$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.mft File: oqIX1KQS-1OPXJGjSzbOcYed22U.mft (raw, json) Hash identifier: h5nSWUI6Hx6d6oKIUatn8sxSUle7W0pMvFsYMxeXcHo= Subject key identifier: 89:A1:E4:C6:62:60:44:25:CC:8B:03:D8:26:13:64:89:2A:6D:B1:D0 Authority key identifier: A2:A2:17:D4:A4:12:FB:53:8F:5C:91:A3:4B:36:CE:71:87:9D:DB:65 Certificate issuer: /CN=A91CF9B0/serialNumber=A2A217D4A412FB538F5C91A34B36CE71879DDB65 Certificate serial: 011D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oqIX1KQS-1OPXJGjSzbOcYed22U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.mft Manifest number: 010E Signing time: Fri 25 Apr 2025 04:13:15 +0000 Manifest this update: Fri 25 Apr 2025 04:13:15 +0000 Manifest next update: Fri 02 May 2025 04:13:15 +0000 Files and hashes: 1: oqIX1KQS-1OPXJGjSzbOcYed22U.crl (hash: rpiJheUwHfcwVAHiQO/9FXbdnDJxavCAEABLHP9fMz0=) 2: 84D917FC9F4911EEA0C5C856C4F9AE02.roa (hash: NmyQHlBil47JzTSCPQYz/6ZBa9AnAtiDqsHIcZPO3dA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.crl rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oqIX1KQS-1OPXJGjSzbOcYed22U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:13:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF9B0, serialNumber=A2A217D4A412FB538F5C91A34B36CE71879DDB65 Validity Not Before: Apr 25 04:13:15 2025 GMT Not After : May 2 04:13:15 2025 GMT Subject: CN=680b0bdb-31c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f7:5f:0d:7f:72:38:0b:9f:67:5a:90:c9:56: 61:5e:17:14:4a:73:af:57:ee:24:1f:af:59:1a:a9: 07:a1:d3:80:11:d4:3d:90:52:50:60:b4:5c:1b:83: df:cf:a5:c4:eb:f5:31:2c:37:64:47:66:3b:93:b0: e7:e3:c2:6e:85:b7:a4:bd:ff:7d:8b:53:86:5e:cb: c2:24:f3:57:47:4c:34:c4:04:b0:3e:fb:17:a8:57: 02:34:32:92:fd:b2:89:a9:71:0f:0a:4a:6b:ab:18: e6:fb:a0:d6:24:39:f6:8c:93:c7:98:71:15:c2:9d: af:21:98:84:f9:43:ff:ef:2c:d7:62:ef:36:a2:0d: f7:e5:24:cc:30:2e:e6:44:ee:7e:ba:79:43:63:da: 11:47:d0:25:31:f7:82:e3:d6:d0:76:c2:fb:5c:a4: 1c:4c:69:9a:2f:65:d9:bb:4c:70:56:22:95:d7:ad: 2a:4c:ac:6a:3c:4a:35:cf:26:bb:74:ee:5a:aa:19: a6:b1:2c:d8:54:2e:04:83:bb:2a:ad:f1:5d:e6:66: 59:e1:13:03:e9:ad:b7:ef:8b:bd:8b:1e:53:ca:de: 67:b5:d3:fe:b3:65:3c:65:57:22:d3:69:54:72:7b: df:2e:11:a5:d3:f1:28:86:d6:e6:b6:ae:82:dc:60: dd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A1:E4:C6:62:60:44:25:CC:8B:03:D8:26:13:64:89:2A:6D:B1:D0 X509v3 Authority Key Identifier: keyid:A2:A2:17:D4:A4:12:FB:53:8F:5C:91:A3:4B:36:CE:71:87:9D:DB:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oqIX1KQS-1OPXJGjSzbOcYed22U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:eb:e0:dc:86:b8:e0:b5:80:3c:aa:6f:3d:37:46:54:07:20: 2e:af:49:91:eb:cc:d9:6b:31:91:12:98:6e:22:23:01:6f:4d: ca:73:9d:6f:9e:25:76:34:98:b9:2f:3a:4c:2f:7d:b9:07:43: bb:89:14:5d:3e:62:7a:34:0f:47:83:d7:2e:77:03:83:44:f8: d5:d0:33:c9:e2:63:dd:b9:70:28:2d:70:a5:00:f1:39:c5:af: 25:7d:4e:25:c1:c9:31:81:33:a0:a8:fc:3e:e8:22:7a:97:6b: fd:ca:af:13:d2:70:e9:13:3d:69:f3:f3:09:39:d7:b9:f6:ce: a4:c3:5f:75:cc:c0:7f:ba:98:0a:77:9e:5f:bb:3e:5b:83:c0: 55:52:39:fe:36:b7:43:29:49:d1:5d:03:04:cf:c9:75:c8:88: 4a:64:71:16:a2:ab:8c:69:13:a7:22:7d:95:6d:aa:d6:a6:4a: ed:36:c0:99:49:95:01:c3:19:bb:ce:09:9d:47:a7:3a:15:2a: 16:63:d6:f8:72:6a:de:d9:2e:0e:74:81:d3:a6:7e:48:d5:e0: 59:a7:9a:0a:84:91:29:eb:90:a0:5e:0e:8a:37:af:1a:70:dd: bb:ee:69:82:eb:69:ef:34:ae:b5:24:22:66:e2:e1:2d:db:1a: 3b:2b:d2:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y5QjAxMTAvBgNVBAUTKEEyQTIxN0Q0QTQxMkZCNTM4RjVDOTFBMzRCMzZDRTcx ODc5RERCNjUwHhcNMjUwNDI1MDQxMzE1WhcNMjUwNTAyMDQxMzE1WjAYMRYwFAYD VQQDEw02ODBiMGJkYi0zMWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvdfDX9yOAufZ1qQyVZhXhcUSnOvV+4kH69ZGqkHodOAEdQ9kFJQYLRcG4Pf z6XE6/UxLDdkR2Y7k7Dn48Juhbekvf99i1OGXsvCJPNXR0w0xASwPvsXqFcCNDKS /bKJqXEPCkprqxjm+6DWJDn2jJPHmHEVwp2vIZiE+UP/7yzXYu82og335STMMC7m RO5+unlDY9oRR9AlMfeC49bQdsL7XKQcTGmaL2XZu0xwViKV160qTKxqPEo1zya7 dO5aqhmmsSzYVC4Eg7sqrfFd5mZZ4RMD6a2374u9ix5Tyt5ntdP+s2U8ZVci02lU cnvfLhGl0/Eohtbmtq6C3GDdKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFImh5MZi YEQlzIsD2CYTZIkqbbHQMB8GA1UdIwQYMBaAFKKiF9SkEvtTj1yRo0s2znGHndtl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjlCMC8xNEM5NDk2RTlG M0YxMUVFODAxQjFENjJDNEY5QUUwMi9vcUlYMUtRUy0xT1BYSkdqU3piT2NZZWQy MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29xSVgxS1FTLTFPUFhKR2pTemJPY1llZDIyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjlCMC8xNEM5NDk2RTlGM0YxMUVFODAxQjFENjJDNEY5QUUwMi9vcUlYMUtRUy0x T1BYSkdqU3piT2NZZWQyMlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC96+DchrjgtYA8qm89N0ZUByAur0mR68zZazGREphuIiMBb03Kc51v niV2NJi5LzpML325B0O7iRRdPmJ6NA9Hg9cudwODRPjV0DPJ4mPduXAoLXClAPE5 xa8lfU4lwckxgTOgqPw+6CJ6l2v9yq8T0nDpEz1p8/MJOde59s6kw191zMB/upgK d55fuz5bg8BVUjn+NrdDKUnRXQMEz8l1yIhKZHEWoquMaROnIn2VbarWpkrtNsCZ SZUBwxm7zgmdR6c6FSoWY9b4cmre2S4OdIHTpn5I1eBZp5oKhJEp65CgXg6KN68a cN277mmC62nvNK61JCJm4uEt2xo7K9J5 -----END CERTIFICATE-----Generated at Sat Apr 26 04:35:01 2025 by rpki-client