$ rpki-client -vvf rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.mft File: o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.mft (raw, json) Hash identifier: +T5duKIc5DnrKSdL8Pm17vIL8C0uaaNr5FMq3HaL1oE= Subject key identifier: 7A:02:1C:C5:30:DC:62:C3:49:96:9D:5F:63:19:06:1C:0B:F7:DF:80 Authority key identifier: A3:B1:64:81:B5:D6:C1:79:FC:0B:73:AE:1E:0E:53:DE:96:76:41:DC Certificate issuer: /CN=A9158877/serialNumber=A3B16481B5D6C179FC0B73AE1E0E53DE967641DC Certificate serial: 0594 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.mft Manifest number: 058C Signing time: Fri 28 Mar 2025 23:31:30 +0000 Manifest this update: Fri 28 Mar 2025 23:31:29 +0000 Manifest next update: Fri 04 Apr 2025 23:31:29 +0000 Files and hashes: 1: o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.crl (hash: jQJubb+XJcDB2rR17v1vg8YctDCVU+CeAH9X8++fPdM=) 2: 58C1F4C06E2211EE98839C33C4F9AE02.roa (hash: lCYYN1i9IbJqwRctgnEOzzG7AOe1LHSeBCWruRPnC40=) 3: 931EBB586D6E11EE8AF4BF30C4F9AE02.roa (hash: 8IJ4hd5hgtTMjRCQeFaMZGfRaNHjTczEG5GeSYDk6qI=) 4: DD21ADFACA7311EBAA6E0567C4F9AE02.roa (hash: ZotghGiuMfOw+s3uuTOdkshmDTpBWNWmcIBqIc4IVro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.crl rsync://rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 23:31:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1428 (0x594) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158877 Validity Not Before: Mar 28 23:31:29 2025 GMT Not After : Apr 4 23:31:29 2025 GMT Subject: CN=67e73151-0ca2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ae:e8:91:ac:5e:df:6d:bd:94:b6:80:5d:4e: 0c:b6:75:11:b5:84:2b:2c:5f:7f:fa:b5:12:ab:9e: 28:4c:29:12:5c:6c:a0:78:67:5e:d7:bd:8b:ed:f7: 97:4d:3e:69:72:b5:fc:5f:c0:d7:8b:27:15:70:94: d4:59:da:7f:71:e9:99:70:4c:20:6f:aa:d0:d1:4e: d4:54:fd:32:ab:29:9e:31:c0:71:8f:37:ae:91:2c: f9:c3:d9:8a:45:58:f1:3e:ef:0f:e9:f4:6d:30:ba: 01:63:9a:a7:6f:93:ac:5f:9c:aa:dd:bb:c5:f2:90: 30:50:5e:53:70:e2:68:4d:ec:8e:a1:f7:56:15:ef: 35:31:35:42:3c:48:13:34:6c:96:0a:6f:20:76:84: 21:5b:91:0d:13:27:08:d1:83:7b:bb:1d:9a:9e:bc: 40:af:c3:e4:e9:4c:ae:77:1a:8a:0f:5d:d7:4c:e0: 66:52:94:5c:fb:25:fa:b8:05:7f:1c:0c:32:20:5b: f6:79:92:e1:a7:d3:46:27:bc:03:39:c5:b1:34:59: 20:a2:54:be:85:68:c5:3e:1f:92:3c:9e:80:7f:6d: 60:f3:52:11:d1:d7:ba:fe:d9:b7:e8:4d:c2:2f:eb: d5:8b:b0:55:39:cb:32:7c:85:89:d4:89:4b:80:41: e4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:02:1C:C5:30:DC:62:C3:49:96:9D:5F:63:19:06:1C:0B:F7:DF:80 X509v3 Authority Key Identifier: keyid:A3:B1:64:81:B5:D6:C1:79:FC:0B:73:AE:1E:0E:53:DE:96:76:41:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:af:1f:83:fd:ca:9f:63:b6:c0:88:93:32:6b:15:a7:af:e7: 26:6f:2c:7c:2c:88:57:13:44:7d:56:48:7d:88:c2:37:0c:c1: 76:8e:c3:fa:12:29:dd:dc:08:23:34:6c:c1:83:7d:a4:24:e8: 0f:2a:f4:07:36:c0:10:32:44:8b:a4:60:87:cc:6e:76:2d:99: ed:59:ad:7e:20:b6:e5:05:1a:c2:ad:81:80:80:e9:eb:17:b4: 6a:aa:54:e3:eb:96:a4:d4:cd:6f:fb:2e:68:47:95:b4:d1:c2: 40:5b:96:da:f6:3a:a7:d1:ba:d6:ed:63:96:c4:2b:e6:bc:3d: 96:1f:c8:f6:60:e5:da:cc:ad:f9:39:bd:02:17:f0:14:3c:23: 66:f8:b9:65:05:de:db:9a:13:f1:06:05:ff:b6:62:c7:d0:55: 3d:1f:f9:84:c2:33:c7:1e:60:2e:5b:04:3d:2e:b8:7a:28:e6: db:c1:83:82:a7:fc:fc:94:e6:ac:a1:2f:2a:21:39:0a:1d:4a: 37:60:7e:e8:eb:2c:3e:65:8a:e0:09:50:e9:09:1e:68:c1:aa: e2:47:b8:f1:f1:fc:47:17:a3:89:23:bb:96:07:a0:1a:de:32: 4c:0b:d6:58:fa:43:5c:4b:c3:cc:da:22:e3:65:24:32:6b:36: 1f:33:51:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg4NzcxMTAvBgNVBAUTKEEzQjE2NDgxQjVENkMxNzlGQzBCNzNBRTFFMEU1M0RF OTY3NjQxREMwHhcNMjUwMzI4MjMzMTI5WhcNMjUwNDA0MjMzMTI5WjAYMRYwFAYD VQQDEw02N2U3MzE1MS0wY2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuK7okaxe3229lLaAXU4MtnURtYQrLF9/+rUSq54oTCkSXGygeGde172L7feX TT5pcrX8X8DXiycVcJTUWdp/cemZcEwgb6rQ0U7UVP0yqymeMcBxjzeukSz5w9mK RVjxPu8P6fRtMLoBY5qnb5OsX5yq3bvF8pAwUF5TcOJoTeyOofdWFe81MTVCPEgT NGyWCm8gdoQhW5ENEycI0YN7ux2anrxAr8Pk6UyudxqKD13XTOBmUpRc+yX6uAV/ HAwyIFv2eZLhp9NGJ7wDOcWxNFkgolS+hWjFPh+SPJ6Af21g81IR0de6/tm36E3C L+vVi7BVOcsyfIWJ1IlLgEHkYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHoCHMUw 3GLDSZadX2MZBhwL99+AMB8GA1UdIwQYMBaAFKOxZIG11sF5/Atzrh4OU96WdkHc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODg3Ny9GMDU4NThCOENB NzAxMUVCQTlEMkRDNjFDNEY5QUUwMi9vN0ZrZ2JYV3dYbjhDM091SGc1VDNwWjJR ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL283RmtnYlhXd1huOEMzT3VIZzVUM3BaMlFkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODg3Ny9GMDU4NThCOENBNzAxMUVCQTlEMkRDNjFDNEY5QUUwMi9vN0ZrZ2JYV3dY bjhDM091SGc1VDNwWjJRZHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/rx+D/cqfY7bAiJMyaxWnr+cmbyx8LIhXE0R9Vkh9iMI3DMF2jsP6 Eind3AgjNGzBg32kJOgPKvQHNsAQMkSLpGCHzG52LZntWa1+ILblBRrCrYGAgOnr F7RqqlTj65ak1M1v+y5oR5W00cJAW5ba9jqn0brW7WOWxCvmvD2WH8j2YOXazK35 Ob0CF/AUPCNm+LllBd7bmhPxBgX/tmLH0FU9H/mEwjPHHmAuWwQ9Lrh6KObbwYOC p/z8lOasoS8qITkKHUo3YH7o6yw+ZYrgCVDpCR5owariR7jx8fxHF6OJI7uWB6Aa 3jJMC9ZY+kNcS8PM2iLjZSQyazYfM1F/ -----END CERTIFICATE-----Generated at Fri Apr 4 22:34:54 2025 by rpki-client