$ rpki-client -vvf rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.mft File: oNZvEXVTOiOoUulRUGXIWjOec4Y.mft (raw, json) Hash identifier: zPs6en0ndZtfJHlouYKaT/PvqFAHnjtnRDCG+8eeDQQ= Subject key identifier: 2D:CE:7D:0D:07:10:11:DE:CA:F6:B5:DA:B3:4C:11:96:69:C2:0E:21 Authority key identifier: A0:D6:6F:11:75:53:3A:23:A8:52:E9:51:50:65:C8:5A:33:9E:73:86 Certificate issuer: /CN=A9158547/serialNumber=A0D66F1175533A23A852E9515065C85A339E7386 Certificate serial: F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNZvEXVTOiOoUulRUGXIWjOec4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.mft Manifest number: F7 Signing time: Sat 29 Mar 2025 04:36:32 +0000 Manifest this update: Sat 29 Mar 2025 04:36:32 +0000 Manifest next update: Sat 05 Apr 2025 04:36:32 +0000 Files and hashes: 1: oNZvEXVTOiOoUulRUGXIWjOec4Y.crl (hash: Fpf87lIIPwcQ/JUQNBLqT6UTlrk3af87C96OKWYoE2k=) 2: 6E7BFE7092A611EEBD5D8720C4F9AE02.roa (hash: nLAI2KpHv4yGG3LNJRHSRrSrOVvhwD5I70+pJLgB34A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.crl rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNZvEXVTOiOoUulRUGXIWjOec4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 04:36:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158547 Validity Not Before: Mar 29 04:36:32 2025 GMT Not After : Apr 5 04:36:32 2025 GMT Subject: CN=67e778d0-4e98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:b6:41:21:27:e3:7c:41:92:b3:0c:d0:2e:66: bf:0f:66:9a:03:a0:cf:2d:78:c6:90:00:83:a7:f4: 03:02:e4:11:45:75:ab:a6:fe:be:3e:df:8b:07:24: ac:28:b8:c2:df:79:de:e3:b0:9b:0b:94:12:16:6d: 8e:8d:d2:e5:30:74:5e:ba:e6:71:a5:ba:34:0e:1b: f4:ef:42:1f:2d:c4:32:47:fd:e6:7d:70:c0:b3:bd: c8:3d:c3:c8:a4:9b:80:47:2a:53:3a:51:e3:b2:85: 69:26:9a:c6:22:7f:da:c4:28:8a:1e:78:03:2d:a3: e3:ea:b1:5b:d4:93:0a:4d:e7:8c:e7:4f:2b:a6:53: 48:e0:42:18:49:ac:e5:ca:bd:0f:89:d3:26:cd:da: 8e:38:fc:03:e5:b5:53:ee:f4:c5:05:46:5a:2e:50: 95:6e:df:5b:55:fc:a6:4b:3a:12:1c:a0:63:42:ee: 25:a9:31:c1:61:fa:55:5c:c9:b3:eb:71:62:77:4b: 7c:f6:3b:6e:c0:89:34:2b:aa:99:6c:a0:1a:05:ca: 26:69:c8:e3:5c:3d:59:64:cc:04:30:80:38:13:99: b6:6d:ea:6f:da:f3:9c:51:ff:0a:99:2d:68:02:9c: 7a:73:df:f6:a2:5e:6e:35:cf:22:af:b5:e9:eb:bf: 5c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:CE:7D:0D:07:10:11:DE:CA:F6:B5:DA:B3:4C:11:96:69:C2:0E:21 X509v3 Authority Key Identifier: keyid:A0:D6:6F:11:75:53:3A:23:A8:52:E9:51:50:65:C8:5A:33:9E:73:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNZvEXVTOiOoUulRUGXIWjOec4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:52:b0:f5:4f:ff:92:a3:90:35:17:da:cf:e8:aa:90:13:11: 74:f7:c8:d5:3a:f8:34:d8:07:c9:05:f3:20:aa:7a:da:2a:16: e1:8f:2b:50:4d:25:1f:3e:f5:30:56:58:cb:0c:9f:f3:19:da: 09:ed:81:8f:d8:7f:3b:e2:60:c3:7e:66:dc:1d:c4:c8:3a:d7: c2:c7:90:d6:6b:74:94:93:0d:7c:ba:4f:0c:89:4c:07:27:42: 00:ce:8a:76:f1:bf:31:72:f4:bd:30:fd:dd:7c:3f:0b:35:b5: 19:25:5a:db:9c:c7:e8:88:65:7b:5f:49:ee:6d:f1:1a:8e:c1: 47:44:c6:35:02:4d:2d:d4:ee:6d:96:50:e2:32:2b:ee:d5:55: da:7b:15:13:ac:b1:20:0b:db:41:c5:ff:80:0a:c7:8a:db:9a: f9:f0:ea:27:51:42:6f:69:ae:7c:02:eb:da:41:92:42:10:0e: a2:61:76:e0:5c:f4:ad:15:82:f6:1a:9f:a0:b5:2e:f1:0a:fe: 62:80:7a:07:f2:e5:1e:25:a3:29:33:37:bd:17:a6:30:33:33: c5:e7:71:a8:88:b5:70:22:d8:14:40:cd:f0:34:c3:07:52:ab: 1d:1f:85:fd:fc:f9:dd:af:03:bd:00:2e:76:ee:6e:37:98:8e: 94:a4:9a:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg1NDcxMTAvBgNVBAUTKEEwRDY2RjExNzU1MzNBMjNBODUyRTk1MTUwNjVDODVB MzM5RTczODYwHhcNMjUwMzI5MDQzNjMyWhcNMjUwNDA1MDQzNjMyWjAYMRYwFAYD VQQDEw02N2U3NzhkMC00ZTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5bZBISfjfEGSswzQLma/D2aaA6DPLXjGkACDp/QDAuQRRXWrpv6+Pt+LBySs KLjC33ne47CbC5QSFm2OjdLlMHReuuZxpbo0Dhv070IfLcQyR/3mfXDAs73IPcPI pJuARypTOlHjsoVpJprGIn/axCiKHngDLaPj6rFb1JMKTeeM508rplNI4EIYSazl yr0PidMmzdqOOPwD5bVT7vTFBUZaLlCVbt9bVfymSzoSHKBjQu4lqTHBYfpVXMmz 63Fid0t89jtuwIk0K6qZbKAaBcomacjjXD1ZZMwEMIA4E5m2bepv2vOcUf8KmS1o Apx6c9/2ol5uNc8ir7Xp679cYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC3OfQ0H EBHeyva12rNMEZZpwg4hMB8GA1UdIwQYMBaAFKDWbxF1UzojqFLpUVBlyFoznnOG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODU0Ny9CMzg2NjhFNDky QTUxMUVFOENEOTVCMUVDNEY5QUUwMi9vTlp2RVhWVE9pT29VdWxSVUdYSVdqT2Vj NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29OWnZFWFZUT2lPb1V1bFJVR1hJV2pPZWM0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODU0Ny9CMzg2NjhFNDkyQTUxMUVFOENEOTVCMUVDNEY5QUUwMi9vTlp2RVhWVE9p T29VdWxSVUdYSVdqT2VjNFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSUrD1T/+So5A1F9rP6KqQExF098jVOvg02AfJBfMgqnraKhbhjytQ TSUfPvUwVljLDJ/zGdoJ7YGP2H874mDDfmbcHcTIOtfCx5DWa3SUkw18uk8MiUwH J0IAzop28b8xcvS9MP3dfD8LNbUZJVrbnMfoiGV7X0nubfEajsFHRMY1Ak0t1O5t llDiMivu1VXaexUTrLEgC9tBxf+ACseK25r58OonUUJvaa58AuvaQZJCEA6iYXbg XPStFYL2Gp+gtS7xCv5igHoH8uUeJaMpMze9F6YwMzPF53GoiLVwItgUQM3wNMMH UqsdH4X9/PndrwO9AC527m43mI6UpJqn -----END CERTIFICATE-----Generated at Fri Apr 4 22:17:46 2025 by rpki-client