$ rpki-client -vvf rpki.apnic.net/member_repository/A9194040/9B04A0F2A34011ECB3FA047BC4F9AE02/oHzT0QIaWMJAoSE3QAuXsYt5mNA.mft File: oHzT0QIaWMJAoSE3QAuXsYt5mNA.mft (raw, json) Hash identifier: m0s/99ajQeQ2xmenI48lV/6ZTbXHFB2JxlI00GECR/4= Subject key identifier: C4:B0:6E:AE:52:6D:04:4B:63:4D:74:2E:67:EC:0F:1F:48:61:94:2B Authority key identifier: A0:7C:D3:D1:02:1A:58:C2:40:A1:21:37:40:0B:97:B1:8B:79:98:D0 Certificate issuer: /CN=A9194040/serialNumber=A07CD3D1021A58C240A12137400B97B18B7998D0 Certificate serial: 038A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHzT0QIaWMJAoSE3QAuXsYt5mNA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194040/9B04A0F2A34011ECB3FA047BC4F9AE02/oHzT0QIaWMJAoSE3QAuXsYt5mNA.mft Manifest number: 0386 Signing time: Sat 31 May 2025 01:03:25 +0000 Manifest this update: Sat 31 May 2025 01:03:24 +0000 Manifest next update: Sat 07 Jun 2025 01:03:24 +0000 Files and hashes: 1: oHzT0QIaWMJAoSE3QAuXsYt5mNA.crl (hash: 00fCKlOiZBwsh338XIWJV8r3no/d7QsP2cbgWDTG9rE=) 2: D1E294C2A34411EC803D2585C4F9AE02.roa (hash: 9gufT/8L47ewBvsedXGTY9SOVItSQOfXiC+UqlsipuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194040/9B04A0F2A34011ECB3FA047BC4F9AE02/oHzT0QIaWMJAoSE3QAuXsYt5mNA.crl rsync://rpki.apnic.net/member_repository/A9194040/9B04A0F2A34011ECB3FA047BC4F9AE02/oHzT0QIaWMJAoSE3QAuXsYt5mNA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHzT0QIaWMJAoSE3QAuXsYt5mNA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:03:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 906 (0x38a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194040, serialNumber=A07CD3D1021A58C240A12137400B97B18B7998D0 Validity Not Before: May 31 01:03:24 2025 GMT Not After : Jun 7 01:03:24 2025 GMT Subject: CN=683a555d-ee69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:38:71:5c:89:2a:46:6c:54:dd:f6:d2:46:94: 21:d6:f4:04:b0:3b:43:9e:97:ae:f6:bf:b8:61:1a: 7e:7b:1e:c9:4d:7c:35:3f:80:1b:fe:b6:51:a1:13: ac:ff:7e:4e:e6:32:30:94:c0:b7:20:ce:da:75:74: de:92:4f:ca:f6:fe:c3:c0:fa:bc:b8:03:49:ab:1b: 12:cc:63:9b:a5:e1:52:2a:ea:f4:4c:79:c6:37:94: 45:ff:43:d9:e3:a0:01:c8:c0:a7:91:73:82:17:a9: 65:d7:f9:83:16:38:4b:65:44:ad:7e:83:2b:6f:8f: c3:00:da:00:e9:27:df:b1:a7:a0:7f:88:6f:53:b6: d2:47:75:27:f8:89:7a:f2:a9:64:27:ad:5e:c8:19: 74:e0:c7:6f:2d:d9:3e:88:de:2f:cb:1c:72:74:62: ae:38:c3:fa:c1:d5:56:11:ac:d8:60:70:3b:af:b3: 51:db:36:92:49:92:0c:7d:ea:fc:25:06:16:67:af: 2c:e3:2c:5b:03:2e:9b:7f:b1:cd:c8:0d:ad:79:96: 41:af:1b:7f:68:b5:4b:97:8a:d8:78:bd:1d:b6:34: 98:2d:bb:ce:80:b6:84:1e:c6:df:cc:66:79:5a:ea: 17:2e:d7:21:5d:82:03:0c:34:49:1d:e4:dc:3a:a3: 6c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B0:6E:AE:52:6D:04:4B:63:4D:74:2E:67:EC:0F:1F:48:61:94:2B X509v3 Authority Key Identifier: keyid:A0:7C:D3:D1:02:1A:58:C2:40:A1:21:37:40:0B:97:B1:8B:79:98:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194040/9B04A0F2A34011ECB3FA047BC4F9AE02/oHzT0QIaWMJAoSE3QAuXsYt5mNA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHzT0QIaWMJAoSE3QAuXsYt5mNA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194040/9B04A0F2A34011ECB3FA047BC4F9AE02/oHzT0QIaWMJAoSE3QAuXsYt5mNA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:8e:b5:84:ea:11:44:22:c7:06:17:f6:9d:53:c3:a9:09:6f: 2c:fe:65:81:79:4e:f4:8c:9f:76:83:16:35:dd:a5:29:ce:74: 31:e0:44:c4:1c:ac:54:d1:a4:c7:d1:c6:c7:dd:98:3c:2d:1d: 28:ce:28:00:a9:8a:96:16:5e:7c:62:86:be:fc:8f:9e:c0:cc: 95:68:15:43:31:d6:e1:1c:4a:bb:73:fb:74:8f:34:3d:35:c2: fc:75:a1:7b:b2:83:9b:64:26:b1:2c:98:1c:88:2e:62:18:98: 31:0e:b5:83:78:22:7e:d2:db:7f:ff:5b:dd:42:ed:f8:1d:6a: e3:cb:09:a7:bc:d0:97:5b:4f:cb:52:62:62:dd:f0:a3:1e:f5: 0c:58:f5:e5:91:4e:a9:b8:7a:34:98:f5:b7:d5:b1:f9:d5:34: ec:05:f5:9c:bf:27:12:1c:de:ba:3c:34:8e:f2:64:1c:a4:d2: 82:7d:8e:44:35:39:ff:4e:cd:3b:59:58:76:23:9a:79:18:e1: 20:5a:27:e3:d4:ca:bd:70:76:8f:75:e9:98:ab:4c:83:52:ec: 79:ae:51:5e:0e:1b:6b:ec:99:d5:10:b1:4b:08:05:f1:11:f3: c0:4f:d0:49:c6:42:16:2a:d5:46:cf:ff:97:e3:03:6f:55:29: c3:e0:b8:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQwNDAxMTAvBgNVBAUTKEEwN0NEM0QxMDIxQTU4QzI0MEExMjEzNzQwMEI5N0Ix OEI3OTk4RDAwHhcNMjUwNTMxMDEwMzI0WhcNMjUwNjA3MDEwMzI0WjAYMRYwFAYD VQQDEw02ODNhNTU1ZC1lZTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmDhxXIkqRmxU3fbSRpQh1vQEsDtDnpeu9r+4YRp+ex7JTXw1P4Ab/rZRoROs /35O5jIwlMC3IM7adXTekk/K9v7DwPq8uANJqxsSzGObpeFSKur0THnGN5RF/0PZ 46AByMCnkXOCF6ll1/mDFjhLZUStfoMrb4/DANoA6Sffsaegf4hvU7bSR3Un+Il6 8qlkJ61eyBl04MdvLdk+iN4vyxxydGKuOMP6wdVWEazYYHA7r7NR2zaSSZIMfer8 JQYWZ68s4yxbAy6bf7HNyA2teZZBrxt/aLVLl4rYeL0dtjSYLbvOgLaEHsbfzGZ5 WuoXLtchXYIDDDRJHeTcOqNskQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMSwbq5S bQRLY010LmfsDx9IYZQrMB8GA1UdIwQYMBaAFKB809ECGljCQKEhN0ALl7GLeZjQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDA0MC85QjA0QTBGMkEz NDAxMUVDQjNGQTA0N0JDNEY5QUUwMi9vSHpUMFFJYVdNSkFvU0UzUUF1WHNZdDVt TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29IelQwUUlhV01KQW9TRTNRQXVYc1l0NW1OQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDA0MC85QjA0QTBGMkEzNDAxMUVDQjNGQTA0N0JDNEY5QUUwMi9vSHpUMFFJYVdN SkFvU0UzUUF1WHNZdDVtTkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjjrWE6hFEIscGF/adU8OpCW8s/mWBeU70jJ92gxY13aUpznQx4ETE HKxU0aTH0cbH3Zg8LR0ozigAqYqWFl58Yoa+/I+ewMyVaBVDMdbhHEq7c/t0jzQ9 NcL8daF7soObZCaxLJgciC5iGJgxDrWDeCJ+0tt//1vdQu34HWrjywmnvNCXW0/L UmJi3fCjHvUMWPXlkU6puHo0mPW31bH51TTsBfWcvycSHN66PDSO8mQcpNKCfY5E NTn/Ts07WVh2I5p5GOEgWifj1Mq9cHaPdemYq0yDUux5rlFeDhtr7JnVELFLCAXx EfPAT9BJxkIWKtVGz/+X4wNvVSnD4Lic -----END CERTIFICATE-----Generated at Sat May 31 17:57:47 2025 by rpki-client