$ rpki-client -vvf rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft File: 5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft (raw, json) Hash identifier: 6r3sdN6IuNemQQy+PcHG3Q6Tob4U/j/sh1j2U8z4H6A= Subject key identifier: 3A:4C:8F:1A:FA:5B:09:1E:A4:67:D6:3F:B7:66:2D:FB:8B:4F:56:22 Authority key identifier: E4:E1:01:EE:F4:43:15:0C:62:11:0A:CA:FA:88:15:54:C0:89:FC:53 Certificate issuer: /CN=A9131612/serialNumber=E4E101EEF443150C62110ACAFA881554C089FC53 Certificate serial: 0DAF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft Manifest number: 0D9D Signing time: Fri 02 May 2025 18:08:19 +0000 Manifest this update: Fri 02 May 2025 18:08:19 +0000 Manifest next update: Fri 09 May 2025 18:08:19 +0000 Files and hashes: 1: 5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl (hash: VuoTnq0UBzxtT9t6CDMBm9PAwpazIB0LvfdZAycFmB8=) 2: 26F281DEDDF811EAA553705EC4F9AE02.roa (hash: yfx8lsCL6G/ov0fWwE1WTE6uXL656onMX4rdjMifJrY=) 3: 279B0372DDF811EAA553705EC4F9AE02.roa (hash: TXNMP48c0k6G4JxEf3t+PnW7SOJPV7z8Od5Inbeh5Gs=) 4: 923C51A8BE8811E998F37222C4F9AE02.roa (hash: aRzYWRPVSTTgYa3Czpj2Qj/z5H39rDEjDg/TNXrra84=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 18:08:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3503 (0xdaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131612, serialNumber=E4E101EEF443150C62110ACAFA881554C089FC53 Validity Not Before: May 2 18:08:19 2025 GMT Not After : May 9 18:08:19 2025 GMT Subject: CN=68150a13-67ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:43:43:d1:80:1a:56:0e:5e:66:4c:5b:62:71: 72:9a:18:d0:8b:67:0f:1f:2b:7d:90:56:21:0a:cd: 7f:85:ce:85:c5:b4:df:30:d3:27:27:9d:e2:f6:be: a4:4c:c4:d2:2f:e5:07:77:40:18:2d:c0:02:dc:fe: c1:68:30:ac:1d:d1:e2:29:dc:7d:64:d9:b1:54:8d: 0f:1a:f5:71:23:34:1a:1a:16:87:1a:45:7f:14:18: ec:ea:e6:b4:d2:82:b1:5e:bb:52:45:68:f8:0e:09: 65:b1:05:24:03:f7:8b:e2:1e:e9:33:b2:bd:91:3e: 26:34:76:76:9b:4e:16:61:22:1a:bf:a5:ea:f4:9a: 1b:9d:35:16:52:3f:9d:7d:6b:3a:92:92:6b:20:36: 3b:43:81:d3:39:3b:4f:34:43:8b:1e:be:ce:07:9c: 10:a7:77:65:d6:b4:79:03:b2:38:8d:e0:f8:a7:e5: 03:3c:f3:b5:f6:cb:1c:a8:fd:62:01:31:47:05:cd: c9:a6:01:ff:85:62:74:f4:6d:12:c6:c7:cc:89:84: 11:86:10:eb:a9:fe:27:1e:3b:c2:2c:cb:a9:e3:fe: e7:78:21:cf:d0:d8:56:61:f6:e5:68:bb:a4:4a:48: 97:38:1e:60:82:6a:5f:69:db:ec:29:29:96:57:91: 14:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:4C:8F:1A:FA:5B:09:1E:A4:67:D6:3F:B7:66:2D:FB:8B:4F:56:22 X509v3 Authority Key Identifier: keyid:E4:E1:01:EE:F4:43:15:0C:62:11:0A:CA:FA:88:15:54:C0:89:FC:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:00:ae:b0:35:13:88:21:36:bf:76:43:c1:5f:86:b2:5f:71: 08:bd:a5:41:8b:c1:47:ba:a6:89:e3:b1:1c:21:41:66:d3:e5: 0d:c8:fb:ef:67:4f:5c:5a:1f:d1:cc:98:11:2d:56:13:93:87: 65:38:97:ac:b7:40:88:1f:f0:fa:15:7c:7f:a0:31:1b:f4:9b: 74:f5:1a:2c:ee:22:57:fa:5f:1f:10:46:5e:2e:2f:67:28:ae: 25:68:16:7c:71:ea:3b:71:e6:3d:d8:43:76:c5:86:0e:73:ed: 54:02:75:3f:74:56:ca:ab:c8:6f:61:b4:77:91:cd:b4:54:04: d6:aa:3a:cf:3d:58:0a:dd:de:94:55:ca:bf:cd:69:02:4c:9f: 4e:6b:b2:06:73:b5:7d:04:b0:1a:9b:8f:bb:45:61:29:49:41: f9:3c:41:2a:72:2a:2e:a3:6a:6e:90:74:43:24:bd:b0:70:63: 1d:4a:96:24:49:bb:c6:c5:e8:4c:d0:fa:ea:8b:4a:d3:58:39: 67:06:2c:c8:3a:cf:67:17:51:ae:7c:38:ab:27:8c:bc:90:e5: 43:68:10:f9:27:37:12:ac:25:de:4d:a0:3e:c1:99:0a:c5:d5: 9d:42:80:20:f9:64:52:1f:10:ee:50:1d:ba:d1:40:74:c8:76: d5:43:54:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE2MTIxMTAvBgNVBAUTKEU0RTEwMUVFRjQ0MzE1MEM2MjExMEFDQUZBODgxNTU0 QzA4OUZDNTMwHhcNMjUwNTAyMTgwODE5WhcNMjUwNTA5MTgwODE5WjAYMRYwFAYD VQQDEw02ODE1MGExMy02N2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwkND0YAaVg5eZkxbYnFymhjQi2cPHyt9kFYhCs1/hc6FxbTfMNMnJ53i9r6k TMTSL+UHd0AYLcAC3P7BaDCsHdHiKdx9ZNmxVI0PGvVxIzQaGhaHGkV/FBjs6ua0 0oKxXrtSRWj4DgllsQUkA/eL4h7pM7K9kT4mNHZ2m04WYSIav6Xq9JobnTUWUj+d fWs6kpJrIDY7Q4HTOTtPNEOLHr7OB5wQp3dl1rR5A7I4jeD4p+UDPPO19sscqP1i ATFHBc3JpgH/hWJ09G0SxsfMiYQRhhDrqf4nHjvCLMup4/7neCHP0NhWYfblaLuk SkiXOB5ggmpfadvsKSmWV5EUVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDpMjxr6 WwkepGfWP7dmLfuLT1YiMB8GA1UdIwQYMBaAFOThAe70QxUMYhEKyvqIFVTAifxT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTYxMi9FM0I4NEM4Q0JF ODYxMUU5OUE2QzAxMUZDNEY5QUUwMi81T0VCN3ZSREZReGlFUXJLLW9nVlZNQ0pf Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVPRUI3dlJERlF4aUVRckstb2dWVk1DSl9GTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTYxMi9FM0I4NEM4Q0JFODYxMUU5OUE2QzAxMUZDNEY5QUUwMi81T0VCN3ZSREZR eGlFUXJLLW9nVlZNQ0pfRk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdAK6wNROIITa/dkPBX4ayX3EIvaVBi8FHuqaJ47EcIUFm0+UNyPvv Z09cWh/RzJgRLVYTk4dlOJest0CIH/D6FXx/oDEb9Jt09Ros7iJX+l8fEEZeLi9n KK4laBZ8ceo7ceY92EN2xYYOc+1UAnU/dFbKq8hvYbR3kc20VATWqjrPPVgK3d6U Vcq/zWkCTJ9Oa7IGc7V9BLAam4+7RWEpSUH5PEEqciouo2pukHRDJL2wcGMdSpYk SbvGxehM0Prqi0rTWDlnBizIOs9nF1GufDirJ4y8kOVDaBD5JzcSrCXeTaA+wZkK xdWdQoAg+WRSHxDuUB260UB0yHbVQ1Qz -----END CERTIFICATE-----Generated at Sun May 4 14:15:23 2025 by rpki-client