$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft File: 1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft (raw, json) Hash identifier: bNBk05NbiZJEMpY8a4leg1msuYCdJArFfGExDlfQa3U= Subject key identifier: F5:98:9E:B0:76:82:CD:5E:A8:18:18:84:AB:76:E8:2F:97:CD:7C:03 Authority key identifier: D6:80:BF:3A:79:6A:35:5B:12:5A:60:2C:74:66:B9:A5:6D:34:42:54 Certificate issuer: /CN=A91AAE16/serialNumber=D680BF3A796A355B125A602C7466B9A56D344254 Certificate serial: 0F9A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft Manifest number: 0F92 Signing time: Thu 24 Apr 2025 17:31:58 +0000 Manifest this update: Thu 24 Apr 2025 17:31:57 +0000 Manifest next update: Thu 01 May 2025 17:31:57 +0000 Files and hashes: 1: 1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl (hash: zLyqm5qegsVXMw4anL47ZOtD+HZ60as3juzlRoAT1DA=) 2: 682B76C05BB211E9BF474F16C4F9AE02.roa (hash: 4lBnHy42IrC+CuFwqVAzKyt4CMy0vA1UroTjFuzkrh0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:31:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3994 (0xf9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAE16, serialNumber=D680BF3A796A355B125A602C7466B9A56D344254 Validity Not Before: Apr 24 17:31:57 2025 GMT Not After : May 1 17:31:57 2025 GMT Subject: CN=680a758e-4302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2d:ef:ef:20:ad:e9:92:29:88:cf:62:79:42: 80:38:9c:df:57:82:b4:e8:56:dc:78:0f:6f:de:ad: 6b:67:50:76:54:85:6f:12:e9:56:e9:b5:96:bd:ce: ae:88:2e:e7:a7:d8:95:1d:b9:4f:0a:37:6c:16:cb: 88:d2:cb:47:95:fd:a0:9f:6d:f8:b1:45:8f:59:9f: 94:b5:84:73:ce:c4:a9:0e:4a:f0:2d:5a:5c:6c:4d: 05:5e:99:a2:62:8f:7c:e1:d4:b7:4a:9f:89:10:a4: 36:79:d0:a8:ad:24:52:3c:4e:07:20:54:28:3b:c1: e9:99:b7:22:4a:e9:d6:48:9e:c8:19:23:5e:43:42: 59:69:82:9e:e3:20:0a:53:2e:ae:16:98:5b:fd:32: 9b:2e:20:c2:10:e5:db:c4:67:af:22:79:d8:ba:2d: f3:a0:0f:ae:f7:c3:3b:6a:70:ae:88:3c:3f:a4:7f: 34:0e:f9:34:4d:4f:5f:f3:21:29:70:58:81:f1:a8: 39:b7:f7:40:09:b1:25:80:30:82:d6:21:35:6f:1d: 20:b8:4a:7d:2b:d8:60:8a:45:fa:58:dc:45:7a:f5: 14:6a:64:64:ca:2b:b4:54:09:df:91:63:67:1a:58: 34:9a:08:46:50:2a:27:c6:45:87:b2:34:79:3f:ff: 93:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:98:9E:B0:76:82:CD:5E:A8:18:18:84:AB:76:E8:2F:97:CD:7C:03 X509v3 Authority Key Identifier: keyid:D6:80:BF:3A:79:6A:35:5B:12:5A:60:2C:74:66:B9:A5:6D:34:42:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:b0:a8:56:a6:24:f7:c5:56:a2:0e:35:7c:d9:88:91:b2:d0: eb:67:d4:41:60:d6:33:d4:c6:3e:9b:3b:ce:98:8e:3b:78:9a: 76:d6:e3:41:12:95:d9:7d:9f:9f:a1:92:5a:37:76:f0:96:fc: de:0d:95:02:d9:e6:87:53:0b:ed:ca:7a:0f:5b:4d:eb:ac:60: d5:59:a6:1f:2d:d4:bf:98:39:be:98:f0:94:bb:06:52:0b:5d: fd:b7:32:0c:97:87:b6:65:0e:35:c9:6f:c3:7b:cb:fc:ee:de: 2a:06:0b:77:62:6a:3f:8c:d6:89:37:5d:ad:80:52:2d:f0:0e: ce:20:bf:a5:04:64:98:98:a9:00:6a:29:17:d0:7f:15:88:33: b8:10:b6:70:0a:c3:0b:f4:81:5b:b1:b3:a1:8d:4c:1e:27:2c: 97:55:56:34:8d:bd:0c:91:e7:5d:6e:4f:30:cc:c6:7f:61:b1: 1e:64:99:c0:b7:17:bc:b1:31:1b:4d:95:f4:63:3d:22:0a:1d: 4e:12:47:ae:93:82:aa:12:ac:c5:aa:65:58:e0:be:3f:ba:51: 17:60:f3:27:29:2a:a4:c3:01:77:e2:46:6f:3b:f4:ef:b9:9d: 59:8b:3c:bc:ab:c0:4e:d3:2c:f2:1f:33:27:80:44:29:78:ea: a0:9f:71:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD5owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFMTYxMTAvBgNVBAUTKEQ2ODBCRjNBNzk2QTM1NUIxMjVBNjAyQzc0NjZCOUE1 NkQzNDQyNTQwHhcNMjUwNDI0MTczMTU3WhcNMjUwNTAxMTczMTU3WjAYMRYwFAYD VQQDEw02ODBhNzU4ZS00MzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzC3v7yCt6ZIpiM9ieUKAOJzfV4K06FbceA9v3q1rZ1B2VIVvEulW6bWWvc6u iC7np9iVHblPCjdsFsuI0stHlf2gn234sUWPWZ+UtYRzzsSpDkrwLVpcbE0FXpmi Yo984dS3Sp+JEKQ2edCorSRSPE4HIFQoO8HpmbciSunWSJ7IGSNeQ0JZaYKe4yAK Uy6uFphb/TKbLiDCEOXbxGevInnYui3zoA+u98M7anCuiDw/pH80Dvk0TU9f8yEp cFiB8ag5t/dACbElgDCC1iE1bx0guEp9K9hgikX6WNxFevUUamRkyiu0VAnfkWNn Glg0mghGUConxkWHsjR5P/+TWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPWYnrB2 gs1eqBgYhKt26C+XzXwDMB8GA1UdIwQYMBaAFNaAvzp5ajVbElpgLHRmuaVtNEJU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUUxNi8wRUFDRjgyQzVC QjExMUU5OEIxMDNCMTNDNEY5QUUwMi8xb0NfT25scU5Wc1NXbUFzZEdhNXBXMDBR bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFvQ19PbmxxTlZzU1dtQXNkR2E1cFcwMFFsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUUxNi8wRUFDRjgyQzVCQjExMUU5OEIxMDNCMTNDNEY5QUUwMi8xb0NfT25scU5W c1NXbUFzZEdhNXBXMDBRbFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOsKhWpiT3xVaiDjV82YiRstDrZ9RBYNYz1MY+mzvOmI47eJp21uNB EpXZfZ+foZJaN3bwlvzeDZUC2eaHUwvtynoPW03rrGDVWaYfLdS/mDm+mPCUuwZS C139tzIMl4e2ZQ41yW/De8v87t4qBgt3Ymo/jNaJN12tgFIt8A7OIL+lBGSYmKkA aikX0H8ViDO4ELZwCsML9IFbsbOhjUweJyyXVVY0jb0Mkeddbk8wzMZ/YbEeZJnA txe8sTEbTZX0Yz0iCh1OEkeuk4KqEqzFqmVY4L4/ulEXYPMnKSqkwwF34kZvO/Tv uZ1Zizy8q8BO0yzyHzMngEQpeOqgn3G9 -----END CERTIFICATE-----Generated at Sat Apr 26 13:49:06 2025 by rpki-client