$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft File: ORjYC8twLsrPhMt6yogPh4oU_kg.mft (raw, json) Hash identifier: jUx34ZP48cQ5VtXpY9m4HfOzcvDsEsuJ8peR4kYdDCo= Subject key identifier: A7:22:3A:BA:58:BC:F5:08:E3:4A:2F:2E:2F:93:82:10:9A:F0:00:4E Authority key identifier: 39:18:D8:0B:CB:70:2E:CA:CF:84:CB:7A:CA:88:0F:87:8A:14:FE:48 Certificate issuer: /CN=A9146B24/serialNumber=3918D80BCB702ECACF84CB7ACA880F878A14FE48 Certificate serial: 0151 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft Manifest number: 012D Signing time: Fri 25 Apr 2025 04:07:45 +0000 Manifest this update: Fri 25 Apr 2025 04:07:44 +0000 Manifest next update: Fri 02 May 2025 04:07:44 +0000 Files and hashes: 1: ORjYC8twLsrPhMt6yogPh4oU_kg.crl (hash: uTxSlPFaHlyqZ9twes8n98DHvSBygvI8PVvD7S7eelg=) 2: 0D16F5F4933211EEA5AC155DC4F9AE02.roa (hash: 1LEVeAmiTE8mfugUrgZ7PXJTh3jzct433M4/pCSC1j8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.crl rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:07:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 337 (0x151) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146B24, serialNumber=3918D80BCB702ECACF84CB7ACA880F878A14FE48 Validity Not Before: Apr 25 04:07:44 2025 GMT Not After : May 2 04:07:44 2025 GMT Subject: CN=680b0a91-2592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ca:e6:0f:d1:60:9d:f2:d6:dd:92:41:a9:ac: b0:4b:d6:65:7c:cf:86:dc:0e:a6:23:ed:a5:b0:14: 78:6b:71:6c:75:1d:08:42:83:99:f6:fc:7c:f6:98: b5:64:96:61:ec:3b:4c:02:93:6d:a1:af:62:ff:bf: 9b:e0:ee:bd:d4:52:19:a7:5b:c6:66:37:46:34:53: ca:47:be:74:37:05:e2:b9:06:b3:fa:a6:7a:a9:8e: 91:0a:30:0c:22:a3:ff:e4:c0:b7:1d:6a:06:a6:bd: 91:c1:56:dc:14:cf:3d:24:4d:b2:9b:1c:10:f3:79: 84:a3:79:4d:1e:42:cc:92:18:7e:06:15:dc:05:66: e1:26:b7:38:2c:88:4a:d7:e5:ea:ec:f5:cc:af:4a: 4c:49:62:4d:4f:08:ec:d1:48:b9:e6:7f:f4:da:fa: 01:5f:c8:64:2e:b4:4f:a4:ed:e2:f4:59:19:5f:fb: 82:f1:ec:5c:c1:f2:ea:25:a8:9a:ea:9f:98:08:72: 8b:bc:01:d2:41:56:bb:8d:69:af:29:e2:fb:d9:97: c8:f1:5f:40:39:49:a1:47:45:5d:57:88:23:3b:ad: a5:0c:f4:a9:81:2d:c8:ff:b7:c7:5a:7b:69:3d:cd: 0a:19:f2:5d:02:c5:02:1f:59:d0:1b:ee:04:c4:68: 26:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:22:3A:BA:58:BC:F5:08:E3:4A:2F:2E:2F:93:82:10:9A:F0:00:4E X509v3 Authority Key Identifier: keyid:39:18:D8:0B:CB:70:2E:CA:CF:84:CB:7A:CA:88:0F:87:8A:14:FE:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:4f:d3:57:1f:9b:a9:13:6b:9f:4d:55:8f:de:13:c9:94:d7: d0:7b:0b:e6:dc:5d:78:bc:9e:7f:bd:d7:63:65:06:14:8a:d9: 46:13:97:40:bd:05:cc:4e:75:95:45:4c:69:d8:11:47:c8:7f: d9:37:16:df:38:f0:a9:34:02:66:8a:75:0d:c9:14:cc:3a:7c: e2:55:b0:d9:4c:70:8f:35:96:07:ea:f7:a3:03:ba:87:88:30: a3:e7:67:8d:fe:c7:16:7e:1e:b4:fe:97:0e:17:16:20:17:d1: 8e:86:ab:98:32:38:ff:2a:22:40:cf:01:dc:52:c1:3b:71:35: fc:f5:32:04:b6:99:16:b2:fd:04:26:0c:ba:ed:11:ac:c4:48: 18:df:c5:e2:84:9b:e4:9d:a3:ba:15:88:36:5d:e5:99:49:09: 02:57:25:73:28:ea:65:46:77:45:28:90:62:e4:df:9e:c2:f4: a3:e6:c3:62:a8:6b:0f:b5:15:32:fe:8b:8e:ac:0d:9a:bd:f2: 7e:d5:09:7a:71:be:1c:cd:de:28:ee:07:7e:0e:33:64:64:5b: ac:77:ed:86:0a:e7:6e:03:04:3f:31:b6:00:0d:04:fd:c4:49: a6:fd:ab:a3:77:2a:60:28:4f:81:dd:aa:c5:3a:84:f8:95:99: 7a:e6:9b:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZCMjQxMTAvBgNVBAUTKDM5MThEODBCQ0I3MDJFQ0FDRjg0Q0I3QUNBODgwRjg3 OEExNEZFNDgwHhcNMjUwNDI1MDQwNzQ0WhcNMjUwNTAyMDQwNzQ0WjAYMRYwFAYD VQQDEw02ODBiMGE5MS0yNTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2MrmD9FgnfLW3ZJBqaywS9ZlfM+G3A6mI+2lsBR4a3FsdR0IQoOZ9vx89pi1 ZJZh7DtMApNtoa9i/7+b4O691FIZp1vGZjdGNFPKR750NwXiuQaz+qZ6qY6RCjAM IqP/5MC3HWoGpr2RwVbcFM89JE2ymxwQ83mEo3lNHkLMkhh+BhXcBWbhJrc4LIhK 1+Xq7PXMr0pMSWJNTwjs0Ui55n/02voBX8hkLrRPpO3i9FkZX/uC8excwfLqJaia 6p+YCHKLvAHSQVa7jWmvKeL72ZfI8V9AOUmhR0VdV4gjO62lDPSpgS3I/7fHWntp Pc0KGfJdAsUCH1nQG+4ExGgmFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKciOrpY vPUI40ovLi+TghCa8ABOMB8GA1UdIwQYMBaAFDkY2AvLcC7Kz4TLesqID4eKFP5I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkIyNC9CNDczQzRCRTkz MzAxMUVFODIzMDgwNTlDNEY5QUUwMi9PUmpZQzh0d0xzclBoTXQ2eW9nUGg0b1Vf a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09SallDOHR3THNyUGhNdDZ5b2dQaDRvVV9rZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkIyNC9CNDczQzRCRTkzMzAxMUVFODIzMDgwNTlDNEY5QUUwMi9PUmpZQzh0d0xz clBoTXQ2eW9nUGg0b1Vfa2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzT9NXH5upE2ufTVWP3hPJlNfQewvm3F14vJ5/vddjZQYUitlGE5dA vQXMTnWVRUxp2BFHyH/ZNxbfOPCpNAJminUNyRTMOnziVbDZTHCPNZYH6vejA7qH iDCj52eN/scWfh60/pcOFxYgF9GOhquYMjj/KiJAzwHcUsE7cTX89TIEtpkWsv0E Jgy67RGsxEgY38XihJvknaO6FYg2XeWZSQkCVyVzKOplRndFKJBi5N+ewvSj5sNi qGsPtRUy/ouOrA2avfJ+1Ql6cb4czd4o7gd+DjNkZFusd+2GCuduAwQ/MbYADQT9 xEmm/aujdypgKE+B3arFOoT4lZl65ptq -----END CERTIFICATE-----Generated at Sat Apr 26 05:39:44 2025 by rpki-client