$ rpki-client -vvf rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.mft File: oo2gvpAdmDpDPYM1idFnv0hvZPw.mft (raw, json) Hash identifier: LOo8Avt0+zC+pbAHUjFXLk0CUlqaVd4z3gcFyOqcjps= Subject key identifier: 5D:15:06:9B:5D:5D:8E:DA:4D:B2:F9:FD:0E:E0:B0:E7:6E:D6:46:81 Authority key identifier: A2:8D:A0:BE:90:1D:98:3A:43:3D:83:35:89:D1:67:BF:48:6F:64:FC Certificate issuer: /CN=A912720E/serialNumber=A28DA0BE901D983A433D833589D167BF486F64FC Certificate serial: 0161 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oo2gvpAdmDpDPYM1idFnv0hvZPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.mft Manifest number: 015E Signing time: Fri 25 Apr 2025 03:08:23 +0000 Manifest this update: Fri 25 Apr 2025 03:08:22 +0000 Manifest next update: Fri 02 May 2025 03:08:22 +0000 Files and hashes: 1: oo2gvpAdmDpDPYM1idFnv0hvZPw.crl (hash: nYb13sr5XWId/iusp+tUHmUEncqbvT6IsxOOJcqBpPk=) 2: DB27568209DA11EEBA18A082C4F9AE02.roa (hash: e38NftZeclZtbzcVCk509TYbTR+zv3+tyooBUtjix+c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.crl rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oo2gvpAdmDpDPYM1idFnv0hvZPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:08:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912720E, serialNumber=A28DA0BE901D983A433D833589D167BF486F64FC Validity Not Before: Apr 25 03:08:22 2025 GMT Not After : May 2 03:08:22 2025 GMT Subject: CN=680afca6-bb7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:68:3f:12:1a:dd:3a:8c:6b:82:1c:c3:a4:a2: 6b:29:dc:20:fe:82:89:f5:95:fc:e0:cb:cf:1e:76: d9:30:fc:bc:e3:84:4e:87:8e:a5:34:f9:ed:81:83: f8:41:c4:de:07:b5:2b:aa:fa:52:f7:0a:cc:65:74: 49:0f:e3:2c:1a:9c:10:a6:79:dd:9f:fa:84:7c:16: 8b:ca:b9:2d:e0:6d:a9:a5:fc:68:22:32:ca:37:f3: eb:ef:09:d1:55:4c:7d:38:bf:3e:f4:82:84:0c:0e: 23:db:fb:4b:1c:54:8c:76:a7:70:99:a8:49:5c:2c: 39:ac:d9:94:fa:48:a9:46:6d:19:1c:fb:8a:c9:c3: 0e:ad:ca:ae:bf:47:e6:eb:d0:94:4d:e0:63:df:40: e1:90:54:d3:5d:0a:ba:69:9f:73:f8:e6:e4:3f:ff: 80:a8:03:65:6a:c8:4f:21:30:ab:14:78:66:b0:5c: 58:08:63:49:c3:3a:a3:b9:a7:8e:74:b5:3c:73:9e: d2:c2:db:be:fe:9e:37:9c:37:2a:4f:06:88:dc:bc: 6f:6c:fb:b6:01:c2:26:ed:bd:ce:05:5a:51:f1:94: f4:37:d2:f1:93:0e:e9:75:20:ef:b5:e6:44:e7:2d: 85:51:c7:b6:bb:a3:67:a0:40:7b:77:54:d6:b1:93: 1e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:15:06:9B:5D:5D:8E:DA:4D:B2:F9:FD:0E:E0:B0:E7:6E:D6:46:81 X509v3 Authority Key Identifier: keyid:A2:8D:A0:BE:90:1D:98:3A:43:3D:83:35:89:D1:67:BF:48:6F:64:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oo2gvpAdmDpDPYM1idFnv0hvZPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:a5:94:fc:5c:1e:80:20:da:9a:05:75:a7:e1:84:f9:c5:33: 3a:c8:07:17:19:90:5d:46:e2:92:37:73:d9:0e:f6:43:92:0e: 2b:7e:66:95:1b:dd:9c:85:54:88:3a:27:38:cc:c3:84:90:4d: 5a:1c:42:26:5f:27:29:5b:7e:0d:7d:0a:d6:c2:a9:7b:ef:b6: dd:3a:f8:de:1f:7f:8d:40:8e:11:ad:c2:c8:34:d6:33:b4:b3: d0:d8:be:9d:8f:63:11:26:22:3a:f3:03:68:c4:48:14:2b:b1: 77:22:63:34:b1:d9:2d:02:0e:43:08:23:2c:64:b5:cc:d9:6d: 42:1c:b0:0c:51:71:d8:09:44:d2:57:28:41:73:a2:d7:2e:7d: a8:e0:ae:fb:fa:bb:be:42:95:ed:a7:52:df:53:14:1d:2f:cc: cc:82:15:37:d5:86:d3:27:e1:9d:88:05:41:d8:d4:a7:3c:a9: 22:8d:ec:06:d2:ec:30:9e:1e:94:7a:91:43:69:30:63:88:41: a2:e2:43:e2:9c:8d:97:33:da:cb:35:7b:37:ba:42:bb:f6:10: b6:b3:62:a9:5f:39:2e:fb:fe:27:e9:b3:53:5c:9d:33:a1:b0: 01:20:55:aa:e5:22:c6:64:04:f2:16:44:4b:45:6e:08:bb:7a: b2:40:5b:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjcyMEUxMTAvBgNVBAUTKEEyOERBMEJFOTAxRDk4M0E0MzNEODMzNTg5RDE2N0JG NDg2RjY0RkMwHhcNMjUwNDI1MDMwODIyWhcNMjUwNTAyMDMwODIyWjAYMRYwFAYD VQQDEw02ODBhZmNhNi1iYjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGg/EhrdOoxrghzDpKJrKdwg/oKJ9ZX84MvPHnbZMPy844ROh46lNPntgYP4 QcTeB7UrqvpS9wrMZXRJD+MsGpwQpnndn/qEfBaLyrkt4G2ppfxoIjLKN/Pr7wnR VUx9OL8+9IKEDA4j2/tLHFSMdqdwmahJXCw5rNmU+kipRm0ZHPuKycMOrcquv0fm 69CUTeBj30DhkFTTXQq6aZ9z+ObkP/+AqANlashPITCrFHhmsFxYCGNJwzqjuaeO dLU8c57Swtu+/p43nDcqTwaI3LxvbPu2AcIm7b3OBVpR8ZT0N9Lxkw7pdSDvteZE 5y2FUce2u6NnoEB7d1TWsZMe5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF0VBptd XY7aTbL5/Q7gsOdu1kaBMB8GA1UdIwQYMBaAFKKNoL6QHZg6Qz2DNYnRZ79Ib2T8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzIwRS81RTUxRDQ1QzA5 RDUxMUVFQTM4QTc0ODBDNEY5QUUwMi9vbzJndnBBZG1EcERQWU0xaWRGbnYwaHZa UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29vMmd2cEFkbURwRFBZTTFpZEZudjBodlpQdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzIwRS81RTUxRDQ1QzA5RDUxMUVFQTM4QTc0ODBDNEY5QUUwMi9vbzJndnBBZG1E cERQWU0xaWRGbnYwaHZaUHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBipZT8XB6AINqaBXWn4YT5xTM6yAcXGZBdRuKSN3PZDvZDkg4rfmaV G92chVSIOic4zMOEkE1aHEImXycpW34NfQrWwql777bdOvjeH3+NQI4RrcLINNYz tLPQ2L6dj2MRJiI68wNoxEgUK7F3ImM0sdktAg5DCCMsZLXM2W1CHLAMUXHYCUTS VyhBc6LXLn2o4K77+ru+QpXtp1LfUxQdL8zMghU31YbTJ+GdiAVB2NSnPKkijewG 0uwwnh6UepFDaTBjiEGi4kPinI2XM9rLNXs3ukK79hC2s2KpXzku+/4n6bNTXJ0z obABIFWq5SLGZATyFkRLRW4Iu3qyQFvP -----END CERTIFICATE-----Generated at Sat Apr 26 03:24:54 2025 by rpki-client