$ rpki-client -vvf rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft File: OS824KRQBTw9xm0uOJThDKcz3aY.mft (raw, json) Hash identifier: CkucvMNG8OXuYvMfpgW/boEjZMCGGyNe2nmulKtCvH4= Subject key identifier: 17:D1:E5:39:9E:00:9A:3F:93:9B:17:11:51:DB:29:36:42:8F:0C:4C Authority key identifier: 39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6 Certificate issuer: /CN=A91C326F/serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6 Certificate serial: 06DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft Manifest number: 06B7 Signing time: Thu 24 Apr 2025 21:59:33 +0000 Manifest this update: Thu 24 Apr 2025 21:59:33 +0000 Manifest next update: Thu 01 May 2025 21:59:33 +0000 Files and hashes: 1: OS824KRQBTw9xm0uOJThDKcz3aY.crl (hash: Tqrsin5zgTvhQpKe7dypDRv+5mvGRvvVEFbC8QJV3qM=) 2: 8A1515887C7D11EFB24A9F51C4F9AE02.roa (hash: yu+vAXz85+ImzGtz2dS0WwomfVbOz0/fHg5Ts/b0h74=) 3: 59DE107A14CF11EE81C44276C4F9AE02.roa (hash: dorNefehc4jcrYiPb1SmTT9WWjQeQbu3xTbAJUr9xp0=) 4: B9CCEC5A72E411ED833AE326C4F9AE02.roa (hash: 7STuNNvyySdvKLv0ZARurOGrWZyKElkT0Pp3fy6yFYY=) 5: BCC1E04E33C011EE83E9A61BC4F9AE02.roa (hash: gEcFdCTf52NARTThJUnsykol1LheMWgXpMpHapO3A8E=) 6: BC41A65E33C011EE83E9A61BC4F9AE02.roa (hash: CaitNOKQkm3AvYSLSTJmnVLMkDD1jkPzfCvAkZPYXwc=) 7: B76C776472E411ED833AE326C4F9AE02.roa (hash: G40zS/jPmT/MABYrNCr8KjGZKmGs9oISV/lw5AZ1PqY=) 8: B8D1689472E411ED833AE326C4F9AE02.roa (hash: JSwTLZ+Ks+XHKVTbFIphlZkac86sl1CWT662kq+fPJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:59:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1755 (0x6db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C326F, serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6 Validity Not Before: Apr 24 21:59:33 2025 GMT Not After : May 1 21:59:33 2025 GMT Subject: CN=680ab445-edd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f9:21:f9:bf:41:05:4d:e0:d3:17:93:bd:8e: 6f:6b:bd:25:e0:25:27:25:49:73:c8:24:cc:bc:41: 27:85:b6:a3:81:96:db:86:51:bf:b7:9f:6c:cf:21: 8f:9a:76:8f:c7:04:c3:6b:7f:17:ae:df:c2:bf:88: 47:4e:d8:88:73:9a:92:d1:7e:5b:cc:79:d5:e5:f1: fa:ad:9c:1a:c4:6c:9c:37:b0:cd:2a:46:62:d3:f6: 48:7f:0b:16:f3:5c:d3:d2:dd:59:8c:75:b0:78:79: dc:72:9d:7b:fd:45:37:51:2c:63:15:12:91:32:7b: 92:6a:1e:3b:83:a1:61:bc:c5:fa:49:60:de:00:a3: 32:2e:9d:7e:e1:0e:58:7d:b0:a2:ed:50:3d:b6:14: b7:a0:d9:4b:17:0d:a1:a4:60:24:d2:c5:f3:53:ff: 7a:c0:1d:21:51:0c:0d:17:1d:35:4c:db:0e:1b:c2: 4c:3a:f5:da:d1:31:f6:fb:8b:fe:3c:b6:17:a5:d9: b6:5d:1a:ac:59:9e:b5:80:48:4a:32:f0:a6:1c:28: e1:02:57:a8:7d:26:a5:6e:b1:09:e8:53:ee:ab:c0: b7:50:ca:b5:6d:b8:fd:11:b2:92:79:02:7c:f4:d2: 55:33:2e:41:9c:b5:77:1b:9e:6d:48:0b:81:4e:12: 81:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:D1:E5:39:9E:00:9A:3F:93:9B:17:11:51:DB:29:36:42:8F:0C:4C X509v3 Authority Key Identifier: keyid:39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:f3:89:b2:a0:df:f3:aa:9a:02:d2:83:4d:b0:2e:e4:39:ec: 91:81:36:ac:7d:51:e3:e7:a0:c4:9a:22:8e:c0:d8:6d:88:5d: ea:b5:35:35:23:5e:f0:cd:aa:93:30:87:31:fe:c0:91:5a:d5: 53:61:5c:fa:2e:38:10:9c:b5:e5:9d:85:be:9a:92:a2:6f:27: 6a:ce:19:7d:86:b6:2b:c2:db:48:2f:54:24:e5:10:45:dc:c6: c2:f3:38:a9:17:34:cc:dd:e4:3d:4f:e0:d7:98:46:84:4b:fe: 41:c2:6a:75:4e:1d:c8:8d:9b:62:1d:9d:c5:b5:73:a1:86:a6: 98:98:b0:a1:d0:1b:62:cb:69:a3:14:ee:a4:43:6b:8e:08:55: 3f:e6:38:06:7c:43:ee:f8:2e:cf:3e:a5:7b:09:60:be:01:8a: c5:4f:2a:66:a4:34:f5:aa:a1:fb:51:2f:fb:9d:3a:cf:f0:07: 7b:e8:8d:c3:eb:58:96:89:e4:32:08:72:35:70:43:ad:1e:e2: b4:b2:90:3b:b8:f9:b2:82:ac:bc:ae:19:4c:71:a9:7e:77:82: 4a:e4:8d:57:8a:73:ae:46:11:4b:01:37:ee:92:ed:8c:12:24: e6:b1:6e:74:67:84:96:b0:87:a0:69:8e:af:aa:ac:c6:7b:20: 0a:df:91:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMyNkYxMTAvBgNVBAUTKDM5MkYzNkUwQTQ1MDA1M0MzREM2NkQyRTM4OTRFMTBD QTczM0REQTYwHhcNMjUwNDI0MjE1OTMzWhcNMjUwNTAxMjE1OTMzWjAYMRYwFAYD VQQDEw02ODBhYjQ0NS1lZGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfkh+b9BBU3g0xeTvY5va70l4CUnJUlzyCTMvEEnhbajgZbbhlG/t59szyGP mnaPxwTDa38Xrt/Cv4hHTtiIc5qS0X5bzHnV5fH6rZwaxGycN7DNKkZi0/ZIfwsW 81zT0t1ZjHWweHnccp17/UU3USxjFRKRMnuSah47g6FhvMX6SWDeAKMyLp1+4Q5Y fbCi7VA9thS3oNlLFw2hpGAk0sXzU/96wB0hUQwNFx01TNsOG8JMOvXa0TH2+4v+ PLYXpdm2XRqsWZ61gEhKMvCmHCjhAleofSalbrEJ6FPuq8C3UMq1bbj9EbKSeQJ8 9NJVMy5BnLV3G55tSAuBThKBRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBfR5Tme AJo/k5sXEVHbKTZCjwxMMB8GA1UdIwQYMBaAFDkvNuCkUAU8PcZtLjiU4QynM92m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzI2Ri83ODY2RjUzMDVG QzcxMUVCOEE2OTIwMkVDNEY5QUUwMi9PUzgyNEtSUUJUdzl4bTB1T0pUaERLY3oz YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09TODI0S1JRQlR3OXhtMHVPSlRoREtjejNhWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzI2Ri83ODY2RjUzMDVGQzcxMUVCOEE2OTIwMkVDNEY5QUUwMi9PUzgyNEtSUUJU dzl4bTB1T0pUaERLY3ozYVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC584myoN/zqpoC0oNNsC7kOeyRgTasfVHj56DEmiKOwNhtiF3qtTU1 I17wzaqTMIcx/sCRWtVTYVz6LjgQnLXlnYW+mpKibydqzhl9hrYrwttIL1Qk5RBF 3MbC8zipFzTM3eQ9T+DXmEaES/5Bwmp1Th3IjZtiHZ3FtXOhhqaYmLCh0Btiy2mj FO6kQ2uOCFU/5jgGfEPu+C7PPqV7CWC+AYrFTypmpDT1qqH7US/7nTrP8Ad76I3D 61iWieQyCHI1cEOtHuK0spA7uPmygqy8rhlMcal+d4JK5I1XinOuRhFLATfuku2M EiTmsW50Z4SWsIegaY6vqqzGeyAK35GK -----END CERTIFICATE-----Generated at Sat Apr 26 05:15:13 2025 by rpki-client