$ rpki-client -vvf rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft File: OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft (raw, json) Hash identifier: TLTVLreA84qrdEID3ZdYHEZqxVnOjIAa2I08Bc0dQco= Subject key identifier: 9B:C9:E7:1B:C3:63:C9:B3:F9:7D:4A:EA:1F:B4:CE:A8:33:2B:A9:A8 Authority key identifier: 38:6C:30:0E:D7:2F:12:B9:05:47:8A:33:CE:F2:77:99:25:4A:69:1C Certificate issuer: /CN=A911E502/serialNumber=386C300ED72F12B905478A33CEF27799254A691C Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft Manifest number: 1C Signing time: Fri 25 Apr 2025 06:54:37 +0000 Manifest this update: Fri 25 Apr 2025 06:54:36 +0000 Manifest next update: Fri 02 May 2025 06:54:36 +0000 Files and hashes: 1: OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl (hash: uax4QJCuajy+46DSlZKR6HkPk9b0EnnjsrfDxz+yqXY=) 2: 54DA33D2FB2E11EFB488A95EC4F9AE02.roa (hash: L/7VzM2fbo0IdE808LBeTzf3z0geWQ0SpeUJCZmWPBg=) 3: 53E9C44CFB2E11EFB488A95EC4F9AE02.roa (hash: hzaK0MTBJLVrmr0hWnuGmH3SdcFclIxCzlQUZOQabQ8=) 4: 5460E9C8FB2E11EFB488A95EC4F9AE02.roa (hash: bkhjgOMD/IEHS+ly/VrsRugL9cN6Yu5sgUx5f40TuYM=) 5: 553798E2FB2E11EFB488A95EC4F9AE02.roa (hash: p8161Irka1RhOlKGL72R+iegNNjEoBL5dnyvjeUTVQY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:54:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E502, serialNumber=386C300ED72F12B905478A33CEF27799254A691C Validity Not Before: Apr 25 06:54:36 2025 GMT Not After : May 2 06:54:36 2025 GMT Subject: CN=680b31ad-3130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e4:54:11:43:20:79:5a:4c:9f:c7:fd:27:5a: b7:88:cd:34:0e:e9:15:a6:9c:82:65:98:f9:14:c9: 15:f0:a0:7f:20:cd:00:f9:31:97:90:96:62:e1:ec: 87:fe:fa:25:54:6f:4f:b7:2d:40:e3:85:e7:d2:3f: fd:5d:30:ba:cc:83:3e:cd:80:1b:03:69:dc:fb:37: b3:a6:3d:e1:80:e9:c6:7e:a0:0f:67:30:33:ca:96: d6:54:dd:d5:c1:f5:5f:4e:64:24:2e:b2:a1:91:c0: 4a:ba:8b:5b:5e:1d:42:69:98:10:f6:9f:8a:f0:68: 6d:34:be:5a:79:26:10:20:6a:9a:2f:13:73:1e:8a: b5:66:35:54:e2:7b:e2:be:d8:d4:28:f6:a5:63:39: 67:47:89:09:99:38:c5:a0:f3:f4:d0:06:4c:49:ec: d7:ad:4b:5d:97:b6:5d:ac:04:b2:e4:b6:fa:08:7d: 28:01:2c:36:b8:f4:5e:8d:04:f7:7e:63:08:b1:7b: 3b:dd:4f:91:51:f4:a6:0e:5d:71:f1:81:63:fd:9b: 39:df:99:b2:45:37:b4:85:77:72:a1:f9:be:85:af: b5:bf:52:43:bd:20:73:db:97:79:56:a0:e6:12:af: de:e4:0a:0e:e7:4d:bd:86:11:98:d1:60:9a:10:33: 4c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:C9:E7:1B:C3:63:C9:B3:F9:7D:4A:EA:1F:B4:CE:A8:33:2B:A9:A8 X509v3 Authority Key Identifier: keyid:38:6C:30:0E:D7:2F:12:B9:05:47:8A:33:CE:F2:77:99:25:4A:69:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:b3:94:e2:70:57:37:d0:6b:5a:ff:c8:19:bc:4e:d8:94:cf: 7c:11:38:38:75:16:e7:18:c9:1c:43:1d:7b:9f:5a:c0:a3:0e: 52:d0:f7:27:24:2c:d2:66:64:bc:ea:88:01:0e:09:b9:e7:80: 02:ee:5d:1a:db:10:f6:da:8e:d2:00:65:d3:4f:19:8c:c8:e4: 7f:59:49:b0:c1:a2:3f:46:b7:bf:fb:f3:1c:b1:5c:3c:89:16: 15:05:40:53:b2:93:9d:11:d9:1c:9b:a3:78:9b:68:7a:05:78: 21:e3:2b:aa:34:e9:81:e4:2c:6f:f4:52:4e:68:9b:50:3d:bf: 8a:24:d3:dc:38:04:67:5e:7b:79:e7:97:a2:da:9b:e9:4f:4f: 57:c4:7e:bb:c5:00:68:2d:e1:a2:8a:e3:ea:08:34:1b:0e:9e: ef:25:78:2f:d3:38:02:3f:03:3f:d7:36:6a:82:94:d0:c9:1c: e3:cf:00:18:49:49:5f:4b:fc:24:40:0e:0b:a3:97:bc:22:27: d4:90:e0:82:d7:40:6d:7a:8c:df:21:48:b8:a8:35:c1:3e:df: ab:1d:8a:7c:c9:db:24:31:80:2f:ae:4c:d1:bc:f2:fd:9a:c9: 48:37:d3:1d:f2:de:b4:bc:b6:8c:9c:fb:70:fa:d9:20:23:19: e8:b0:a4:5c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RTUwMjExMC8GA1UEBRMoMzg2QzMwMEVENzJGMTJCOTA1NDc4QTMzQ0VGMjc3OTky NTRBNjkxQzAeFw0yNTA0MjUwNjU0MzZaFw0yNTA1MDIwNjU0MzZaMBgxFjAUBgNV BAMTDTY4MGIzMWFkLTMxMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDL5FQRQyB5Wkyfx/0nWreIzTQO6RWmnIJlmPkUyRXwoH8gzQD5MZeQlmLh7If+ +iVUb0+3LUDjhefSP/1dMLrMgz7NgBsDadz7N7OmPeGA6cZ+oA9nMDPKltZU3dXB 9V9OZCQusqGRwEq6i1teHUJpmBD2n4rwaG00vlp5JhAgapovE3MeirVmNVTie+K+ 2NQo9qVjOWdHiQmZOMWg8/TQBkxJ7NetS12Xtl2sBLLktvoIfSgBLDa49F6NBPd+ YwixezvdT5FR9KYOXXHxgWP9mznfmbJFN7SFd3Kh+b6Fr7W/UkO9IHPbl3lWoOYS r97kCg7nTb2GEZjRYJoQM0xDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUm8nnG8Nj ybP5fUrqH7TOqDMrqagwHwYDVR0jBBgwFoAUOGwwDtcvErkFR4ozzvJ3mSVKaRww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFFNTAyLzg3QzNGRDBBRkIy OTExRUZCNzY2REM3NkM0RjlBRTAyL09Hd3dEdGN2RXJrRlI0b3p6dkozbVNWS2FS dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT0d3d0R0Y3ZFcmtGUjRvenp2SjNtU1ZLYVJ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFF NTAyLzg3QzNGRDBBRkIyOTExRUZCNzY2REM3NkM0RjlBRTAyL09Hd3dEdGN2RXJr RlI0b3p6dkozbVNWS2FSdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF+zlOJwVzfQa1r/yBm8TtiUz3wRODh1FucYyRxDHXufWsCjDlLQ9yck LNJmZLzqiAEOCbnngALuXRrbEPbajtIAZdNPGYzI5H9ZSbDBoj9Gt7/78xyxXDyJ FhUFQFOyk50R2Rybo3ibaHoFeCHjK6o06YHkLG/0Uk5om1A9v4ok09w4BGdee3nn l6Lam+lPT1fEfrvFAGgt4aKK4+oINBsOnu8leC/TOAI/Az/XNmqClNDJHOPPABhJ SV9L/CRADgujl7wiJ9SQ4ILXQG16jN8hSLioNcE+36sdinzJ2yQxgC+uTNG88v2a yUg30x3y3rS8toyc+3D62SAjGeiwpFw= -----END CERTIFICATE-----Generated at Sat Apr 26 04:59:01 2025 by rpki-client