$ rpki-client -vvf rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft File: 4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft (raw, json) Hash identifier: HXyWyJ7FqA9vQBQuAckKXe+1rVckv2nEOu4yn6UQBZI= Subject key identifier: EB:8C:D9:32:10:A8:20:9F:5B:B8:8C:38:1C:D4:70:FB:67:87:B1:32 Authority key identifier: E0:E8:08:30:65:95:FE:68:D5:F2:81:A9:62:AF:6D:F5:1E:86:F9:32 Certificate issuer: /CN=A914D0E3/serialNumber=E0E808306595FE68D5F281A962AF6DF51E86F932 Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OgIMGWV_mjV8oGpYq9t9R6G-TI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft Manifest number: 5A Signing time: Sat 05 Apr 2025 06:25:45 +0000 Manifest this update: Sat 05 Apr 2025 06:25:45 +0000 Manifest next update: Sat 12 Apr 2025 06:25:45 +0000 Files and hashes: 1: 4OgIMGWV_mjV8oGpYq9t9R6G-TI.crl (hash: Gy3Q3OrKdrR9ruBRp1AlBGzBzDGYIboEfbzd+IRkGM8=) 2: 793E79A68D1811EF92E90C51C4F9AE02.roa (hash: zVqTt6tzc+Il4GxP87PklggXFLaDGzjtaeUtoZhSM8Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.crl rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OgIMGWV_mjV8oGpYq9t9R6G-TI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 06:25:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D0E3 Validity Not Before: Apr 5 06:25:45 2025 GMT Not After : Apr 12 06:25:45 2025 GMT Subject: CN=67f0cce9-51b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9b:f0:29:7b:94:94:b4:84:43:52:82:49:24: 34:f0:3f:4e:2a:5b:87:0c:b9:05:d7:50:39:bc:d9: 17:06:d5:b8:28:55:31:66:79:aa:58:79:95:5d:c8: 78:88:29:eb:53:1e:53:98:8f:c1:e9:7a:4d:79:6d: d4:81:5a:41:78:a0:a8:a2:a3:61:bd:56:29:26:1c: 5a:ec:02:03:93:df:18:b8:28:f8:ae:b2:1a:ee:19: ed:5c:28:b8:cf:33:7a:38:1a:e7:8c:69:2d:73:d8: fe:07:a9:24:07:f3:d7:32:27:58:17:af:ec:ee:fb: 71:2e:be:31:c1:ee:8e:80:91:7e:b7:bf:8b:f9:6c: f9:91:39:5e:07:e6:22:7f:18:a0:d4:ac:38:76:e4: 7c:5b:db:13:7c:a3:b6:a5:fe:4f:1e:4e:6b:df:cd: 79:31:07:61:48:77:6e:44:eb:e8:3c:b4:be:1f:a7: fb:d0:f2:c0:7d:68:b1:12:39:4e:30:03:02:2d:08: b1:d4:e4:d2:06:8e:48:72:03:10:0a:98:17:40:b1: ce:f3:b0:68:bd:0c:f3:a1:a1:70:b9:e1:f1:c6:aa: 5a:83:2c:22:4d:30:6d:f5:b0:e3:15:ac:eb:44:33: d0:31:6d:a6:31:fa:a3:b5:ad:b2:3d:6a:90:0c:6f: 6a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:8C:D9:32:10:A8:20:9F:5B:B8:8C:38:1C:D4:70:FB:67:87:B1:32 X509v3 Authority Key Identifier: keyid:E0:E8:08:30:65:95:FE:68:D5:F2:81:A9:62:AF:6D:F5:1E:86:F9:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OgIMGWV_mjV8oGpYq9t9R6G-TI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ce:68:b4:05:7f:41:99:00:9c:6c:95:0f:ba:d8:bd:fe:5e: 62:0e:fb:b3:85:2c:04:e7:2e:5a:a0:8b:e2:49:3d:7d:00:5f: f4:67:03:12:98:ee:03:e4:ff:5c:87:7a:03:a1:d2:90:6a:c5: 8f:6d:57:cd:21:75:eb:f0:35:f6:b1:38:74:1a:eb:b6:da:d6: 5e:e8:56:4e:ea:54:96:65:c5:6e:0c:70:8f:a6:7d:3c:ef:2f: 4d:50:af:7c:fe:d3:55:2a:a5:df:5d:0e:78:a3:da:7e:1d:56: 92:a9:a9:a9:d6:42:ec:84:00:e3:da:5c:6d:16:7e:9d:b6:9f: 24:1e:a7:fd:c2:ea:a8:09:47:38:f2:6d:78:98:61:82:23:d4: cd:39:15:87:7c:4c:f4:80:56:26:4d:40:52:e2:0f:4b:9f:12: 35:43:d2:58:23:30:c9:27:56:85:80:ca:51:15:11:8f:f6:96: f8:2c:f7:26:67:e3:19:ba:60:66:90:5d:ed:9f:a4:e8:53:72: 11:47:f6:1b:fc:85:7e:f0:f0:68:35:84:9f:3c:32:f2:d8:b8: ec:30:e8:4b:74:1b:31:45:f2:61:98:7a:6f:95:3d:c2:d8:a7: 4a:12:cd:67:c7:8e:b4:b7:84:14:3e:37:50:79:32:b4:f4:a1: 02:26:83:70 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RDBFMzExMC8GA1UEBRMoRTBFODA4MzA2NTk1RkU2OEQ1RjI4MUE5NjJBRjZERjUx RTg2RjkzMjAeFw0yNTA0MDUwNjI1NDVaFw0yNTA0MTIwNjI1NDVaMBgxFjAUBgNV BAMTDTY3ZjBjY2U5LTUxYjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVm/Ape5SUtIRDUoJJJDTwP04qW4cMuQXXUDm82RcG1bgoVTFmeapYeZVdyHiI KetTHlOYj8Hpek15bdSBWkF4oKiio2G9VikmHFrsAgOT3xi4KPiushruGe1cKLjP M3o4GueMaS1z2P4HqSQH89cyJ1gXr+zu+3EuvjHB7o6AkX63v4v5bPmROV4H5iJ/ GKDUrDh25Hxb2xN8o7al/k8eTmvfzXkxB2FId25E6+g8tL4fp/vQ8sB9aLESOU4w AwItCLHU5NIGjkhyAxAKmBdAsc7zsGi9DPOhoXC54fHGqlqDLCJNMG31sOMVrOtE M9AxbaYx+qO1rbI9apAMb2r/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU64zZMhCo IJ9buIw4HNRw+2eHsTIwHwYDVR0jBBgwFoAU4OgIMGWV/mjV8oGpYq9t9R6G+TIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTREMEUzL0FBOTg1OUY4OEM3 RTExRUY4RTkyRTcxQkM0RjlBRTAyLzRPZ0lNR1dWX21qVjhvR3BZcTl0OVI2Ry1U SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNE9nSU1HV1ZfbWpWOG9HcFlxOXQ5UjZHLVRJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRE MEUzL0FBOTg1OUY4OEM3RTExRUY4RTkyRTcxQkM0RjlBRTAyLzRPZ0lNR1dWX21q VjhvR3BZcTl0OVI2Ry1USS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHrOaLQFf0GZAJxslQ+62L3+XmIO+7OFLATnLlqgi+JJPX0AX/RnAxKY 7gPk/1yHegOh0pBqxY9tV80hdevwNfaxOHQa67ba1l7oVk7qVJZlxW4McI+mfTzv L01Qr3z+01Uqpd9dDnij2n4dVpKpqanWQuyEAOPaXG0Wfp22nyQep/3C6qgJRzjy bXiYYYIj1M05FYd8TPSAViZNQFLiD0ufEjVD0lgjMMknVoWAylEVEY/2lvgs9yZn 4xm6YGaQXe2fpOhTchFH9hv8hX7w8Gg1hJ88MvLYuOww6Et0GzFF8mGYem+VPcLY p0oSzWfHjrS3hBQ+N1B5MrT0oQImg3A= -----END CERTIFICATE-----Generated at Sun Apr 6 03:01:12 2025 by rpki-client