$ rpki-client -vvf rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/OG6s-qYbi0A33DiqKAhd4xh48eM.mft File: OG6s-qYbi0A33DiqKAhd4xh48eM.mft (raw, json) Hash identifier: hRHdH1GJHsLEPuatgIAoPuKkpR0hZkHij/huQam55Qc= Subject key identifier: EA:58:0B:A9:FF:8D:A6:CB:70:98:84:E8:78:A5:B0:FD:B3:02:1F:C0 Authority key identifier: 38:6E:AC:FA:A6:1B:8B:40:37:DC:38:AA:28:08:5D:E3:18:78:F1:E3 Certificate issuer: /CN=A9118422/serialNumber=386EACFAA61B8B4037DC38AA28085DE31878F1E3 Certificate serial: 02DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG6s-qYbi0A33DiqKAhd4xh48eM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/OG6s-qYbi0A33DiqKAhd4xh48eM.mft Manifest number: 02D9 Signing time: Sat 29 Mar 2025 01:38:00 +0000 Manifest this update: Sat 29 Mar 2025 01:37:59 +0000 Manifest next update: Sat 05 Apr 2025 01:37:59 +0000 Files and hashes: 1: OG6s-qYbi0A33DiqKAhd4xh48eM.crl (hash: FOXZs6QCLrnDMhrS4VA0wsDmz+irWmonCcGk8uXGM7o=) 2: 09AA16F8DB0011ECA67DA10BC4F9AE02.roa (hash: Xjk4IJVT0rrTOdheIi6ydLmAybVHV5BPXXklNZ4Q0SQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/OG6s-qYbi0A33DiqKAhd4xh48eM.crl rsync://rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/OG6s-qYbi0A33DiqKAhd4xh48eM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG6s-qYbi0A33DiqKAhd4xh48eM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 01:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 733 (0x2dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118422 Validity Not Before: Mar 29 01:37:59 2025 GMT Not After : Apr 5 01:37:59 2025 GMT Subject: CN=67e74ef7-7998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:56:b0:96:1b:e2:49:d1:ee:aa:45:12:af:91: 67:23:47:92:58:82:06:87:c2:28:04:41:e8:0f:7c: 93:3e:94:99:13:b1:db:a1:93:78:20:d9:0b:94:1f: 75:6d:4c:40:f0:fd:d2:ed:43:9d:21:90:5d:12:04: eb:e6:51:03:41:ce:a7:6a:9c:5f:f2:ba:22:f9:80: ff:35:54:7a:8e:fc:06:5d:a3:21:dc:e5:85:fb:55: 5a:28:49:15:1d:d5:58:74:ec:bb:32:3e:df:02:b7: fb:78:d0:ae:95:87:ff:e2:ff:5d:fe:4b:93:54:45: bb:77:74:b5:f4:5c:82:f4:ee:8e:6e:30:63:e3:26: 9b:54:05:95:9d:19:34:02:24:f7:c1:d4:c7:cc:bd: 9d:35:df:14:6d:35:72:8c:eb:06:ea:bb:21:9c:5e: 44:59:dc:bf:5b:48:ea:5d:24:29:c5:8d:7a:7c:bf: 0c:db:57:bb:ac:72:4f:e5:ae:8d:1a:f3:c1:b7:e3: 46:a8:3c:2e:8b:3f:6b:85:3a:6a:07:2e:3a:3a:62: 03:78:27:88:9d:f4:72:56:ef:3a:c1:ba:d9:aa:25: 8d:5e:57:ed:52:a4:ce:68:af:2d:79:e4:83:c7:fe: 82:66:fa:56:1c:7e:7b:b1:cf:37:16:15:39:a9:9e: 17:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:58:0B:A9:FF:8D:A6:CB:70:98:84:E8:78:A5:B0:FD:B3:02:1F:C0 X509v3 Authority Key Identifier: keyid:38:6E:AC:FA:A6:1B:8B:40:37:DC:38:AA:28:08:5D:E3:18:78:F1:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/OG6s-qYbi0A33DiqKAhd4xh48eM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG6s-qYbi0A33DiqKAhd4xh48eM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/OG6s-qYbi0A33DiqKAhd4xh48eM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:22:38:d2:1a:a0:87:eb:35:6c:11:da:36:d1:e5:93:73:92: 2d:b6:de:70:be:7b:ac:88:79:99:35:fd:5f:3b:09:3d:55:6f: 4f:d1:54:4f:0b:04:ef:f4:7d:03:94:c7:6a:7d:dd:8a:5f:55: e2:df:a4:69:c9:23:27:5b:33:5a:65:80:ea:6e:b3:90:97:1f: ca:8d:30:69:06:f1:b2:9d:81:cc:3d:00:90:ad:eb:56:ff:99: 8b:54:ed:5e:64:ec:61:5d:e6:f2:21:88:06:d4:ee:5d:8b:ef: 7d:26:11:f3:1d:6f:50:43:db:10:34:d1:ab:aa:9b:26:91:7d: 4a:8b:1e:d1:35:6c:b9:7e:03:d6:8b:10:dd:d2:13:6f:f7:ef: 13:7a:6e:aa:5e:91:c6:89:57:81:ec:c4:cf:63:c7:bc:80:66: 02:98:7d:d0:06:97:4c:2c:7e:7b:a3:24:98:95:06:bf:15:7a: 66:9b:6a:1b:ba:f9:b4:3a:89:2b:61:6b:da:6e:ba:7c:35:33: 11:4a:48:e1:95:91:fa:6f:54:f3:20:37:be:d8:0d:98:84:83: 1f:20:30:91:bb:7a:db:47:50:e6:a0:e3:c0:97:ed:a3:18:09: 90:c2:20:9b:ba:76:11:0b:d1:c7:e3:b8:9c:97:94:31:70:4e: f3:bf:53:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAt0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg0MjIxMTAvBgNVBAUTKDM4NkVBQ0ZBQTYxQjhCNDAzN0RDMzhBQTI4MDg1REUz MTg3OEYxRTMwHhcNMjUwMzI5MDEzNzU5WhcNMjUwNDA1MDEzNzU5WjAYMRYwFAYD VQQDEw02N2U3NGVmNy03OTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm1awlhviSdHuqkUSr5FnI0eSWIIGh8IoBEHoD3yTPpSZE7HboZN4INkLlB91 bUxA8P3S7UOdIZBdEgTr5lEDQc6napxf8roi+YD/NVR6jvwGXaMh3OWF+1VaKEkV HdVYdOy7Mj7fArf7eNCulYf/4v9d/kuTVEW7d3S19FyC9O6ObjBj4yabVAWVnRk0 AiT3wdTHzL2dNd8UbTVyjOsG6rshnF5EWdy/W0jqXSQpxY16fL8M21e7rHJP5a6N GvPBt+NGqDwuiz9rhTpqBy46OmIDeCeInfRyVu86wbrZqiWNXlftUqTOaK8teeSD x/6CZvpWHH57sc83FhU5qZ4XvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOpYC6n/ jabLcJiE6HilsP2zAh/AMB8GA1UdIwQYMBaAFDhurPqmG4tAN9w4qigIXeMYePHj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODQyMi8zMTgwRkUyQURB RkMxMUVDQkJENTM3ODZDNEY5QUUwMi9PRzZzLXFZYmkwQTMzRGlxS0FoZDR4aDQ4 ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09HNnMtcVliaTBBMzNEaXFLQWhkNHhoNDhlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODQyMi8zMTgwRkUyQURBRkMxMUVDQkJENTM3ODZDNEY5QUUwMi9PRzZzLXFZYmkw QTMzRGlxS0FoZDR4aDQ4ZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXIjjSGqCH6zVsEdo20eWTc5Ittt5wvnusiHmZNf1fOwk9VW9P0VRP CwTv9H0DlMdqfd2KX1Xi36RpySMnWzNaZYDqbrOQlx/KjTBpBvGynYHMPQCQretW /5mLVO1eZOxhXebyIYgG1O5di+99JhHzHW9QQ9sQNNGrqpsmkX1Kix7RNWy5fgPW ixDd0hNv9+8Tem6qXpHGiVeB7MTPY8e8gGYCmH3QBpdMLH57oySYlQa/FXpmm2ob uvm0OokrYWvabrp8NTMRSkjhlZH6b1TzIDe+2A2YhIMfIDCRu3rbR1DmoOPAl+2j GAmQwiCbunYRC9HH47icl5QxcE7zv1OY -----END CERTIFICATE-----Generated at Fri Apr 4 22:19:54 2025 by rpki-client