$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD4DF/310D3542399311EFA08D2E1BC4F9AE02/o222tflxI3VeVEH6xWqmu6BbCAo.mft File: o222tflxI3VeVEH6xWqmu6BbCAo.mft (raw, json) Hash identifier: 4Ku3mVOwyd83Yhb90MgpAuFowMyh20YpHl2YwsplGJU= Subject key identifier: 57:74:85:9A:06:50:A0:58:5D:D3:C8:95:6B:08:45:5B:3C:55:10:08 Authority key identifier: A3:6D:B6:B5:F9:71:23:75:5E:54:41:FA:C5:6A:A6:BB:A0:5B:08:0A Certificate issuer: /CN=A91BD4DF/serialNumber=A36DB6B5F97123755E5441FAC56AA6BBA05B080A Certificate serial: 97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o222tflxI3VeVEH6xWqmu6BbCAo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD4DF/310D3542399311EFA08D2E1BC4F9AE02/o222tflxI3VeVEH6xWqmu6BbCAo.mft Manifest number: 94 Signing time: Mon 07 Apr 2025 05:17:50 +0000 Manifest this update: Mon 07 Apr 2025 05:17:49 +0000 Manifest next update: Mon 14 Apr 2025 05:17:49 +0000 Files and hashes: 1: o222tflxI3VeVEH6xWqmu6BbCAo.crl (hash: snlDV6LmRucG0K8hd5E4CsR0Gs5EOJLzeW7yZ5rtnF4=) 2: 4136642C39AA11EF933F9583C4F9AE02.roa (hash: +fFDWaDnFu7mpfAvBElCeG8uNXNIs5iwZjBDkX/SJz0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD4DF/310D3542399311EFA08D2E1BC4F9AE02/o222tflxI3VeVEH6xWqmu6BbCAo.crl rsync://rpki.apnic.net/member_repository/A91BD4DF/310D3542399311EFA08D2E1BC4F9AE02/o222tflxI3VeVEH6xWqmu6BbCAo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o222tflxI3VeVEH6xWqmu6BbCAo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 05:17:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 151 (0x97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD4DF Validity Not Before: Apr 7 05:17:49 2025 GMT Not After : Apr 14 05:17:49 2025 GMT Subject: CN=67f35ffe-80a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f2:97:33:0a:16:a7:1c:df:23:e1:a6:f6:23: 81:74:13:20:57:a7:96:63:95:24:35:95:76:5e:68: f9:11:79:49:42:1c:eb:4d:70:3c:74:66:a5:28:6b: 4a:9f:22:46:0b:d0:ab:9e:a1:7a:d1:67:52:ae:20: c9:af:89:23:b8:0f:fb:a4:1b:5e:35:fc:e7:c3:e8: ab:06:a1:73:e6:61:74:98:99:a9:66:94:79:c1:50: 27:e5:80:de:80:5f:11:82:32:7a:d8:6b:53:d2:ca: 87:e0:91:15:e1:f9:fc:81:90:c8:77:48:e9:14:5b: 86:bb:ca:4f:b7:b4:a5:18:ed:68:1c:a7:ed:da:60: 86:f8:d7:1b:42:e0:f8:96:8d:f7:7a:b0:71:3f:5d: ee:e1:92:3d:ed:60:65:99:1d:c0:ef:bd:0f:02:28: 16:a6:1b:52:af:ee:a9:f7:9d:88:cb:51:a8:1c:e3: 2a:89:ee:8a:1b:4f:bc:9b:9e:27:2a:67:b8:e9:ee: e6:fb:5d:60:c8:7c:14:27:82:32:df:2c:09:ba:47: 95:09:b7:e6:a0:25:a2:ef:df:7f:f2:2c:cb:7c:7d: d4:bc:ff:f2:c0:31:07:b1:fc:3f:df:8e:30:ad:f8: e8:a4:69:78:3a:94:18:e6:5e:e8:45:ef:e8:87:cc: fc:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:74:85:9A:06:50:A0:58:5D:D3:C8:95:6B:08:45:5B:3C:55:10:08 X509v3 Authority Key Identifier: keyid:A3:6D:B6:B5:F9:71:23:75:5E:54:41:FA:C5:6A:A6:BB:A0:5B:08:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD4DF/310D3542399311EFA08D2E1BC4F9AE02/o222tflxI3VeVEH6xWqmu6BbCAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o222tflxI3VeVEH6xWqmu6BbCAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD4DF/310D3542399311EFA08D2E1BC4F9AE02/o222tflxI3VeVEH6xWqmu6BbCAo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:05:53:e8:ac:88:ba:ff:a7:8a:d4:8c:e2:d7:31:ad:c1:c8: 6c:20:3e:65:9b:e4:37:00:d3:c5:9e:79:63:4a:52:37:ba:a2: 14:6c:03:3c:b9:2a:b3:8f:30:de:96:ac:8a:67:2e:ef:46:44: 9d:de:fa:3f:f6:55:c7:71:47:9c:12:4a:69:7b:db:80:9f:cf: 0d:e7:78:ec:f9:d0:19:95:b4:c4:75:b3:8d:8a:e0:af:42:f7: 0f:9a:b4:c3:66:c3:63:09:bf:83:c6:5d:e8:0f:b6:cf:1b:24: 8f:d5:72:36:ad:05:8b:9e:52:95:08:16:df:6e:d7:dc:f8:1b: b0:90:8d:d3:ff:9b:01:12:a1:b4:81:b5:46:43:50:78:c9:3c: 27:cc:14:30:1c:1b:72:5a:d9:7b:6a:67:30:fa:f9:7f:bc:e9: 15:10:09:ce:ab:ab:8c:fd:1c:c1:4b:bf:ea:cd:25:40:1c:9a: 03:ad:52:1b:69:5b:6e:ca:8d:ba:a2:d7:47:cb:04:75:be:a5: f8:3f:00:f3:ed:40:a6:57:99:28:c4:00:0d:2c:7d:31:29:ce: f9:87:56:c2:86:ca:36:e6:99:9e:2e:36:c2:31:80:4a:be:56: 0d:0f:36:71:6e:8e:70:fa:9a:af:39:d2:a9:cf:95:8e:25:96: a5:ee:29:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ0REYxMTAvBgNVBAUTKEEzNkRCNkI1Rjk3MTIzNzU1RTU0NDFGQUM1NkFBNkJC QTA1QjA4MEEwHhcNMjUwNDA3MDUxNzQ5WhcNMjUwNDE0MDUxNzQ5WjAYMRYwFAYD VQQDEw02N2YzNWZmZS04MGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw/KXMwoWpxzfI+Gm9iOBdBMgV6eWY5UkNZV2Xmj5EXlJQhzrTXA8dGalKGtK nyJGC9CrnqF60WdSriDJr4kjuA/7pBteNfznw+irBqFz5mF0mJmpZpR5wVAn5YDe gF8RgjJ62GtT0sqH4JEV4fn8gZDId0jpFFuGu8pPt7SlGO1oHKft2mCG+NcbQuD4 lo33erBxP13u4ZI97WBlmR3A770PAigWphtSr+6p952Iy1GoHOMqie6KG0+8m54n Kme46e7m+11gyHwUJ4Iy3ywJukeVCbfmoCWi799/8izLfH3UvP/ywDEHsfw/344w rfjopGl4OpQY5l7oRe/oh8z8cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFd0hZoG UKBYXdPIlWsIRVs8VRAIMB8GA1UdIwQYMBaAFKNttrX5cSN1XlRB+sVqprugWwgK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDRERi8zMTBEMzU0MjM5 OTMxMUVGQTA4RDJFMUJDNEY5QUUwMi9vMjIydGZseEkzVmVWRUg2eFdxbXU2QmJD QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28yMjJ0Zmx4STNWZVZFSDZ4V3FtdTZCYkNBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDRERi8zMTBEMzU0MjM5OTMxMUVGQTA4RDJFMUJDNEY5QUUwMi9vMjIydGZseEkz VmVWRUg2eFdxbXU2QmJDQW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxBVPorIi6/6eK1Izi1zGtwchsID5lm+Q3ANPFnnljSlI3uqIUbAM8 uSqzjzDelqyKZy7vRkSd3vo/9lXHcUecEkppe9uAn88N53js+dAZlbTEdbONiuCv QvcPmrTDZsNjCb+Dxl3oD7bPGySP1XI2rQWLnlKVCBbfbtfc+BuwkI3T/5sBEqG0 gbVGQ1B4yTwnzBQwHBtyWtl7amcw+vl/vOkVEAnOq6uM/RzBS7/qzSVAHJoDrVIb aVtuyo26otdHywR1vqX4PwDz7UCmV5koxAANLH0xKc75h1bChso25pmeLjbCMYBK vlYNDzZxbo5w+pqvOdKpz5WOJZal7im6 -----END CERTIFICATE-----Generated at Mon Apr 7 13:57:54 2025 by rpki-client