$ rpki-client -vvf rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft File: otjk5HbFVpzALfPNpfODKJlvU_4.mft (raw, json) Hash identifier: 8DeMGi8PWdN0B6dFoCiwZBbUxdYc/ZhCeFNMMuLteJc= Subject key identifier: 2E:E5:DD:E6:49:81:CE:83:0D:3B:3D:40:36:C3:91:05:42:E0:29:53 Authority key identifier: A2:D8:E4:E4:76:C5:56:9C:C0:2D:F3:CD:A5:F3:83:28:99:6F:53:FE Certificate issuer: /CN=A911020B/serialNumber=A2D8E4E476C5569CC02DF3CDA5F38328996F53FE Certificate serial: 07C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft Manifest number: 07C2 Signing time: Thu 24 Apr 2025 20:55:46 +0000 Manifest this update: Thu 24 Apr 2025 20:55:46 +0000 Manifest next update: Thu 01 May 2025 20:55:46 +0000 Files and hashes: 1: otjk5HbFVpzALfPNpfODKJlvU_4.crl (hash: CjqsTLD8Z+JtRNmORx9VooLn6FUQ+6IV2maL0tt0Hm4=) 2: 6CD78FE8B69B11EFAECD660BC4F9AE02.roa (hash: bbD/CkiY8PoLpDlyreN0bTO0yQS0iLZL1KAfcB5xBxE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.crl rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1993 (0x7c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911020B, serialNumber=A2D8E4E476C5569CC02DF3CDA5F38328996F53FE Validity Not Before: Apr 24 20:55:46 2025 GMT Not After : May 1 20:55:46 2025 GMT Subject: CN=680aa552-bf46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b6:6c:b4:e0:68:e5:35:ca:d3:09:2b:f7:3e: 4a:4f:36:9a:df:5c:65:be:1f:00:59:55:e8:14:31: ff:fd:41:09:1d:f5:c3:cf:47:99:64:dc:d8:ac:42: 61:db:54:5e:92:76:5a:65:86:59:71:4c:4e:6b:85: 45:d5:a6:66:43:19:a8:f1:49:59:72:d9:2b:0c:23: 2e:23:0c:98:f2:05:21:46:c7:2a:74:0d:07:c0:5e: 89:f8:99:b9:32:1d:61:30:73:0d:82:c9:53:51:a7: 93:77:cb:ea:b7:cf:20:72:b8:91:0c:58:e9:f6:7f: 42:57:e5:5c:1b:67:62:f7:b2:13:ef:c6:aa:ea:8b: 87:9d:66:05:47:bd:f4:0e:35:4b:c9:57:90:a3:c8: d5:99:2d:16:63:a4:47:c1:ea:17:78:99:15:c7:0a: 86:59:4a:48:2e:44:a1:b8:d7:c0:cc:6e:84:f3:1b: db:21:d5:04:fe:4a:89:2b:29:d7:88:85:fb:04:59: 55:36:7d:70:eb:21:e5:72:00:31:87:b9:d0:63:65: e8:70:7a:ff:08:53:03:90:ad:3b:20:27:98:65:6b: 0a:d6:d8:0c:ba:29:a8:34:18:97:08:b8:a3:21:7d: a1:a8:2f:2b:f4:b1:fb:ce:3f:e2:f1:b8:b4:8e:8d: 05:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E5:DD:E6:49:81:CE:83:0D:3B:3D:40:36:C3:91:05:42:E0:29:53 X509v3 Authority Key Identifier: keyid:A2:D8:E4:E4:76:C5:56:9C:C0:2D:F3:CD:A5:F3:83:28:99:6F:53:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:b7:78:45:80:7b:03:c9:42:24:ea:ba:b5:10:ca:75:3e:d6: ee:c2:eb:44:4d:29:ae:be:70:3a:0d:0d:c0:5e:59:79:6a:db: 9b:12:32:a1:ab:3f:d2:54:1a:14:bb:63:bc:1a:88:a1:f3:34: fb:26:65:7f:1a:c7:1c:25:6b:9a:2c:0b:5e:fa:43:e8:96:70: 9c:53:81:ad:d6:1f:9c:41:8d:36:bb:84:5c:e4:66:77:33:c8: 09:04:fa:f9:ea:97:53:44:b0:c0:a0:0e:99:c4:08:4c:75:67: 1b:62:6c:9a:58:9c:e9:33:b3:17:52:8b:81:4f:cc:8e:6e:66: d3:fd:b8:75:d1:e9:7e:0b:0e:38:aa:c5:c7:67:40:b1:f1:b2: 3b:fb:69:82:56:9a:90:af:f0:bd:b3:c3:5d:59:89:c7:2b:35: 55:31:93:52:7b:f9:43:55:aa:bc:9f:9f:63:42:b6:c9:14:60: 38:5a:75:91:dd:a4:b7:87:94:f8:50:00:ae:c3:a7:9b:1f:12: a1:bd:b8:bb:17:59:58:c8:76:64:58:2e:3b:26:44:f4:d4:41: 5f:dd:b1:1c:57:72:20:92:83:db:d0:f4:0e:99:c8:05:4c:58: 4e:25:fc:0d:2b:f3:0b:69:12:71:69:9c:2d:dc:63:5b:ee:d4: 15:10:37:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAyMEIxMTAvBgNVBAUTKEEyRDhFNEU0NzZDNTU2OUNDMDJERjNDREE1RjM4MzI4 OTk2RjUzRkUwHhcNMjUwNDI0MjA1NTQ2WhcNMjUwNTAxMjA1NTQ2WjAYMRYwFAYD VQQDEw02ODBhYTU1Mi1iZjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLZstOBo5TXK0wkr9z5KTzaa31xlvh8AWVXoFDH//UEJHfXDz0eZZNzYrEJh 21ReknZaZYZZcUxOa4VF1aZmQxmo8UlZctkrDCMuIwyY8gUhRscqdA0HwF6J+Jm5 Mh1hMHMNgslTUaeTd8vqt88gcriRDFjp9n9CV+VcG2di97IT78aq6ouHnWYFR730 DjVLyVeQo8jVmS0WY6RHweoXeJkVxwqGWUpILkShuNfAzG6E8xvbIdUE/kqJKynX iIX7BFlVNn1w6yHlcgAxh7nQY2XocHr/CFMDkK07ICeYZWsK1tgMuimoNBiXCLij IX2hqC8r9LH7zj/i8bi0jo0FlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC7l3eZJ gc6DDTs9QDbDkQVC4ClTMB8GA1UdIwQYMBaAFKLY5OR2xVacwC3zzaXzgyiZb1P+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDIwQi8zMERFNDMwQUYx OEUxMUVBQjRBQjFFNDdDNEY5QUUwMi9vdGprNUhiRlZwekFMZlBOcGZPREtKbHZV XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL290ams1SGJGVnB6QUxmUE5wZk9ES0psdlVfNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDIwQi8zMERFNDMwQUYxOEUxMUVBQjRBQjFFNDdDNEY5QUUwMi9vdGprNUhiRlZw ekFMZlBOcGZPREtKbHZVXzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXt3hFgHsDyUIk6rq1EMp1PtbuwutETSmuvnA6DQ3AXll5atubEjKh qz/SVBoUu2O8Goih8zT7JmV/GsccJWuaLAte+kPolnCcU4Gt1h+cQY02u4Rc5GZ3 M8gJBPr56pdTRLDAoA6ZxAhMdWcbYmyaWJzpM7MXUouBT8yObmbT/bh10el+Cw44 qsXHZ0Cx8bI7+2mCVpqQr/C9s8NdWYnHKzVVMZNSe/lDVaq8n59jQrbJFGA4WnWR 3aS3h5T4UACuw6ebHxKhvbi7F1lYyHZkWC47JkT01EFf3bEcV3IgkoPb0PQOmcgF TFhOJfwNK/MLaRJxaZwt3GNb7tQVEDdQ -----END CERTIFICATE-----Generated at Sat Apr 26 03:43:56 2025 by rpki-client