$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft File: kROhaGm30B54nuCf4m5q-jfPPkc.mft (raw, json) Hash identifier: wPsjpsRaAljwDc5/a+rbixqCsu5uYsWgOBu17gWUZ1A= Subject key identifier: CC:50:3B:E3:50:6D:E6:31:3E:66:14:B3:13:C6:5C:72:6A:27:ED:DE Authority key identifier: 91:13:A1:68:69:B7:D0:1E:78:9E:E0:9F:E2:6E:6A:FA:37:CF:3E:47 Certificate issuer: /CN=A91E3814/serialNumber=9113A16869B7D01E789EE09FE26E6AFA37CF3E47 Certificate serial: 043A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft Manifest number: 0430 Signing time: Fri 25 Apr 2025 00:08:02 +0000 Manifest this update: Fri 25 Apr 2025 00:08:01 +0000 Manifest next update: Fri 02 May 2025 00:08:01 +0000 Files and hashes: 1: kROhaGm30B54nuCf4m5q-jfPPkc.crl (hash: u/zMIVTYWtA/3V9f2XgOlpRWvpJRRzk75ZUGtIj1XdA=) 2: 8628E1BA210611F082BE7E10C4F9AE02.roa (hash: wGvigc7YwHG59J2rGqwJ7WYeY96T+112b/PUTqhl/lE=) 3: 2F74D644ABC711EF9CD3CE81C4F9AE02.roa (hash: wmmIaxLCg5K0uFc5rnys8oy6i0z0O/e/VdhovEca3nw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.crl rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:08:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1082 (0x43a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3814, serialNumber=9113A16869B7D01E789EE09FE26E6AFA37CF3E47 Validity Not Before: Apr 25 00:08:01 2025 GMT Not After : May 2 00:08:01 2025 GMT Subject: CN=680ad261-34c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ed:73:a2:9e:cf:4d:4a:42:c8:2d:1e:d1:75: 49:8e:6e:06:b9:43:6e:db:3e:c6:83:09:41:51:12: a8:8c:53:58:1c:ad:8a:7f:11:34:c3:a6:2b:a4:ae: d2:69:ba:e6:a9:74:a8:dd:c8:72:91:fd:04:64:06: a2:a3:dd:8f:f4:ea:c1:81:db:75:ed:8c:aa:df:08: fb:33:b7:62:b1:14:f6:85:6b:14:01:74:82:ce:0d: 24:03:cb:0e:68:44:f8:7c:c7:d6:59:34:35:bc:c4: de:7d:c4:be:dc:61:d9:27:4c:2c:d9:8a:25:9b:60: ca:e1:f4:ab:db:b3:88:ac:20:8a:36:4a:78:88:52: 87:3c:a8:ea:bc:8e:8b:b9:c2:13:f1:50:39:31:9c: f6:6f:92:11:1e:7e:08:7f:b9:63:02:e3:fa:b6:82: f9:69:d0:61:11:5b:c4:97:bf:81:28:11:10:6a:4f: 0f:89:08:6a:af:39:56:3a:03:02:5d:7c:e2:71:f1: 64:ef:17:11:7c:40:56:b6:e3:40:e9:e6:2f:e5:6a: dd:26:83:37:a0:f7:31:40:dd:e0:6a:03:1c:bb:40: d1:4a:61:1e:7d:e2:78:d1:2f:65:8c:cb:e0:03:46: 9c:20:51:66:8d:37:e8:be:0c:77:81:e3:e7:de:10: 4b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:50:3B:E3:50:6D:E6:31:3E:66:14:B3:13:C6:5C:72:6A:27:ED:DE X509v3 Authority Key Identifier: keyid:91:13:A1:68:69:B7:D0:1E:78:9E:E0:9F:E2:6E:6A:FA:37:CF:3E:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:70:18:dd:72:44:56:36:36:0f:04:fd:bf:96:08:c3:03:a6: 55:de:97:d2:c7:62:89:05:9d:e5:11:7f:fa:cf:05:26:ef:63: 37:41:c4:11:a8:8a:78:9a:38:f3:e6:20:4c:fc:90:fb:e8:f4: 93:4f:69:aa:c0:52:88:22:0d:c1:a0:f3:03:72:9f:f4:3c:70: 7e:02:21:ba:c6:a4:3e:97:5e:57:31:12:a3:55:57:5b:e1:db: 5a:7e:d9:ff:d3:8e:2a:3f:a4:8f:1c:f6:f7:83:07:a0:cb:45: 58:99:7f:c4:99:e0:4b:b4:17:7a:61:72:68:6f:31:45:b0:18: 97:bd:ca:33:dc:8c:1b:53:2e:93:8e:6e:2d:31:c0:54:cd:77: e7:be:ab:33:13:ff:98:14:df:44:9c:b1:5a:b9:b8:ca:e4:0f: 02:d5:ff:5f:c4:35:1e:36:a7:0d:98:15:76:ae:45:40:46:ac: 53:50:71:83:76:15:ff:a5:bc:03:54:d6:10:95:3a:6f:77:0e: 6e:18:d7:61:f2:f2:f8:23:17:2d:54:b9:b8:ef:59:6a:cf:3c: aa:1e:62:8f:b0:03:c2:fa:a5:75:60:a0:3e:ba:f3:73:9a:f5: 6a:c3:18:d4:02:0b:9d:60:62:c9:7e:6c:97:78:76:85:4f:6f: 04:a8:57:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM4MTQxMTAvBgNVBAUTKDkxMTNBMTY4NjlCN0QwMUU3ODlFRTA5RkUyNkU2QUZB MzdDRjNFNDcwHhcNMjUwNDI1MDAwODAxWhcNMjUwNTAyMDAwODAxWjAYMRYwFAYD VQQDEw02ODBhZDI2MS0zNGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+1zop7PTUpCyC0e0XVJjm4GuUNu2z7GgwlBURKojFNYHK2KfxE0w6YrpK7S abrmqXSo3chykf0EZAaio92P9OrBgdt17Yyq3wj7M7disRT2hWsUAXSCzg0kA8sO aET4fMfWWTQ1vMTefcS+3GHZJ0ws2Yolm2DK4fSr27OIrCCKNkp4iFKHPKjqvI6L ucIT8VA5MZz2b5IRHn4If7ljAuP6toL5adBhEVvEl7+BKBEQak8PiQhqrzlWOgMC XXzicfFk7xcRfEBWtuNA6eYv5WrdJoM3oPcxQN3gagMcu0DRSmEefeJ40S9ljMvg A0acIFFmjTfovgx3gePn3hBLzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMxQO+NQ beYxPmYUsxPGXHJqJ+3eMB8GA1UdIwQYMBaAFJEToWhpt9AeeJ7gn+Juavo3zz5H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzgxNC8yNTQyQjQyMjVE NzExMUVDOTkwODkxNERDNEY5QUUwMi9rUk9oYUdtMzBCNTRudUNmNG01cS1qZlBQ a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tST2hhR20zMEI1NG51Q2Y0bTVxLWpmUFBrYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzgxNC8yNTQyQjQyMjVENzExMUVDOTkwODkxNERDNEY5QUUwMi9rUk9oYUdtMzBC NTRudUNmNG01cS1qZlBQa2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAcBjdckRWNjYPBP2/lgjDA6ZV3pfSx2KJBZ3lEX/6zwUm72M3QcQR qIp4mjjz5iBM/JD76PSTT2mqwFKIIg3BoPMDcp/0PHB+AiG6xqQ+l15XMRKjVVdb 4dtaftn/044qP6SPHPb3gwegy0VYmX/EmeBLtBd6YXJobzFFsBiXvcoz3IwbUy6T jm4tMcBUzXfnvqszE/+YFN9EnLFaubjK5A8C1f9fxDUeNqcNmBV2rkVARqxTUHGD dhX/pbwDVNYQlTpvdw5uGNdh8vL4IxctVLm471lqzzyqHmKPsAPC+qV1YKA+uvNz mvVqwxjUAgudYGLJfmyXeHaFT28EqFdi -----END CERTIFICATE-----Generated at Sat Apr 26 12:26:43 2025 by rpki-client