$ rpki-client -vvf rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft File: OIgNuTaszJvXTT2434iHsyjleI0.mft (raw, json) Hash identifier: lkMyFhFeMBERqarWQtqPm4YeYWSZ4imf/PQ1gGtS2Lk= Subject key identifier: F8:1F:4D:D6:F7:6A:0D:31:08:34:D4:A3:90:E5:B6:06:49:B0:77:CA Authority key identifier: 38:88:0D:B9:36:AC:CC:9B:D7:4D:3D:B8:DF:88:87:B3:28:E5:78:8D Certificate issuer: /CN=A912E411/serialNumber=38880DB936ACCC9BD74D3DB8DF8887B328E5788D Certificate serial: 0879 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft Manifest number: 1436 Signing time: Thu 24 Apr 2025 18:45:36 +0000 Manifest this update: Thu 24 Apr 2025 18:45:35 +0000 Manifest next update: Thu 01 May 2025 18:45:35 +0000 Files and hashes: 1: OIgNuTaszJvXTT2434iHsyjleI0.crl (hash: BbpXPvYdy0ET2ea9hvQKQvniMNqpSCBqdPVfMOS7gz4=) 2: C766E398C0EE11EA94A1F146C4F9AE02.roa (hash: U6IcJIRj5YJRYqTCJwLcK2WJN6a1G6P8qQ/oIfEnUqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.crl rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:45:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2169 (0x879) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E411, serialNumber=38880DB936ACCC9BD74D3DB8DF8887B328E5788D Validity Not Before: Apr 24 18:45:35 2025 GMT Not After : May 1 18:45:35 2025 GMT Subject: CN=680a86cf-a95a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2f:bd:9a:32:07:7c:87:27:9d:86:c9:5f:ce: d6:f7:36:15:30:53:47:a4:f4:a9:dd:19:10:66:cc: 74:98:0c:86:ab:d1:d7:66:a6:32:13:97:85:f9:cf: f2:2c:ee:71:c7:36:7a:e7:39:8a:7f:91:53:01:98: b3:1f:a5:5c:96:25:97:61:5e:b1:ce:06:e7:8a:8b: 06:03:8f:d8:ec:02:7d:d2:d2:51:dd:26:23:af:32: 3d:38:ed:88:30:dc:a4:98:79:1c:15:08:5b:26:b9: 23:66:1b:a1:39:17:4d:bf:e4:fb:0a:c5:1f:f2:23: 82:7b:c7:64:b0:e8:ee:f5:77:ce:78:07:52:7f:f9: 9c:4b:27:0a:08:da:9b:88:ad:ca:6e:f4:e5:e9:c2: cf:aa:1a:bf:1b:8f:42:04:e5:df:dc:5a:75:fe:42: 6d:60:4a:c3:6f:0b:8a:62:fd:0e:5e:74:ed:0d:a6: 08:66:d7:12:2c:2f:b8:92:99:61:40:ea:13:06:1a: 36:d1:2e:2b:2f:b2:18:e5:91:fb:4f:40:49:3c:94: 67:c3:7e:01:8e:fd:b7:6c:d8:40:5d:30:43:c3:48: 3e:89:52:7d:e2:04:3f:85:a5:7d:84:ad:26:e4:72: 1f:d4:20:83:c1:ef:5d:65:3c:c4:58:1e:87:cd:8d: dc:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:1F:4D:D6:F7:6A:0D:31:08:34:D4:A3:90:E5:B6:06:49:B0:77:CA X509v3 Authority Key Identifier: keyid:38:88:0D:B9:36:AC:CC:9B:D7:4D:3D:B8:DF:88:87:B3:28:E5:78:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:fb:93:5a:2c:36:d4:a3:0e:4b:b7:fd:84:7f:21:fa:a5:4b: 69:e5:b8:a1:69:e2:01:8c:c1:67:0f:4e:b6:b4:45:d8:cb:d5: 5b:fd:71:cf:13:a0:e3:fa:bd:6e:d5:a4:2e:c1:ff:d1:5f:3f: 60:3e:3e:4a:f9:73:6a:ec:b1:54:b0:06:cf:ae:d7:d1:b9:45: df:43:53:c9:54:1f:83:7e:73:fc:0b:ff:4b:fa:32:ea:f4:c0: ee:24:d2:d9:bb:ac:0c:0d:c7:68:43:fb:e2:18:a6:4c:37:d5: ce:e5:84:d3:76:40:53:fa:b6:c1:0f:01:26:72:a1:e7:66:55: 49:44:3c:5a:0b:ed:76:f9:82:42:14:fb:62:d3:d9:34:d4:81: 29:82:e4:e9:27:c0:57:8e:e9:d9:55:61:aa:55:b4:23:2f:12: d3:da:f2:47:b5:ff:2f:2f:a9:bf:fd:9d:a9:4b:c7:ea:04:eb: 3c:04:9d:d6:43:18:54:17:c0:ca:9d:bc:ee:fd:b4:ba:be:22: 55:32:52:a1:36:1a:bf:a8:e7:bf:72:87:9e:19:57:e3:76:32: d6:91:3a:55:e9:45:54:38:d8:6d:2c:8b:e6:fb:b9:b5:d1:40: 34:ca:17:72:fc:39:d8:ed:7f:90:e3:80:9e:ec:af:fe:d1:78: b0:b3:4b:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU0MTExMTAvBgNVBAUTKDM4ODgwREI5MzZBQ0NDOUJENzREM0RCOERGODg4N0Iz MjhFNTc4OEQwHhcNMjUwNDI0MTg0NTM1WhcNMjUwNTAxMTg0NTM1WjAYMRYwFAYD VQQDEw02ODBhODZjZi1hOTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsi+9mjIHfIcnnYbJX87W9zYVMFNHpPSp3RkQZsx0mAyGq9HXZqYyE5eF+c/y LO5xxzZ65zmKf5FTAZizH6VcliWXYV6xzgbniosGA4/Y7AJ90tJR3SYjrzI9OO2I MNykmHkcFQhbJrkjZhuhORdNv+T7CsUf8iOCe8dksOju9XfOeAdSf/mcSycKCNqb iK3KbvTl6cLPqhq/G49CBOXf3Fp1/kJtYErDbwuKYv0OXnTtDaYIZtcSLC+4kplh QOoTBho20S4rL7IY5ZH7T0BJPJRnw34Bjv23bNhAXTBDw0g+iVJ94gQ/haV9hK0m 5HIf1CCDwe9dZTzEWB6HzY3cIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPgfTdb3 ag0xCDTUo5DltgZJsHfKMB8GA1UdIwQYMBaAFDiIDbk2rMyb1009uN+Ih7Mo5XiN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTQxMS9GMEIwMEVCNDE5 MTQxMUVBODZGMjQ4MUVDNEY5QUUwMi9PSWdOdVRhc3pKdlhUVDI0MzRpSHN5amxl STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09JZ051VGFzekp2WFRUMjQzNGlIc3lqbGVJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTQxMS9GMEIwMEVCNDE5MTQxMUVBODZGMjQ4MUVDNEY5QUUwMi9PSWdOdVRhc3pK dlhUVDI0MzRpSHN5amxlSTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCR+5NaLDbUow5Lt/2EfyH6pUtp5bihaeIBjMFnD062tEXYy9Vb/XHP E6Dj+r1u1aQuwf/RXz9gPj5K+XNq7LFUsAbPrtfRuUXfQ1PJVB+DfnP8C/9L+jLq 9MDuJNLZu6wMDcdoQ/viGKZMN9XO5YTTdkBT+rbBDwEmcqHnZlVJRDxaC+12+YJC FPti09k01IEpguTpJ8BXjunZVWGqVbQjLxLT2vJHtf8vL6m//Z2pS8fqBOs8BJ3W QxhUF8DKnbzu/bS6viJVMlKhNhq/qOe/coeeGVfjdjLWkTpV6UVUONhtLIvm+7m1 0UA0yhdy/DnY7X+Q44Ce7K/+0Xiws0v9 -----END CERTIFICATE-----Generated at Sat Apr 26 07:54:04 2025 by rpki-client