$ rpki-client -vvf rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft File: UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft (raw, json) Hash identifier: f/kXpkQhwRCVHVCrr16AOJvvJjmu7vuH3tAXhiU6n5k= Subject key identifier: 7B:03:C5:3E:B0:DA:30:31:DA:EE:8A:DA:DF:6F:EB:3C:0E:67:9D:D3 Authority key identifier: 50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F Certificate issuer: /CN=A913B1DA/serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F Certificate serial: 3069 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft Manifest number: 305B Signing time: Thu 24 Apr 2025 15:27:28 +0000 Manifest this update: Thu 24 Apr 2025 15:27:28 +0000 Manifest next update: Thu 01 May 2025 15:27:28 +0000 Files and hashes: 1: UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl (hash: AJHlnPFjxW0/eQWM1rg/iqF3wY+ajMnUP+YSrtdL2NQ=) 2: E5DB5238DFBD11EC8E203126C4F9AE02.roa (hash: 8yPXIp2srpOMXwXrVDBAhf+m6VYRXr2aEaNExsEirN4=) 3: B8B02658C16B11EEA7D01A7DC4F9AE02.roa (hash: WamiUU84cAcc5WGx4lslvANbP3TtO/lIaFT/y7zUmEY=) 4: 446A425EA6BB11ED9D458785C4F9AE02.roa (hash: WhKdctnJM8x/P3lLuqtSYgwShQQZa8r7EVnRQb0csbo=) 5: 43DADDD0A6BB11ED9D458785C4F9AE02.roa (hash: T37Xr3jND0OgDmWZSLZeRiJ8MSQ6+oBhyzh33K0Hddg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12393 (0x3069) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B1DA, serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F Validity Not Before: Apr 24 15:27:28 2025 GMT Not After : May 1 15:27:28 2025 GMT Subject: CN=680a5860-6f30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:64:75:56:55:b2:4d:12:27:91:6b:b1:39:0e: c9:bc:5b:9c:16:3c:56:51:f2:e0:68:d7:b3:58:44: 18:2d:13:1e:c9:ad:07:73:20:21:1a:8c:4c:59:e5: 0f:10:69:a4:36:e6:7e:56:38:51:11:d4:c9:fa:66: 22:cb:36:27:00:4e:05:8a:ed:24:1c:3c:15:e3:2c: f4:24:a9:b2:b7:9a:b9:73:33:ba:43:6f:7f:b0:3d: c6:f1:ca:21:e0:66:2d:4f:82:de:4b:4b:8a:57:d9: 09:72:2d:0a:0a:d7:30:32:61:3e:8e:bf:d1:95:8b: b2:ef:c4:f2:a1:ea:c2:d5:33:39:1e:1c:b9:6b:34: 0c:99:c7:d1:c1:26:f6:c5:f7:9c:20:4d:70:6e:c6: f0:8b:b5:e8:0b:79:95:d5:ef:3c:10:aa:db:27:67: 6d:c4:ac:e3:f0:6b:73:d0:f7:78:8c:62:7f:d2:01: ea:72:0b:71:59:d0:5a:41:d8:60:d8:7b:09:43:8b: f6:9d:db:ea:96:7c:91:de:84:58:57:b7:6d:51:b2: af:aa:2a:2b:2c:6d:b3:c0:7f:c3:91:68:fd:ec:74: da:19:26:cf:c5:55:4a:14:73:fa:a7:27:34:cf:d0: 1c:d1:30:67:83:c8:10:82:ee:ec:f0:b9:7d:7a:01: fb:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:03:C5:3E:B0:DA:30:31:DA:EE:8A:DA:DF:6F:EB:3C:0E:67:9D:D3 X509v3 Authority Key Identifier: keyid:50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:71:38:29:59:68:bf:a1:ef:86:05:9a:be:bc:e3:eb:02:77: 3a:6d:05:21:33:e8:37:7d:68:fd:d3:e0:19:05:90:0d:3e:d1: e0:a2:56:26:22:a8:aa:f4:2a:ca:20:1b:f2:36:6c:97:30:56: 5d:80:e1:cd:41:b4:7f:36:86:aa:5f:79:b5:18:0e:95:44:e5: 8b:cc:74:ef:b3:88:d1:41:13:2d:2d:9a:59:eb:87:20:15:d8: 0d:b3:2a:52:e3:12:0d:89:94:cf:e0:b9:94:8f:97:5d:37:79: 87:b9:dd:bf:7b:13:3d:ab:1c:2c:e5:49:63:a7:16:79:45:d0: 2a:e3:81:26:de:6f:9b:27:e8:ad:5d:1f:14:ac:d7:aa:12:33: e5:79:f5:b4:b3:b9:16:a0:94:3c:80:3f:8b:fc:ad:91:c6:3f: 7a:39:07:87:4d:af:1e:ee:63:ca:28:ab:b4:c3:d6:a7:d6:76: bc:f9:52:80:45:18:44:6f:ab:63:c0:ec:87:99:60:8a:ef:7a: 6a:00:a3:60:33:69:ff:15:9f:dc:c3:ef:f2:c8:86:38:c6:d0: b2:62:b4:67:ff:a4:dc:db:80:65:cc:11:40:f5:ed:cd:bf:11: d2:de:28:88:b6:c9:0a:03:f9:9c:c2:60:c6:e7:54:c6:81:44: 49:4b:1e:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IxREExMTAvBgNVBAUTKDUwRTY2ODNBNkFGNDY0NEI2OEExMUMyMkRBN0YzQTY1 QjMxMkMwNkYwHhcNMjUwNDI0MTUyNzI4WhcNMjUwNTAxMTUyNzI4WjAYMRYwFAYD VQQDEw02ODBhNTg2MC02ZjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwGR1VlWyTRInkWuxOQ7JvFucFjxWUfLgaNezWEQYLRMeya0HcyAhGoxMWeUP EGmkNuZ+VjhREdTJ+mYiyzYnAE4Fiu0kHDwV4yz0JKmyt5q5czO6Q29/sD3G8coh 4GYtT4LeS0uKV9kJci0KCtcwMmE+jr/RlYuy78TyoerC1TM5Hhy5azQMmcfRwSb2 xfecIE1wbsbwi7XoC3mV1e88EKrbJ2dtxKzj8Gtz0Pd4jGJ/0gHqcgtxWdBaQdhg 2HsJQ4v2ndvqlnyR3oRYV7dtUbKvqiorLG2zwH/DkWj97HTaGSbPxVVKFHP6pyc0 z9Ac0TBng8gQgu7s8Ll9egH7QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHsDxT6w 2jAx2u6K2t9v6zwOZ53TMB8GA1UdIwQYMBaAFFDmaDpq9GRLaKEcItp/OmWzEsBv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjFEQS8xNEI3NkJDOEVE MEIxMUUyQTM1REM2NDg1OTExRUEzMi9VT1pvT21yMFpFdG9vUndpMm44NlpiTVN3 RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VPWm9PbXIwWkV0b29Sd2kybjg2WmJNU3dHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjFEQS8xNEI3NkJDOEVEMEIxMUUyQTM1REM2NDg1OTExRUEzMi9VT1pvT21yMFpF dG9vUndpMm44NlpiTVN3RzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+cTgpWWi/oe+GBZq+vOPrAnc6bQUhM+g3fWj90+AZBZANPtHgolYm Iqiq9CrKIBvyNmyXMFZdgOHNQbR/NoaqX3m1GA6VROWLzHTvs4jRQRMtLZpZ64cg FdgNsypS4xINiZTP4LmUj5ddN3mHud2/exM9qxws5UljpxZ5RdAq44Em3m+bJ+it XR8UrNeqEjPlefW0s7kWoJQ8gD+L/K2Rxj96OQeHTa8e7mPKKKu0w9an1na8+VKA RRhEb6tjwOyHmWCK73pqAKNgM2n/FZ/cw+/yyIY4xtCyYrRn/6Tc24BlzBFA9e3N vxHS3iiItskKA/mcwmDG51TGgURJSx6+ -----END CERTIFICATE-----Generated at Sat Apr 26 17:08:24 2025 by rpki-client