$ rpki-client -vvf rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft File: -O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft (raw, json) Hash identifier: YIMOfINP6MsQ87wz7PiaTxYbwADjZziKM/MOj3en9i0= Subject key identifier: C0:D7:0C:E6:F1:C8:C7:4C:56:97:03:EA:E1:CB:85:6C:60:8F:DB:E0 Authority key identifier: F8:EE:CE:7D:3C:0C:F5:92:2E:A3:D8:03:55:36:38:82:3F:AE:EA:08 Certificate issuer: /CN=A91B268A/serialNumber=F8EECE7D3C0CF5922EA3D803553638823FAEEA08 Certificate serial: 1228 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft Manifest number: 1212 Signing time: Fri 04 Apr 2025 17:14:23 +0000 Manifest this update: Fri 04 Apr 2025 17:14:22 +0000 Manifest next update: Fri 11 Apr 2025 17:14:22 +0000 Files and hashes: 1: -O7OfTwM9ZIuo9gDVTY4gj-u6gg.crl (hash: MSKdIlJvJlhVoEXxLAQFymFT0teSgAnEbMpfgV1eJ5E=) 2: 0AF12B12DDA411E88E25E96FC4F9AE02.roa (hash: VilJgVER7BycZHaWd4URO4KYACwZnY/x/nNDEK5obqE=) 3: 801B5CA0D49711EFBF7D3414C4F9AE02.roa (hash: OeaX4Y36BcWO+hpCFTJVXRa1o/dq7PQS00iGf5uCP9s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.crl rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:14:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4648 (0x1228) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B268A Validity Not Before: Apr 4 17:14:22 2025 GMT Not After : Apr 11 17:14:22 2025 GMT Subject: CN=67f0136e-0af7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:40:0e:f8:d4:dc:0d:9a:b1:d8:61:a6:fb:2b: dc:37:17:79:c0:30:f2:29:63:d6:51:88:a0:cc:cf: 13:36:25:07:3f:c5:59:ce:ac:cb:06:37:3b:5c:14: 09:94:99:e8:b1:aa:a4:3e:25:e2:d8:67:fb:6c:8f: 05:9f:c3:94:48:eb:99:69:a8:49:91:25:f6:f9:4d: 6d:14:3f:f9:71:27:4a:65:89:c3:36:e9:99:19:a1: 48:c4:d6:1c:e5:0e:64:54:8e:48:5d:8a:06:c4:97: 19:33:7b:31:f3:88:ec:4c:e7:04:8d:b1:4f:63:62: f0:c8:cb:88:24:0a:cd:2e:91:2a:50:5a:65:3a:a0: 1c:be:a0:f7:80:91:f9:c9:21:1f:52:2f:1a:b3:d6: 8e:f1:bd:9b:d9:a9:14:62:8a:3e:aa:8b:ea:94:13: 77:08:fd:8c:ac:54:ee:f7:84:80:4c:40:d5:19:37: 94:0c:f5:2f:51:ca:45:f6:8b:51:22:77:f2:b1:7e: 9b:04:37:5d:9e:d8:38:8a:8f:e1:a2:28:e5:0d:fa: 96:2d:1c:df:4b:1f:69:27:25:cd:fd:04:5c:c7:9d: 5f:b4:7d:2e:84:be:83:e3:b1:95:e4:a9:a7:23:09: 1a:66:85:a4:e0:1d:6c:1a:0d:fb:8b:4e:02:ab:67: 26:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:D7:0C:E6:F1:C8:C7:4C:56:97:03:EA:E1:CB:85:6C:60:8F:DB:E0 X509v3 Authority Key Identifier: keyid:F8:EE:CE:7D:3C:0C:F5:92:2E:A3:D8:03:55:36:38:82:3F:AE:EA:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:07:d0:c9:db:e8:60:2b:1c:78:37:ae:70:95:92:ea:18:8b: 1e:fa:3b:7a:40:63:40:0d:34:6f:24:7d:cf:e7:43:1c:31:c1: b4:ea:f6:95:a0:ff:46:d2:c7:8e:46:e4:b2:ed:02:a5:7c:e7: a8:89:70:0a:b3:8b:10:ab:7f:9c:85:53:aa:e0:8d:d4:a2:91: fe:a6:02:eb:bf:df:aa:f0:5a:1d:7d:2a:53:44:fb:40:48:17: b0:41:cd:1c:d3:71:33:0e:4f:3a:99:e0:45:f0:37:8e:e9:1b: 6b:f5:54:fe:d9:d5:61:2c:f0:5c:97:0d:4e:80:81:11:3b:76: 0e:a0:c0:c4:6a:08:11:e2:18:ad:80:43:1e:13:1b:2e:5b:6d: fb:e7:7b:0a:cd:15:91:34:f9:ec:35:56:9b:ee:96:fe:10:23: 3d:26:e5:23:3f:c9:26:71:5b:61:a3:ef:9a:fe:35:60:dd:1d: 5b:87:9f:ac:f9:1b:74:85:98:04:84:10:20:c1:10:c5:49:9d: 3a:1a:d5:42:dc:51:35:c0:62:53:89:91:4f:51:fa:2f:0b:d2: 27:6b:05:7e:8a:3c:ee:8f:4f:57:d0:d5:28:97:f4:ba:f1:d0: 7b:97:fc:27:da:50:62:c6:95:3d:85:6f:e8:5d:48:45:f4:9f: d1:fe:ef:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI2OEExMTAvBgNVBAUTKEY4RUVDRTdEM0MwQ0Y1OTIyRUEzRDgwMzU1MzYzODgy M0ZBRUVBMDgwHhcNMjUwNDA0MTcxNDIyWhcNMjUwNDExMTcxNDIyWjAYMRYwFAYD VQQDEw02N2YwMTM2ZS0wYWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzkAO+NTcDZqx2GGm+yvcNxd5wDDyKWPWUYigzM8TNiUHP8VZzqzLBjc7XBQJ lJnosaqkPiXi2Gf7bI8Fn8OUSOuZaahJkSX2+U1tFD/5cSdKZYnDNumZGaFIxNYc 5Q5kVI5IXYoGxJcZM3sx84jsTOcEjbFPY2LwyMuIJArNLpEqUFplOqAcvqD3gJH5 ySEfUi8as9aO8b2b2akUYoo+qovqlBN3CP2MrFTu94SATEDVGTeUDPUvUcpF9otR InfysX6bBDddntg4io/hoijlDfqWLRzfSx9pJyXN/QRcx51ftH0uhL6D47GV5Kmn IwkaZoWk4B1sGg37i04Cq2cm5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMDXDObx yMdMVpcD6uHLhWxgj9vgMB8GA1UdIwQYMBaAFPjuzn08DPWSLqPYA1U2OII/ruoI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjY4QS84NEZCNEM5Q0RE QTExMUU4QTJFNzhBNjlDNEY5QUUwMi8tTzdPZlR3TTlaSXVvOWdEVlRZNGdqLXU2 Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1PN09mVHdNOVpJdW85Z0RWVFk0Z2otdTZnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjY4QS84NEZCNEM5Q0REQTExMUU4QTJFNzhBNjlDNEY5QUUwMi8tTzdPZlR3TTla SXVvOWdEVlRZNGdqLXU2Z2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDUB9DJ2+hgKxx4N65wlZLqGIse+jt6QGNADTRvJH3P50McMcG06vaV oP9G0seORuSy7QKlfOeoiXAKs4sQq3+chVOq4I3UopH+pgLrv9+q8FodfSpTRPtA SBewQc0c03EzDk86meBF8DeO6Rtr9VT+2dVhLPBclw1OgIERO3YOoMDEaggR4hit gEMeExsuW23753sKzRWRNPnsNVab7pb+ECM9JuUjP8kmcVtho++a/jVg3R1bh5+s +Rt0hZgEhBAgwRDFSZ06GtVC3FE1wGJTiZFPUfovC9InawV+ijzuj09X0NUol/S6 8dB7l/wn2lBixpU9hW/oXUhF9J/R/u/N -----END CERTIFICATE-----Generated at Sun Apr 6 02:30:47 2025 by rpki-client