$ rpki-client -vvf rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft File: o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft (raw, json) Hash identifier: vA+XzdOITSxoHdErls9kQrg9dNVkvHjZUg5zqBZ1QF0= Subject key identifier: ED:16:72:4B:AD:E8:E2:82:39:13:9F:55:77:C3:63:53:C1:86:49:47 Authority key identifier: A3:65:2D:9E:54:E9:64:68:B2:30:47:93:73:17:FA:4E:CD:7B:36:48 Certificate issuer: /CN=A91A36A7/serialNumber=A3652D9E54E96468B23047937317FA4ECD7B3648 Certificate serial: 05CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft Manifest number: 05C5 Signing time: Sat 12 Apr 2025 22:42:48 +0000 Manifest this update: Sat 12 Apr 2025 22:42:47 +0000 Manifest next update: Sat 19 Apr 2025 22:42:47 +0000 Files and hashes: 1: o2UtnlTpZGiyMEeTcxf6Ts17Nkg.crl (hash: aAqzGG8yGwhfnjcSTtia/dCmZTYzNAsnalqRk6Iz+iI=) 2: F0CA090EB94A11EBAF5BDD5AC4F9AE02.roa (hash: AxnCXioU+pzcVhOQczSiGNqFZn1BtxYji3/Mt/svcQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.crl rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 22:42:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1484 (0x5cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A36A7, serialNumber=A3652D9E54E96468B23047937317FA4ECD7B3648 Validity Not Before: Apr 12 22:42:47 2025 GMT Not After : Apr 19 22:42:47 2025 GMT Subject: CN=67faec67-fd7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3c:5d:47:18:40:00:b3:b1:e5:4d:fc:f2:b7: 8e:df:b9:e7:44:de:3d:0c:85:3e:ef:e3:f5:0f:38: 1c:9f:bc:dc:ba:5d:66:1f:36:5c:0d:c6:20:44:a7: 17:23:1a:2f:de:aa:88:a0:ed:a4:00:cf:85:ac:55: 44:c4:74:6d:ad:06:5b:15:b0:b8:42:bb:36:b3:a7: 0d:e3:e5:db:9c:15:32:e1:2f:71:30:a1:c2:98:64: a7:a8:8a:d9:6c:94:64:97:ca:eb:6e:ef:37:db:51: 9b:1b:10:fa:84:3e:aa:08:ca:a8:cb:a0:81:e8:d8: 67:b3:36:79:57:16:03:3f:55:a8:84:8d:04:96:21: 2b:c2:ff:a7:f7:c9:e4:4f:1c:c8:87:50:35:49:9d: c9:d0:cf:ff:fa:59:df:b7:87:3f:e6:a7:29:dd:64: b6:e3:ea:c1:e2:63:6d:fc:b3:1d:5c:ad:08:c3:20: 14:59:f9:17:86:d9:d2:34:ea:91:4c:ba:c6:67:65: eb:80:46:ca:8d:d7:3f:46:2c:d8:b4:fc:b6:41:c6: e5:bc:fd:19:0c:19:1a:19:a7:ee:1a:7f:8f:78:d0: e0:e7:8b:b2:b4:04:2c:a1:d5:ab:49:70:59:38:4b: 5e:af:a9:39:17:6e:3f:34:23:51:b2:d6:51:4d:90: 32:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:16:72:4B:AD:E8:E2:82:39:13:9F:55:77:C3:63:53:C1:86:49:47 X509v3 Authority Key Identifier: keyid:A3:65:2D:9E:54:E9:64:68:B2:30:47:93:73:17:FA:4E:CD:7B:36:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:67:33:0c:ce:a4:fb:0b:73:34:96:bb:92:a2:65:68:16:aa: 27:b2:8f:ef:91:67:6d:e7:5e:ad:6a:fd:56:8d:0c:8b:d5:79: 9d:56:37:d4:75:bd:04:e9:ab:87:97:69:5e:04:e8:8f:43:87: e8:8b:7a:75:10:ec:a8:c3:5d:b6:ac:78:f3:6b:e2:f5:b1:8a: c2:fd:19:d9:02:f4:94:c2:c6:af:5c:ae:12:1c:ba:db:a6:72: 5d:c5:69:56:7c:73:b2:a2:c6:77:b0:ad:5f:4f:a2:f2:4d:ff: 1c:c0:71:90:c8:46:76:e2:02:9a:51:78:17:c5:2b:0d:94:c8: 1e:87:77:b3:29:bd:fe:92:6a:28:d6:1b:eb:0a:9c:e6:71:9c: 44:ef:2d:7e:d8:35:5a:fe:61:17:5a:00:f1:cc:95:0a:80:18: a2:29:08:1a:85:38:f9:a6:87:9a:22:78:e5:36:9f:13:24:ea: e5:fd:fb:b6:37:fa:ef:d7:10:dc:e9:a3:09:6f:ce:07:40:3d: 58:7e:39:e4:ac:a5:b5:74:52:6f:8a:42:39:9b:1f:34:ca:f9: 3c:df:99:e3:d4:69:b5:55:89:e3:29:b9:a1:06:73:e1:88:ee: 1c:06:98:de:bc:1b:55:09:ee:e7:31:86:91:d3:7c:76:bf:07: bb:b1:19:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM2QTcxMTAvBgNVBAUTKEEzNjUyRDlFNTRFOTY0NjhCMjMwNDc5MzczMTdGQTRF Q0Q3QjM2NDgwHhcNMjUwNDEyMjI0MjQ3WhcNMjUwNDE5MjI0MjQ3WjAYMRYwFAYD VQQDEw02N2ZhZWM2Ny1mZDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2jxdRxhAALOx5U388reO37nnRN49DIU+7+P1Dzgcn7zcul1mHzZcDcYgRKcX Ixov3qqIoO2kAM+FrFVExHRtrQZbFbC4Qrs2s6cN4+XbnBUy4S9xMKHCmGSnqIrZ bJRkl8rrbu8321GbGxD6hD6qCMqoy6CB6NhnszZ5VxYDP1WohI0EliErwv+n98nk TxzIh1A1SZ3J0M//+lnft4c/5qcp3WS24+rB4mNt/LMdXK0IwyAUWfkXhtnSNOqR TLrGZ2XrgEbKjdc/RizYtPy2QcblvP0ZDBkaGafuGn+PeNDg54uytAQsodWrSXBZ OEter6k5F24/NCNRstZRTZAyZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO0Wckut 6OKCOROfVXfDY1PBhklHMB8GA1UdIwQYMBaAFKNlLZ5U6WRosjBHk3MX+k7NezZI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzZBNy84QUE2NUFGQ0I5 NDkxMUVCQkJCMzI1NUFDNEY5QUUwMi9vMlV0bmxUcFpHaXlNRWVUY3hmNlRzMTdO a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28yVXRubFRwWkdpeU1FZVRjeGY2VHMxN05rZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzZBNy84QUE2NUFGQ0I5NDkxMUVCQkJCMzI1NUFDNEY5QUUwMi9vMlV0bmxUcFpH aXlNRWVUY3hmNlRzMTdOa2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHZzMMzqT7C3M0lruSomVoFqonso/vkWdt516tav1WjQyL1XmdVjfU db0E6auHl2leBOiPQ4foi3p1EOyow122rHjza+L1sYrC/RnZAvSUwsavXK4SHLrb pnJdxWlWfHOyosZ3sK1fT6LyTf8cwHGQyEZ24gKaUXgXxSsNlMgeh3ezKb3+kmoo 1hvrCpzmcZxE7y1+2DVa/mEXWgDxzJUKgBiiKQgahTj5poeaInjlNp8TJOrl/fu2 N/rv1xDc6aMJb84HQD1YfjnkrKW1dFJvikI5mx80yvk835nj1Gm1VYnjKbmhBnPh iO4cBpjevBtVCe7nMYaR03x2vwe7sRlJ -----END CERTIFICATE-----Generated at Sun Apr 13 05:55:30 2025 by rpki-client