$ rpki-client -vvf rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft File: _OAw6zAgOlEM28-cfDpDADu9-mI.mft (raw, json) Hash identifier: OPmRD5IBBJKP+U6+OZ4YpdTIulro9JVxEiJmRn7qeJY= Subject key identifier: 83:54:CC:F4:06:ED:DE:AC:4C:BB:B3:47:5A:2C:1D:7A:E5:CC:4A:BB Authority key identifier: FC:E0:30:EB:30:20:3A:51:0C:DB:CF:9C:7C:3A:43:00:3B:BD:FA:62 Certificate issuer: /CN=A9127E8D/serialNumber=FCE030EB30203A510CDBCF9C7C3A43003BBDFA62 Certificate serial: EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_OAw6zAgOlEM28-cfDpDADu9-mI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft Manifest number: E9 Signing time: Fri 25 Apr 2025 04:27:37 +0000 Manifest this update: Fri 25 Apr 2025 04:27:36 +0000 Manifest next update: Fri 02 May 2025 04:27:36 +0000 Files and hashes: 1: _OAw6zAgOlEM28-cfDpDADu9-mI.crl (hash: +xkrU3RChR09w8kccDboSNf63JX9gv8FkZqCmgKuZws=) 2: D13703C6BF4611EE9ECAAC65C4F9AE02.roa (hash: 9XQ8E57rDZy0hs4By4P58wDNjTR7DCt1F2KaYrqVcoc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.crl rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_OAw6zAgOlEM28-cfDpDADu9-mI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:27:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127E8D, serialNumber=FCE030EB30203A510CDBCF9C7C3A43003BBDFA62 Validity Not Before: Apr 25 04:27:36 2025 GMT Not After : May 2 04:27:36 2025 GMT Subject: CN=680b0f39-4fd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b0:c3:bb:bf:ac:c2:aa:c3:a4:b2:ab:0b:0c: 86:e9:2f:21:30:e6:08:64:84:a5:64:45:69:e2:f9: 2d:c4:e5:97:7b:2b:c6:6d:5c:12:80:1f:e3:15:92: 55:e7:d7:70:6f:36:0b:de:be:61:2f:a1:fc:db:ec: 6b:23:74:65:54:71:71:b6:db:ba:34:de:e7:c1:d9: 04:89:db:5a:91:2c:3b:f4:10:16:57:56:76:31:85: d4:78:75:e9:60:e8:82:20:43:b4:28:d6:9b:16:5e: 1a:5f:88:a4:10:bf:bc:16:0a:0a:25:c4:3a:58:67: 2d:64:5b:7a:c1:d9:7e:4f:22:8b:da:36:ff:f2:53: 04:86:63:f2:2a:3d:81:7c:43:43:ed:5d:44:d3:22: c4:7b:e7:ab:e5:47:05:07:fd:fd:0c:22:ad:93:88: 13:5c:41:79:6f:9b:97:27:f3:3b:d0:3d:1d:42:87: 63:3a:5f:ef:64:f9:1b:13:f7:cf:b6:33:e3:53:45: 4a:3f:50:01:ca:7f:25:d8:a8:61:23:c7:5e:ad:da: 8a:e7:a7:af:02:ac:1e:c6:78:30:1a:97:41:25:d6: 3f:67:62:38:3d:2c:f6:e3:62:19:d2:5f:d0:37:6e: 72:f1:74:98:92:0e:16:00:05:64:92:10:2a:f2:fc: bf:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:54:CC:F4:06:ED:DE:AC:4C:BB:B3:47:5A:2C:1D:7A:E5:CC:4A:BB X509v3 Authority Key Identifier: keyid:FC:E0:30:EB:30:20:3A:51:0C:DB:CF:9C:7C:3A:43:00:3B:BD:FA:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_OAw6zAgOlEM28-cfDpDADu9-mI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:fa:9e:17:0e:0a:f4:27:95:96:f5:2b:0e:22:bb:2e:5d:98: 66:73:8c:ba:35:66:3a:88:db:b4:7e:df:10:1b:2f:41:0b:76: 3b:28:dd:41:c4:c2:d4:4a:0d:61:83:e6:f2:14:a9:7a:a1:ef: 69:9c:37:23:95:2b:11:cf:bb:7e:7a:cd:14:35:72:fc:e0:4a: cc:41:b4:3d:2c:43:8b:62:f3:b9:30:04:e1:77:cc:15:e9:6c: 4d:70:86:6b:67:89:6b:6f:37:37:57:6f:8e:2b:5d:8f:d3:88: 30:01:2d:85:95:43:65:b6:68:09:59:ce:d5:be:ea:84:c1:d5: 6a:7a:16:6b:d5:2c:8c:d8:be:3e:09:45:ba:df:02:ca:af:48: 08:43:46:7d:3a:cd:65:65:67:e0:39:b9:1d:94:bc:25:38:78: c5:b3:66:73:16:2b:6f:55:8d:50:ec:1d:0f:ca:4f:7c:8c:fd: 73:06:72:97:8f:33:4c:fd:c6:50:c0:f5:9e:2c:9d:38:9a:c4: fa:32:30:b6:b8:f0:2b:aa:fa:68:fd:42:d1:e4:ab:61:55:fd: ee:4e:76:62:6c:61:ec:cd:07:71:73:0b:65:89:c8:c7:a4:12: a1:ab:f9:4e:73:e2:21:96:d2:86:86:0b:94:f9:af:59:05:34: 12:ab:b2:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdFOEQxMTAvBgNVBAUTKEZDRTAzMEVCMzAyMDNBNTEwQ0RCQ0Y5QzdDM0E0MzAw M0JCREZBNjIwHhcNMjUwNDI1MDQyNzM2WhcNMjUwNTAyMDQyNzM2WjAYMRYwFAYD VQQDEw02ODBiMGYzOS00ZmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqbDDu7+swqrDpLKrCwyG6S8hMOYIZISlZEVp4vktxOWXeyvGbVwSgB/jFZJV 59dwbzYL3r5hL6H82+xrI3RlVHFxttu6NN7nwdkEidtakSw79BAWV1Z2MYXUeHXp YOiCIEO0KNabFl4aX4ikEL+8FgoKJcQ6WGctZFt6wdl+TyKL2jb/8lMEhmPyKj2B fEND7V1E0yLEe+er5UcFB/39DCKtk4gTXEF5b5uXJ/M70D0dQodjOl/vZPkbE/fP tjPjU0VKP1AByn8l2KhhI8derdqK56evAqwexngwGpdBJdY/Z2I4PSz242IZ0l/Q N25y8XSYkg4WAAVkkhAq8vy/bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFINUzPQG 7d6sTLuzR1osHXrlzEq7MB8GA1UdIwQYMBaAFPzgMOswIDpRDNvPnHw6QwA7vfpi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0U4RC82NEIxNkE5OEJG NDYxMUVFQjFCM0Q3NjRDNEY5QUUwMi9fT0F3NnpBZ09sRU0yOC1jZkRwREFEdTkt bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19PQXc2ekFnT2xFTTI4LWNmRHBEQUR1OS1tSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0U4RC82NEIxNkE5OEJGNDYxMUVFQjFCM0Q3NjRDNEY5QUUwMi9fT0F3NnpBZ09s RU0yOC1jZkRwREFEdTktbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAf+p4XDgr0J5WW9SsOIrsuXZhmc4y6NWY6iNu0ft8QGy9BC3Y7KN1B xMLUSg1hg+byFKl6oe9pnDcjlSsRz7t+es0UNXL84ErMQbQ9LEOLYvO5MAThd8wV 6WxNcIZrZ4lrbzc3V2+OK12P04gwAS2FlUNltmgJWc7VvuqEwdVqehZr1SyM2L4+ CUW63wLKr0gIQ0Z9Os1lZWfgObkdlLwlOHjFs2ZzFitvVY1Q7B0Pyk98jP1zBnKX jzNM/cZQwPWeLJ04msT6MjC2uPArqvpo/ULR5KthVf3uTnZibGHszQdxcwtlicjH pBKhq/lOc+IhltKGhguU+a9ZBTQSq7Ih -----END CERTIFICATE-----Generated at Sat Apr 26 05:19:30 2025 by rpki-client