$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft File: bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft (raw, json) Hash identifier: Dtlx72NgYP7ikTUv393PjC7OytvGJ/areryXq8c/ocA= Subject key identifier: BF:C4:C1:FC:70:5C:BA:F4:0A:41:C2:8C:FD:FD:A9:A8:E8:0A:63:35 Authority key identifier: 6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25 Certificate issuer: /CN=A91C2C8A/serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325 Certificate serial: B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft Manifest number: AC Signing time: Fri 25 Apr 2025 05:09:56 +0000 Manifest this update: Fri 25 Apr 2025 05:09:56 +0000 Manifest next update: Fri 02 May 2025 05:09:56 +0000 Files and hashes: 1: bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl (hash: 39sAmU+TXD/PYQNEbl8vPUZTQXfunsfP1OiS7sMk6zg=) 2: AA97516E24CA11EFB59A9379C4F9AE02.roa (hash: vY7AsZ08Pw1TlHVY7hGbU3NQuV3eecatAeSNrTUiOFk=) 3: A1732A0E24CA11EF93486579C4F9AE02.roa (hash: c1fiRMTzx+sKc+PUXDGG2MhU2IceNjiS5ZTGcmsSFDc=) 4: 41A8950C272F11EF9D0A0C5CC4F9AE02.roa (hash: Zeo9E1pvK7pqXxcoNJpNgvy4k5rrUkurswNhSqNf24s=) 5: A074721624CA11EF93486579C4F9AE02.roa (hash: EAuwmClXGMo+6npZ19N/RRkMj4x/6MUGDRCOhMDeS9A=) 6: 0E49D1E024CC11EFB113A27BC4F9AE02.roa (hash: NR/+YgQkm7A4mmhSV+xz9O4OYp+ZS9oT3gP6zL7oedM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:09:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2C8A, serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325 Validity Not Before: Apr 25 05:09:56 2025 GMT Not After : May 2 05:09:56 2025 GMT Subject: CN=680b1924-7bae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:67:d1:15:90:57:b4:bc:fa:f1:8e:59:a4:4f: 19:37:69:13:57:11:54:4a:90:8f:5c:50:48:e9:d3: d9:04:f6:dd:a4:54:19:6b:ee:f4:0e:0c:11:a7:91: ab:24:f4:6d:0e:bc:09:15:b6:57:3a:0e:1e:e7:ae: 82:5f:f0:52:a1:d8:62:14:84:30:d5:e1:c7:7d:e9: fd:4b:40:2a:8b:ca:d1:81:81:af:27:b5:e7:aa:31: e2:42:48:33:5f:e0:35:15:5d:22:30:ff:08:a6:c5: 4c:72:e8:55:e7:31:fe:97:4e:62:09:c0:56:be:f5: f4:32:94:03:bf:28:9a:2c:a4:4b:4e:ef:00:89:bb: 86:65:ab:23:2d:9f:06:02:2f:9e:cd:04:49:26:82: 85:09:0e:7c:0e:6b:f8:c2:25:36:5e:be:c0:9b:59: 58:09:45:ac:3a:04:89:d3:01:6f:2b:74:b6:71:e0: d6:55:58:bf:24:2e:ee:58:e9:b4:18:01:18:97:49: c8:8d:a4:ff:ff:2d:c8:9a:0e:a6:63:0e:ed:84:e1: 38:50:49:29:59:f2:e5:6d:25:0c:75:00:e2:27:5d: 18:43:e8:0d:90:68:1a:13:24:f7:2a:66:2f:ec:1a: f5:11:56:42:bc:55:e0:c6:8d:ed:40:f7:1d:0c:3e: a6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:C4:C1:FC:70:5C:BA:F4:0A:41:C2:8C:FD:FD:A9:A8:E8:0A:63:35 X509v3 Authority Key Identifier: keyid:6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:d2:6e:fc:9c:68:cd:a4:47:be:65:76:35:1a:8f:34:77:fc: 6b:af:d4:52:1b:eb:74:68:51:13:b3:a2:29:bd:f6:5c:df:e4: 20:5f:db:ac:3a:26:78:df:f9:4c:b2:61:a9:1a:d2:8a:ed:ca: de:ca:a3:0c:c2:b8:a8:30:c8:f3:13:99:16:d9:95:11:5d:96: 15:88:62:42:0b:8c:37:d6:0d:90:cf:e4:4e:d3:7e:fa:fe:25: 30:6b:57:05:f1:0e:0e:73:48:79:8f:17:b8:36:42:2c:ce:90: 41:18:68:e0:21:ce:a3:78:d3:74:27:ae:c1:a8:cd:3c:12:7f: 2f:57:89:00:a1:0d:84:a7:02:db:7f:e4:e0:ef:8b:a4:d8:47: 34:a3:95:b6:29:15:65:5a:82:d9:30:86:ce:5e:d4:ec:0d:cc: 60:21:f1:b9:a8:d7:6a:14:06:9a:f8:6f:a7:6a:db:ab:16:36: d4:b8:af:45:60:5a:8c:40:2e:91:e0:53:fa:3e:48:15:e7:a8: bf:1e:d3:e8:44:6e:9c:fd:d0:53:7f:18:c8:e4:92:4e:c3:1d: 44:22:a7:b2:35:84:e0:64:75:d4:1f:14:3c:7f:f9:7f:e5:7d: 28:76:3b:6c:92:1d:d5:1b:11:bc:c4:3e:59:50:36:43:df:12: d7:28:3a:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJDOEExMTAvBgNVBAUTKDZDRTdCNTc1MEU2RTE3RDNEMzlFQjVCMDg3RkQzRkFE NTk1OUYzMjUwHhcNMjUwNDI1MDUwOTU2WhcNMjUwNTAyMDUwOTU2WjAYMRYwFAYD VQQDEw02ODBiMTkyNC03YmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA42fRFZBXtLz68Y5ZpE8ZN2kTVxFUSpCPXFBI6dPZBPbdpFQZa+70DgwRp5Gr JPRtDrwJFbZXOg4e566CX/BSodhiFIQw1eHHfen9S0Aqi8rRgYGvJ7XnqjHiQkgz X+A1FV0iMP8IpsVMcuhV5zH+l05iCcBWvvX0MpQDvyiaLKRLTu8AibuGZasjLZ8G Ai+ezQRJJoKFCQ58Dmv4wiU2Xr7Am1lYCUWsOgSJ0wFvK3S2ceDWVVi/JC7uWOm0 GAEYl0nIjaT//y3Img6mYw7thOE4UEkpWfLlbSUMdQDiJ10YQ+gNkGgaEyT3KmYv 7Br1EVZCvFXgxo3tQPcdDD6mFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL/Ewfxw XLr0CkHCjP39qajoCmM1MB8GA1UdIwQYMBaAFGzntXUObhfT0561sIf9P61ZWfMl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkM4QS82MUVDNDkxNjI0 QzkxMUVGOUM4QzYyNTlDNEY5QUUwMi9iT2UxZFE1dUY5UFRucld3aF8wX3JWbFo4 eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JPZTFkUTV1RjlQVG5yV3doXzBfclZsWjh5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkM4QS82MUVDNDkxNjI0QzkxMUVGOUM4QzYyNTlDNEY5QUUwMi9iT2UxZFE1dUY5 UFRucld3aF8wX3JWbFo4eVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCT0m78nGjNpEe+ZXY1Go80d/xrr9RSG+t0aFETs6IpvfZc3+QgX9us OiZ43/lMsmGpGtKK7creyqMMwrioMMjzE5kW2ZURXZYViGJCC4w31g2Qz+RO0376 /iUwa1cF8Q4Oc0h5jxe4NkIszpBBGGjgIc6jeNN0J67BqM08En8vV4kAoQ2EpwLb f+Tg74uk2Ec0o5W2KRVlWoLZMIbOXtTsDcxgIfG5qNdqFAaa+G+naturFjbUuK9F YFqMQC6R4FP6PkgV56i/HtPoRG6c/dBTfxjI5JJOwx1EIqeyNYTgZHXUHxQ8f/l/ 5X0odjtskh3VGxG8xD5ZUDZD3xLXKDqw -----END CERTIFICATE-----Generated at Sat Apr 26 04:34:08 2025 by rpki-client