$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft File: oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft (raw, json) Hash identifier: TeFdgnIEdHhBtbSVWMotqEp9H9k5/f7hDr7VgpKCKX4= Subject key identifier: BC:BB:E8:6D:C0:41:EE:7E:8D:61:0D:AE:BA:E5:C1:1E:97:CF:46:50 Authority key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D Certificate issuer: /CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D Certificate serial: 0188 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft Manifest number: 015F Signing time: Fri 25 Apr 2025 03:26:39 +0000 Manifest this update: Fri 25 Apr 2025 03:26:39 +0000 Manifest next update: Fri 02 May 2025 03:26:39 +0000 Files and hashes: 1: oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl (hash: ehfvSd7Q96771e+dakd13P/yhSj2rLV5zzKf4NXi0pE=) 2: A1C2C588366311EEB376DC3AC4F9AE02.roa (hash: eMfy7OINYllKPw/hYmLN+RLPDufOse3B1bVnfxelXA4=) 3: A14DCC1A366311EEB376DC3AC4F9AE02.roa (hash: uXWLPj49wt34ZFOdgRvzFts1coN6e2ycjWdiQjNmKsk=) 4: FAC35354610611EFB6324A30C4F9AE02.roa (hash: 3fkGbyflBIYBaEGX9UwZRIaOP3YpNHP6p1lJeAeN+Pc=) 5: 9EBF44EC366311EEB376DC3AC4F9AE02.roa (hash: 2T6E2IzaBIpKo85tSWVvYebgls3pQQ9SNaIoG7eWLz4=) 6: AEC0C8428C5811EFA0E8E859C4F9AE02.roa (hash: q1C12AJZxBjIQzqN4k7K7GMZE1FYJg2qefZeo78vHPs=) 7: A08711E2366311EEB376DC3AC4F9AE02.roa (hash: ekGkDDIKWLiqVV7h6ESwSg8vnFxwfp+WHxsTHsOalhs=) 8: A309A0BA366311EEB376DC3AC4F9AE02.roa (hash: AW+Nxj8w4krax5vO+aa2r3fRVGb6J4InT/gDIakIwPQ=) 9: AA36D97EFC7511EE9C9CD67CC4F9AE02.roa (hash: xzZgqMDA4sRVnfCdaLDA6dVoRCpm16rxzJc3wo1vyY4=) 10: A22F20AC366311EEB376DC3AC4F9AE02.roa (hash: DKGzaOaDogHp8zZnJNJ8Xu7A6tqaHSnOfSE1S0tRHtw=) 11: 9DC673EE366311EEB376DC3AC4F9AE02.roa (hash: 2dWDYylTvBf7qUkUKq2WQpJFP4UJD1LaLQZoGDi+eMQ=) 12: 9D563A7A366311EEB376DC3AC4F9AE02.roa (hash: jf5vNKMEs/HYJC+ZfLIR6MHcZqRlwRNx9C1pqFQO2oU=) 13: 5B76DF12820611EE8A06123AC4F9AE02.roa (hash: 2F6msvEoxhf3yMkdkG6hwiZZB9ls61DIlAbmxkj7kXQ=) 14: 544F13A6B78111EF84611770C4F9AE02.roa (hash: b+cobkm/t+8VplbAM/uAvE/ze4s0B8PJ3bqKjF7kQOA=) 15: 9FE1BE90366311EEB376DC3AC4F9AE02.roa (hash: qF8dwyJS0OcLRM+lRZeGO8KZj/gqh2DhUGlNyStGdKM=) 16: A37A198A366311EEB376DC3AC4F9AE02.roa (hash: lahqqWdJv5iCoCPv96NgkWAwgDwpfB7aX0xa2UIAojg=) 17: CF415DDA520111EEBD942A6FC4F9AE02.roa (hash: sGNeudGsjKQYxdr3S2rAF3HoccrfyBnH+QSvEfzchv8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:26:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 392 (0x188) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919536C, serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D Validity Not Before: Apr 25 03:26:39 2025 GMT Not After : May 2 03:26:39 2025 GMT Subject: CN=680b00ef-0a68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fb:56:4f:a4:66:63:f2:ef:99:d6:31:4c:58: dd:1b:ca:f5:14:0b:1d:ca:14:10:21:d8:52:9f:12: 6c:0e:d2:8f:66:bf:4d:0b:9c:f9:d3:e1:f2:fd:bd: 6c:9b:17:fa:d5:96:27:26:4c:73:33:67:02:1c:1d: 68:6b:b8:43:68:9e:98:9b:52:70:9b:4a:1e:01:6e: db:e4:39:7b:57:84:cd:89:59:f2:39:0d:a7:f7:ad: 01:b5:08:07:88:d0:eb:2d:09:67:1a:bb:e2:e0:43: 12:b1:5d:0e:06:7b:bb:ff:01:d5:85:8e:0d:54:b2: 2a:5b:22:02:35:b7:53:a0:b9:7a:a8:85:db:1a:ce: a4:dc:d8:27:50:db:0d:fc:c6:16:1a:20:84:dc:e6: 6b:f8:c5:99:1f:c8:bd:48:43:69:06:d3:10:a4:c9: 47:76:31:82:0e:0b:8c:76:de:9b:ca:e0:70:e4:81: db:5e:94:6f:ca:2e:3d:24:e5:32:76:82:d5:92:99: 73:ed:7c:54:55:4b:e0:c7:29:67:7f:99:fc:34:88: 24:59:c7:c0:f3:79:df:7a:66:4a:83:49:5a:b4:69: 82:88:df:b6:77:42:d7:ed:23:cd:5d:17:37:51:73: 26:8f:1d:71:ef:35:f3:db:f4:13:e9:d5:f6:f4:7a: 9a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:BB:E8:6D:C0:41:EE:7E:8D:61:0D:AE:BA:E5:C1:1E:97:CF:46:50 X509v3 Authority Key Identifier: keyid:A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:89:29:76:51:32:b3:cd:e5:68:b0:2b:25:b7:f6:26:2f:63: 11:d2:84:c9:2f:85:a8:a5:87:78:d3:a0:69:d8:28:84:46:6a: ec:85:47:4f:3d:e0:c7:27:11:b3:98:51:62:91:72:53:c6:3a: 43:6c:e7:28:26:7d:81:50:c1:05:46:bc:61:8b:e6:7e:7e:26: 86:e3:29:a8:fa:eb:8a:39:27:30:c5:86:b1:6a:90:e6:0d:6e: 2d:e0:44:dd:80:75:c8:9f:ce:1d:4b:5f:16:ee:5a:85:0b:ea: e3:b7:0b:1f:cc:ac:39:43:b5:ff:93:c0:d7:1d:ab:7a:74:e8: 1b:9a:6f:2f:f1:63:1f:8a:14:15:1d:4a:c6:15:14:a2:ea:14: a8:c0:00:15:44:82:61:56:d1:ea:bf:63:3e:27:5e:3e:cd:0e: d6:e5:5b:f9:f4:dc:b2:9a:bf:7e:6c:1e:f4:4e:02:8c:9e:98: 32:f9:cf:88:93:93:0e:62:96:a4:6a:83:56:47:ac:84:d7:74: 28:6b:1e:84:4b:80:8b:5b:69:af:68:cf:8a:e5:6e:1a:ba:db: e9:a8:cd:57:e6:d4:4a:79:5f:a6:f4:28:57:db:63:73:0a:bb: 96:3a:44:c2:44:dc:f7:f8:c8:90:10:09:1f:c0:13:49:b3:8e: b2:37:cc:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTUzNkMxMTAvBgNVBAUTKEEwOTBFNTIwQkY5RDUxRjJGRENFRUQ0MTNBRjI3QUM3 NThGNkFFMUQwHhcNMjUwNDI1MDMyNjM5WhcNMjUwNTAyMDMyNjM5WjAYMRYwFAYD VQQDEw02ODBiMDBlZi0wYTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvtWT6RmY/LvmdYxTFjdG8r1FAsdyhQQIdhSnxJsDtKPZr9NC5z50+Hy/b1s mxf61ZYnJkxzM2cCHB1oa7hDaJ6Ym1Jwm0oeAW7b5Dl7V4TNiVnyOQ2n960BtQgH iNDrLQlnGrvi4EMSsV0OBnu7/wHVhY4NVLIqWyICNbdToLl6qIXbGs6k3NgnUNsN /MYWGiCE3OZr+MWZH8i9SENpBtMQpMlHdjGCDguMdt6byuBw5IHbXpRvyi49JOUy doLVkplz7XxUVUvgxylnf5n8NIgkWcfA83nfemZKg0latGmCiN+2d0LX7SPNXRc3 UXMmjx1x7zXz2/QT6dX29HqaDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLy76G3A Qe5+jWENrrrlwR6Xz0ZQMB8GA1UdIwQYMBaAFKCQ5SC/nVHy/c7tQTryesdY9q4d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTM2Qy83NUI5OEJGMDM2 NjAxMUVFODhFMEY1MzBDNEY5QUUwMi9vSkRsSUwtZFVmTDl6dTFCT3ZKNngxajJy aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL29KRGxJTC1kVWZMOXp1MUJPdko2eDFqMnJoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTM2Qy83NUI5OEJGMDM2NjAxMUVFODhFMEY1MzBDNEY5QUUwMi9vSkRsSUwtZFVm TDl6dTFCT3ZKNngxajJyaDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkiSl2UTKzzeVosCslt/YmL2MR0oTJL4WopYd406Bp2CiERmrshUdP PeDHJxGzmFFikXJTxjpDbOcoJn2BUMEFRrxhi+Z+fiaG4ymo+uuKOScwxYaxapDm DW4t4ETdgHXIn84dS18W7lqFC+rjtwsfzKw5Q7X/k8DXHat6dOgbmm8v8WMfihQV HUrGFRSi6hSowAAVRIJhVtHqv2M+J14+zQ7W5Vv59Nyymr9+bB70TgKMnpgy+c+I k5MOYpakaoNWR6yE13Qoax6ES4CLW2mvaM+K5W4autvpqM1X5tRKeV+m9ChX22Nz CruWOkTCRNz3+MiQEAkfwBNJs46yN8ys -----END CERTIFICATE-----Generated at Sat Apr 26 17:04:27 2025 by rpki-client