$ rpki-client -vvf rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.mft File: OtjA2kteE0OjhFRLZEARiFJg_wc.mft (raw, json) Hash identifier: Vr9VXIfYVmsNaerTujzP89E9q4/1DJdz8di/N31fqk8= Subject key identifier: 42:0A:82:FF:EB:F2:40:03:F4:BC:09:17:40:8D:2D:93:1C:9F:6D:3F Authority key identifier: 3A:D8:C0:DA:4B:5E:13:43:A3:84:54:4B:64:40:11:88:52:60:FF:07 Certificate issuer: /CN=A916022F/serialNumber=3AD8C0DA4B5E1343A384544B644011885260FF07 Certificate serial: 130D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OtjA2kteE0OjhFRLZEARiFJg_wc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.mft Manifest number: 23B1 Signing time: Thu 24 Apr 2025 17:02:58 +0000 Manifest this update: Thu 24 Apr 2025 17:02:57 +0000 Manifest next update: Thu 01 May 2025 17:02:57 +0000 Files and hashes: 1: OtjA2kteE0OjhFRLZEARiFJg_wc.crl (hash: LsunvrVxE7+GqPBy9m1oYr+YZlcDAqiZ6okeOQdFU8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.crl rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OtjA2kteE0OjhFRLZEARiFJg_wc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:02:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4877 (0x130d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916022F, serialNumber=3AD8C0DA4B5E1343A384544B644011885260FF07 Validity Not Before: Apr 24 17:02:57 2025 GMT Not After : May 1 17:02:57 2025 GMT Subject: CN=680a6ec2-b291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:05:93:73:04:4f:8d:42:74:6f:65:4f:a9:d1: ed:56:4a:b8:9a:d7:85:5f:cc:41:de:05:e3:15:04: 09:a0:fb:51:d7:24:38:ba:60:33:73:24:bf:91:cd: 14:2d:45:73:62:33:e8:4b:c3:4e:ed:8a:18:a8:fa: 40:dc:7e:07:c8:5e:d4:78:de:df:86:40:11:78:c1: 97:9f:c3:dc:c1:03:2d:3e:66:18:d3:e0:ec:2a:b3: e5:d9:4d:77:f1:47:a8:54:a8:e2:77:9a:54:37:f4: a4:6f:21:97:18:db:2d:bb:95:f3:e3:37:2d:a9:16: 29:1b:6c:49:b1:1f:8b:56:88:b3:de:66:8f:5d:0e: 03:13:a1:03:59:89:68:c3:c6:45:05:1a:e8:77:a3: e7:2e:69:2e:94:e9:33:00:8e:38:a1:0d:de:74:f7: 9a:ab:97:63:a6:45:01:dd:4a:80:d8:13:e6:13:52: 1e:76:99:5c:dc:e0:37:b7:28:b7:e4:ca:74:d4:04: 8b:74:f9:78:14:a4:a2:34:b6:73:b6:be:ce:92:bd: 06:cd:af:c1:80:40:c6:f8:fe:e6:30:3b:af:fd:0b: 70:62:47:d5:0b:d1:ad:52:32:77:28:7a:9e:17:9c: 22:81:59:5a:47:17:ad:d5:10:05:fc:b0:f2:4b:86: e8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:0A:82:FF:EB:F2:40:03:F4:BC:09:17:40:8D:2D:93:1C:9F:6D:3F X509v3 Authority Key Identifier: keyid:3A:D8:C0:DA:4B:5E:13:43:A3:84:54:4B:64:40:11:88:52:60:FF:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OtjA2kteE0OjhFRLZEARiFJg_wc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ef:42:a9:69:08:a0:a9:7c:5d:be:1d:47:6d:5d:79:13:0e:d5: 39:cb:e7:33:2f:75:12:e2:c5:14:10:91:77:68:2e:46:60:ac: 47:f7:82:11:45:91:4a:d2:d4:1f:62:14:b2:64:85:4c:82:86: 6d:04:aa:0c:7d:06:4e:d3:8f:f3:db:37:2d:75:43:40:42:fe: 33:3b:5e:29:63:c8:08:c7:19:7f:d1:64:b5:b5:7f:a8:71:bd: 89:83:1b:85:c4:82:26:5b:47:64:d2:a3:ef:f0:4e:22:8e:fb: 74:9d:fd:b6:ec:4a:b2:c0:79:06:d3:a7:6b:2f:08:e7:fe:50: 6f:18:73:7c:f5:c3:90:28:11:d6:7c:f0:48:e6:9d:57:33:64: ca:67:d9:fe:a9:ef:71:5a:4d:fd:b2:71:b9:ef:f1:41:1d:9d: 8d:3f:1a:3a:35:78:19:8d:9f:a5:24:e6:ca:1c:c6:16:cc:4f: 4a:68:8f:d1:b5:b7:40:ed:21:7b:9f:a8:00:31:99:10:51:c3: 55:de:8b:41:ce:ac:19:f7:a0:8d:fa:59:55:72:04:33:d6:3a: 0d:5f:03:54:7c:1b:48:7c:89:05:e8:52:70:af:ac:65:bb:7e: a1:cd:1f:39:0c:b5:6b:14:aa:27:db:d7:0e:02:36:77:57:9e: c7:f0:b9:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEw0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjAyMkYxMTAvBgNVBAUTKDNBRDhDMERBNEI1RTEzNDNBMzg0NTQ0QjY0NDAxMTg4 NTI2MEZGMDcwHhcNMjUwNDI0MTcwMjU3WhcNMjUwNTAxMTcwMjU3WjAYMRYwFAYD VQQDEw02ODBhNmVjMi1iMjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAogWTcwRPjUJ0b2VPqdHtVkq4mteFX8xB3gXjFQQJoPtR1yQ4umAzcyS/kc0U LUVzYjPoS8NO7YoYqPpA3H4HyF7UeN7fhkAReMGXn8PcwQMtPmYY0+DsKrPl2U13 8UeoVKjid5pUN/SkbyGXGNstu5Xz4zctqRYpG2xJsR+LVoiz3maPXQ4DE6EDWYlo w8ZFBRrod6PnLmkulOkzAI44oQ3edPeaq5djpkUB3UqA2BPmE1Iedplc3OA3tyi3 5Mp01ASLdPl4FKSiNLZztr7Okr0Gza/BgEDG+P7mMDuv/QtwYkfVC9GtUjJ3KHqe F5wigVlaRxet1RAF/LDyS4boWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEIKgv/r 8kAD9LwJF0CNLZMcn20/MB8GA1UdIwQYMBaAFDrYwNpLXhNDo4RUS2RAEYhSYP8H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDIyRi85RUM3QUZCNEFB N0QxMUU4ODYxNDQ1MjRDNEY5QUUwMi9PdGpBMmt0ZUUwT2poRlJMWkVBUmlGSmdf d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL090akEya3RlRTBPamhGUkxaRUFSaUZKZ193Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDIyRi85RUM3QUZCNEFBN0QxMUU4ODYxNDQ1MjRDNEY5QUUwMi9PdGpBMmt0ZUUw T2poRlJMWkVBUmlGSmdfd2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDvQqlpCKCpfF2+HUdtXXkTDtU5y+czL3US4sUUEJF3aC5GYKxH94IR RZFK0tQfYhSyZIVMgoZtBKoMfQZO04/z2zctdUNAQv4zO14pY8gIxxl/0WS1tX+o cb2JgxuFxIImW0dk0qPv8E4ijvt0nf227EqywHkG06drLwjn/lBvGHN89cOQKBHW fPBI5p1XM2TKZ9n+qe9xWk39snG57/FBHZ2NPxo6NXgZjZ+lJObKHMYWzE9KaI/R tbdA7SF7n6gAMZkQUcNV3otBzqwZ96CN+llVcgQz1joNXwNUfBtIfIkF6FJwr6xl u36hzR85DLVrFKon29cOAjZ3V57H8Ln4 -----END CERTIFICATE-----Generated at Sat Apr 26 16:52:52 2025 by rpki-client