$ rpki-client -vvf rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft File: mOHsvUXXh5-byUOfTGwvJxStNvU.mft (raw, json) Hash identifier: ATjgDB8GNDzKRXWpd56tj5BVuclPiCNCpzmG1hC7eMU= Subject key identifier: C8:A6:B1:19:F0:A2:78:6B:BE:03:D1:34:F6:B2:1F:E8:3E:C3:D1:86 Authority key identifier: 98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5 Certificate issuer: /CN=A91623B9/serialNumber=98E1ECBD45D7879F9BC9439F4C6C2F2714AD36F5 Certificate serial: 04EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft Manifest number: 04C7 Signing time: Thu 24 Apr 2025 23:41:32 +0000 Manifest this update: Thu 24 Apr 2025 23:41:32 +0000 Manifest next update: Thu 01 May 2025 23:41:32 +0000 Files and hashes: 1: mOHsvUXXh5-byUOfTGwvJxStNvU.crl (hash: FdZJ5IdM+pRiiy6P95uoFDyzlbTkLtGKEwF7s8k9ytE=) 2: 4C304B9EA12F11EFBF514933C4F9AE02.roa (hash: lIJvzLYrLtuFIE0gyMhPk2/yxHi1SCB/LUlp5AIoj+E=) 3: 3B943DB8A12F11EF8A121F33C4F9AE02.roa (hash: wlCYlDts3RjNxBy/eT/e5B1Vtzz4yVgtwvYVdQThmhs=) 4: 6762893A976211EFA4D0606CC4F9AE02.roa (hash: /gYeqqbk6WlA+N6Yv/cuDVmH4COmNboDX4ybOjU2VTk=) 5: 5A67D452A12F11EF8CA59833C4F9AE02.roa (hash: u0zCnyDN76eHB+CmzgwmvJ+3FVkHG07LYemqATFaMtk=) 6: 29B935BCA12F11EF9FAFE232C4F9AE02.roa (hash: DkBXKwosqunys840APEr3udcdpKlpKYanK0TdpOCbNM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.crl rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:41:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1258 (0x4ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91623B9, serialNumber=98E1ECBD45D7879F9BC9439F4C6C2F2714AD36F5 Validity Not Before: Apr 24 23:41:32 2025 GMT Not After : May 1 23:41:32 2025 GMT Subject: CN=680acc2c-042d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:70:ca:3d:b7:c8:83:d7:92:2f:79:79:a4:30: 0d:17:0a:88:8d:e7:81:de:8a:f4:aa:db:42:02:f7: 68:ec:12:62:5d:0d:1a:55:10:25:24:a5:78:80:79: 6b:de:8a:b3:e9:0a:b3:b4:be:2e:e4:c0:4d:d1:60: 2b:03:a9:c7:f3:da:18:b9:1c:2f:86:70:e1:cf:c9: 36:b5:08:d4:61:24:63:3d:7a:34:09:84:bb:d9:20: 9f:ec:d0:4c:32:25:98:a1:90:10:44:36:1e:75:ef: d6:51:83:2b:f3:c6:cc:19:64:a8:f7:24:9f:4c:d7: 50:67:5d:33:62:38:0f:ad:82:d9:f6:4f:61:8d:bf: 24:c5:13:0a:ba:2f:99:92:aa:16:42:51:be:cd:64: f9:cc:9d:36:5b:ca:0b:49:98:98:1f:23:c8:e1:e4: 04:9a:36:4d:a8:e2:df:b3:06:6a:d4:ee:5f:ac:43: 5c:b9:1f:63:41:bc:b9:a7:b0:ce:61:05:43:74:fd: df:67:17:d8:7b:fd:77:b9:53:71:19:67:b3:01:3c: ca:dc:31:45:65:75:42:f4:24:9a:40:e6:e3:10:dd: 7e:40:5d:ed:d8:5a:6d:f6:ab:7c:50:1d:4b:35:ca: e1:3f:06:42:6a:77:a1:fd:82:21:ee:5e:83:a4:60: 5a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A6:B1:19:F0:A2:78:6B:BE:03:D1:34:F6:B2:1F:E8:3E:C3:D1:86 X509v3 Authority Key Identifier: keyid:98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:0d:9c:8c:65:fe:f5:e5:6f:8c:54:a5:49:50:c3:f6:99:8c: eb:8f:70:fb:05:fc:56:6d:2a:e9:21:9c:ea:55:47:22:3d:28: 14:66:cc:a8:aa:7a:64:ea:1c:ff:a0:a9:f2:10:4f:f1:54:44: 47:45:28:bd:1b:44:bb:d7:0e:98:3c:cf:96:78:66:68:87:fc: a7:f3:d5:02:3b:77:54:a5:fd:41:73:b4:a9:64:54:a3:85:0f: 2a:ba:3b:b2:f9:1c:12:eb:a6:5a:10:bf:8b:87:0d:6c:51:38: 57:e1:d1:58:c1:d0:11:4c:f8:54:7a:19:c7:67:7d:fc:f5:66: 9e:24:03:fc:86:69:30:a9:53:77:d1:ad:f9:a7:0d:bb:7e:5b: e9:2e:ee:e8:24:bf:72:c2:5a:c7:70:04:eb:29:64:b8:18:c8: 76:7a:63:2d:60:ff:63:65:7f:56:f7:4c:f3:82:f8:ae:cd:17: 30:75:62:48:a4:a6:ef:bb:e1:c6:a8:72:cf:d9:e4:97:dd:63: ae:f8:fd:e2:6e:2e:e2:7e:a5:00:e4:97:2d:d6:90:2f:bb:5d: 1a:1e:d5:2f:f6:96:7c:01:29:53:b2:8b:10:db:c6:6d:da:d5: e8:f0:dc:9a:51:38:07:40:1c:7a:ef:56:14:e6:9f:5d:6a:0f: 64:31:bb:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIzQjkxMTAvBgNVBAUTKDk4RTFFQ0JENDVENzg3OUY5QkM5NDM5RjRDNkMyRjI3 MTRBRDM2RjUwHhcNMjUwNDI0MjM0MTMyWhcNMjUwNTAxMjM0MTMyWjAYMRYwFAYD VQQDEw02ODBhY2MyYy0wNDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0nDKPbfIg9eSL3l5pDANFwqIjeeB3or0qttCAvdo7BJiXQ0aVRAlJKV4gHlr 3oqz6QqztL4u5MBN0WArA6nH89oYuRwvhnDhz8k2tQjUYSRjPXo0CYS72SCf7NBM MiWYoZAQRDYede/WUYMr88bMGWSo9ySfTNdQZ10zYjgPrYLZ9k9hjb8kxRMKui+Z kqoWQlG+zWT5zJ02W8oLSZiYHyPI4eQEmjZNqOLfswZq1O5frENcuR9jQby5p7DO YQVDdP3fZxfYe/13uVNxGWezATzK3DFFZXVC9CSaQObjEN1+QF3t2Fpt9qt8UB1L NcrhPwZCaneh/YIh7l6DpGBavwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMimsRnw onhrvgPRNPayH+g+w9GGMB8GA1UdIwQYMBaAFJjh7L1F14efm8lDn0xsLycUrTb1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjNCOS83OENFQUNCQzJC MzYxMUVDQUQ1OTVCN0NDNEY5QUUwMi9tT0hzdlVYWGg1LWJ5VU9mVEd3dkp4U3RO dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21PSHN2VVhYaDUtYnlVT2ZUR3d2SnhTdE52VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjNCOS83OENFQUNCQzJCMzYxMUVDQUQ1OTVCN0NDNEY5QUUwMi9tT0hzdlVYWGg1 LWJ5VU9mVEd3dkp4U3ROdlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADDZyMZf715W+MVKVJUMP2mYzrj3D7BfxWbSrpIZzqVUciPSgUZsyo qnpk6hz/oKnyEE/xVERHRSi9G0S71w6YPM+WeGZoh/yn89UCO3dUpf1Bc7SpZFSj hQ8qujuy+RwS66ZaEL+Lhw1sUThX4dFYwdARTPhUehnHZ3389WaeJAP8hmkwqVN3 0a35pw27flvpLu7oJL9ywlrHcATrKWS4GMh2emMtYP9jZX9W90zzgviuzRcwdWJI pKbvu+HGqHLP2eSX3WOu+P3ibi7ifqUA5Jct1pAvu10aHtUv9pZ8ASlTsosQ28Zt 2tXo8NyaUTgHQBx671YU5p9dag9kMbvM -----END CERTIFICATE-----Generated at Sat Apr 26 13:36:39 2025 by rpki-client