$ rpki-client -vvf rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft File: 0C2Q-5EqWWC75Wy051NRaiTG73s.mft (raw, json) Hash identifier: 9b5eR/c7wTVV6eAupnWj7+Q205aEMCJj8VTQbf7xcLM= Subject key identifier: FF:90:13:F2:38:73:7C:E0:88:69:06:14:DC:CE:9B:7C:AC:1E:8F:35 Authority key identifier: D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B Certificate issuer: /CN=A9148FE8/serialNumber=D02D90FB912A5960BBE56CB4E753516A24C6EF7B Certificate serial: 0AC6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft Manifest number: 0ABA Signing time: Sun 20 Apr 2025 19:17:23 +0000 Manifest this update: Sun 20 Apr 2025 19:17:23 +0000 Manifest next update: Sun 27 Apr 2025 19:17:23 +0000 Files and hashes: 1: 0C2Q-5EqWWC75Wy051NRaiTG73s.crl (hash: grAPwhncpTIKtktck1k2j1C/XfnjF8csMxHQcZafz4s=) 2: 4AEE5D144EFC11EA9D00310FC4F9AE02.roa (hash: rFiMZXa2OxD0Ej0KwFsbxfHbUbN1ZogDT7O8NAGWwno=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.crl rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 18:19:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2758 (0xac6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148FE8, serialNumber=D02D90FB912A5960BBE56CB4E753516A24C6EF7B Validity Not Before: Apr 20 19:17:23 2025 GMT Not After : Apr 27 19:17:23 2025 GMT Subject: CN=68054843-1b64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:20:8b:a0:4d:7b:6e:98:df:70:d9:f8:37:63: 09:de:f8:79:4d:ce:43:f3:33:3f:f1:f5:8e:d4:47: 9f:de:f8:f8:c2:21:ff:0a:3b:94:b2:ab:79:90:a6: 8b:f0:da:ba:87:4f:9c:aa:f5:da:30:87:67:f1:3c: 21:24:80:7d:e4:41:cf:5f:f7:08:fa:d5:cd:67:45: 7a:40:46:ee:f1:4b:ee:d9:da:74:d9:8b:27:25:c0: 25:9b:0d:60:b5:45:18:60:9e:68:53:c7:77:7c:2a: 88:91:fc:d1:03:9b:57:7b:e6:2a:8f:7e:75:d4:34: b6:3c:ec:c4:03:d3:f7:1c:62:ee:78:95:47:da:22: 53:b5:40:2f:7b:50:2d:b2:fe:34:ab:ef:a3:0e:68: 62:99:d0:6a:87:91:a2:d8:64:98:85:bc:c6:c5:68: 00:23:0c:57:3a:2f:8c:90:ac:53:a4:a5:5b:10:4c: ea:55:70:5e:11:58:1e:dd:d0:e7:c2:e5:21:d7:d9: 90:17:6c:10:b4:d8:77:b9:c6:c0:3e:8c:68:78:52: 98:8d:5e:51:c0:83:cc:8b:54:e7:9c:1b:86:d3:37: 61:c2:11:b1:06:48:9d:19:e6:21:d6:23:39:8f:91: 6d:7d:41:27:93:2e:21:38:2d:35:e7:b5:b6:b4:eb: 2b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:90:13:F2:38:73:7C:E0:88:69:06:14:DC:CE:9B:7C:AC:1E:8F:35 X509v3 Authority Key Identifier: keyid:D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:d0:b1:74:11:9d:ab:3f:cd:17:fb:cc:d3:41:c9:3b:b8:37: 24:8c:f6:ef:7f:b2:e3:50:90:e5:17:98:4d:3a:83:cc:86:86: a2:fb:01:22:69:4b:27:1d:14:69:7f:1c:77:dc:b9:1f:81:59: 38:0b:1c:78:8e:ec:a8:99:50:60:2d:a4:19:40:4b:1b:c3:84: 99:c3:fe:fd:8f:49:0c:72:23:48:bd:aa:7f:0b:ff:34:60:ee: 37:32:f6:d9:43:ff:55:1e:2b:7a:df:4c:35:d2:46:b1:dc:73: c0:1f:33:72:4e:35:ac:79:fa:79:34:77:d1:d7:11:fd:68:0d: 3c:6e:4c:11:27:9e:00:09:e8:f4:7e:f7:da:1a:42:e6:a3:b6: 57:09:1b:62:d3:ae:61:ef:41:16:dd:47:93:0d:e2:47:2f:f1: ae:7f:6a:15:56:94:68:fc:d2:ac:f6:83:ac:07:7b:38:e6:49: 13:0f:30:81:d6:76:16:2d:71:82:23:4a:d3:c0:8f:d1:de:72: 25:f4:95:35:0a:45:a4:93:f2:2e:8d:dc:1b:a8:2b:10:6b:57: b8:a6:6c:97:db:9b:96:2a:30:97:e2:8d:72:ac:c4:17:e1:b8: 1f:38:4a:aa:47:e3:c4:c8:46:e2:58:65:82:d3:fa:d3:85:4f: 8c:f8:c3:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhGRTgxMTAvBgNVBAUTKEQwMkQ5MEZCOTEyQTU5NjBCQkU1NkNCNEU3NTM1MTZB MjRDNkVGN0IwHhcNMjUwNDIwMTkxNzIzWhcNMjUwNDI3MTkxNzIzWjAYMRYwFAYD VQQDEw02ODA1NDg0My0xYjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1yCLoE17bpjfcNn4N2MJ3vh5Tc5D8zM/8fWO1Eef3vj4wiH/CjuUsqt5kKaL 8Nq6h0+cqvXaMIdn8TwhJIB95EHPX/cI+tXNZ0V6QEbu8Uvu2dp02YsnJcAlmw1g tUUYYJ5oU8d3fCqIkfzRA5tXe+Yqj3511DS2POzEA9P3HGLueJVH2iJTtUAve1At sv40q++jDmhimdBqh5Gi2GSYhbzGxWgAIwxXOi+MkKxTpKVbEEzqVXBeEVge3dDn wuUh19mQF2wQtNh3ucbAPoxoeFKYjV5RwIPMi1TnnBuG0zdhwhGxBkidGeYh1iM5 j5FtfUEnky4hOC0157W2tOsrJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP+QE/I4 c3zgiGkGFNzOm3ysHo81MB8GA1UdIwQYMBaAFNAtkPuRKllgu+VstOdTUWokxu97 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEZFOC8xMkY5NkZCMjRF RkIxMUVBOEQ2OTREMERDNEY5QUUwMi8wQzJRLTVFcVdXQzc1V3kwNTFOUmFpVEc3 M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBDMlEtNUVxV1dDNzVXeTA1MU5SYWlURzczcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEZFOC8xMkY5NkZCMjRFRkIxMUVBOEQ2OTREMERDNEY5QUUwMi8wQzJRLTVFcVdX Qzc1V3kwNTFOUmFpVEc3M3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+0LF0EZ2rP80X+8zTQck7uDckjPbvf7LjUJDlF5hNOoPMhoai+wEi aUsnHRRpfxx33LkfgVk4Cxx4juyomVBgLaQZQEsbw4SZw/79j0kMciNIvap/C/80 YO43MvbZQ/9VHit630w10kax3HPAHzNyTjWsefp5NHfR1xH9aA08bkwRJ54ACej0 fvfaGkLmo7ZXCRti065h70EW3UeTDeJHL/Guf2oVVpRo/NKs9oOsB3s45kkTDzCB 1nYWLXGCI0rTwI/R3nIl9JU1CkWkk/IujdwbqCsQa1e4pmyX25uWKjCX4o1yrMQX 4bgfOEqqR+PEyEbiWGWC0/rThU+M+MN7 -----END CERTIFICATE-----Generated at Sun Apr 20 22:23:42 2025 by rpki-client