$ rpki-client -vvf rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft File: mOhT44UoY0okfIaH-hKOU07IRCY.mft (raw, json) Hash identifier: dXlmiLwwZfmvBf2j5OTY1E+6VxHSO9cLZ56vliwJRsk= Subject key identifier: 85:83:9D:A8:94:85:6C:C5:97:4E:DF:46:F4:DB:5E:B7:4B:F2:3D:0A Authority key identifier: 98:E8:53:E3:85:28:63:4A:24:7C:86:87:FA:12:8E:53:4E:C8:44:26 Certificate issuer: /CN=A915E18D/serialNumber=98E853E38528634A247C8687FA128E534EC84426 Certificate serial: 0747 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft Manifest number: 073E Signing time: Fri 02 May 2025 21:55:11 +0000 Manifest this update: Fri 02 May 2025 21:55:10 +0000 Manifest next update: Fri 09 May 2025 21:55:10 +0000 Files and hashes: 1: mOhT44UoY0okfIaH-hKOU07IRCY.crl (hash: 6XjmgZqWZwrJiHRSTlHfPxGImj+xWv09R86JeVLKSc8=) 2: 10DD258E2AE711EBBFFCBC15C4F9AE02.roa (hash: DvUe9tlMP9l91/7mh7+Tetbprk3jQc1ROYqAjOky4yU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.crl rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 21:55:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1863 (0x747) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E18D, serialNumber=98E853E38528634A247C8687FA128E534EC84426 Validity Not Before: May 2 21:55:10 2025 GMT Not After : May 9 21:55:10 2025 GMT Subject: CN=68153f3f-7676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:06:d1:16:f4:44:0d:25:02:7d:e5:1e:f6:10: f0:58:fb:fc:61:a5:2a:21:3c:9e:0b:77:cc:3b:c1: 83:1e:11:26:e3:6c:d7:52:58:c5:42:71:d2:c1:0e: ef:9f:6f:dd:1b:77:af:25:53:93:db:a8:22:dc:0a: 7e:5a:83:ad:a5:b8:c4:22:c6:78:04:14:6b:06:9b: 3f:4e:18:df:e7:92:ac:45:94:76:e9:1f:53:2a:f1: 96:29:6d:56:a3:5c:e4:e2:35:34:1b:c2:71:04:ce: 96:0c:58:d4:00:04:59:8d:3d:7f:37:0b:3a:22:5f: 24:e2:8c:fa:3b:08:4f:21:21:0d:1f:54:a5:85:4d: 35:fc:62:ff:59:2e:ad:42:e7:66:b3:bb:2c:f1:40: c9:fb:cb:c8:2d:53:de:f3:5d:35:4e:fa:88:aa:d3: 13:1e:7f:27:7e:97:ae:c3:d1:8d:44:c8:68:62:36: 98:f6:09:45:21:c5:d0:2b:24:b0:49:93:96:5e:5a: da:73:3d:fa:42:8d:14:a1:da:87:e4:c8:89:af:33: 47:96:a7:3a:fc:b2:2a:03:92:bc:75:26:d7:bf:46: 09:2d:a8:43:c8:e7:70:97:2e:e2:c3:ea:72:4a:25: e3:29:18:f5:a7:7f:ac:a8:4f:32:5f:d2:59:4c:6c: 03:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:83:9D:A8:94:85:6C:C5:97:4E:DF:46:F4:DB:5E:B7:4B:F2:3D:0A X509v3 Authority Key Identifier: keyid:98:E8:53:E3:85:28:63:4A:24:7C:86:87:FA:12:8E:53:4E:C8:44:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:5e:37:01:b8:70:9b:34:49:9b:d4:c3:57:73:72:23:26:00: 79:e8:b0:14:dd:a1:de:9c:18:bd:5a:3d:ae:c8:21:3c:04:55: fa:f2:10:07:48:fa:7f:a8:15:b4:e1:a9:c7:dd:d7:22:a1:f5: d8:bd:25:1a:c8:34:5b:cc:08:bd:b2:cf:9d:eb:ca:cf:9f:20: ca:ae:2b:24:17:3b:c4:be:3f:96:72:f9:23:0f:d3:d4:ae:ae: 04:b9:74:cd:23:fa:d6:69:31:5e:f5:e8:e3:eb:74:e5:e1:d6: 64:0b:3e:75:6a:9f:24:ee:0e:50:af:55:aa:24:90:5e:b0:77: b2:12:a5:0c:c5:d3:70:ca:18:04:34:80:e7:46:15:11:4f:5f: 8d:37:b5:fd:8c:b8:96:b3:4c:6e:a0:c8:56:27:2d:1c:d1:50: c9:1b:de:7e:05:e6:39:5a:89:d5:1a:d0:01:29:d7:1e:cc:8a: 37:8d:63:7a:6e:ac:ce:7c:01:a1:10:6b:86:ec:05:02:7d:12: 63:2c:b5:55:00:2f:8f:fe:b4:d0:66:81:d9:01:9a:c3:80:89: 70:16:0f:bd:6e:15:41:d5:fd:f5:b3:75:b1:84:b9:be:4e:e1: a3:e5:c5:0f:4f:83:60:b0:21:7f:ee:c4:72:96:3a:5b:ea:1f: be:db:4a:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUUxOEQxMTAvBgNVBAUTKDk4RTg1M0UzODUyODYzNEEyNDdDODY4N0ZBMTI4RTUz NEVDODQ0MjYwHhcNMjUwNTAyMjE1NTEwWhcNMjUwNTA5MjE1NTEwWjAYMRYwFAYD VQQDEw02ODE1M2YzZi03Njc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQbRFvREDSUCfeUe9hDwWPv8YaUqITyeC3fMO8GDHhEm42zXUljFQnHSwQ7v n2/dG3evJVOT26gi3Ap+WoOtpbjEIsZ4BBRrBps/Thjf55KsRZR26R9TKvGWKW1W o1zk4jU0G8JxBM6WDFjUAARZjT1/Nws6Il8k4oz6OwhPISENH1SlhU01/GL/WS6t Qudms7ss8UDJ+8vILVPe8101TvqIqtMTHn8nfpeuw9GNRMhoYjaY9glFIcXQKySw SZOWXlracz36Qo0UodqH5MiJrzNHlqc6/LIqA5K8dSbXv0YJLahDyOdwly7iw+py SiXjKRj1p3+sqE8yX9JZTGwDNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIWDnaiU hWzFl07fRvTbXrdL8j0KMB8GA1UdIwQYMBaAFJjoU+OFKGNKJHyGh/oSjlNOyEQm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTE4RC83QTEyNjk3RTJB RTIxMUVCQkJGQzRGMEFDNEY5QUUwMi9tT2hUNDRVb1kwb2tmSWFILWhLT1UwN0lS Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21PaFQ0NFVvWTBva2ZJYUgtaEtPVTA3SVJDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTE4RC83QTEyNjk3RTJBRTIxMUVCQkJGQzRGMEFDNEY5QUUwMi9tT2hUNDRVb1kw b2tmSWFILWhLT1UwN0lSQ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdXjcBuHCbNEmb1MNXc3IjJgB56LAU3aHenBi9Wj2uyCE8BFX68hAH SPp/qBW04anH3dciofXYvSUayDRbzAi9ss+d68rPnyDKriskFzvEvj+WcvkjD9PU rq4EuXTNI/rWaTFe9ejj63Tl4dZkCz51ap8k7g5Qr1WqJJBesHeyEqUMxdNwyhgE NIDnRhURT1+NN7X9jLiWs0xuoMhWJy0c0VDJG95+BeY5WonVGtABKdcezIo3jWN6 bqzOfAGhEGuG7AUCfRJjLLVVAC+P/rTQZoHZAZrDgIlwFg+9bhVB1f31s3WxhLm+ TuGj5cUPT4NgsCF/7sRyljpb6h++20py -----END CERTIFICATE-----Generated at Sat May 3 08:51:36 2025 by rpki-client