$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft File: oYXAxXSCnF_NcURUSeU0za70E5Y.mft (raw, json) Hash identifier: ICRyG0UI51q2udzHm12d4KY1dJqOT4UQCh43UyBj0nU= Subject key identifier: 7B:76:D0:37:FE:39:68:C5:8D:17:97:95:8C:7F:6C:28:D7:FF:E4:75 Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96 Certificate issuer: /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396 Certificate serial: 02F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft Manifest number: 02C1 Signing time: Sat 26 Apr 2025 02:39:37 +0000 Manifest this update: Sat 26 Apr 2025 02:39:35 +0000 Manifest next update: Sat 03 May 2025 02:39:35 +0000 Files and hashes: 1: oYXAxXSCnF_NcURUSeU0za70E5Y.crl (hash: mbGnmOGN7VXfrGXTiES4oXqcMxlOeDojxjXDaP+9MSQ=) 2: B5D1A1164E3111EFB475160AC4F9AE02.roa (hash: F7ZAiYqiaqgCjshmhAH40pkpaSlek68K5yOIUFIlCqE=) 3: AF5AD402224711F0B0CDB07DC4F9AE02.roa (hash: IgOdg/yQ/ge2znbNbvVPbXbPhfofMGTYoa84g2RotAU=) 4: 1C8BEF04E24511EF96354978C4F9AE02.roa (hash: EGZ/fvHina2YX+dj5xEN7cSS8R0XcNDfXd/tDVK1qcE=) 5: 1E1EB7789D8C11EF9B16D921C4F9AE02.roa (hash: TCFvbSrzX3ld7ReLyyVPKT1K5SyyyvX3oexEUzvLigY=) 6: A3571FDE47EC11EFB51C3666C4F9AE02.roa (hash: 2cEppnqVz6EA8cjixAQPIWKPT1GtTfD8PJaZqxpWTLE=) 7: B111111288B411EF80480527C4F9AE02.roa (hash: CjPKYAuDT4eI5JPa/G5V81ZBwDnMXPobI3BPswZB4kQ=) 8: 811803C270C111EF8A30EB51C4F9AE02.roa (hash: 89cYcTv3FMM/3M08ZzwOVhAvZtTfzr28mJIgkmfMCvo=) 9: B137DB2670EF11EFBEF21935C4F9AE02.roa (hash: gVhoaUxSYFZFX3pfYYhl9cQHoz5s0K+bPZd1cYQ52Y8=) 10: CD90ED68057211F0B6E2301BC4F9AE02.roa (hash: VUKsMbXUZ/VFyFAP8kRF14O9sqE9uokELiAUUcFuG5M=) 11: D4E4D8FCA7C311EFB1AAAD55C4F9AE02.roa (hash: Xf5Ju4zh/ec55xkKs2QH4FHNMxaxZH8+1mgQURFonS4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 02:39:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 755 (0x2f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4E32, serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396 Validity Not Before: Apr 26 02:39:35 2025 GMT Not After : May 3 02:39:35 2025 GMT Subject: CN=680c4768-f3f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5d:ab:4c:6a:e4:50:76:ea:89:5d:f5:a3:0c: 69:da:0c:5f:4f:92:51:8d:a7:69:a4:c1:7c:a1:d5: 10:53:f6:b8:d1:e4:2f:98:d0:6c:c4:c5:dd:5d:1b: 11:fb:95:da:07:ac:a9:2a:74:6d:c8:0d:b5:50:4f: 01:63:3b:a4:bb:fd:69:23:01:4e:03:41:11:a7:3b: 18:1d:7e:7a:0a:2d:5c:99:16:e3:40:de:00:d7:56: 04:8e:76:00:19:68:26:8a:d6:6d:c1:10:7d:52:a0: 3d:59:b3:b9:10:de:71:fb:58:b8:8f:43:d4:46:5a: 49:60:21:d0:0f:9b:49:9e:2a:db:a1:72:b5:34:45: b5:9f:96:6a:ca:a8:30:47:3c:3b:0d:94:f2:e1:3a: 1b:79:97:ae:f0:76:a4:1c:6b:74:cf:c0:2f:c0:2f: a6:66:32:7e:ce:e5:c6:76:b0:ca:ad:13:a2:fd:ff: c1:1d:6d:68:ef:c4:15:b2:42:9a:1c:1f:3c:68:a7: 36:90:a8:02:91:2d:e7:4f:a0:72:6e:e2:ef:8c:23: f2:d4:37:83:e7:f0:ae:f9:70:1f:57:2a:22:10:37: 15:15:c5:6b:b4:f5:73:da:06:6b:d3:96:c0:a9:16: 2b:f8:b9:6e:b6:b1:82:15:54:69:e1:28:5d:27:f5: 13:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:76:D0:37:FE:39:68:C5:8D:17:97:95:8C:7F:6C:28:D7:FF:E4:75 X509v3 Authority Key Identifier: keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:2c:0d:9a:78:7d:d1:67:b3:0c:a0:07:75:df:f5:14:31:61: 68:2a:2a:59:bf:9b:cc:c5:d3:88:55:2c:b8:79:1b:d0:94:37: 79:2a:81:ce:da:9b:69:fb:3e:70:95:1c:9d:ef:8e:b0:01:fc: 45:c8:49:25:81:67:c2:44:9c:11:63:d7:b0:5a:73:97:c2:a8: ed:55:48:0c:64:b9:9f:4d:73:a2:04:c9:42:e2:09:ff:1c:91: 28:df:2f:34:85:75:65:c4:48:cd:56:5c:a3:4d:09:bf:07:2f: f3:6c:1f:6c:57:18:0f:a7:9b:74:fe:eb:05:71:90:36:a9:91: ad:65:f2:20:5d:ae:13:d4:85:fa:13:88:28:6a:60:ed:cb:90: 2b:ca:26:26:22:85:46:4e:ea:ec:20:9d:45:6d:f1:58:2e:b8: f9:fe:48:db:2c:79:b8:aa:c6:8c:5d:ef:11:06:ce:18:ca:7b: 2d:70:9c:9d:95:e8:7a:3b:b2:8a:5d:f3:44:55:7c:cd:02:77: a0:16:89:3b:00:2f:90:a2:4c:97:c6:5e:0a:7b:2f:91:de:cc: ea:bf:6c:8a:c0:0d:e5:6b:4e:52:ef:b7:cf:93:b2:d9:3f:62: 2e:1f:1d:4e:3d:e6:00:49:c8:eb:f5:85:41:fe:c4:62:9d:b3: a7:36:91:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFMzIxMTAvBgNVBAUTKEExODVDMEM1NzQ4MjlDNUZDRDcxNDQ1NDQ5RTUzNENE QUVGNDEzOTYwHhcNMjUwNDI2MDIzOTM1WhcNMjUwNTAzMDIzOTM1WjAYMRYwFAYD VQQDEw02ODBjNDc2OC1mM2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwl2rTGrkUHbqiV31owxp2gxfT5JRjadppMF8odUQU/a40eQvmNBsxMXdXRsR +5XaB6ypKnRtyA21UE8BYzuku/1pIwFOA0ERpzsYHX56Ci1cmRbjQN4A11YEjnYA GWgmitZtwRB9UqA9WbO5EN5x+1i4j0PURlpJYCHQD5tJnirboXK1NEW1n5Zqyqgw Rzw7DZTy4TobeZeu8HakHGt0z8AvwC+mZjJ+zuXGdrDKrROi/f/BHW1o78QVskKa HB88aKc2kKgCkS3nT6BybuLvjCPy1DeD5/Cu+XAfVyoiEDcVFcVrtPVz2gZr05bA qRYr+LlutrGCFVRp4ShdJ/UTcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHt20Df+ OWjFjReXlYx/bCjX/+R1MB8GA1UdIwQYMBaAFKGFwMV0gpxfzXFEVEnlNM2u9BOW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEUzMi83MjA5NTlGQzAx QzAxMUVEQkQ3QzZGNThDNEY5QUUwMi9vWVhBeFhTQ25GX05jVVJVU2VVMHphNzBF NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29ZWEF4WFNDbkZfTmNVUlVTZVUwemE3MEU1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEUzMi83MjA5NTlGQzAxQzAxMUVEQkQ3QzZGNThDNEY5QUUwMi9vWVhBeFhTQ25G X05jVVJVU2VVMHphNzBFNVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6LA2aeH3RZ7MMoAd13/UUMWFoKipZv5vMxdOIVSy4eRvQlDd5KoHO 2ptp+z5wlRyd746wAfxFyEklgWfCRJwRY9ewWnOXwqjtVUgMZLmfTXOiBMlC4gn/ HJEo3y80hXVlxEjNVlyjTQm/By/zbB9sVxgPp5t0/usFcZA2qZGtZfIgXa4T1IX6 E4goamDty5AryiYmIoVGTursIJ1FbfFYLrj5/kjbLHm4qsaMXe8RBs4YynstcJyd leh6O7KKXfNEVXzNAnegFok7AC+QokyXxl4Key+R3szqv2yKwA3la05S77fPk7LZ P2IuHx1OPeYAScjr9YVB/sRinbOnNpEX -----END CERTIFICATE-----Generated at Sat Apr 26 13:06:35 2025 by rpki-client