$ rpki-client -vvf rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft File: OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft (raw, json) Hash identifier: 5+K8RNb56pPI/oPqWfmjQzuvoSDBhH3HRbgaiG0o9KQ= Subject key identifier: 0B:89:C5:27:2C:94:39:74:D0:79:9D:A4:F0:C7:F2:09:32:D3:CC:4C Authority key identifier: 3B:0B:C5:56:50:AA:46:B1:78:B3:E1:74:23:00:0B:D9:81:CA:67:36 Certificate issuer: /CN=A9186C66/serialNumber=3B0BC55650AA46B178B3E17423000BD981CA6736 Certificate serial: 260C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OwvFVlCqRrF4s-F0IwAL2YHKZzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft Manifest number: 25FB Signing time: Thu 24 Apr 2025 15:43:10 +0000 Manifest this update: Thu 24 Apr 2025 15:43:09 +0000 Manifest next update: Thu 01 May 2025 15:43:09 +0000 Files and hashes: 1: OwvFVlCqRrF4s-F0IwAL2YHKZzY.crl (hash: lNSYpsUaeRU6+XodPWCDlQc/+i8SnNkacOK56N2l1hU=) 2: 02DB5704B0F211E58974874FC4F9AE02.roa (hash: 80axerWiZ6cd/ywlGklwH07eZfaJzXVmfhf4nrdmoFQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.crl rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OwvFVlCqRrF4s-F0IwAL2YHKZzY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:43:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9740 (0x260c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186C66, serialNumber=3B0BC55650AA46B178B3E17423000BD981CA6736 Validity Not Before: Apr 24 15:43:09 2025 GMT Not After : May 1 15:43:09 2025 GMT Subject: CN=680a5c0d-8484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8c:51:cf:70:c7:32:9a:66:7c:38:8a:fe:4c: 8a:7b:ad:ff:a0:de:e7:94:96:ec:61:4f:9f:a3:b6: 45:54:5b:70:9e:3a:d8:88:ed:84:7f:5e:70:8c:93: ee:00:3f:f6:a2:4b:17:ae:b1:fb:59:ba:ad:75:a1: 8d:df:46:20:0f:08:10:72:e0:b5:a5:04:11:9e:97: 79:55:46:bd:ff:74:f1:5a:b4:ec:7c:0c:c5:e8:1d: 90:c9:48:1b:b0:18:20:e4:1f:7d:b6:c0:5b:c9:05: 19:7b:f4:b6:5c:46:7f:bd:2a:e3:02:bd:99:12:d2: e7:36:93:f0:cb:3b:08:9e:06:44:a6:7f:f8:34:9d: 67:3c:d9:33:dc:bf:0a:b8:c2:3a:42:5b:f9:a4:0f: 91:f9:5f:84:51:02:19:06:98:39:b1:80:52:55:68: f9:cb:e9:13:31:f9:7f:14:35:30:59:2e:33:2e:f9: c1:06:ec:1e:6d:f8:20:18:0e:47:6c:bc:69:34:fe: 23:1e:e8:11:81:be:be:2a:05:1b:12:ed:9a:8f:03: 5b:ef:9e:b7:23:7c:4d:03:77:42:22:f5:94:ec:b0: b4:e8:b4:5d:79:5c:13:03:2d:e8:83:0b:f0:da:c7: a0:72:b0:99:0b:12:0a:b4:28:d8:6f:88:06:f6:4e: b5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:89:C5:27:2C:94:39:74:D0:79:9D:A4:F0:C7:F2:09:32:D3:CC:4C X509v3 Authority Key Identifier: keyid:3B:0B:C5:56:50:AA:46:B1:78:B3:E1:74:23:00:0B:D9:81:CA:67:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OwvFVlCqRrF4s-F0IwAL2YHKZzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:d1:5c:70:a6:3b:2d:f6:d6:57:a0:02:2c:36:c6:c9:53:89: f7:98:f2:1a:c4:c1:d2:45:6f:5d:0e:b2:1a:a8:9d:b1:e2:6a: a4:8e:62:a5:a4:83:0f:0d:f3:66:9b:66:9d:24:e8:31:82:09: c2:12:8f:5a:c7:51:40:0d:01:3d:1f:15:38:cb:8f:f9:9b:3f: 63:8f:0a:31:c9:26:81:ab:da:47:e3:e6:34:e1:2b:6c:35:79: 3a:76:13:5b:96:d6:eb:f4:35:ff:7e:bd:45:30:0e:08:59:d1: 59:f8:fa:92:67:c8:f2:73:f8:dc:ff:e5:6d:f5:94:3d:47:38: 03:b2:87:2d:69:92:11:36:4d:2c:38:59:0f:70:38:63:f9:00: 30:6f:53:a3:7a:18:6b:ce:8b:93:8c:98:31:b0:5c:6a:69:1f: 11:cf:75:c5:70:c5:b4:54:68:cb:a8:55:53:b0:2f:40:68:d0: c5:ae:2c:38:f0:6c:ef:e6:68:ad:6c:35:28:a8:88:f0:e0:73: c0:40:ff:5f:dd:a6:b9:0c:b8:d9:7c:36:8b:f2:b2:cb:8b:25: e0:53:74:04:f7:45:90:a6:67:fe:a0:d2:e2:84:bb:bb:21:94: 47:57:ab:f7:75:22:97:bd:3c:de:21:c7:d4:b0:52:68:26:00: a8:d3:5b:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZDNjYxMTAvBgNVBAUTKDNCMEJDNTU2NTBBQTQ2QjE3OEIzRTE3NDIzMDAwQkQ5 ODFDQTY3MzYwHhcNMjUwNDI0MTU0MzA5WhcNMjUwNTAxMTU0MzA5WjAYMRYwFAYD VQQDEw02ODBhNWMwZC04NDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx4xRz3DHMppmfDiK/kyKe63/oN7nlJbsYU+fo7ZFVFtwnjrYiO2Ef15wjJPu AD/2oksXrrH7WbqtdaGN30YgDwgQcuC1pQQRnpd5VUa9/3TxWrTsfAzF6B2QyUgb sBgg5B99tsBbyQUZe/S2XEZ/vSrjAr2ZEtLnNpPwyzsIngZEpn/4NJ1nPNkz3L8K uMI6Qlv5pA+R+V+EUQIZBpg5sYBSVWj5y+kTMfl/FDUwWS4zLvnBBuwebfggGA5H bLxpNP4jHugRgb6+KgUbEu2ajwNb7563I3xNA3dCIvWU7LC06LRdeVwTAy3ogwvw 2segcrCZCxIKtCjYb4gG9k617wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAuJxScs lDl00HmdpPDH8gky08xMMB8GA1UdIwQYMBaAFDsLxVZQqkaxeLPhdCMAC9mBymc2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkM2Ni84RkI5NThGQUY4 NkIxMUU0ODMxNjczNjBDNEY5QUUwMi9Pd3ZGVmxDcVJyRjRzLUYwSXdBTDJZSEta elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL093dkZWbENxUnJGNHMtRjBJd0FMMllIS1p6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkM2Ni84RkI5NThGQUY4NkIxMUU0ODMxNjczNjBDNEY5QUUwMi9Pd3ZGVmxDcVJy RjRzLUYwSXdBTDJZSEtaelkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCf0Vxwpjst9tZXoAIsNsbJU4n3mPIaxMHSRW9dDrIaqJ2x4mqkjmKl pIMPDfNmm2adJOgxggnCEo9ax1FADQE9HxU4y4/5mz9jjwoxySaBq9pH4+Y04Sts NXk6dhNbltbr9DX/fr1FMA4IWdFZ+PqSZ8jyc/jc/+Vt9ZQ9RzgDsoctaZIRNk0s OFkPcDhj+QAwb1OjehhrzouTjJgxsFxqaR8Rz3XFcMW0VGjLqFVTsC9AaNDFriw4 8Gzv5mitbDUoqIjw4HPAQP9f3aa5DLjZfDaL8rLLiyXgU3QE90WQpmf+oNLihLu7 IZRHV6v3dSKXvTzeIcfUsFJoJgCo01sT -----END CERTIFICATE-----Generated at Sat Apr 26 15:27:29 2025 by rpki-client