$ rpki-client -vvf rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.mft File: owBvXZI9TJzDuBs4ocpnEnR9RAY.mft (raw, json) Hash identifier: d31mjAP4OkLqwMyrEKN/+GTnuZUeprno4lXJx3NkdJs= Subject key identifier: E2:18:A3:B8:9D:78:62:9A:AA:FD:35:67:6B:0D:3E:7E:5B:9C:AF:3D Authority key identifier: A3:00:6F:5D:92:3D:4C:9C:C3:B8:1B:38:A1:CA:67:12:74:7D:44:06 Certificate issuer: /CN=A91185B8/serialNumber=A3006F5D923D4C9CC3B81B38A1CA6712747D4406 Certificate serial: 0191 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owBvXZI9TJzDuBs4ocpnEnR9RAY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.mft Manifest number: 0190 Signing time: Fri 25 Apr 2025 02:38:49 +0000 Manifest this update: Fri 25 Apr 2025 02:38:48 +0000 Manifest next update: Fri 02 May 2025 02:38:48 +0000 Files and hashes: 1: owBvXZI9TJzDuBs4ocpnEnR9RAY.crl (hash: a7cEr1uL1OI+Hbge6ECpfSPUrJIuNc1tvOYtI3oNpm4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.crl rsync://rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owBvXZI9TJzDuBs4ocpnEnR9RAY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 401 (0x191) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91185B8, serialNumber=A3006F5D923D4C9CC3B81B38A1CA6712747D4406 Validity Not Before: Apr 25 02:38:48 2025 GMT Not After : May 2 02:38:48 2025 GMT Subject: CN=680af5b9-c67e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:76:e9:44:ec:83:de:c2:1c:f3:98:d4:6b:4b: 2e:05:5e:3f:5a:f5:5e:60:02:78:6c:c8:3e:fe:af: 97:de:53:db:99:1d:09:b5:cb:f4:89:3c:50:ff:6f: fc:83:65:c2:a9:cb:9d:9c:6b:e6:28:4d:30:83:3f: bd:cd:f8:3a:bf:4b:8d:96:15:1c:a6:e4:0d:3a:61: 0b:f4:0d:c9:cd:f8:00:9b:8d:6b:6f:66:e8:bf:82: cc:0e:3e:d8:fb:fd:af:1c:37:10:d2:99:5e:e7:76: c8:2e:1d:db:59:03:a9:8e:79:36:f0:92:18:a8:2d: dd:47:2e:bd:05:23:b7:63:15:fd:95:48:70:c4:bb: b1:67:11:45:e3:50:13:22:89:6c:64:d3:3b:6f:99: 70:90:8e:6f:ea:51:f4:8d:5b:c3:59:13:15:a6:ad: c4:5d:3d:39:50:0a:0c:f4:38:01:ad:67:4f:06:e0: 72:9d:3c:35:4b:38:9a:3e:a5:71:9d:89:5e:a4:e2: ac:09:94:36:b3:3b:9f:56:e6:ba:dd:09:c8:36:03: ad:61:25:6d:7b:10:5d:0c:61:17:69:b7:28:df:a3: 33:6f:f8:07:a1:a7:20:1f:ec:13:ed:06:29:6d:da: e7:55:2a:fc:56:ae:3d:29:3b:41:c2:c7:a1:a1:54: e9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:18:A3:B8:9D:78:62:9A:AA:FD:35:67:6B:0D:3E:7E:5B:9C:AF:3D X509v3 Authority Key Identifier: keyid:A3:00:6F:5D:92:3D:4C:9C:C3:B8:1B:38:A1:CA:67:12:74:7D:44:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owBvXZI9TJzDuBs4ocpnEnR9RAY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:44:85:42:43:fa:91:cc:e8:c6:db:ea:c6:b5:c0:3e:c7:20: 9e:d4:42:0f:4e:91:70:58:38:2b:fc:5a:a8:22:5b:85:72:8b: c1:6d:29:90:22:22:fa:03:f0:ff:c8:d0:86:70:44:3d:56:1c: ea:01:49:f3:0e:03:a1:fa:2e:b9:14:f2:41:09:98:c6:1e:a7: cd:84:8d:af:3a:d6:93:84:0d:61:a4:10:17:2f:40:6d:f5:79: 91:62:e8:66:cf:13:17:31:80:dd:a9:65:32:d1:48:74:d3:72: d2:d8:cf:d6:4f:00:cf:86:c3:35:63:03:cd:e3:89:a8:06:6b: 52:55:50:f5:70:71:9a:1e:f5:8c:f6:80:bc:d4:44:37:af:5f: 73:4b:78:d8:93:ae:63:ef:e9:3d:26:ad:9f:e1:0f:8a:27:ed: e7:63:67:a7:55:fe:6c:95:7f:49:a1:89:a0:6e:ae:5a:15:99: 17:ca:69:16:6a:f8:38:81:65:65:7f:42:db:53:50:d7:fa:88: 7b:60:da:70:64:04:87:9b:35:e6:15:ea:2c:36:f2:a0:61:3e: 13:28:67:33:03:9d:f4:a3:af:46:e3:a3:b3:90:a7:36:2c:d8: 68:39:d3:1a:71:30:84:bb:46:a1:e4:23:f3:dc:de:2d:66:c1: 30:0c:b4:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg1QjgxMTAvBgNVBAUTKEEzMDA2RjVEOTIzRDRDOUNDM0I4MUIzOEExQ0E2NzEy NzQ3RDQ0MDYwHhcNMjUwNDI1MDIzODQ4WhcNMjUwNTAyMDIzODQ4WjAYMRYwFAYD VQQDEw02ODBhZjViOS1jNjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv3bpROyD3sIc85jUa0suBV4/WvVeYAJ4bMg+/q+X3lPbmR0Jtcv0iTxQ/2/8 g2XCqcudnGvmKE0wgz+9zfg6v0uNlhUcpuQNOmEL9A3JzfgAm41rb2bov4LMDj7Y +/2vHDcQ0ple53bILh3bWQOpjnk28JIYqC3dRy69BSO3YxX9lUhwxLuxZxFF41AT IolsZNM7b5lwkI5v6lH0jVvDWRMVpq3EXT05UAoM9DgBrWdPBuBynTw1SziaPqVx nYlepOKsCZQ2szufVua63QnINgOtYSVtexBdDGEXabco36Mzb/gHoacgH+wT7QYp bdrnVSr8Vq49KTtBwsehoVTpswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOIYo7id eGKaqv01Z2sNPn5bnK89MB8GA1UdIwQYMBaAFKMAb12SPUycw7gbOKHKZxJ0fUQG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODVCOC9EOUJGNDM5NEJF MzExMUVEQjRGRjdEMzRDNEY5QUUwMi9vd0J2WFpJOVRKekR1QnM0b2NwbkVuUjlS QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL293QnZYWkk5VEp6RHVCczRvY3BuRW5SOVJBWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODVCOC9EOUJGNDM5NEJFMzExMUVEQjRGRjdEMzRDNEY5QUUwMi9vd0J2WFpJOVRK ekR1QnM0b2NwbkVuUjlSQVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBERIVCQ/qRzOjG2+rGtcA+xyCe1EIPTpFwWDgr/FqoIluFcovBbSmQ IiL6A/D/yNCGcEQ9VhzqAUnzDgOh+i65FPJBCZjGHqfNhI2vOtaThA1hpBAXL0Bt 9XmRYuhmzxMXMYDdqWUy0Uh003LS2M/WTwDPhsM1YwPN44moBmtSVVD1cHGaHvWM 9oC81EQ3r19zS3jYk65j7+k9Jq2f4Q+KJ+3nY2enVf5slX9JoYmgbq5aFZkXymkW avg4gWVlf0LbU1DX+oh7YNpwZASHmzXmFeosNvKgYT4TKGczA530o69G46OzkKc2 LNhoOdMacTCEu0ah5CPz3N4tZsEwDLSb -----END CERTIFICATE-----Generated at Sat Apr 26 13:49:15 2025 by rpki-client