$ rpki-client -vvf rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.mft File: wOMbX0XP5SusXO243MahoyL0cF0.mft (raw, json) Hash identifier: h6RSBm/E2rZDzVOSjLMaP+e/ELy5KsAQ23a4fV1bLZI= Subject key identifier: FA:2B:7E:1A:95:92:50:E7:F0:41:83:61:86:15:B7:FE:B4:B9:2E:94 Authority key identifier: C0:E3:1B:5F:45:CF:E5:2B:AC:5C:ED:B8:DC:C6:A1:A3:22:F4:70:5D Certificate issuer: /CN=A9196F7C/serialNumber=C0E31B5F45CFE52BAC5CEDB8DCC6A1A322F4705D Certificate serial: D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wOMbX0XP5SusXO243MahoyL0cF0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.mft Manifest number: CC Signing time: Fri 25 Apr 2025 04:53:11 +0000 Manifest this update: Fri 25 Apr 2025 04:53:11 +0000 Manifest next update: Fri 02 May 2025 04:53:11 +0000 Files and hashes: 1: wOMbX0XP5SusXO243MahoyL0cF0.crl (hash: IFLN+kUAXMvPedHh/LDmTtxa4ycJG6zvW4Juau/se2g=) 2: E37CCF70718911EFA0C30257C4F9AE02.roa (hash: i365RiKIVyJPWi8FiX61DimamCncEPV+eIiKwxbytNI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.crl rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wOMbX0XP5SusXO243MahoyL0cF0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196F7C, serialNumber=C0E31B5F45CFE52BAC5CEDB8DCC6A1A322F4705D Validity Not Before: Apr 25 04:53:11 2025 GMT Not After : May 2 04:53:11 2025 GMT Subject: CN=680b1537-e47a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:9f:2c:f4:27:8f:10:c2:94:44:39:b6:fb:68: 51:de:9f:13:db:0e:61:bd:e4:3d:81:05:a2:0a:68: a1:e9:52:de:10:93:cc:dd:21:ea:d6:6b:04:88:a9: 43:1d:d4:97:da:36:c5:c9:2b:53:f5:b5:8e:d5:8c: 40:e8:fe:a7:42:f2:63:15:e7:23:30:b3:dc:b2:19: 10:4a:60:7c:c1:b6:06:64:cf:56:22:4f:7c:79:3a: a4:ea:2c:3d:22:64:96:7a:4a:5f:2b:f4:7d:18:a2: 3a:9c:9b:9f:fb:07:b7:da:56:ee:25:52:10:26:1b: 89:cd:b8:c1:ef:7f:f7:1f:66:29:05:f7:f2:33:43: d9:e6:9e:38:b7:2d:ee:f8:ef:9e:86:c7:a3:30:cf: bf:13:41:80:07:76:ec:18:c4:2e:42:60:f7:82:20: 43:b7:1e:ba:14:1e:6a:c3:9d:5a:47:ca:95:52:91: 84:2a:b9:2c:af:72:ad:2d:ae:72:34:95:a4:b7:77: 9d:ae:f2:a4:db:10:a5:a3:4e:cf:3c:6a:bd:e9:10: 31:00:c6:21:f4:c2:3a:b2:14:87:52:ff:24:2b:4f: 9f:00:f5:48:8e:f4:24:d1:b2:b8:08:00:60:d8:1f: 76:2c:15:1f:15:cc:d7:11:63:7c:64:64:e1:33:1d: fa:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:2B:7E:1A:95:92:50:E7:F0:41:83:61:86:15:B7:FE:B4:B9:2E:94 X509v3 Authority Key Identifier: keyid:C0:E3:1B:5F:45:CF:E5:2B:AC:5C:ED:B8:DC:C6:A1:A3:22:F4:70:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wOMbX0XP5SusXO243MahoyL0cF0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:e2:c1:e1:05:8f:a1:98:60:cd:78:e4:84:f1:5c:81:8b:67: 4d:2f:71:eb:5d:11:38:ef:7f:5b:3f:48:f8:64:52:be:18:a5: 6b:5a:ab:86:15:36:5e:2b:95:ef:95:2c:d2:6f:18:ce:16:2b: 03:8a:04:a1:51:9d:9d:ce:53:23:b6:5b:57:a5:17:9a:de:09: 5e:01:1a:5b:db:06:0c:4a:2c:a5:fc:48:31:6f:88:c3:28:9c: 1d:c3:fa:ee:01:2f:32:8a:9f:d4:c4:3d:34:8a:ef:c2:18:1e: bd:0d:3e:1b:79:99:bd:35:05:c3:ae:60:d5:0d:0f:a3:3d:d4: 1f:f1:07:4d:8c:bb:72:52:32:98:88:e4:a1:50:2f:b4:fa:cd: 72:b7:81:af:ca:17:9c:cf:ad:15:f0:62:62:67:39:bc:42:4b: 9b:5f:fc:66:a5:27:e1:77:ed:96:2b:d5:36:dc:bd:25:fd:a7: 35:aa:ca:eb:74:a0:39:e3:b0:18:05:66:27:29:33:e7:00:a9: c6:b5:9e:bf:9d:ec:00:fa:be:83:23:36:59:82:70:bb:34:54: 43:f8:83:5f:53:51:00:a4:df:46:e8:8d:06:dd:16:f2:e7:4b: 25:d4:9c:c7:1f:f2:0d:9a:91:ba:f7:ca:f8:06:20:8b:01:0e: a4:ec:23:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZGN0MxMTAvBgNVBAUTKEMwRTMxQjVGNDVDRkU1MkJBQzVDRURCOERDQzZBMUEz MjJGNDcwNUQwHhcNMjUwNDI1MDQ1MzExWhcNMjUwNTAyMDQ1MzExWjAYMRYwFAYD VQQDEw02ODBiMTUzNy1lNDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6p8s9CePEMKURDm2+2hR3p8T2w5hveQ9gQWiCmih6VLeEJPM3SHq1msEiKlD HdSX2jbFyStT9bWO1YxA6P6nQvJjFecjMLPcshkQSmB8wbYGZM9WIk98eTqk6iw9 ImSWekpfK/R9GKI6nJuf+we32lbuJVIQJhuJzbjB73/3H2YpBffyM0PZ5p44ty3u +O+ehsejMM+/E0GAB3bsGMQuQmD3giBDtx66FB5qw51aR8qVUpGEKrksr3KtLa5y NJWkt3edrvKk2xClo07PPGq96RAxAMYh9MI6shSHUv8kK0+fAPVIjvQk0bK4CABg 2B92LBUfFczXEWN8ZGThMx362QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPorfhqV klDn8EGDYYYVt/60uS6UMB8GA1UdIwQYMBaAFMDjG19Fz+UrrFztuNzGoaMi9HBd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkY3Qy84NkY5MTYxQ0ZD NUIxMUVFQTNGRjlENDdDNEY5QUUwMi93T01iWDBYUDVTdXNYTzI0M01haG95TDBj RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dPTWJYMFhQNVN1c1hPMjQzTWFob3lMMGNGMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkY3Qy84NkY5MTYxQ0ZDNUIxMUVFQTNGRjlENDdDNEY5QUUwMi93T01iWDBYUDVT dXNYTzI0M01haG95TDBjRjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB44sHhBY+hmGDNeOSE8VyBi2dNL3HrXRE4739bP0j4ZFK+GKVrWquG FTZeK5XvlSzSbxjOFisDigShUZ2dzlMjtltXpRea3gleARpb2wYMSiyl/Egxb4jD KJwdw/ruAS8yip/UxD00iu/CGB69DT4beZm9NQXDrmDVDQ+jPdQf8QdNjLtyUjKY iOShUC+0+s1yt4Gvyhecz60V8GJiZzm8QkubX/xmpSfhd+2WK9U23L0l/ac1qsrr dKA547AYBWYnKTPnAKnGtZ6/newA+r6DIzZZgnC7NFRD+INfU1EApN9G6I0G3Rby 50sl1JzHH/INmpG698r4BiCLAQ6k7CO4 -----END CERTIFICATE-----Generated at Sat Apr 26 17:08:56 2025 by rpki-client