$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft File: oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft (raw, json) Hash identifier: U180ZzMS6ASS1xoaJ8Qo8Y6WVdH9ybYycYahR98PPnY= Subject key identifier: A6:70:55:A6:7B:3F:37:71:11:F6:C5:35:97:A4:2B:42:B2:3C:56:EB Authority key identifier: A0:9C:A2:D3:1B:16:BF:A5:84:A7:58:C3:A7:D5:1F:AC:D2:15:1B:02 Certificate issuer: /CN=A91A4ED0/serialNumber=A09CA2D31B16BFA584A758C3A7D51FACD2151B02 Certificate serial: 0A91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJyi0xsWv6WEp1jDp9UfrNIVGwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft Manifest number: 0A87 Signing time: Thu 24 Apr 2025 19:29:37 +0000 Manifest this update: Thu 24 Apr 2025 19:29:37 +0000 Manifest next update: Thu 01 May 2025 19:29:37 +0000 Files and hashes: 1: oJyi0xsWv6WEp1jDp9UfrNIVGwI.crl (hash: rShuvXYbq0loHqSzjkoOfzCp2uAJOJHyTJPj6TMVEtg=) 2: 52F59E403B4111ECABFD2186C4F9AE02.roa (hash: iGeCqjea5TKx5w3j1RMFWZOzP6n/8IBkqpNhUcYz96Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.crl rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJyi0xsWv6WEp1jDp9UfrNIVGwI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:29:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2705 (0xa91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4ED0, serialNumber=A09CA2D31B16BFA584A758C3A7D51FACD2151B02 Validity Not Before: Apr 24 19:29:37 2025 GMT Not After : May 1 19:29:37 2025 GMT Subject: CN=680a9121-9f49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cd:c8:b0:0d:82:90:5b:0e:03:df:32:9f:54: 7e:65:ba:de:1b:85:e4:52:00:f7:78:b3:2e:9c:32: e1:50:c4:3d:de:99:bc:54:04:31:d7:19:a5:2e:7e: 2e:06:23:28:66:fb:06:0f:f2:3e:04:11:f6:d8:d5: 39:f0:4a:32:90:5b:71:aa:cc:ca:4a:0f:6e:eb:c8: b9:59:49:c2:a6:64:b6:4e:0e:f6:b4:67:8d:95:d0: 99:7e:57:b0:fd:70:53:af:31:08:d1:da:a5:fd:ae: 13:cf:aa:3d:c2:15:ee:79:44:f9:84:68:7a:91:54: c8:12:cf:54:9d:10:e4:fb:83:b1:e4:44:cb:6e:32: c7:ef:6a:c7:96:88:cc:b7:ab:1d:3b:c5:87:2c:67: d1:6a:36:68:3a:36:0f:f8:ea:ba:be:8c:52:0f:a0: 56:29:d0:26:32:39:3e:da:b7:0a:ad:67:b4:af:98: d9:69:9c:05:15:00:55:53:62:ed:06:84:67:11:09: 7e:b7:dc:c3:d7:84:23:2c:b4:96:9c:47:4a:a9:c1: d7:2f:d6:cb:5d:22:02:1f:2c:fb:ea:0f:68:2b:f4: 0f:f4:f4:44:a8:d1:e4:fb:66:bb:3e:8f:92:0e:62: c2:96:5c:17:18:2b:c0:31:5e:dc:73:c9:31:2e:fe: ce:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:70:55:A6:7B:3F:37:71:11:F6:C5:35:97:A4:2B:42:B2:3C:56:EB X509v3 Authority Key Identifier: keyid:A0:9C:A2:D3:1B:16:BF:A5:84:A7:58:C3:A7:D5:1F:AC:D2:15:1B:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJyi0xsWv6WEp1jDp9UfrNIVGwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:a8:ec:dc:55:49:8f:04:f9:30:58:b7:4d:ca:2a:8c:72:d4: 2b:c9:17:db:6b:21:71:86:d8:61:66:3d:1e:1e:fe:f3:b3:35: d2:65:72:a1:2d:f2:84:a2:20:6c:f0:30:81:9a:8d:ff:b4:ad: ed:4a:7b:2a:4f:67:78:f6:6a:bc:3d:ea:fa:94:3f:2f:a0:be: 9a:f3:f4:71:1e:9e:75:42:2f:da:ad:ec:b6:18:82:b7:bc:d0: 2c:65:cb:62:22:e7:f4:ca:a6:72:1a:c1:2c:f4:6e:da:08:a3: 01:39:98:50:c7:fc:90:a0:bf:87:a7:bc:97:27:66:a2:b2:60: 61:6c:b9:51:6a:3d:c2:d6:fe:c1:1c:24:87:9a:44:1c:5b:72: 31:9a:bf:f4:f9:eb:21:e6:78:22:5a:11:71:c7:be:39:f2:e5: ff:b2:0d:3d:5c:74:a3:8e:78:8c:65:0d:a6:89:bb:f7:4b:18: ad:b2:b9:06:46:41:6d:41:b2:36:2f:73:fa:b0:eb:fd:29:43: d9:bb:18:9b:20:15:87:fd:d1:6a:9b:c9:48:18:6b:f2:fb:8a: 30:1d:c0:2c:41:10:ec:c4:17:74:26:2d:11:03:03:d0:62:ab: 74:6e:52:2a:9e:33:e6:ab:a2:bf:dd:66:33:a7:f6:cb:e4:7d: 29:5f:dc:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCpEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRFRDAxMTAvBgNVBAUTKEEwOUNBMkQzMUIxNkJGQTU4NEE3NThDM0E3RDUxRkFD RDIxNTFCMDIwHhcNMjUwNDI0MTkyOTM3WhcNMjUwNTAxMTkyOTM3WjAYMRYwFAYD VQQDEw02ODBhOTEyMS05ZjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw83IsA2CkFsOA98yn1R+ZbreG4XkUgD3eLMunDLhUMQ93pm8VAQx1xmlLn4u BiMoZvsGD/I+BBH22NU58EoykFtxqszKSg9u68i5WUnCpmS2Tg72tGeNldCZflew /XBTrzEI0dql/a4Tz6o9whXueUT5hGh6kVTIEs9UnRDk+4Ox5ETLbjLH72rHlojM t6sdO8WHLGfRajZoOjYP+Oq6voxSD6BWKdAmMjk+2rcKrWe0r5jZaZwFFQBVU2Lt BoRnEQl+t9zD14QjLLSWnEdKqcHXL9bLXSICHyz76g9oK/QP9PREqNHk+2a7Po+S DmLCllwXGCvAMV7cc8kxLv7O8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKZwVaZ7 PzdxEfbFNZekK0KyPFbrMB8GA1UdIwQYMBaAFKCcotMbFr+lhKdYw6fVH6zSFRsC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEVEMC85MkIzQ0Q1QTU4 Q0YxMUVBODVFODU5NERDNEY5QUUwMi9vSnlpMHhzV3Y2V0VwMWpEcDlVZnJOSVZH d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29KeWkweHNXdjZXRXAxakRwOVVmck5JVkd3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEVEMC85MkIzQ0Q1QTU4Q0YxMUVBODVFODU5NERDNEY5QUUwMi9vSnlpMHhzV3Y2 V0VwMWpEcDlVZnJOSVZHd0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxqOzcVUmPBPkwWLdNyiqMctQryRfbayFxhthhZj0eHv7zszXSZXKh LfKEoiBs8DCBmo3/tK3tSnsqT2d49mq8Per6lD8voL6a8/RxHp51Qi/arey2GIK3 vNAsZctiIuf0yqZyGsEs9G7aCKMBOZhQx/yQoL+Hp7yXJ2aismBhbLlRaj3C1v7B HCSHmkQcW3Ixmr/0+esh5ngiWhFxx7458uX/sg09XHSjjniMZQ2mibv3SxitsrkG RkFtQbI2L3P6sOv9KUPZuxibIBWH/dFqm8lIGGvy+4owHcAsQRDsxBd0Ji0RAwPQ Yqt0blIqnjPmq6K/3WYzp/bL5H0pX9z2 -----END CERTIFICATE-----Generated at Sat Apr 26 14:16:14 2025 by rpki-client