$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft File: 2OL6sVCi_VePZ-GbApZTmzdSyak.mft (raw, json) Hash identifier: c5lR+WwOJYR6ipqEr+Q/+OiP8iNiDdZzqFd2zAzEenQ= Subject key identifier: F9:7F:D6:04:28:E4:E5:45:75:88:87:59:99:D5:35:44:B4:F0:FE:8C Authority key identifier: D8:E2:FA:B1:50:A2:FD:57:8F:67:E1:9B:02:96:53:9B:37:52:C9:A9 Certificate issuer: /CN=A91EC225/serialNumber=D8E2FAB150A2FD578F67E19B0296539B3752C9A9 Certificate serial: 0E8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2OL6sVCi_VePZ-GbApZTmzdSyak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft Manifest number: 0E83 Signing time: Fri 04 Apr 2025 17:49:45 +0000 Manifest this update: Fri 04 Apr 2025 17:49:45 +0000 Manifest next update: Fri 11 Apr 2025 17:49:45 +0000 Files and hashes: 1: 2OL6sVCi_VePZ-GbApZTmzdSyak.crl (hash: Xl+U1b4wo0jPVqMwOLlkcoNj9/pK/g/yDY07BK4IeVM=) 2: 83974F92EF7C11EF9079DB1CC4F9AE02.roa (hash: yybAeEAc62kbf0vMICJ/T2r9CwvlPXBXXe+0zfXPjFk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.crl rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2OL6sVCi_VePZ-GbApZTmzdSyak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:49:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3724 (0xe8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC225 Validity Not Before: Apr 4 17:49:45 2025 GMT Not After : Apr 11 17:49:45 2025 GMT Subject: CN=67f01bb9-822c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:98:5c:86:42:f4:eb:58:23:2e:42:7c:31:87: 8c:92:cc:63:5b:7f:23:4c:a6:3c:53:f6:a5:84:4b: e8:31:27:38:c8:04:7d:ae:30:ca:ee:f1:30:21:35: 03:f7:71:70:fb:86:bd:e6:70:34:91:70:35:b1:78: 9e:2a:41:78:2b:1a:35:5d:62:f2:fd:67:46:ad:86: 0b:f0:27:7e:6b:d4:e8:02:dd:99:3a:ab:b0:d0:69: e0:54:ad:b8:e4:6b:4b:e7:b0:cf:04:8e:bc:23:a8: e1:d5:81:94:6c:49:39:60:fe:6a:b2:c8:03:14:2d: 13:c9:25:b8:44:cc:33:4c:48:f0:ef:af:6a:ad:94: 9e:72:ac:17:0d:b0:6c:bc:40:99:5f:47:0f:09:3e: 12:1c:a0:8c:a1:03:c9:8f:f8:ec:76:97:7b:8d:1f: ad:a7:04:96:77:72:ef:8a:4e:20:61:de:fb:6a:77: 4c:86:b1:e2:99:34:f0:a1:ca:85:f7:04:46:56:b0: 65:71:54:1a:7a:d0:06:c5:a1:27:ad:fb:05:ae:ea: e6:9c:41:39:6e:ab:b5:7f:f1:12:2d:2c:cc:63:52: 70:dc:39:ce:ec:28:45:64:01:94:77:11:ff:63:96: 2e:87:21:c8:5f:6f:82:f7:66:47:78:0e:11:1c:36: e2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:7F:D6:04:28:E4:E5:45:75:88:87:59:99:D5:35:44:B4:F0:FE:8C X509v3 Authority Key Identifier: keyid:D8:E2:FA:B1:50:A2:FD:57:8F:67:E1:9B:02:96:53:9B:37:52:C9:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2OL6sVCi_VePZ-GbApZTmzdSyak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:1c:05:4b:51:17:ef:f7:19:fd:54:62:40:dd:59:96:cb:59: 26:11:19:5a:b1:03:9e:c8:be:45:0b:a4:70:b3:eb:cf:dc:f9: c9:88:d6:d8:da:e8:87:aa:20:da:7e:91:aa:06:6e:13:dd:06: 39:40:5a:98:39:ad:f1:e3:f1:c4:a0:2d:1e:a0:c2:80:d6:4a: 1d:0e:0d:ac:cf:df:ad:f0:0f:b7:19:2d:02:50:df:55:60:30: 03:a6:c1:80:64:ae:c4:f0:94:76:9f:e7:ba:4a:0a:3d:8e:e3: 0e:4c:7f:60:17:82:68:5b:4b:34:c2:8d:88:22:f1:23:9e:2c: 86:68:a1:da:c6:ab:1c:f2:6c:3b:7f:5e:a9:6f:da:96:75:a4: 5c:7f:60:44:d6:93:d5:56:f9:ca:4b:52:13:0d:14:3b:84:e4: aa:f4:55:a9:a7:01:2a:42:9d:69:0f:3b:96:e2:06:1c:f0:84: fc:34:01:49:07:d6:a8:92:9d:52:a2:58:9d:ad:17:04:76:55: 96:fa:28:48:d3:dd:7f:2d:0d:df:ac:96:73:96:b0:06:d4:37: 74:95:25:70:b7:0c:61:18:d9:78:7d:7d:11:9a:68:ef:69:24: 3a:f8:7b:cf:9d:85:dd:30:b6:2f:78:78:5c:0a:e5:b3:16:a3: e8:7e:6d:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUMyMjUxMTAvBgNVBAUTKEQ4RTJGQUIxNTBBMkZENTc4RjY3RTE5QjAyOTY1MzlC Mzc1MkM5QTkwHhcNMjUwNDA0MTc0OTQ1WhcNMjUwNDExMTc0OTQ1WjAYMRYwFAYD VQQDEw02N2YwMWJiOS04MjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv5hchkL061gjLkJ8MYeMksxjW38jTKY8U/alhEvoMSc4yAR9rjDK7vEwITUD 93Fw+4a95nA0kXA1sXieKkF4Kxo1XWLy/WdGrYYL8Cd+a9ToAt2ZOquw0GngVK24 5GtL57DPBI68I6jh1YGUbEk5YP5qssgDFC0TySW4RMwzTEjw769qrZSecqwXDbBs vECZX0cPCT4SHKCMoQPJj/jsdpd7jR+tpwSWd3Lvik4gYd77andMhrHimTTwocqF 9wRGVrBlcVQaetAGxaEnrfsFrurmnEE5bqu1f/ESLSzMY1Jw3DnO7ChFZAGUdxH/ Y5YuhyHIX2+C92ZHeA4RHDbiMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPl/1gQo 5OVFdYiHWZnVNUS08P6MMB8GA1UdIwQYMBaAFNji+rFQov1Xj2fhmwKWU5s3Usmp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzIyNS80OTlGREY5MDhF NTUxMUU5ODBEMDlBNDJDNEY5QUUwMi8yT0w2c1ZDaV9WZVBaLUdiQXBaVG16ZFN5 YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJPTDZzVkNpX1ZlUFotR2JBcFpUbXpkU3lhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzIyNS80OTlGREY5MDhFNTUxMUU5ODBEMDlBNDJDNEY5QUUwMi8yT0w2c1ZDaV9W ZVBaLUdiQXBaVG16ZFN5YWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqHAVLURfv9xn9VGJA3VmWy1kmERlasQOeyL5FC6Rws+vP3PnJiNbY 2uiHqiDafpGqBm4T3QY5QFqYOa3x4/HEoC0eoMKA1kodDg2sz9+t8A+3GS0CUN9V YDADpsGAZK7E8JR2n+e6Sgo9juMOTH9gF4JoW0s0wo2IIvEjniyGaKHaxqsc8mw7 f16pb9qWdaRcf2BE1pPVVvnKS1ITDRQ7hOSq9FWppwEqQp1pDzuW4gYc8IT8NAFJ B9aokp1SolidrRcEdlWW+ihI091/LQ3frJZzlrAG1Dd0lSVwtwxhGNl4fX0Rmmjv aSQ6+HvPnYXdMLYveHhcCuWzFqPofm0o -----END CERTIFICATE-----Generated at Sat Apr 5 10:08:02 2025 by rpki-client