$ rpki-client -vvf rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft File: i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft (raw, json) Hash identifier: syJei1ELc1oaOo5X02sl+muommnLJW95Bds/86vDNMw= Subject key identifier: BE:49:2E:37:EC:03:FB:55:3B:2A:AE:F6:1C:93:F7:C5:A9:CD:DF:56 Authority key identifier: 8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40 Certificate issuer: /CN=A911C21E/serialNumber=8BE3874546E90BA83237179EE8932013B2D9F840 Certificate serial: 0C55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft Manifest number: 0C2C Signing time: Thu 24 Apr 2025 18:35:07 +0000 Manifest this update: Thu 24 Apr 2025 18:35:07 +0000 Manifest next update: Thu 01 May 2025 18:35:07 +0000 Files and hashes: 1: i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl (hash: uq3u+NkXkXG2j0Sq2S6jx4Jsqtap6SFsvOH1apvFKvY=) 2: 50AA91CAD70311EFB9BBC86DC4F9AE02.roa (hash: gdYeSr8OVfEXIHB8AE/R/OGyXt1CPyW6FryfjJbmXTw=) 3: 6309B36EEC3911EFB3A92E86C4F9AE02.roa (hash: mJvqce7dr7148HNrDiByF+54zvxocevFsAIl/C28B9c=) 4: 8577B1EAD1BF11ECA166E56FC4F9AE02.roa (hash: UKp0al5lwDctbpMZ4w91PmU9xh+b2uAj1qbyNOwUx6Q=) 5: FD1CA67AAD5511EDBA936539C4F9AE02.roa (hash: xNrMx2ykeoPHlp4OwjxlD2woswWyefyqLirhxUQ7v60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:35:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3157 (0xc55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C21E, serialNumber=8BE3874546E90BA83237179EE8932013B2D9F840 Validity Not Before: Apr 24 18:35:07 2025 GMT Not After : May 1 18:35:07 2025 GMT Subject: CN=680a845b-400e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:24:6f:5d:00:a7:05:cc:b3:2e:d2:19:3f:7e: da:9f:b0:1f:fd:bd:df:c4:a4:3a:d6:0c:af:91:3c: ef:d9:03:2c:28:63:7e:4e:eb:fe:4e:1e:fe:a4:0f: 07:9c:8b:2e:92:04:85:fe:ee:47:c6:97:80:67:81: c9:0d:02:28:c5:37:40:db:49:7d:4d:1d:cf:a8:ac: b8:c6:f5:18:8d:9f:ee:78:2e:39:3f:ca:f9:f7:fb: e9:97:ed:68:2b:d6:c1:d1:56:b9:93:16:43:0b:2b: 84:f4:0b:03:1c:3d:64:75:14:61:dd:3a:98:6f:e3: e5:04:7c:97:ca:0d:9e:77:53:58:ed:0f:27:6a:0d: 54:ad:fa:66:eb:1f:9e:15:d0:2b:1e:47:69:6a:58: 0e:64:ad:cd:16:1e:3d:20:11:50:fc:b7:06:77:cd: 37:89:23:c0:ec:26:57:9a:bd:e0:fa:ef:27:eb:0e: f5:a2:f9:ac:bd:8a:f3:14:91:7d:51:b5:ec:6d:c3: 43:72:9a:7a:e4:82:7e:02:35:a7:c0:73:48:30:9f: 01:f3:30:21:6c:1c:f2:3a:9b:fc:b6:db:ca:18:ad: 70:15:c0:c0:cd:99:ff:31:3e:d8:de:40:d7:da:55: 2f:4e:61:9c:0f:d3:3a:7e:2f:c6:58:a9:c9:fd:68: 0f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:49:2E:37:EC:03:FB:55:3B:2A:AE:F6:1C:93:F7:C5:A9:CD:DF:56 X509v3 Authority Key Identifier: keyid:8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:24:99:4e:f8:00:b4:a5:0c:3c:52:6d:d2:a9:bd:3c:fa:b0: f6:23:80:07:e5:27:f1:c7:49:7f:53:ea:89:99:f8:e5:11:5b: 4b:36:79:25:2f:a7:f0:9a:02:c6:2a:7d:ac:54:10:9b:e6:16: 13:ab:7f:c2:af:87:97:fb:97:e4:4c:7f:b2:b6:47:af:2b:40: 3f:9f:1a:57:ce:dc:75:2e:5d:fd:b4:4e:7c:4d:49:50:e7:29: 8c:fa:e1:64:ef:be:2f:25:6d:4e:18:97:97:a3:b1:8a:bb:43: c9:7e:a0:cd:82:1e:72:ea:ad:f6:30:66:96:97:c2:f2:f9:db: 34:2e:63:9e:ad:04:09:59:5c:df:2e:9e:ad:e1:7e:41:98:c7: 8f:42:a9:15:24:5f:3b:3d:24:b3:5b:5a:09:18:4d:48:c2:65: 95:b7:90:bc:39:70:42:64:47:5a:6e:b4:18:5f:e9:9a:e7:a0: 6f:60:d3:8d:42:3a:4a:b2:ee:fc:18:c1:90:fe:51:73:be:41: 75:71:1a:a6:54:f3:03:f9:45:51:f7:3f:a0:16:f4:db:c9:38: a6:35:74:2d:fc:9d:42:06:71:9b:50:fd:5a:1a:db:30:a1:f6: df:8e:99:e3:18:9c:7a:2d:09:18:2f:c9:45:70:c5:6f:38:d1: b8:5b:bc:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyMUUxMTAvBgNVBAUTKDhCRTM4NzQ1NDZFOTBCQTgzMjM3MTc5RUU4OTMyMDEz QjJEOUY4NDAwHhcNMjUwNDI0MTgzNTA3WhcNMjUwNTAxMTgzNTA3WjAYMRYwFAYD VQQDEw02ODBhODQ1Yi00MDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsSRvXQCnBcyzLtIZP37an7Af/b3fxKQ61gyvkTzv2QMsKGN+Tuv+Th7+pA8H nIsukgSF/u5HxpeAZ4HJDQIoxTdA20l9TR3PqKy4xvUYjZ/ueC45P8r59/vpl+1o K9bB0Va5kxZDCyuE9AsDHD1kdRRh3TqYb+PlBHyXyg2ed1NY7Q8nag1Urfpm6x+e FdArHkdpalgOZK3NFh49IBFQ/LcGd803iSPA7CZXmr3g+u8n6w71ovmsvYrzFJF9 UbXsbcNDcpp65IJ+AjWnwHNIMJ8B8zAhbBzyOpv8ttvKGK1wFcDAzZn/MT7Y3kDX 2lUvTmGcD9M6fi/GWKnJ/WgPHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL5JLjfs A/tVOyqu9hyT98Wpzd9WMB8GA1UdIwQYMBaAFIvjh0VG6QuoMjcXnuiTIBOy2fhA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzIxRS82MEMxODE1NDBC ODkxMUVBOEU1QUI3NUZDNEY5QUUwMi9pLU9IUlVicEM2Z3lOeGVlNkpNZ0U3TFot RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ktT0hSVWJwQzZneU54ZWU2Sk1nRTdMWi1FQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzIxRS82MEMxODE1NDBCODkxMUVBOEU1QUI3NUZDNEY5QUUwMi9pLU9IUlVicEM2 Z3lOeGVlNkpNZ0U3TFotRUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpJJlO+AC0pQw8Um3Sqb08+rD2I4AH5Sfxx0l/U+qJmfjlEVtLNnkl L6fwmgLGKn2sVBCb5hYTq3/Cr4eX+5fkTH+ytkevK0A/nxpXztx1Ll39tE58TUlQ 5ymM+uFk774vJW1OGJeXo7GKu0PJfqDNgh5y6q32MGaWl8Ly+ds0LmOerQQJWVzf Lp6t4X5BmMePQqkVJF87PSSzW1oJGE1IwmWVt5C8OXBCZEdabrQYX+ma56BvYNON QjpKsu78GMGQ/lFzvkF1cRqmVPMD+UVR9z+gFvTbyTimNXQt/J1CBnGbUP1aGtsw ofbfjpnjGJx6LQkYL8lFcMVvONG4W7z4 -----END CERTIFICATE-----Generated at Sat Apr 26 03:59:03 2025 by rpki-client