$ rpki-client -vvf rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.mft File: 05oQ5hqMqVBO2xVIaTazd0OiTc4.mft (raw, json) Hash identifier: WL0XknZJlebfJnAB0BBHFq2Vdkq07mdIYLode9G/2as= Subject key identifier: C8:F6:E6:68:A7:93:4F:96:D4:78:D2:E3:3C:04:22:7F:B1:23:70:64 Authority key identifier: D3:9A:10:E6:1A:8C:A9:50:4E:DB:15:48:69:36:B3:77:43:A2:4D:CE Certificate issuer: /CN=A9110BE2/serialNumber=D39A10E61A8CA9504EDB15486936B37743A24DCE Certificate serial: 0129 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05oQ5hqMqVBO2xVIaTazd0OiTc4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.mft Manifest number: 0126 Signing time: Sat 05 Apr 2025 03:59:52 +0000 Manifest this update: Sat 05 Apr 2025 03:59:52 +0000 Manifest next update: Sat 12 Apr 2025 03:59:52 +0000 Files and hashes: 1: 05oQ5hqMqVBO2xVIaTazd0OiTc4.crl (hash: POH/jr8juhssMeZi/ysr5FTjyNALrjOkCxEC3PG5WOc=) 2: A4FC1E34519311EE85CE2811C4F9AE02.roa (hash: qeJWAX6cW8g+xhKRaW5Fw41h91VMY7XDGYvJyjy3HwU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.crl rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05oQ5hqMqVBO2xVIaTazd0OiTc4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 03:59:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 297 (0x129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110BE2 Validity Not Before: Apr 5 03:59:52 2025 GMT Not After : Apr 12 03:59:52 2025 GMT Subject: CN=67f0aab8-ab41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c6:52:d7:87:df:05:25:69:f2:47:53:0f:88: 63:83:96:27:bf:2e:01:8f:bc:f5:a7:8c:91:ce:6d: 6e:d6:64:91:76:f4:de:dd:33:fb:4b:d8:3d:3f:52: c5:0f:2a:f5:cd:ab:03:78:94:a0:b8:e1:60:39:ee: fb:34:1b:1a:17:db:0f:80:b9:8b:60:c5:5c:75:b8: 76:14:a9:1f:d6:e2:5e:5f:b8:eb:f9:84:ec:c9:2f: 60:a5:7b:d0:f7:74:9c:f0:54:c2:9c:03:14:a8:b1: 2a:4e:f5:21:98:3d:40:c9:40:69:87:c7:53:f2:9e: e5:c2:47:75:20:9a:88:5f:09:13:76:9e:06:23:1a: 95:05:69:b8:63:3f:e1:d4:42:35:c3:a8:01:ee:0c: 1e:e9:a0:bf:75:05:d6:9e:1d:80:2e:d6:0b:a2:cc: 19:f9:50:9e:4c:88:cb:a8:9b:a2:23:25:57:72:91: e9:10:f0:a6:66:ad:7c:e0:85:a3:7f:22:d4:9c:4b: 48:be:5a:06:87:df:8c:4e:b9:7f:bd:1d:ec:85:cf: d6:0f:ed:59:a8:5b:b6:48:99:06:2c:0f:be:bf:a7: 8e:75:66:24:14:5f:f8:73:05:10:df:33:b1:4b:ae: 59:ea:4e:34:37:b1:13:c3:57:fe:f9:11:92:5c:35: 5e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:F6:E6:68:A7:93:4F:96:D4:78:D2:E3:3C:04:22:7F:B1:23:70:64 X509v3 Authority Key Identifier: keyid:D3:9A:10:E6:1A:8C:A9:50:4E:DB:15:48:69:36:B3:77:43:A2:4D:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05oQ5hqMqVBO2xVIaTazd0OiTc4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:d9:a6:4b:e9:e3:09:cd:c7:70:30:16:39:3c:78:c4:8a:e0: 2c:32:89:96:1c:d2:b6:f7:72:e7:89:74:e6:0b:5a:3b:c3:c9: 6f:53:9e:ee:40:7f:23:54:fe:48:79:21:69:1d:35:18:42:69: dc:43:ae:39:81:7c:d4:70:54:6d:a4:d0:b1:ce:1e:ff:3a:64: e6:d6:83:9d:51:89:e6:fb:67:be:87:b5:9c:27:13:c1:47:99: 2d:04:21:01:35:59:99:d2:12:92:32:e5:0c:99:60:24:4c:61: a4:4c:4b:54:b0:78:97:d2:52:33:2b:df:46:d4:83:1c:39:d1: 86:94:29:fb:34:b9:29:15:9b:ea:f7:2f:65:22:e0:70:d8:94: 7d:86:51:bb:6c:ce:68:30:a0:98:da:d0:e9:4a:23:2c:59:fc: d1:fe:c2:34:c7:ac:fe:97:81:f9:56:16:98:85:1d:f2:c9:15: c2:18:58:24:90:e0:fc:bf:8d:f8:f4:80:f5:0b:49:cc:b7:16: 25:3e:c1:b8:01:e4:bd:7f:97:f2:85:1c:99:70:8d:ab:d5:1b: d4:c9:34:5d:53:75:ef:e9:c8:f1:47:ff:1c:b5:c4:2c:13:9c: 73:98:47:c9:6a:61:2b:93:d6:91:51:58:23:57:d3:3d:11:b5: 8c:9f:93:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBCRTIxMTAvBgNVBAUTKEQzOUExMEU2MUE4Q0E5NTA0RURCMTU0ODY5MzZCMzc3 NDNBMjREQ0UwHhcNMjUwNDA1MDM1OTUyWhcNMjUwNDEyMDM1OTUyWjAYMRYwFAYD VQQDEw02N2YwYWFiOC1hYjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0MZS14ffBSVp8kdTD4hjg5Ynvy4Bj7z1p4yRzm1u1mSRdvTe3TP7S9g9P1LF Dyr1zasDeJSguOFgOe77NBsaF9sPgLmLYMVcdbh2FKkf1uJeX7jr+YTsyS9gpXvQ 93Sc8FTCnAMUqLEqTvUhmD1AyUBph8dT8p7lwkd1IJqIXwkTdp4GIxqVBWm4Yz/h 1EI1w6gB7gwe6aC/dQXWnh2ALtYLoswZ+VCeTIjLqJuiIyVXcpHpEPCmZq184IWj fyLUnEtIvloGh9+MTrl/vR3shc/WD+1ZqFu2SJkGLA++v6eOdWYkFF/4cwUQ3zOx S65Z6k40N7ETw1f++RGSXDVeWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMj25min k0+W1HjS4zwEIn+xI3BkMB8GA1UdIwQYMBaAFNOaEOYajKlQTtsVSGk2s3dDok3O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEJFMi82Q0I5QTk2NjUx OTIxMUVFQjkwQTMzMEJDNEY5QUUwMi8wNW9RNWhxTXFWQk8yeFZJYVRhemQwT2lU YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA1b1E1aHFNcVZCTzJ4VklhVGF6ZDBPaVRjNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEJFMi82Q0I5QTk2NjUxOTIxMUVFQjkwQTMzMEJDNEY5QUUwMi8wNW9RNWhxTXFW Qk8yeFZJYVRhemQwT2lUYzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBr2aZL6eMJzcdwMBY5PHjEiuAsMomWHNK293LniXTmC1o7w8lvU57u QH8jVP5IeSFpHTUYQmncQ645gXzUcFRtpNCxzh7/OmTm1oOdUYnm+2e+h7WcJxPB R5ktBCEBNVmZ0hKSMuUMmWAkTGGkTEtUsHiX0lIzK99G1IMcOdGGlCn7NLkpFZvq 9y9lIuBw2JR9hlG7bM5oMKCY2tDpSiMsWfzR/sI0x6z+l4H5VhaYhR3yyRXCGFgk kOD8v4349ID1C0nMtxYlPsG4AeS9f5fyhRyZcI2r1RvUyTRdU3Xv6cjxR/8ctcQs E5xzmEfJamErk9aRUVgjV9M9EbWMn5M3 -----END CERTIFICATE-----Generated at Sat Apr 5 19:33:02 2025 by rpki-client