$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.mft File: O407UYT_W0gbWw5ZsLIpzAbWCR4.mft (raw, json) Hash identifier: tEJi+yz3p5w2deNNoSBrs9QBBF7gByuyNd0IfP21Q+w= Subject key identifier: 71:9F:0F:0F:2C:80:37:9E:58:01:70:A1:D7:CE:8F:C9:A5:04:07:F7 Authority key identifier: 3B:8D:3B:51:84:FF:5B:48:1B:5B:0E:59:B0:B2:29:CC:06:D6:09:1E Certificate issuer: /CN=A91EA944/serialNumber=3B8D3B5184FF5B481B5B0E59B0B229CC06D6091E Certificate serial: 1046 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O407UYT_W0gbWw5ZsLIpzAbWCR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.mft Manifest number: 103E Signing time: Wed 02 Apr 2025 17:27:59 +0000 Manifest this update: Wed 02 Apr 2025 17:27:58 +0000 Manifest next update: Wed 09 Apr 2025 17:27:58 +0000 Files and hashes: 1: O407UYT_W0gbWw5ZsLIpzAbWCR4.crl (hash: zIfjsBvhEB+v6b4cX4d5SeQJpIs2oqBlr00iGLjG8ww=) 2: E3272FE036B911E99F4D9A5CC4F9AE02.roa (hash: cjRvE9qcGsnVMBQMShsH1bjq0rqs5KnVL8lFydaV3ng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.crl rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O407UYT_W0gbWw5ZsLIpzAbWCR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 17:27:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4166 (0x1046) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA944 Validity Not Before: Apr 2 17:27:58 2025 GMT Not After : Apr 9 17:27:58 2025 GMT Subject: CN=67ed739e-0412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:fa:86:2c:cd:a3:70:9c:46:07:74:16:2e:ca: 6a:b7:e4:e4:43:6f:04:b5:5e:cf:18:86:0f:42:bd: 51:4d:91:c2:91:d9:b3:cb:0c:d3:69:08:63:ff:f3: a7:0a:85:69:83:94:22:cf:0d:72:3d:f3:8a:ec:92: ef:ba:0a:9f:9b:bc:04:c7:3e:13:8a:5c:19:70:09: d7:86:35:8f:c2:3d:2d:8a:0e:d6:bd:dd:f2:b2:b2: 11:6a:54:f8:d3:d2:f7:56:62:b0:8a:62:4c:ce:e9: a9:77:7e:da:0c:8c:98:11:28:af:cc:c3:52:8c:50: 1d:8b:e9:33:0d:8c:dd:88:55:e4:f9:69:96:c8:f5: da:f0:ba:e1:c9:3a:97:d3:d6:9f:70:41:29:23:ac: 6b:b5:92:ce:60:c8:bf:ca:de:82:91:da:91:d6:c4: d6:5b:f2:0c:2b:23:d7:c2:a9:6e:ab:b9:58:ac:bd: f4:fb:ce:73:46:85:2b:9f:66:75:ce:77:26:55:6c: f3:bd:9d:c3:7b:20:6b:58:f7:35:79:d4:88:ce:26: 8c:24:84:27:fe:1d:98:53:5b:18:7e:64:b6:87:98: 5a:d4:5f:21:30:4c:60:4a:a7:be:eb:92:23:ab:24: 35:ec:c3:34:80:a9:44:d9:c2:f6:18:c4:8e:31:6e: ed:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:9F:0F:0F:2C:80:37:9E:58:01:70:A1:D7:CE:8F:C9:A5:04:07:F7 X509v3 Authority Key Identifier: keyid:3B:8D:3B:51:84:FF:5B:48:1B:5B:0E:59:B0:B2:29:CC:06:D6:09:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O407UYT_W0gbWw5ZsLIpzAbWCR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:4b:c2:af:84:81:1a:57:a7:f9:c9:ea:2f:aa:77:1b:59:c1: f3:14:7a:28:ac:fc:80:cc:cf:21:8e:f4:7e:9d:b8:44:39:00: 5f:4b:3c:b5:8a:87:5e:06:91:8e:9d:f2:58:89:0a:f5:89:48: 40:9a:33:07:81:2c:c0:24:bd:bf:0f:fd:f2:28:8b:59:6f:a7: b4:83:22:37:77:d9:dc:30:e0:7a:33:f6:f9:ba:a2:f1:17:42: d7:1d:9d:ee:6b:4a:f8:3f:c4:06:f7:c7:4e:4c:90:74:71:f9: 01:fc:0d:6c:ce:cc:32:4c:a2:43:c6:0b:d5:c3:b0:0c:9e:47: 39:b3:c0:e8:67:60:53:de:f4:98:7b:7e:2c:cf:df:c3:f3:25: 71:aa:a9:9a:d6:44:64:8c:a4:e9:6a:9c:d8:cd:91:b0:02:d9: 52:52:42:a4:be:c6:c6:31:39:9a:b4:28:df:19:cc:e4:84:30: e5:87:9d:09:52:b9:21:2e:ed:b7:1a:b5:bc:4b:d5:ae:a9:9f: aa:fd:38:e7:23:1e:9f:60:cf:99:86:9c:68:7c:4b:77:54:5c: 85:cc:2c:dd:00:26:3b:75:7c:b0:d6:1f:54:ea:60:0c:c5:e0: a7:37:45:d7:a0:92:c5:50:c5:a2:4a:90:a6:cc:10:83:74:c6: c0:ec:b9:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5NDQxMTAvBgNVBAUTKDNCOEQzQjUxODRGRjVCNDgxQjVCMEU1OUIwQjIyOUND MDZENjA5MUUwHhcNMjUwNDAyMTcyNzU4WhcNMjUwNDA5MTcyNzU4WjAYMRYwFAYD VQQDEw02N2VkNzM5ZS0wNDEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4fqGLM2jcJxGB3QWLspqt+TkQ28EtV7PGIYPQr1RTZHCkdmzywzTaQhj//On CoVpg5Qizw1yPfOK7JLvugqfm7wExz4TilwZcAnXhjWPwj0tig7Wvd3ysrIRalT4 09L3VmKwimJMzumpd37aDIyYESivzMNSjFAdi+kzDYzdiFXk+WmWyPXa8LrhyTqX 09afcEEpI6xrtZLOYMi/yt6CkdqR1sTWW/IMKyPXwqluq7lYrL30+85zRoUrn2Z1 zncmVWzzvZ3DeyBrWPc1edSIziaMJIQn/h2YU1sYfmS2h5ha1F8hMExgSqe+65Ij qyQ17MM0gKlE2cL2GMSOMW7tiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHGfDw8s gDeeWAFwodfOj8mlBAf3MB8GA1UdIwQYMBaAFDuNO1GE/1tIG1sOWbCyKcwG1gke MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTk0NC83OTZDOUQ3NDM2 QjkxMUU5OTg0Qjc2NUNDNEY5QUUwMi9PNDA3VVlUX1cwZ2JXdzVac0xJcHpBYldD UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL080MDdVWVRfVzBnYld3NVpzTElwekFiV0NSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTk0NC83OTZDOUQ3NDM2QjkxMUU5OTg0Qjc2NUNDNEY5QUUwMi9PNDA3VVlUX1cw Z2JXdzVac0xJcHpBYldDUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVS8KvhIEaV6f5yeovqncbWcHzFHoorPyAzM8hjvR+nbhEOQBfSzy1 iodeBpGOnfJYiQr1iUhAmjMHgSzAJL2/D/3yKItZb6e0gyI3d9ncMOB6M/b5uqLx F0LXHZ3ua0r4P8QG98dOTJB0cfkB/A1szswyTKJDxgvVw7AMnkc5s8DoZ2BT3vSY e34sz9/D8yVxqqma1kRkjKTpapzYzZGwAtlSUkKkvsbGMTmatCjfGczkhDDlh50J UrkhLu23GrW8S9WuqZ+q/TjnIx6fYM+ZhpxofEt3VFyFzCzdACY7dXyw1h9U6mAM xeCnN0XXoJLFUMWiSpCmzBCDdMbA7Lkz -----END CERTIFICATE-----Generated at Fri Apr 4 18:37:29 2025 by rpki-client