$ rpki-client -vvf rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft File: OoeHHjuuZe3i8xuxrVxZu3p0q90.mft (raw, json) Hash identifier: EPqi2TgmHbmBDjPNHp9Nsc4H9DmwvpbH/m9McD1LhpA= Subject key identifier: 62:2F:EA:DC:75:E6:62:A1:6A:F3:65:C3:DA:A0:8C:EC:88:B9:9A:1D Authority key identifier: 3A:87:87:1E:3B:AE:65:ED:E2:F3:1B:B1:AD:5C:59:BB:7A:74:AB:DD Certificate issuer: /CN=A91B87FC/serialNumber=3A87871E3BAE65EDE2F31BB1AD5C59BB7A74ABDD Certificate serial: 6A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft Manifest number: 68 Signing time: Fri 25 Apr 2025 05:57:36 +0000 Manifest this update: Fri 25 Apr 2025 05:57:36 +0000 Manifest next update: Fri 02 May 2025 05:57:36 +0000 Files and hashes: 1: OoeHHjuuZe3i8xuxrVxZu3p0q90.crl (hash: tD7tH6/uXTUGtq0ChuaQ2vruCVkjhlpZnbLaVUxdrao=) 2: 64517A3886E311EFA2B33527C4F9AE02.roa (hash: a8PUztMZjKwlO5oAsBw+JL1gQU9NMI2G6jad/TSX5I0=) 3: 4A36AC1A139511F0B1A47C35C4F9AE02.roa (hash: XdLIJuJXhBzetTJmarH/Fzi27cB1TKxcbRFsyleBzSo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.crl rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:57:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B87FC, serialNumber=3A87871E3BAE65EDE2F31BB1AD5C59BB7A74ABDD Validity Not Before: Apr 25 05:57:36 2025 GMT Not After : May 2 05:57:36 2025 GMT Subject: CN=680b2450-a80e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f3:2b:11:66:01:8c:a6:cf:6f:a4:dc:50:7c: 17:13:45:18:53:a9:f5:06:a3:2a:3d:fa:f6:99:fe: eb:24:7b:ab:19:6e:ea:4f:0e:73:03:7d:cf:c1:1e: ce:10:38:ce:80:64:92:1c:cf:98:7b:6e:62:d4:63: 8e:0f:1e:f1:c3:48:e9:20:af:f2:5a:12:d3:a7:e5: 0e:4c:87:72:db:69:98:7d:5f:15:90:5d:3a:ed:c8: cf:8c:2c:0f:71:8c:e9:6d:f4:c4:42:53:9d:85:a2: c5:01:ae:17:d4:4a:8f:44:11:00:e9:34:2c:03:5f: 9b:af:27:a0:72:cb:dd:44:ee:82:f5:db:2b:29:a3: af:a8:e0:c4:de:29:94:ce:dd:15:8b:04:c5:c9:66: 50:0e:94:92:04:6c:bd:6b:9c:0e:6b:35:e0:5a:f4: 9a:e3:48:6b:88:a1:50:a3:9e:38:36:a8:ec:d7:a3: c8:e7:94:0f:e0:bc:5c:69:5e:d1:dd:4b:c8:ed:b1: 13:99:c7:fd:5d:9d:87:e5:56:7d:1a:d8:a6:76:57: ad:23:a0:b5:06:45:35:d2:5c:55:11:28:55:42:bf: 2d:2e:8f:01:d1:1e:4b:bc:9e:52:d4:c5:ff:93:13: 95:c8:b4:15:6d:fa:03:0a:ab:ea:18:fa:11:ee:49: 5c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:2F:EA:DC:75:E6:62:A1:6A:F3:65:C3:DA:A0:8C:EC:88:B9:9A:1D X509v3 Authority Key Identifier: keyid:3A:87:87:1E:3B:AE:65:ED:E2:F3:1B:B1:AD:5C:59:BB:7A:74:AB:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:11:f9:ef:e2:c7:f0:4c:ab:ac:c3:a2:30:0f:87:8b:c1:69: 0f:2b:48:96:b4:15:17:d0:ff:de:b4:04:f3:68:1b:34:be:0f: 3b:0e:df:97:a9:2c:76:4f:52:fc:63:c8:00:a7:d5:7f:31:ed: 44:fe:07:00:be:22:40:5d:16:80:0b:8c:7e:ec:cd:9c:03:d4: 7d:b5:b8:22:4e:24:24:3f:9e:3e:a8:fd:d7:a2:d7:9e:be:c9: e3:9c:dd:d8:64:33:81:0a:d4:04:e9:f7:cb:41:e8:20:9a:8a: 7b:5e:46:ee:74:54:95:db:cc:c6:76:62:5f:dd:be:78:c2:da: 11:fe:eb:b9:e9:64:51:43:ef:ec:24:1e:b5:09:13:e5:9f:34: 7e:a4:ee:f6:0b:ee:55:38:cd:a1:8c:df:1b:71:63:83:be:21: 0c:22:74:3a:b0:b4:9e:27:bf:4a:1a:aa:58:96:fc:72:6e:10: d7:eb:a2:b7:60:c8:22:4a:72:e3:e4:c8:0f:75:2d:df:4f:5a: 10:98:b6:23:72:29:b0:d3:cf:3a:a1:85:1a:2a:e1:4c:ef:22: 2b:4b:55:83:a4:ea:7c:b0:3d:ef:fd:b6:6b:95:c3:20:51:88: ed:6e:27:17:df:fd:16:84:32:fe:17:50:8a:7a:21:09:49:f1: 5f:1c:26:11 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC ODdGQzExMC8GA1UEBRMoM0E4Nzg3MUUzQkFFNjVFREUyRjMxQkIxQUQ1QzU5QkI3 QTc0QUJERDAeFw0yNTA0MjUwNTU3MzZaFw0yNTA1MDIwNTU3MzZaMBgxFjAUBgNV BAMTDTY4MGIyNDUwLWE4MGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDf8ysRZgGMps9vpNxQfBcTRRhTqfUGoyo9+vaZ/uske6sZbupPDnMDfc/BHs4Q OM6AZJIcz5h7bmLUY44PHvHDSOkgr/JaEtOn5Q5Mh3LbaZh9XxWQXTrtyM+MLA9x jOlt9MRCU52FosUBrhfUSo9EEQDpNCwDX5uvJ6Byy91E7oL12yspo6+o4MTeKZTO 3RWLBMXJZlAOlJIEbL1rnA5rNeBa9JrjSGuIoVCjnjg2qOzXo8jnlA/gvFxpXtHd S8jtsROZx/1dnYflVn0a2KZ2V60joLUGRTXSXFURKFVCvy0ujwHRHku8nlLUxf+T E5XItBVt+gMKq+oY+hHuSVwJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYi/q3HXm YqFq82XD2qCM7Ii5mh0wHwYDVR0jBBgwFoAUOoeHHjuuZe3i8xuxrVxZu3p0q90w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4N0ZDLzM5NzhFMzE2ODZF MTExRUY4Rjc3M0Y4MkM0RjlBRTAyL09vZUhIanV1WmUzaTh4dXhyVnhadTNwMHE5 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvT29lSEhqdXVaZTNpOHh1eHJWeFp1M3AwcTkwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 N0ZDLzM5NzhFMzE2ODZFMTExRUY4Rjc3M0Y4MkM0RjlBRTAyL09vZUhIanV1WmUz aTh4dXhyVnhadTNwMHE5MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKkR+e/ix/BMq6zDojAPh4vBaQ8rSJa0FRfQ/960BPNoGzS+DzsO35ep LHZPUvxjyACn1X8x7UT+BwC+IkBdFoALjH7szZwD1H21uCJOJCQ/nj6o/dei156+ yeOc3dhkM4EK1ATp98tB6CCainteRu50VJXbzMZ2Yl/dvnjC2hH+67npZFFD7+wk HrUJE+WfNH6k7vYL7lU4zaGM3xtxY4O+IQwidDqwtJ4nv0oaqliW/HJuENfrordg yCJKcuPkyA91Ld9PWhCYtiNyKbDTzzqhhRoq4UzvIitLVYOk6nywPe/9tmuVwyBR iO1uJxff/RaEMv4XUIp6IQlJ8V8cJhE= -----END CERTIFICATE-----Generated at Sat Apr 26 12:37:35 2025 by rpki-client