$ rpki-client -vvf rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.mft File: OOwZ2spYxF2RxlnTX-TybdgkrOQ.mft (raw, json) Hash identifier: gXMs72mSVsB1XgRTv35rdcBKckbSbQjvatrQlOy9uKU= Subject key identifier: 79:71:FE:FE:06:D6:EC:72:73:6E:70:90:57:CA:33:F3:0A:C0:93:2D Authority key identifier: 38:EC:19:DA:CA:58:C4:5D:91:C6:59:D3:5F:E4:F2:6D:D8:24:AC:E4 Certificate issuer: /CN=A916600A/serialNumber=38EC19DACA58C45D91C659D35FE4F26DD824ACE4 Certificate serial: 0155 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOwZ2spYxF2RxlnTX-TybdgkrOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.mft Manifest number: 014C Signing time: Fri 25 Apr 2025 03:28:37 +0000 Manifest this update: Fri 25 Apr 2025 03:28:36 +0000 Manifest next update: Fri 02 May 2025 03:28:36 +0000 Files and hashes: 1: OOwZ2spYxF2RxlnTX-TybdgkrOQ.crl (hash: tK3Qy1gbOii4QREn7yWIKgAgePW4ByXGHsPjudidK1E=) 2: FC73357271B811EEAEDED685C4F9AE02.roa (hash: sWStjNphAJOS4ge/ZJtqF5XrPnq1MWPX1eiC04Kwz6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.crl rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOwZ2spYxF2RxlnTX-TybdgkrOQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916600A, serialNumber=38EC19DACA58C45D91C659D35FE4F26DD824ACE4 Validity Not Before: Apr 25 03:28:36 2025 GMT Not After : May 2 03:28:36 2025 GMT Subject: CN=680b0165-3819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:14:89:c0:f3:5a:79:c6:ef:85:c5:64:46:62: a5:9e:8d:e0:69:76:4d:d7:69:33:26:c9:c7:19:e7: c2:f3:d0:ab:93:93:46:80:f6:6e:bc:78:bd:14:a0: d5:9b:2d:12:43:49:a5:31:0c:bb:21:ca:76:84:fe: 63:0a:64:38:36:86:84:00:e3:d9:e4:e0:16:e0:96: b9:2e:7e:31:0d:31:12:8e:27:ce:65:01:74:2b:85: 13:57:fb:ea:9a:91:42:a3:92:3c:53:85:7e:2e:41: 09:00:87:f6:7d:a3:f1:4c:a1:d3:11:f9:c8:c1:b2: 10:2c:92:37:ea:bc:9d:0a:6e:a0:0d:a7:49:73:66: 82:4e:26:ba:91:7c:8f:93:ba:17:4f:62:c3:71:85: 33:a0:55:20:7d:67:a4:0e:40:50:85:ef:6f:ca:06: d6:8c:3d:8d:bd:d6:9d:5c:75:2b:f9:af:18:f4:15: 04:61:24:06:1e:e3:73:a7:79:46:78:50:f2:1a:84: 76:f7:ad:fe:ce:74:c5:db:df:4e:e7:ce:1f:7d:3b: d7:92:38:07:95:6b:b7:b1:eb:1f:c7:1b:14:13:a1: 71:f6:c6:c8:74:70:12:70:07:a7:00:2b:71:27:4a: ca:e6:dd:b4:43:26:08:7f:ab:84:78:49:3d:5b:20: 87:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:71:FE:FE:06:D6:EC:72:73:6E:70:90:57:CA:33:F3:0A:C0:93:2D X509v3 Authority Key Identifier: keyid:38:EC:19:DA:CA:58:C4:5D:91:C6:59:D3:5F:E4:F2:6D:D8:24:AC:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOwZ2spYxF2RxlnTX-TybdgkrOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:32:dd:59:b7:4a:1f:c0:ba:87:74:9c:b6:17:fa:c4:80:ea: 25:d0:04:a4:3e:09:49:77:dd:02:58:62:b8:c1:0b:01:18:f8: d6:d1:78:c6:f6:eb:9b:e7:a0:c4:85:b8:36:26:5a:f4:b6:d5: 2e:52:f1:4a:3b:e3:43:42:78:67:b9:d4:c5:51:a9:ed:36:a6: fd:c1:d9:61:02:bc:77:5e:3a:68:6c:f6:ce:b1:db:58:d6:18: 6b:40:b3:e7:06:41:4f:a9:8c:b8:17:b1:4d:e3:98:03:93:22: 38:fd:7f:16:55:83:8b:d9:9d:05:4f:cd:b3:dc:b5:b8:35:b4: a0:e4:4f:23:96:a0:10:81:f8:ed:25:df:67:22:3e:b7:f8:87: 23:35:1c:d3:5f:e2:c5:48:27:54:2b:67:df:7c:4a:8c:c9:a8: f4:44:46:b0:fc:61:c9:9a:a9:de:a8:8a:8f:67:a0:46:94:f6: 2a:e9:6b:55:9e:93:b6:21:1d:18:02:c4:25:66:e9:6a:c2:ec: cc:91:57:cb:2b:7f:df:c3:1c:a2:2f:77:49:26:5c:e2:e9:bb: 81:3b:55:0b:e9:6f:a5:5d:df:61:c2:cb:a9:09:61:ed:31:3f: 1a:cb:60:75:dd:21:db:5d:ff:72:08:74:70:77:e1:7a:57:c1: 8a:fe:0f:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjYwMEExMTAvBgNVBAUTKDM4RUMxOURBQ0E1OEM0NUQ5MUM2NTlEMzVGRTRGMjZE RDgyNEFDRTQwHhcNMjUwNDI1MDMyODM2WhcNMjUwNTAyMDMyODM2WjAYMRYwFAYD VQQDEw02ODBiMDE2NS0zODE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxBSJwPNaecbvhcVkRmKlno3gaXZN12kzJsnHGefC89Crk5NGgPZuvHi9FKDV my0SQ0mlMQy7Icp2hP5jCmQ4NoaEAOPZ5OAW4Ja5Ln4xDTESjifOZQF0K4UTV/vq mpFCo5I8U4V+LkEJAIf2faPxTKHTEfnIwbIQLJI36rydCm6gDadJc2aCTia6kXyP k7oXT2LDcYUzoFUgfWekDkBQhe9vygbWjD2NvdadXHUr+a8Y9BUEYSQGHuNzp3lG eFDyGoR2963+znTF299O584ffTvXkjgHlWu3sesfxxsUE6Fx9sbIdHAScAenACtx J0rK5t20QyYIf6uEeEk9WyCHywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHlx/v4G 1uxyc25wkFfKM/MKwJMtMB8GA1UdIwQYMBaAFDjsGdrKWMRdkcZZ01/k8m3YJKzk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjAwQS85RUEyQkI3RTND RDAxMUVFQUU1NTRFNzNDNEY5QUUwMi9PT3daMnNwWXhGMlJ4bG5UWC1UeWJkZ2ty T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09Pd1oyc3BZeEYyUnhsblRYLVR5YmRna3JPUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NjAwQS85RUEyQkI3RTNDRDAxMUVFQUU1NTRFNzNDNEY5QUUwMi9PT3daMnNwWXhG MlJ4bG5UWC1UeWJkZ2tyT1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEMt1Zt0ofwLqHdJy2F/rEgOol0ASkPglJd90CWGK4wQsBGPjW0XjG 9uub56DEhbg2Jlr0ttUuUvFKO+NDQnhnudTFUantNqb9wdlhArx3XjpobPbOsdtY 1hhrQLPnBkFPqYy4F7FN45gDkyI4/X8WVYOL2Z0FT82z3LW4NbSg5E8jlqAQgfjt Jd9nIj63+IcjNRzTX+LFSCdUK2fffEqMyaj0REaw/GHJmqneqIqPZ6BGlPYq6WtV npO2IR0YAsQlZulqwuzMkVfLK3/fwxyiL3dJJlzi6buBO1UL6W+lXd9hwsupCWHt MT8ay2B13SHbXf9yCHRwd+F6V8GK/g+X -----END CERTIFICATE-----Generated at Sat Apr 26 04:27:19 2025 by rpki-client