$ rpki-client -vvf rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft File: O2jmA9GPVutmXvcukmQF8MEL4-c.mft (raw, json) Hash identifier: VmgN8rwokcgQdx8avMWxktrsFwEoB4WPmi5SAHbqRmY= Subject key identifier: BA:4C:B5:81:EC:2F:2D:CD:36:24:ED:21:F8:82:D6:AC:AA:14:A3:8D Authority key identifier: 3B:68:E6:03:D1:8F:56:EB:66:5E:F7:2E:92:64:05:F0:C1:0B:E3:E7 Certificate issuer: /CN=A912D1D1/serialNumber=3B68E603D18F56EB665EF72E926405F0C10BE3E7 Certificate serial: 0860 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft Manifest number: 085A Signing time: Fri 28 Mar 2025 20:57:55 +0000 Manifest this update: Fri 28 Mar 2025 20:57:54 +0000 Manifest next update: Fri 04 Apr 2025 20:57:54 +0000 Files and hashes: 1: O2jmA9GPVutmXvcukmQF8MEL4-c.crl (hash: hn3qelXHR5epLxT70GJpyVWjehnoHu/H9tiFfy/8DOM=) 2: 30CB037EC18E11EA8BF4FB68C4F9AE02.roa (hash: d1mOeGTfFGoxO3FpLGtyELB1KUYkFiEXG3WDXupnmMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.crl rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:57:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2144 (0x860) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D1D1 Validity Not Before: Mar 28 20:57:54 2025 GMT Not After : Apr 4 20:57:54 2025 GMT Subject: CN=67e70d53-66b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4b:fc:d2:24:4f:6c:01:b2:01:62:e9:60:c7: e3:d6:c6:0a:2b:a7:9e:b3:ca:d6:1d:ca:d2:a6:45: c1:d7:bb:0e:c6:a9:7c:d1:aa:5f:df:95:19:24:69: d6:11:2f:5b:19:77:77:d4:9b:02:27:a2:2b:8c:8e: d2:be:20:19:90:d7:14:47:b6:46:6a:0e:1b:3e:50: cb:97:2b:96:72:26:9c:7b:a2:84:97:24:26:b2:07: 0e:c2:ca:1a:37:8d:dd:81:06:1e:2d:c8:30:e6:b0: 55:83:27:ba:65:85:3e:74:23:a4:7e:52:ae:e8:2f: c3:94:56:07:01:c8:f5:1b:87:41:7f:5c:52:f2:08: 4e:c7:65:17:35:cf:68:01:81:29:c3:af:96:52:6f: 06:39:1d:fa:94:5f:d7:cf:89:34:8d:1f:d2:9e:6b: de:d0:77:72:76:cd:31:18:db:a2:4c:53:52:8b:b1: 29:32:c3:b5:f1:5a:85:da:1f:d0:0a:1e:b9:62:a1: f5:db:6a:9b:9e:20:07:74:31:b2:04:2e:5f:32:1c: bb:68:97:2c:76:d2:f8:b3:86:00:59:ad:92:32:d0: e8:2d:58:96:5b:6f:b7:c9:71:50:bb:bf:2e:b1:91: cd:45:c4:c9:28:e0:b2:20:ee:93:d0:82:7b:ce:00: 36:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:4C:B5:81:EC:2F:2D:CD:36:24:ED:21:F8:82:D6:AC:AA:14:A3:8D X509v3 Authority Key Identifier: keyid:3B:68:E6:03:D1:8F:56:EB:66:5E:F7:2E:92:64:05:F0:C1:0B:E3:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:18:83:09:4d:5d:73:9e:f7:dd:bc:dc:45:f8:10:08:69:04: e3:5d:88:16:93:ba:d5:5d:e5:68:d2:f5:85:1d:14:79:33:22: a6:e4:2b:ec:cf:39:39:f7:f5:c5:07:79:a6:88:53:44:79:9c: c8:56:fb:aa:7d:26:12:a4:e4:64:39:b4:82:e6:c5:8c:01:e5: d7:65:cc:a8:d5:c0:aa:9c:68:9e:b5:d0:0a:97:b4:de:c8:dc: e8:c2:f8:5b:58:2a:2c:fe:88:bd:c0:1b:b0:0d:67:75:9d:51: 06:42:e4:fe:8c:37:fa:4d:a3:76:88:ce:f2:e1:eb:fa:f8:5d: fc:14:78:7e:3c:cb:1a:bd:71:b6:51:0e:d5:c3:8e:86:af:b5: 21:5a:6f:41:4b:c5:be:d5:75:73:1f:9f:38:25:78:79:fb:78: 78:b8:52:49:e5:ac:e7:68:d9:23:3f:4e:02:a1:0d:34:a8:ee: 98:a7:61:21:75:df:55:75:c7:2f:27:59:6b:79:d5:de:9d:f3: c9:40:c1:15:f1:22:e6:73:a3:b4:14:fb:f7:6b:b8:8a:1b:a9: 0b:84:06:83:71:55:aa:a0:e2:ee:ac:0e:f0:d1:d4:d3:21:7a: 1a:4f:f7:8e:5f:b3:50:5d:72:23:e6:ef:54:03:ab:93:7c:63: e1:f6:f6:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQxRDExMTAvBgNVBAUTKDNCNjhFNjAzRDE4RjU2RUI2NjVFRjcyRTkyNjQwNUYw QzEwQkUzRTcwHhcNMjUwMzI4MjA1NzU0WhcNMjUwNDA0MjA1NzU0WjAYMRYwFAYD VQQDEw02N2U3MGQ1My02NmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvUv80iRPbAGyAWLpYMfj1sYKK6ees8rWHcrSpkXB17sOxql80apf35UZJGnW ES9bGXd31JsCJ6IrjI7SviAZkNcUR7ZGag4bPlDLlyuWciace6KElyQmsgcOwsoa N43dgQYeLcgw5rBVgye6ZYU+dCOkflKu6C/DlFYHAcj1G4dBf1xS8ghOx2UXNc9o AYEpw6+WUm8GOR36lF/Xz4k0jR/Snmve0Hdyds0xGNuiTFNSi7EpMsO18VqF2h/Q Ch65YqH122qbniAHdDGyBC5fMhy7aJcsdtL4s4YAWa2SMtDoLViWW2+3yXFQu78u sZHNRcTJKOCyIO6T0IJ7zgA23wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLpMtYHs Ly3NNiTtIfiC1qyqFKONMB8GA1UdIwQYMBaAFDto5gPRj1brZl73LpJkBfDBC+Pn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDFEMS9DMTYwMDZGQ0Mx OEMxMUVBOEYzNjQxNjZDNEY5QUUwMi9PMmptQTlHUFZ1dG1YdmN1a21RRjhNRUw0 LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL08yam1BOUdQVnV0bVh2Y3VrbVFGOE1FTDQtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDFEMS9DMTYwMDZGQ0MxOEMxMUVBOEYzNjQxNjZDNEY5QUUwMi9PMmptQTlHUFZ1 dG1YdmN1a21RRjhNRUw0LWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARGIMJTV1znvfdvNxF+BAIaQTjXYgWk7rVXeVo0vWFHRR5MyKm5Cvs zzk59/XFB3mmiFNEeZzIVvuqfSYSpORkObSC5sWMAeXXZcyo1cCqnGietdAKl7Te yNzowvhbWCos/oi9wBuwDWd1nVEGQuT+jDf6TaN2iM7y4ev6+F38FHh+PMsavXG2 UQ7Vw46Gr7UhWm9BS8W+1XVzH584JXh5+3h4uFJJ5aznaNkjP04CoQ00qO6Yp2Eh dd9VdccvJ1lredXenfPJQMEV8SLmc6O0FPv3a7iKG6kLhAaDcVWqoOLurA7w0dTT IXoaT/eOX7NQXXIj5u9UA6uTfGPh9vZg -----END CERTIFICATE-----Generated at Fri Apr 4 18:11:18 2025 by rpki-client