$ rpki-client -vvf rpki.apnic.net/member_repository/A919CA18/6D059BBCB1B211ED8D7C2F2BC4F9AE02/OvnsvEXk4pfSm6bEEfGgXIudqeM.mft File: OvnsvEXk4pfSm6bEEfGgXIudqeM.mft (raw, json) Hash identifier: u/kaGeI2RCWCtPeyaTC2BaP/DIbx+DH+WNZsKdu83vg= Subject key identifier: 48:C8:74:81:25:04:75:03:CC:F8:02:8B:7B:17:B4:CB:76:98:97:5E Authority key identifier: 3A:F9:EC:BC:45:E4:E2:97:D2:9B:A6:C4:11:F1:A0:5C:8B:9D:A9:E3 Certificate issuer: /CN=A919CA18/serialNumber=3AF9ECBC45E4E297D29BA6C411F1A05C8B9DA9E3 Certificate serial: 019B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OvnsvEXk4pfSm6bEEfGgXIudqeM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CA18/6D059BBCB1B211ED8D7C2F2BC4F9AE02/OvnsvEXk4pfSm6bEEfGgXIudqeM.mft Manifest number: 0199 Signing time: Fri 25 Apr 2025 02:33:24 +0000 Manifest this update: Fri 25 Apr 2025 02:33:23 +0000 Manifest next update: Fri 02 May 2025 02:33:23 +0000 Files and hashes: 1: OvnsvEXk4pfSm6bEEfGgXIudqeM.crl (hash: iLpr50HMn1kXpg900h+K+luW1ZZiCTG6If2uSYDwBD0=) 2: 82E99F5A10FC11EF95048154C4F9AE02.roa (hash: KiSgunw3k37SA5qIOSFD0yKCbhYgrY4Gzd+tIVRajoM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CA18/6D059BBCB1B211ED8D7C2F2BC4F9AE02/OvnsvEXk4pfSm6bEEfGgXIudqeM.crl rsync://rpki.apnic.net/member_repository/A919CA18/6D059BBCB1B211ED8D7C2F2BC4F9AE02/OvnsvEXk4pfSm6bEEfGgXIudqeM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OvnsvEXk4pfSm6bEEfGgXIudqeM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:33:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 411 (0x19b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CA18, serialNumber=3AF9ECBC45E4E297D29BA6C411F1A05C8B9DA9E3 Validity Not Before: Apr 25 02:33:23 2025 GMT Not After : May 2 02:33:23 2025 GMT Subject: CN=680af473-f988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:43:2f:ef:e3:8d:ff:89:16:f0:48:d8:bc:d6: a2:09:77:65:4a:3e:ca:35:a2:e8:16:36:59:a8:18: 38:ec:93:7f:7c:41:b4:99:70:9e:45:8c:e1:78:af: 7f:24:62:27:e2:02:3e:54:f8:3e:1d:68:24:05:d6: b2:13:a4:2e:00:7e:15:dc:e8:e2:80:da:55:e3:86: 0b:04:94:11:22:88:7f:c6:51:ea:7c:76:84:a1:54: 67:2f:d9:03:06:a1:7f:83:b7:b9:dc:c4:71:a0:dc: 23:ac:55:a4:3f:26:3d:1d:9c:17:b4:2c:aa:1f:0a: 95:d0:50:b3:50:e9:14:46:13:2c:2d:e1:2a:9a:87: 8c:62:6f:94:a0:7f:cf:6b:fc:ae:c9:09:a9:23:df: 4a:62:30:8a:81:a2:a6:06:86:bb:83:d5:79:6d:88: 80:8d:3e:d7:57:c3:af:4d:ac:20:d3:5d:d7:6c:06: 21:dc:a2:93:40:5e:4c:7b:54:e9:54:fb:2e:0e:98: 49:30:ad:a8:68:b1:a2:a5:46:ed:ab:cc:55:d7:20: 7b:67:ed:61:9b:25:d4:cd:cb:20:02:f8:ef:ae:a8: 0f:85:8d:31:f9:72:2f:e8:2b:63:bb:e6:bf:c0:8d: b5:8b:31:fc:33:8d:83:0a:60:b6:42:6c:e3:0b:cb: 35:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:C8:74:81:25:04:75:03:CC:F8:02:8B:7B:17:B4:CB:76:98:97:5E X509v3 Authority Key Identifier: keyid:3A:F9:EC:BC:45:E4:E2:97:D2:9B:A6:C4:11:F1:A0:5C:8B:9D:A9:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CA18/6D059BBCB1B211ED8D7C2F2BC4F9AE02/OvnsvEXk4pfSm6bEEfGgXIudqeM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OvnsvEXk4pfSm6bEEfGgXIudqeM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CA18/6D059BBCB1B211ED8D7C2F2BC4F9AE02/OvnsvEXk4pfSm6bEEfGgXIudqeM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:33:95:f1:bf:77:26:2e:68:c8:3b:67:34:cb:10:6d:fb:a3: e8:16:7e:1a:4b:19:9b:16:88:ff:4a:66:b4:b9:5f:b2:58:4f: bd:bc:95:c6:31:8a:44:64:da:08:35:f7:9e:12:c4:c2:c2:7f: 9b:7d:0f:5e:57:a6:6c:6b:ee:a6:e3:08:3a:61:12:29:60:17: 36:18:a0:a3:d8:61:2e:3e:76:26:d7:0a:a3:5b:1d:c5:f7:b7: 8f:0c:e4:85:08:ef:f5:98:bd:b7:87:7b:09:33:eb:e7:26:42: 03:dd:96:88:23:67:07:72:54:a4:67:0d:d6:97:f6:87:17:3e: 9a:a9:f1:fe:56:a9:39:bd:4a:29:59:05:e8:b2:77:2b:d2:bb: d5:47:d9:bb:5d:81:5d:f0:dd:53:fc:16:9c:41:56:38:59:0a: 4c:2c:5b:07:83:f7:18:09:1d:7e:47:1a:8b:01:3e:89:d6:63: f4:dc:7d:b4:e7:17:84:3c:2a:a8:9f:1b:b3:65:ed:89:5c:f7: c7:90:f7:97:2b:a4:d3:cd:23:b0:5e:05:07:b1:24:b5:e3:f4: 0f:ca:f8:1c:ea:a3:d8:d0:72:4c:a5:50:2a:0d:39:bf:d9:38: 9b:1e:04:24:c8:b6:d2:49:ef:ef:24:31:85:55:62:40:38:d0: 65:bf:b3:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNBMTgxMTAvBgNVBAUTKDNBRjlFQ0JDNDVFNEUyOTdEMjlCQTZDNDExRjFBMDVD OEI5REE5RTMwHhcNMjUwNDI1MDIzMzIzWhcNMjUwNTAyMDIzMzIzWjAYMRYwFAYD VQQDEw02ODBhZjQ3My1mOTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArUMv7+ON/4kW8EjYvNaiCXdlSj7KNaLoFjZZqBg47JN/fEG0mXCeRYzheK9/ JGIn4gI+VPg+HWgkBdayE6QuAH4V3OjigNpV44YLBJQRIoh/xlHqfHaEoVRnL9kD BqF/g7e53MRxoNwjrFWkPyY9HZwXtCyqHwqV0FCzUOkURhMsLeEqmoeMYm+UoH/P a/yuyQmpI99KYjCKgaKmBoa7g9V5bYiAjT7XV8OvTawg013XbAYh3KKTQF5Me1Tp VPsuDphJMK2oaLGipUbtq8xV1yB7Z+1hmyXUzcsgAvjvrqgPhY0x+XIv6Ctju+a/ wI21izH8M42DCmC2QmzjC8s19QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEjIdIEl BHUDzPgCi3sXtMt2mJdeMB8GA1UdIwQYMBaAFDr57LxF5OKX0pumxBHxoFyLnanj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0ExOC82RDA1OUJCQ0Ix QjIxMUVEOEQ3QzJGMkJDNEY5QUUwMi9Pdm5zdkVYazRwZlNtNmJFRWZHZ1hJdWRx ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL092bnN2RVhrNHBmU202YkVFZkdnWEl1ZHFlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0ExOC82RDA1OUJCQ0IxQjIxMUVEOEQ3QzJGMkJDNEY5QUUwMi9Pdm5zdkVYazRw ZlNtNmJFRWZHZ1hJdWRxZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiM5Xxv3cmLmjIO2c0yxBt+6PoFn4aSxmbFoj/Sma0uV+yWE+9vJXG MYpEZNoINfeeEsTCwn+bfQ9eV6Zsa+6m4wg6YRIpYBc2GKCj2GEuPnYm1wqjWx3F 97ePDOSFCO/1mL23h3sJM+vnJkID3ZaII2cHclSkZw3Wl/aHFz6aqfH+Vqk5vUop WQXosncr0rvVR9m7XYFd8N1T/BacQVY4WQpMLFsHg/cYCR1+RxqLAT6J1mP03H20 5xeEPCqonxuzZe2JXPfHkPeXK6TTzSOwXgUHsSS14/QPyvgc6qPY0HJMpVAqDTm/ 2TibHgQkyLbSSe/vJDGFVWJAONBlv7Pj -----END CERTIFICATE-----Generated at Sat Apr 26 13:05:19 2025 by rpki-client