$ rpki-client -vvf rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft File: o9--Ea-KeOViz7RXkAzKuQkMK1k.mft (raw, json) Hash identifier: Sv/BkzCad9F1TQq8qcf2Bx4PZBVf1Z++2JwiV6ugWeI= Subject key identifier: 56:D2:17:43:7D:74:E7:A7:F6:19:E2:31:EA:F5:CE:71:6B:77:1E:FB Authority key identifier: A3:DF:BE:11:AF:8A:78:E5:62:CF:B4:57:90:0C:CA:B9:09:0C:2B:59 Certificate issuer: /CN=A9145604/serialNumber=A3DFBE11AF8A78E562CFB457900CCAB9090C2B59 Certificate serial: 0901 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9--Ea-KeOViz7RXkAzKuQkMK1k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft Manifest number: 08FC Signing time: Thu 24 Apr 2025 20:13:22 +0000 Manifest this update: Thu 24 Apr 2025 20:13:21 +0000 Manifest next update: Thu 01 May 2025 20:13:21 +0000 Files and hashes: 1: o9--Ea-KeOViz7RXkAzKuQkMK1k.crl (hash: MJfrkUt55FvXpJLJWITFp6zvfrWoB/XXZiqsA4P3cGA=) 2: C0A21C70A4A711EA835CCA70C4F9AE02.roa (hash: itCLnBcL2Gte2voVtQcQvcDsZmsmQBg0colGRKDZXYQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.crl rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9--Ea-KeOViz7RXkAzKuQkMK1k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:13:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2305 (0x901) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145604, serialNumber=A3DFBE11AF8A78E562CFB457900CCAB9090C2B59 Validity Not Before: Apr 24 20:13:21 2025 GMT Not After : May 1 20:13:21 2025 GMT Subject: CN=680a9b61-6413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e6:f3:da:2d:8e:79:b2:cb:24:56:0d:73:70: 3d:b6:f5:46:d9:80:7b:59:42:0e:f0:cb:66:95:2f: 52:4f:d3:73:52:d9:e9:73:e8:23:26:2c:31:d2:16: 5d:f1:a3:fa:bd:1f:1d:95:dd:28:09:d2:21:b2:cd: f7:d3:9a:a6:e2:75:ca:64:b3:39:ba:7c:41:82:bc: 39:0c:83:3e:75:b3:0c:4d:3f:8f:b0:50:d0:f7:e2: cd:ac:f4:24:70:a6:0c:ab:fa:57:64:e4:73:ad:19: 68:c6:72:8a:7e:6d:3a:f5:07:a4:3f:b1:99:d3:9a: e0:24:e4:01:9b:2d:fd:eb:2b:94:76:f2:59:e7:55: 41:10:65:46:ae:22:37:34:ef:fe:99:9d:ae:c1:ec: d2:98:ee:eb:f3:9b:a6:ba:63:e8:80:01:c0:46:ee: 21:19:8a:ba:b0:79:19:1e:de:a7:38:20:b0:0c:99: be:fe:39:01:cd:cb:81:68:f0:36:6a:ea:eb:ef:35: 3e:42:03:e5:86:dd:e5:e2:55:51:38:02:20:ab:73: 97:52:10:ef:06:b1:d7:6f:b7:9e:89:d0:4a:19:d7: ff:6b:1f:e6:8f:cf:0f:b7:29:cd:ae:8f:c2:db:f5: 47:15:47:c3:d4:eb:c8:81:b1:1b:ad:c3:54:68:3f: 9a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:D2:17:43:7D:74:E7:A7:F6:19:E2:31:EA:F5:CE:71:6B:77:1E:FB X509v3 Authority Key Identifier: keyid:A3:DF:BE:11:AF:8A:78:E5:62:CF:B4:57:90:0C:CA:B9:09:0C:2B:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9--Ea-KeOViz7RXkAzKuQkMK1k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:53:c2:ad:83:4f:87:bb:f1:a1:0e:82:33:6b:92:e2:f2:86: 1f:b5:b9:82:59:48:e7:69:1b:dc:e7:e8:9c:87:88:d6:5b:01: f2:aa:6d:e0:91:05:7a:e5:c8:ca:65:7c:09:a3:13:9c:55:16: d0:05:c0:b7:ba:0f:bb:a3:89:f0:ee:63:bc:68:2d:43:63:53: a4:78:be:ea:e5:db:04:2f:e8:35:d9:8f:8e:5e:03:9a:0f:0f: 8e:42:7d:c6:7e:ed:f6:1f:8e:d9:5b:a6:87:79:36:f2:63:55: 94:5f:35:77:d6:76:3e:7b:9e:88:e3:a9:b5:9e:e8:62:9c:c2: 44:20:39:b4:8f:99:47:3c:4e:8a:a2:e2:6a:01:4a:f2:25:81: a7:9f:69:e9:61:f2:fc:e4:49:a6:5a:92:52:b4:88:7f:1d:a3: b8:69:24:c3:62:bf:ca:84:00:94:9f:dd:95:35:17:b9:c9:24: 45:e8:c9:38:a0:89:be:3e:b9:7b:3f:d0:67:40:a7:4b:3c:e3: b2:f7:9f:f1:3e:40:d7:10:36:59:19:00:66:69:20:c4:46:36: c3:39:81:28:67:93:2e:d3:01:c4:a8:dc:ca:a5:12:8b:38:ab: a8:77:9c:6c:e4:3f:86:87:15:4c:81:26:5c:4d:95:55:34:72: ad:be:08:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU2MDQxMTAvBgNVBAUTKEEzREZCRTExQUY4QTc4RTU2MkNGQjQ1NzkwMENDQUI5 MDkwQzJCNTkwHhcNMjUwNDI0MjAxMzIxWhcNMjUwNTAxMjAxMzIxWjAYMRYwFAYD VQQDEw02ODBhOWI2MS02NDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1+bz2i2OebLLJFYNc3A9tvVG2YB7WUIO8MtmlS9ST9NzUtnpc+gjJiwx0hZd 8aP6vR8dld0oCdIhss3305qm4nXKZLM5unxBgrw5DIM+dbMMTT+PsFDQ9+LNrPQk cKYMq/pXZORzrRloxnKKfm069QekP7GZ05rgJOQBmy396yuUdvJZ51VBEGVGriI3 NO/+mZ2uwezSmO7r85umumPogAHARu4hGYq6sHkZHt6nOCCwDJm+/jkBzcuBaPA2 aurr7zU+QgPlht3l4lVROAIgq3OXUhDvBrHXb7eeidBKGdf/ax/mj88PtynNro/C 2/VHFUfD1OvIgbEbrcNUaD+aUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFbSF0N9 dOen9hniMer1znFrdx77MB8GA1UdIwQYMBaAFKPfvhGvinjlYs+0V5AMyrkJDCtZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTYwNC9CQ0VDNkM1RUE0 QTAxMUVBOEZCQUI0NURDNEY5QUUwMi9vOS0tRWEtS2VPVml6N1JYa0F6S3VRa01L MWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL285LS1FYS1LZU9WaXo3UlhrQXpLdVFrTUsxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTYwNC9CQ0VDNkM1RUE0QTAxMUVBOEZCQUI0NURDNEY5QUUwMi9vOS0tRWEtS2VP Vml6N1JYa0F6S3VRa01LMWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+U8Ktg0+Hu/GhDoIza5Li8oYftbmCWUjnaRvc5+ich4jWWwHyqm3g kQV65cjKZXwJoxOcVRbQBcC3ug+7o4nw7mO8aC1DY1OkeL7q5dsEL+g12Y+OXgOa Dw+OQn3Gfu32H47ZW6aHeTbyY1WUXzV31nY+e56I46m1nuhinMJEIDm0j5lHPE6K ouJqAUryJYGnn2npYfL85EmmWpJStIh/HaO4aSTDYr/KhACUn92VNRe5ySRF6Mk4 oIm+Prl7P9BnQKdLPOOy95/xPkDXEDZZGQBmaSDERjbDOYEoZ5Mu0wHEqNzKpRKL OKuod5xs5D+GhxVMgSZcTZVVNHKtvgh1 -----END CERTIFICATE-----Generated at Sat Apr 26 14:20:56 2025 by rpki-client