$ rpki-client -vvf rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.mft File: oXyIfuladLPXOMFccI_s_Wu4xmo.mft (raw, json) Hash identifier: hFmk125szydvqIXCRM5rsw21Omj7jrIHlr7iG6BjWZ0= Subject key identifier: CF:77:B8:4B:D8:88:73:7B:6F:A4:46:A6:6B:5F:D7:46:9D:53:08:71 Authority key identifier: A1:7C:88:7E:E9:5A:74:B3:D7:38:C1:5C:70:8F:EC:FD:6B:B8:C6:6A Certificate issuer: /CN=A918F646/serialNumber=A17C887EE95A74B3D738C15C708FECFD6BB8C66A Certificate serial: 11C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXyIfuladLPXOMFccI_s_Wu4xmo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.mft Manifest number: 11A8 Signing time: Thu 24 Apr 2025 17:13:09 +0000 Manifest this update: Thu 24 Apr 2025 17:13:09 +0000 Manifest next update: Thu 01 May 2025 17:13:09 +0000 Files and hashes: 1: oXyIfuladLPXOMFccI_s_Wu4xmo.crl (hash: fye7zDbJC75eNtJYHWx3ijuT+GaWrxsa3nDNLuzYw+k=) 2: 5E66667ED3AE11EB908D6529C4F9AE02.roa (hash: n7ZfWu9YevyGMpJ105uNq2hULd/nZeOAu9j3eqShoBg=) 3: 5D5FEDE0D3AE11EB908D6529C4F9AE02.roa (hash: 1n0gDL6bGzAnn9xKGXqg42AcMaFYnb+E6TJXe2riXIQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.crl rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXyIfuladLPXOMFccI_s_Wu4xmo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:13:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4546 (0x11c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F646, serialNumber=A17C887EE95A74B3D738C15C708FECFD6BB8C66A Validity Not Before: Apr 24 17:13:09 2025 GMT Not After : May 1 17:13:09 2025 GMT Subject: CN=680a7125-908c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4c:7d:9a:32:43:64:eb:ca:96:8c:5f:f5:c3: 4e:89:1a:a7:51:31:08:aa:6b:ac:97:57:aa:e1:b7: b2:1b:f4:c2:f8:c0:1a:6a:3a:71:92:5b:b5:53:e3: 1c:60:83:3c:d0:60:95:89:aa:c8:94:c6:a7:2e:f6: 9a:46:5c:53:52:5b:18:d3:9c:94:9a:a9:06:a8:93: b0:3e:7d:97:1f:e9:a5:e4:25:ed:ab:6f:81:e1:19: d5:7e:99:64:06:44:05:c5:9c:a9:2b:fe:5c:5d:d4: 40:3c:d3:61:3b:11:9c:97:d4:01:37:93:02:d1:2e: f6:4c:0e:f4:46:93:2b:c4:3f:0a:e9:aa:85:3f:d6: 52:c4:91:aa:3f:9e:7c:1a:ef:61:f9:c5:95:59:a2: 08:7c:80:dc:95:df:6b:13:91:4f:a4:e1:00:0a:d5: 21:77:f2:ab:14:62:ae:e0:e1:f5:f0:7d:31:75:34: 19:ef:01:58:bd:1a:34:f3:41:58:df:55:98:b3:87: c6:a2:e7:74:38:2d:36:85:91:7c:fd:97:3a:45:ce: 4a:5b:bd:85:aa:24:20:85:7b:c2:7a:e6:da:80:9e: 41:b3:0d:02:11:48:5e:8f:89:04:e0:1b:8a:b3:63: 3e:63:df:9f:86:5e:92:56:d5:fd:75:a3:9a:1c:9f: e2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:77:B8:4B:D8:88:73:7B:6F:A4:46:A6:6B:5F:D7:46:9D:53:08:71 X509v3 Authority Key Identifier: keyid:A1:7C:88:7E:E9:5A:74:B3:D7:38:C1:5C:70:8F:EC:FD:6B:B8:C6:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXyIfuladLPXOMFccI_s_Wu4xmo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:42:76:f8:ad:61:e8:ea:20:68:36:7f:2b:d5:4a:3e:ba:71: d7:5f:d3:72:2e:5f:6c:66:f6:b6:65:53:dd:10:9f:78:b2:67: 99:c7:63:f2:22:1d:83:a0:aa:8d:f1:0a:d2:af:21:a2:4a:ca: 2b:10:f8:b0:0a:6a:bf:da:ea:32:59:69:ff:a1:aa:7f:2d:1e: 8e:f9:5a:e6:bd:fd:3d:25:28:3f:90:da:e4:98:c2:85:33:b3: 83:46:f3:a6:09:cd:74:13:98:91:0c:64:d9:cf:9f:de:d0:9b: 67:09:f4:bb:75:04:49:c8:c1:02:6f:18:14:29:d3:f2:0b:7a: eb:9b:69:94:0b:09:9e:3f:6c:89:1c:87:84:55:e6:2a:55:fe: 76:d8:d0:de:d6:89:49:ef:3a:62:21:2f:11:1a:f7:94:56:42: a6:5f:7a:67:b2:30:71:20:fd:85:57:2e:4e:3f:72:7b:80:b0: 79:7e:4a:a0:ef:5b:c0:df:80:80:ae:e0:29:dc:1e:20:b0:0f: 41:b3:6a:46:c2:2d:1e:d4:47:90:c7:00:51:8c:f2:c0:2a:a8: e5:c3:c2:76:0d:8b:45:76:23:64:3b:c8:a5:28:1b:3a:c7:2e: 7e:cc:9b:66:64:c4:5e:fd:d6:af:be:8f:51:53:0b:74:e5:1b: 4a:ee:67:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY2NDYxMTAvBgNVBAUTKEExN0M4ODdFRTk1QTc0QjNENzM4QzE1QzcwOEZFQ0ZE NkJCOEM2NkEwHhcNMjUwNDI0MTcxMzA5WhcNMjUwNTAxMTcxMzA5WjAYMRYwFAYD VQQDEw02ODBhNzEyNS05MDhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA00x9mjJDZOvKloxf9cNOiRqnUTEIqmusl1eq4beyG/TC+MAaajpxklu1U+Mc YIM80GCViarIlManLvaaRlxTUlsY05yUmqkGqJOwPn2XH+ml5CXtq2+B4RnVfplk BkQFxZypK/5cXdRAPNNhOxGcl9QBN5MC0S72TA70RpMrxD8K6aqFP9ZSxJGqP558 Gu9h+cWVWaIIfIDcld9rE5FPpOEACtUhd/KrFGKu4OH18H0xdTQZ7wFYvRo080FY 31WYs4fGoud0OC02hZF8/Zc6Rc5KW72FqiQghXvCeubagJ5Bsw0CEUhej4kE4BuK s2M+Y9+fhl6SVtX9daOaHJ/iMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM93uEvY iHN7b6RGpmtf10adUwhxMB8GA1UdIwQYMBaAFKF8iH7pWnSz1zjBXHCP7P1ruMZq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjY0Ni9EOTJERDAzOEY0 OEUxMUU4QjE0QTM0MUVDNEY5QUUwMi9vWHlJZnVsYWRMUFhPTUZjY0lfc19XdTR4 bW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29YeUlmdWxhZExQWE9NRmNjSV9zX1d1NHhtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjY0Ni9EOTJERDAzOEY0OEUxMUU4QjE0QTM0MUVDNEY5QUUwMi9vWHlJZnVsYWRM UFhPTUZjY0lfc19XdTR4bW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiQnb4rWHo6iBoNn8r1Uo+unHXX9NyLl9sZva2ZVPdEJ94smeZx2Py Ih2DoKqN8QrSryGiSsorEPiwCmq/2uoyWWn/oap/LR6O+Vrmvf09JSg/kNrkmMKF M7ODRvOmCc10E5iRDGTZz5/e0JtnCfS7dQRJyMECbxgUKdPyC3rrm2mUCwmeP2yJ HIeEVeYqVf522NDe1olJ7zpiIS8RGveUVkKmX3pnsjBxIP2FVy5OP3J7gLB5fkqg 71vA34CAruAp3B4gsA9Bs2pGwi0e1EeQxwBRjPLAKqjlw8J2DYtFdiNkO8ilKBs6 xy5+zJtmZMRe/davvo9RUwt05RtK7mc8 -----END CERTIFICATE-----Generated at Sat Apr 26 13:43:52 2025 by rpki-client