$ rpki-client -vvf rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.mft File: 8Odm-zGSJII8p502cgxR7fytz-Y.mft (raw, json) Hash identifier: cG2bhNT+66SfLk+mUuKaXkCsY2vdNumy/e7zzGWTs48= Subject key identifier: 6B:2E:09:2B:77:E4:9B:C2:0A:C7:5A:63:9E:DD:EB:FA:FC:EC:AC:E8 Authority key identifier: F0:E7:66:FB:31:92:24:82:3C:A7:9D:36:72:0C:51:ED:FC:AD:CF:E6 Certificate issuer: /CN=A917638D/serialNumber=F0E766FB319224823CA79D36720C51EDFCADCFE6 Certificate serial: 0940 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Odm-zGSJII8p502cgxR7fytz-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.mft Manifest number: 0938 Signing time: Fri 04 Apr 2025 20:26:20 +0000 Manifest this update: Fri 04 Apr 2025 20:26:19 +0000 Manifest next update: Fri 11 Apr 2025 20:26:19 +0000 Files and hashes: 1: 8Odm-zGSJII8p502cgxR7fytz-Y.crl (hash: n8gXud1Bjuomb0+1xoulKCPscU4bw7kobmKhQ3kxH3E=) 2: 55635E7C97B611EA97FDCB6EC4F9AE02.roa (hash: PUUYX8ppf+3MShGt8AoPK4+W3CKH5Xedh9Wmflb/psI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.crl rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Odm-zGSJII8p502cgxR7fytz-Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:54:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2368 (0x940) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917638D Validity Not Before: Apr 4 20:26:19 2025 GMT Not After : Apr 11 20:26:19 2025 GMT Subject: CN=67f0406b-03fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2a:fd:45:7b:11:ce:c4:91:74:97:6b:85:fa: 43:7b:a1:57:0d:18:c0:f4:2f:36:9f:01:b7:3e:01: 90:eb:3f:31:11:b3:38:28:7c:4b:71:da:1c:26:94: 8a:a6:5b:e5:2c:c9:b8:0f:ac:f6:80:f7:4c:71:79: 92:69:07:f0:02:3e:22:7e:8f:bf:2e:68:78:8d:43: 55:e6:9b:17:40:e5:82:9c:a0:5d:2a:5c:40:97:da: 47:71:0c:cc:96:6f:2d:e7:39:c1:c3:91:ea:bb:9c: ed:3b:af:2b:df:08:92:d9:ad:f3:6b:7f:45:20:b7: 40:ef:e4:2c:58:b0:a0:d6:23:79:66:19:24:66:c3: 8f:86:98:97:05:96:d5:b0:01:97:85:c5:0c:c1:5e: 5e:4f:b5:e0:af:85:b9:bd:bc:36:91:b8:63:c1:8b: cc:28:57:64:90:31:16:07:40:8a:2e:df:b6:62:47: 52:91:a8:fd:99:49:0d:12:11:4e:a5:ad:46:38:42: d6:c2:5b:3e:eb:48:3d:e4:c0:f2:4b:9d:04:46:fd: cf:26:ae:d9:3d:47:4b:12:03:af:42:2b:89:06:ac: 25:4e:6f:5c:87:f3:79:8b:e6:df:14:5f:17:c4:96: cf:81:c1:02:32:13:d5:7b:c4:f4:f4:00:96:6d:49: bf:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:2E:09:2B:77:E4:9B:C2:0A:C7:5A:63:9E:DD:EB:FA:FC:EC:AC:E8 X509v3 Authority Key Identifier: keyid:F0:E7:66:FB:31:92:24:82:3C:A7:9D:36:72:0C:51:ED:FC:AD:CF:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Odm-zGSJII8p502cgxR7fytz-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:c4:8f:9f:d8:17:ac:4a:70:af:07:b2:5d:eb:b4:ea:2a:7c: 58:03:c2:af:53:c7:82:c7:99:8a:24:37:b5:79:11:9a:be:fc: c7:5c:81:a4:e0:45:fd:88:3c:3c:3d:33:3f:8d:15:c1:fe:46: b1:e7:ef:fe:a4:b5:29:df:b3:eb:d2:df:93:39:2e:1f:c7:c7: 07:ce:3a:bd:b1:75:aa:a6:a1:5a:0c:5e:8d:66:6b:ef:1d:ac: 6c:ee:98:f2:b4:09:43:f6:80:25:08:d9:70:4b:dd:6f:49:e8: 3d:d2:ea:12:ff:de:9b:6f:f4:df:3e:0b:04:ba:48:b7:42:c9: 87:bc:2d:68:8f:b5:99:9c:65:1c:d2:d3:04:5f:4f:ff:b9:a3: e6:18:c6:5e:fe:61:4f:1c:24:b8:94:4c:ac:77:06:ee:f0:d6: 9b:39:a5:d2:49:49:9e:e8:7c:a1:36:29:a2:08:0c:0d:66:7d: 35:b1:0a:99:63:e4:63:e4:30:84:82:31:91:a3:2a:24:6c:bf: 9a:f9:a5:d3:e8:58:b1:9a:27:6e:e7:20:fc:4a:e2:2f:1d:97: b9:d4:90:bb:15:05:bf:e3:8a:46:dd:19:51:e6:e7:11:ab:5f: 80:4e:7a:00:9a:99:9c:0f:4a:69:04:22:6d:81:25:3b:95:c6: ec:2d:d4:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzYzOEQxMTAvBgNVBAUTKEYwRTc2NkZCMzE5MjI0ODIzQ0E3OUQzNjcyMEM1MUVE RkNBRENGRTYwHhcNMjUwNDA0MjAyNjE5WhcNMjUwNDExMjAyNjE5WjAYMRYwFAYD VQQDEw02N2YwNDA2Yi0wM2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxyr9RXsRzsSRdJdrhfpDe6FXDRjA9C82nwG3PgGQ6z8xEbM4KHxLcdocJpSK plvlLMm4D6z2gPdMcXmSaQfwAj4ifo+/Lmh4jUNV5psXQOWCnKBdKlxAl9pHcQzM lm8t5znBw5Hqu5ztO68r3wiS2a3za39FILdA7+QsWLCg1iN5ZhkkZsOPhpiXBZbV sAGXhcUMwV5eT7Xgr4W5vbw2kbhjwYvMKFdkkDEWB0CKLt+2YkdSkaj9mUkNEhFO pa1GOELWwls+60g95MDyS50ERv3PJq7ZPUdLEgOvQiuJBqwlTm9ch/N5i+bfFF8X xJbPgcECMhPVe8T09ACWbUm/ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGsuCSt3 5JvCCsdaY57d6/r87KzoMB8GA1UdIwQYMBaAFPDnZvsxkiSCPKedNnIMUe38rc/m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjM4RC8wMjU5QjYxRTk3 QjUxMUVBOTk0NzVBNkRDNEY5QUUwMi84T2RtLXpHU0pJSThwNTAyY2d4UjdmeXR6 LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhPZG0tekdTSklJOHA1MDJjZ3hSN2Z5dHotWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjM4RC8wMjU5QjYxRTk3QjUxMUVBOTk0NzVBNkRDNEY5QUUwMi84T2RtLXpHU0pJ SThwNTAyY2d4UjdmeXR6LVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFxI+f2BesSnCvB7Jd67TqKnxYA8KvU8eCx5mKJDe1eRGavvzHXIGk 4EX9iDw8PTM/jRXB/kax5+/+pLUp37Pr0t+TOS4fx8cHzjq9sXWqpqFaDF6NZmvv Haxs7pjytAlD9oAlCNlwS91vSeg90uoS/96bb/TfPgsEuki3QsmHvC1oj7WZnGUc 0tMEX0//uaPmGMZe/mFPHCS4lEysdwbu8NabOaXSSUme6HyhNimiCAwNZn01sQqZ Y+Rj5DCEgjGRoyokbL+a+aXT6Fixmidu5yD8SuIvHZe51JC7FQW/44pG3RlR5ucR q1+ATnoAmpmcD0ppBCJtgSU7lcbsLdTj -----END CERTIFICATE-----Generated at Fri Apr 4 22:19:45 2025 by rpki-client