$ rpki-client -vvf rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.mft File: ORHh77ArA2-DW_ZY4TZgGmdCFpM.mft (raw, json) Hash identifier: mbeySs+NsLsXXJqZvLKs6hMIOgACC+bymS3AG6pgzpE= Subject key identifier: 20:5E:9F:1F:55:94:28:DF:22:6A:D0:2F:34:74:58:62:71:D9:FE:14 Authority key identifier: 39:11:E1:EF:B0:2B:03:6F:83:5B:F6:58:E1:36:60:1A:67:42:16:93 Certificate issuer: /CN=A914CCC5/serialNumber=3911E1EFB02B036F835BF658E136601A67421693 Certificate serial: 0750 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORHh77ArA2-DW_ZY4TZgGmdCFpM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.mft Manifest number: 0747 Signing time: Thu 24 Apr 2025 21:29:40 +0000 Manifest this update: Thu 24 Apr 2025 21:29:40 +0000 Manifest next update: Thu 01 May 2025 21:29:40 +0000 Files and hashes: 1: ORHh77ArA2-DW_ZY4TZgGmdCFpM.crl (hash: lynveFpikulPwojJUVm+mJBPqcz5TuYuvQrkpSekhZ4=) 2: 94CB63BC241E11EB985FC048C4F9AE02.roa (hash: QadRAteDkMr+/Vf11v/PSiWZ5qLyjgZNySKVRInle2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.crl rsync://rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORHh77ArA2-DW_ZY4TZgGmdCFpM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:29:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1872 (0x750) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CCC5, serialNumber=3911E1EFB02B036F835BF658E136601A67421693 Validity Not Before: Apr 24 21:29:40 2025 GMT Not After : May 1 21:29:40 2025 GMT Subject: CN=680aad44-92e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ac:28:b4:07:5b:83:9b:16:07:1b:a3:c5:1d: 99:72:c1:d4:fc:e7:ae:77:88:ec:11:f3:c4:a6:79: 6e:58:1c:27:82:77:02:c7:a8:7a:19:da:62:a0:e5: 3b:a1:9d:99:b3:83:04:6d:91:24:af:65:ad:01:88: 06:21:c8:36:94:04:12:e1:67:9a:86:e9:42:95:87: 06:35:ca:8a:bb:d2:ea:4b:f2:75:90:91:b5:16:c8: 14:f3:d7:88:96:76:fb:5b:14:15:3d:12:c6:79:89: d8:30:9a:75:63:41:2d:5c:36:b1:17:96:45:cc:da: 84:32:ae:26:70:1d:d1:ee:7e:3a:21:c8:68:a0:2b: 88:f8:ac:81:1d:b1:28:40:bb:75:8e:84:47:b8:aa: 80:69:2e:ae:c4:d9:a2:f3:f7:f6:3f:08:ca:fe:e7: 65:4a:de:1a:73:be:06:a6:0f:7d:45:bc:2b:c7:fd: e0:d4:2d:16:a7:ce:1a:27:47:6a:45:15:99:0a:5d: 8f:98:76:9f:db:b1:73:e7:cf:7f:eb:1b:7e:12:cb: d4:4c:bf:73:fc:48:b5:df:5b:7f:f4:2e:38:05:63: 3a:20:cf:71:18:a2:b8:c0:1b:ae:0a:ab:5d:ae:54: f7:91:bd:70:e8:02:d9:1e:f9:5b:7e:21:4d:28:70: 21:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:5E:9F:1F:55:94:28:DF:22:6A:D0:2F:34:74:58:62:71:D9:FE:14 X509v3 Authority Key Identifier: keyid:39:11:E1:EF:B0:2B:03:6F:83:5B:F6:58:E1:36:60:1A:67:42:16:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORHh77ArA2-DW_ZY4TZgGmdCFpM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:45:8a:f4:98:1d:5a:12:69:65:c3:99:36:db:0f:9a:73:ee: 03:1e:dc:d7:50:1e:c3:c7:df:00:4b:15:95:1b:b2:12:aa:c2: 45:bf:34:ec:72:d2:10:2d:b2:79:fd:8f:c2:0f:2c:01:cd:45: a4:1e:1b:a8:57:79:06:5e:29:10:c4:c9:65:a3:36:24:99:26: 3f:ca:4d:ba:87:cc:94:9a:20:02:70:e9:c4:69:e2:1f:23:0a: 1a:c7:19:ad:6e:f1:3d:11:08:e1:81:57:c2:ca:8d:40:fe:31: 26:3f:8f:91:dd:d9:2c:89:ad:13:6b:a5:9a:3f:37:a0:e0:42: 94:1f:73:59:52:fa:24:d7:e7:a9:bc:6a:51:04:0c:a4:cc:2f: 91:77:dc:22:f6:1d:a7:31:ae:34:f0:39:85:4e:4b:4a:52:c7: 29:2f:f9:c3:cd:45:10:7a:31:83:dc:3b:ae:da:ec:50:74:da: 36:0a:e9:83:a4:18:84:49:76:1a:e7:36:70:95:7c:2e:45:73: 3b:7f:49:a6:81:52:e2:a4:35:6f:22:9b:3c:70:de:97:54:dd: 0a:7f:bb:68:6e:85:6a:8f:18:56:68:99:57:64:f1:73:69:1b: 98:53:18:74:84:23:fa:31:87:7c:db:65:0e:e1:b3:6c:c1:69: c0:ca:93:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENDQzUxMTAvBgNVBAUTKDM5MTFFMUVGQjAyQjAzNkY4MzVCRjY1OEUxMzY2MDFB Njc0MjE2OTMwHhcNMjUwNDI0MjEyOTQwWhcNMjUwNTAxMjEyOTQwWjAYMRYwFAYD VQQDEw02ODBhYWQ0NC05MmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm6wotAdbg5sWBxujxR2ZcsHU/Oeud4jsEfPEpnluWBwngncCx6h6GdpioOU7 oZ2Zs4MEbZEkr2WtAYgGIcg2lAQS4WeahulClYcGNcqKu9LqS/J1kJG1FsgU89eI lnb7WxQVPRLGeYnYMJp1Y0EtXDaxF5ZFzNqEMq4mcB3R7n46IchooCuI+KyBHbEo QLt1joRHuKqAaS6uxNmi8/f2PwjK/udlSt4ac74Gpg99Rbwrx/3g1C0Wp84aJ0dq RRWZCl2PmHaf27Fz589/6xt+EsvUTL9z/Ei131t/9C44BWM6IM9xGKK4wBuuCqtd rlT3kb1w6ALZHvlbfiFNKHAhiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCBenx9V lCjfImrQLzR0WGJx2f4UMB8GA1UdIwQYMBaAFDkR4e+wKwNvg1v2WOE2YBpnQhaT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0NDNS80M0I1RUZEMDI0 MUMxMUVCQUIzMkQ1NDNDNEY5QUUwMi9PUkhoNzdBckEyLURXX1pZNFRaZ0dtZENG cE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09SSGg3N0FyQTItRFdfWlk0VFpnR21kQ0ZwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0NDNS80M0I1RUZEMDI0MUMxMUVCQUIzMkQ1NDNDNEY5QUUwMi9PUkhoNzdBckEy LURXX1pZNFRaZ0dtZENGcE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbRYr0mB1aEmllw5k22w+ac+4DHtzXUB7Dx98ASxWVG7ISqsJFvzTs ctIQLbJ5/Y/CDywBzUWkHhuoV3kGXikQxMllozYkmSY/yk26h8yUmiACcOnEaeIf IwoaxxmtbvE9EQjhgVfCyo1A/jEmP4+R3dksia0Ta6WaPzeg4EKUH3NZUvok1+ep vGpRBAykzC+Rd9wi9h2nMa408DmFTktKUscpL/nDzUUQejGD3Duu2uxQdNo2CumD pBiESXYa5zZwlXwuRXM7f0mmgVLipDVvIps8cN6XVN0Kf7toboVqjxhWaJlXZPFz aRuYUxh0hCP6MYd822UO4bNswWnAypNt -----END CERTIFICATE-----Generated at Sat Apr 26 04:21:01 2025 by rpki-client