$ rpki-client -vvf rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft File: o9c6Tp8QQ946v09e0Qhor20zW_Q.mft (raw, json) Hash identifier: vTdpU1ad99oqssY8+9beswWAu2TaB11kzzKr9PCrdc4= Subject key identifier: 38:31:D0:E7:2A:21:38:33:80:A2:30:03:BE:A5:E6:B9:8E:A9:D4:AD Authority key identifier: A3:D7:3A:4E:9F:10:43:DE:3A:BF:4F:5E:D1:08:68:AF:6D:33:5B:F4 Certificate issuer: /CN=A914A4A1/serialNumber=A3D73A4E9F1043DE3ABF4F5ED10868AF6D335BF4 Certificate serial: 038E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9c6Tp8QQ946v09e0Qhor20zW_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft Manifest number: 038A Signing time: Sat 29 Mar 2025 01:03:43 +0000 Manifest this update: Sat 29 Mar 2025 01:03:42 +0000 Manifest next update: Sat 05 Apr 2025 01:03:42 +0000 Files and hashes: 1: o9c6Tp8QQ946v09e0Qhor20zW_Q.crl (hash: SxlWTbKdepLwMIv5mJnYbSyE76cLWM1E1iVNXoOJjac=) 2: 59212E58955D11EC97EC0461C4F9AE02.roa (hash: 82bmKccqbBzTdNqrTXoGpBcJx8ypp4VeLlhE4Yo0df8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.crl rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9c6Tp8QQ946v09e0Qhor20zW_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 01:03:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 910 (0x38e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A4A1 Validity Not Before: Mar 29 01:03:42 2025 GMT Not After : Apr 5 01:03:42 2025 GMT Subject: CN=67e746ee-af16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:7c:be:e8:b8:5f:87:b5:28:f6:2d:b4:1a:b5: 49:3a:aa:7c:4a:b2:0b:24:ff:d1:4f:bf:d5:09:37: 98:17:d5:67:ab:4d:b6:a6:66:36:d6:21:cf:bb:a0: 9e:c1:7a:92:7f:e7:75:9d:98:95:1a:a0:3d:75:05: d5:6b:a3:66:dd:0d:4d:8d:a0:2c:29:f8:16:37:c0: 6f:7d:59:3e:43:b1:cd:36:25:2c:c1:b8:c0:c5:17: 41:2c:51:a2:df:84:be:bf:17:00:e9:02:0e:d8:04: 21:1c:31:ae:c2:bd:6c:33:3a:f9:a4:45:62:09:ac: ff:56:e4:b7:1b:a6:4c:0a:54:d5:84:6d:00:c0:5c: 8a:c6:04:1e:72:05:5d:23:7d:18:ab:82:66:c1:86: 2b:78:a6:7c:38:06:28:3e:af:59:b3:dd:e4:24:e2: a1:80:e3:c2:57:ca:0e:cf:6e:fe:e1:58:d7:ae:6f: 31:13:37:9a:f2:17:57:f8:b0:f0:52:b0:1b:96:3b: 22:29:6d:ad:2b:73:83:98:de:10:70:f5:ca:a3:8f: 12:e4:02:05:08:b4:1a:e4:7e:08:6d:4f:b2:d0:80: ce:ef:f9:b8:86:e3:e3:27:4e:e3:35:6d:29:21:b0: b9:b2:f7:d4:0c:b2:5c:28:58:a4:10:31:f9:b2:30: 5c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:31:D0:E7:2A:21:38:33:80:A2:30:03:BE:A5:E6:B9:8E:A9:D4:AD X509v3 Authority Key Identifier: keyid:A3:D7:3A:4E:9F:10:43:DE:3A:BF:4F:5E:D1:08:68:AF:6D:33:5B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9c6Tp8QQ946v09e0Qhor20zW_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:76:37:69:3d:b1:83:38:83:cd:33:c9:c1:e7:88:a2:8d:f3: 3e:d8:bc:33:b3:93:fc:70:d4:6f:dc:31:c4:a9:53:4b:40:a4: 6c:35:64:a2:58:b0:29:ad:f2:d1:29:ec:4c:8a:61:af:74:d9: 49:40:db:82:e4:b1:49:aa:a1:63:26:3c:e6:c4:81:54:55:50: fc:c1:bc:bb:9e:80:29:11:2d:7c:63:36:10:4d:4d:a6:0a:a0: 11:3f:04:4f:d5:0c:9d:5f:a7:89:49:72:35:31:c5:66:74:9d: 66:8d:da:62:52:c8:a8:13:c9:b7:4e:8b:69:df:a3:28:37:97: 1e:77:e7:38:96:f3:ca:9e:fb:65:6d:a4:94:be:6c:f8:0a:23: e7:69:91:cd:c7:ad:82:34:77:22:c8:68:3e:9c:a7:9c:d4:99: 5e:e2:5e:d6:a3:ad:c4:65:8e:7a:18:bf:97:9f:a9:34:92:4e: 99:15:91:9f:dd:7f:2d:1f:8a:49:cf:f5:d9:5b:ef:94:d8:41: 45:24:f4:6f:3c:5f:9f:fa:46:24:87:5e:c3:96:7f:d6:ee:fc: 6f:f3:d8:67:19:73:ab:a1:cc:fe:1c:d8:37:39:83:d4:a7:72: 4e:7f:b1:89:4a:bd:f6:1a:ca:c7:25:4d:02:3c:9d:c3:15:5d: d4:5a:b9:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA44wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE0QTExMTAvBgNVBAUTKEEzRDczQTRFOUYxMDQzREUzQUJGNEY1RUQxMDg2OEFG NkQzMzVCRjQwHhcNMjUwMzI5MDEwMzQyWhcNMjUwNDA1MDEwMzQyWjAYMRYwFAYD VQQDEw02N2U3NDZlZS1hZjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ny+6Lhfh7Uo9i20GrVJOqp8SrILJP/RT7/VCTeYF9Vnq022pmY21iHPu6Ce wXqSf+d1nZiVGqA9dQXVa6Nm3Q1NjaAsKfgWN8BvfVk+Q7HNNiUswbjAxRdBLFGi 34S+vxcA6QIO2AQhHDGuwr1sMzr5pEViCaz/VuS3G6ZMClTVhG0AwFyKxgQecgVd I30Yq4JmwYYreKZ8OAYoPq9Zs93kJOKhgOPCV8oOz27+4VjXrm8xEzea8hdX+LDw UrAbljsiKW2tK3ODmN4QcPXKo48S5AIFCLQa5H4IbU+y0IDO7/m4huPjJ07jNW0p IbC5svfUDLJcKFikEDH5sjBciQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDgx0Ocq ITgzgKIwA76l5rmOqdStMB8GA1UdIwQYMBaAFKPXOk6fEEPeOr9PXtEIaK9tM1v0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTRBMS82OENFQzA5NDk1 NTkxMUVDODQ3Mjg3MzZDNEY5QUUwMi9vOWM2VHA4UVE5NDZ2MDllMFFob3IyMHpX X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL285YzZUcDhRUTk0NnYwOWUwUWhvcjIweldfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTRBMS82OENFQzA5NDk1NTkxMUVDODQ3Mjg3MzZDNEY5QUUwMi9vOWM2VHA4UVE5 NDZ2MDllMFFob3IyMHpXX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAudjdpPbGDOIPNM8nB54iijfM+2Lwzs5P8cNRv3DHEqVNLQKRsNWSi WLAprfLRKexMimGvdNlJQNuC5LFJqqFjJjzmxIFUVVD8wby7noApES18YzYQTU2m CqARPwRP1QydX6eJSXI1McVmdJ1mjdpiUsioE8m3Totp36MoN5ced+c4lvPKnvtl baSUvmz4CiPnaZHNx62CNHciyGg+nKec1Jle4l7Wo63EZY56GL+Xn6k0kk6ZFZGf 3X8tH4pJz/XZW++U2EFFJPRvPF+f+kYkh17Dln/W7vxv89hnGXOrocz+HNg3OYPU p3JOf7GJSr32GsrHJU0CPJ3DFV3UWrlk -----END CERTIFICATE-----Generated at Fri Apr 4 18:37:25 2025 by rpki-client