$ rpki-client -vvf rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft File: o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft (raw, json) Hash identifier: gJ29KZdJLSk+WX0+GecAoSOEcMWwYL9nFaZyWT5vcic= Subject key identifier: 12:2C:6C:FB:45:CC:7A:50:DE:F8:EF:20:E7:FB:54:B8:FB:D7:C0:A4 Authority key identifier: A3:FC:9A:10:E2:5D:31:94:21:8C:C0:7D:3E:3B:79:54:9C:24:29:2B Certificate issuer: /CN=A913F26E/serialNumber=A3FC9A10E25D3194218CC07D3E3B79549C24292B Certificate serial: 03EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft Manifest number: 03E8 Signing time: Fri 25 Apr 2025 00:17:15 +0000 Manifest this update: Fri 25 Apr 2025 00:17:15 +0000 Manifest next update: Fri 02 May 2025 00:17:15 +0000 Files and hashes: 1: o_yaEOJdMZQhjMB9Pjt5VJwkKSs.crl (hash: M9HOPuEJ977nBwEn/lVO0v3mFvSrx38hixjZgQu4L4s=) 2: 61F1288A76B311ECABA1A612C4F9AE02.roa (hash: PnVC3vOx/m/d2i5GijyZP2nHOvoHme0AIyPBMzeLZ6g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.crl rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:17:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1004 (0x3ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F26E, serialNumber=A3FC9A10E25D3194218CC07D3E3B79549C24292B Validity Not Before: Apr 25 00:17:15 2025 GMT Not After : May 2 00:17:15 2025 GMT Subject: CN=680ad48b-a566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:22:c5:db:fb:98:c4:60:cb:6b:a5:72:60:14: 05:ec:e3:09:39:64:81:4a:54:5b:f4:6e:e0:a7:89: 69:1a:50:6a:ee:4e:f5:e7:ab:ec:b8:20:9e:6b:6f: 21:cb:27:f2:8e:e1:5f:fc:6c:cb:46:18:6f:8a:54: cf:a0:a3:d7:d3:6e:d5:7b:ce:a3:bf:39:dc:60:fa: 43:59:06:ff:4a:8e:40:ee:53:f8:97:4c:2c:f0:da: e1:00:6f:69:db:05:6a:8a:9e:da:9a:8c:44:3d:44: a2:33:56:5c:99:ae:e8:ea:8f:44:90:22:28:9a:2e: d0:11:33:6a:42:01:92:24:2f:8a:f8:ca:7c:b4:b9: 3b:fe:56:07:73:dc:d5:a5:10:9a:c8:b4:65:d0:e9: 0f:11:2e:d7:18:61:1c:20:d7:93:4f:43:f1:da:36: 1a:a9:1d:25:ef:44:9b:1c:42:4c:b5:52:22:00:56: 4d:1f:23:de:40:21:f2:d4:22:3b:64:cc:36:2b:ed: 18:c0:eb:ab:91:a0:1e:64:4a:0a:4f:19:4e:22:3b: f0:a4:3f:cb:66:ed:7a:38:6d:5d:cd:c7:de:f4:c2: 84:9b:73:58:30:79:19:ee:ec:41:3e:10:26:e3:fe: 66:be:13:16:e3:c2:0a:f1:22:57:89:dc:25:ad:c2: d8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:2C:6C:FB:45:CC:7A:50:DE:F8:EF:20:E7:FB:54:B8:FB:D7:C0:A4 X509v3 Authority Key Identifier: keyid:A3:FC:9A:10:E2:5D:31:94:21:8C:C0:7D:3E:3B:79:54:9C:24:29:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:c4:e6:e1:5c:23:54:77:1b:fa:74:03:ff:57:10:18:75:4a: 4e:1e:aa:a4:76:33:0a:82:8d:6d:6e:81:ef:ad:41:21:3e:19: 31:97:37:ec:f6:a1:5e:69:4e:53:c0:92:03:4a:5f:69:01:ec: 43:aa:7d:ad:36:65:b3:a5:08:bb:56:5c:09:e8:08:31:82:fa: 37:b9:5b:b1:8f:ce:4d:d4:8c:d8:3e:f5:68:be:48:28:80:b0: 9b:31:b4:29:55:84:98:8a:c9:36:43:40:8d:ee:40:eb:7d:82: de:32:36:76:4e:de:fe:da:c7:c0:91:93:53:63:27:4f:7a:dc: 24:6d:40:a4:ef:6c:86:9b:48:1a:61:a8:38:0d:9f:69:e7:49: 21:ed:41:2f:38:ed:08:68:1f:b8:3d:5a:de:1d:71:4f:38:c2: 84:f8:fb:51:30:04:cd:14:35:c1:ba:b5:a1:41:2b:fd:0d:ec: df:1d:c3:85:78:e2:19:d5:eb:ec:fd:21:09:03:fc:7f:a9:96: ae:45:c6:27:e1:63:b1:9c:7b:ff:c9:ca:97:14:9b:b5:05:52: 01:7b:08:15:da:cf:6e:10:ae:10:34:31:f7:5d:36:fd:57:2d: 00:07:55:4e:12:63:24:5b:0b:b7:0e:d9:c8:dc:40:68:94:c8: bd:cc:2f:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YyNkUxMTAvBgNVBAUTKEEzRkM5QTEwRTI1RDMxOTQyMThDQzA3RDNFM0I3OTU0 OUMyNDI5MkIwHhcNMjUwNDI1MDAxNzE1WhcNMjUwNTAyMDAxNzE1WjAYMRYwFAYD VQQDEw02ODBhZDQ4Yi1hNTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqSLF2/uYxGDLa6VyYBQF7OMJOWSBSlRb9G7gp4lpGlBq7k7156vsuCCea28h yyfyjuFf/GzLRhhvilTPoKPX027Ve86jvzncYPpDWQb/So5A7lP4l0ws8NrhAG9p 2wVqip7amoxEPUSiM1Zcma7o6o9EkCIomi7QETNqQgGSJC+K+Mp8tLk7/lYHc9zV pRCayLRl0OkPES7XGGEcINeTT0Px2jYaqR0l70SbHEJMtVIiAFZNHyPeQCHy1CI7 ZMw2K+0YwOurkaAeZEoKTxlOIjvwpD/LZu16OG1dzcfe9MKEm3NYMHkZ7uxBPhAm 4/5mvhMW48IK8SJXidwlrcLYGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBIsbPtF zHpQ3vjvIOf7VLj718CkMB8GA1UdIwQYMBaAFKP8mhDiXTGUIYzAfT47eVScJCkr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjI2RS9EQTFBNkM2Qzc2 QUYxMUVDQTUxMzIyMEVDNEY5QUUwMi9vX3lhRU9KZE1aUWhqTUI5UGp0NVZKd2tL U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29feWFFT0pkTVpRaGpNQjlQanQ1Vkp3a0tTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjI2RS9EQTFBNkM2Qzc2QUYxMUVDQTUxMzIyMEVDNEY5QUUwMi9vX3lhRU9KZE1a UWhqTUI5UGp0NVZKd2tLU3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASxObhXCNUdxv6dAP/VxAYdUpOHqqkdjMKgo1tboHvrUEhPhkxlzfs 9qFeaU5TwJIDSl9pAexDqn2tNmWzpQi7VlwJ6Agxgvo3uVuxj85N1IzYPvVovkgo gLCbMbQpVYSYisk2Q0CN7kDrfYLeMjZ2Tt7+2sfAkZNTYydPetwkbUCk72yGm0ga Yag4DZ9p50kh7UEvOO0IaB+4PVreHXFPOMKE+PtRMATNFDXBurWhQSv9DezfHcOF eOIZ1evs/SEJA/x/qZauRcYn4WOxnHv/ycqXFJu1BVIBewgV2s9uEK4QNDH3XTb9 Vy0AB1VOEmMkWwu3DtnI3EBolMi9zC92 -----END CERTIFICATE-----Generated at Sat Apr 26 03:59:01 2025 by rpki-client