:b4:ce:61: fe:3a:ac:7a:ea:8a:45:1a:95:fd:8b:48:56:a9:68:7b:c8:d9: 73:68:16:ae:5f:d7:68:bc:b3:40:fa:65:bc:b3:ea:d9:af:d0: b1:4a:9d:e0:64:54:8c:c3:ad:c6:5f:00:a4:d6:36:57:75:77: 6e:dd:d0:2d:63:fd:e7:97:e4:59:85:1b:02:f7:45:f9:55:ff: 90:f5:13:1b:cf:9a:9d:e4:a4:dd:7f:37:5e:df:d6:52:b7:a0: ae:b1:52:3f:e4:16:f0:15:e4:0f:ea:8c:02:0b:61:f0:49:31: c6:91:ea:63:55:93:60:31:92:79:44:c6:cc:0d:c1:42:35:7b: 1b:a9:04:df:54:b2:94:ad:f3:94:43:17:87:ea:1c:1a:85:1e: 88:df:a8:54:19:79:68:9a:f1:c6:b2:bd:50:09:ad:19:49:d0: 21:e3:06:8b:d4:98:22:02:8c:44:94:d7:52:fe:f4:9f:3b:d9: 0e:49:57:77:be:57:95:46:e1:ef:a5:02:f8:61:b1:1b:4f:71: 20:57:da:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgxQUQxMTAvBgNVBAUTKDNCODc2OTBFRjQwNTU2NzM4M0I2RjcyRkREMzAxMTYw Q0U4MjFGMkIwHhcNMjUwNTExMDEyOTE0WhcNMjUwNTE4MDEyOTE0WjAYMRYwFAYD VQQDEw02ODFmZmQ2YS0yNGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Ms15SR5X2EONa/Qz4vXFcDL1uIOxLGPzbmG4i1h5xynFFqXixc2D+gYaQH4 xCF216ADsUOvn+/xyyHbIIlFtxQyOQRiZ8YCaqdrmdcSxIttXZZtiRYCzDWilTUI Z1TVpcsvXXUb6pHNVg3o9+6V7FIXovyvtg2IF5F69LndiB80D/i6MhsBQp2ifGov 9hVa2sl8qVSBUb+h9WBJFIezcxzJ4G3SsklOuFCaghjGfgfriAC7VeJQNFjg+Onq Nk2OzorKZMmAI+Qy8UHy8MASHtY4IZsMnNZzcPbVIAgdMEmxeWKleT3cA8H17UKi Wovj5xjAiGbrakvvtEpvQT6Y9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM3cnF3n 3GrhaG1WQn/PPIvgrDmqMB8GA1UdIwQYMBaAFDuHaQ70BVZzg7b3L90wEWDOgh8r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODFBRC80M0E1MTFBRTJD QkUxMUVEOTk4MjRCNENDNEY5QUUwMi9PNGRwRHZRRlZuT0R0dmN2M1RBUllNNkNI eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL080ZHBEdlFGVm5PRHR2Y3YzVEFSWU02Q0h5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODFBRC80M0E1MTFBRTJDQkUxMUVEOTk4MjRCNENDNEY5QUUwMi9PNGRwRHZRRlZu T0R0dmN2M1RBUllNNkNIeXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgQ2T9soQAIQhmoGq5NgrGfm/vM7VYRugmet2FNKzfpWVpVbBj4899 HefGcn0r1tqd0Lq0zmH+Oqx66opFGpX9i0hWqWh7yNlzaBauX9dovLNA+mW8s+rZ r9CxSp3gZFSMw63GXwCk1jZXdXdu3dAtY/3nl+RZhRsC90X5Vf+Q9RMbz5qd5KTd fzde39ZSt6CusVI/5BbwFeQP6owCC2HwSTHGkepjVZNgMZJ5RMbMDcFCNXsbqQTf VLKUrfOUQxeH6hwahR6I36hUGXlomvHGsr1QCa0ZSdAh4waL1JgiAoxElNdS/vSf O9kOSVd3vleVRuHvpQL4YbEbT3EgV9ou -----END CERTIFICATE-----Generated at Mon May 12 16:54:55 2025 by rpki-client