$ rpki-client -vvf rpki.apnic.net/member_repository/A91E60A4/6C7140EE829D11EAB78F8B3DC4F9AE02/oAONXyzMSsJeuvdxJC50MA_PeCw.mft File: oAONXyzMSsJeuvdxJC50MA_PeCw.mft (raw, json) Hash identifier: LImScYuH6620wkv6lyroZRLiVyVIbz7jtosAM/ei36s= Subject key identifier: 8D:8C:C3:DB:B1:22:BE:F8:E9:4E:B1:74:58:38:42:88:88:4C:FC:B0 Authority key identifier: A0:03:8D:5F:2C:CC:4A:C2:5E:BA:F7:71:24:2E:74:30:0F:CF:78:2C Certificate issuer: /CN=A91E60A4/serialNumber=A0038D5F2CCC4AC25EBAF771242E74300FCF782C Certificate serial: 09BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oAONXyzMSsJeuvdxJC50MA_PeCw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E60A4/6C7140EE829D11EAB78F8B3DC4F9AE02/oAONXyzMSsJeuvdxJC50MA_PeCw.mft Manifest number: 09B3 Signing time: Thu 24 Apr 2025 19:53:28 +0000 Manifest this update: Thu 24 Apr 2025 19:53:27 +0000 Manifest next update: Thu 01 May 2025 19:53:27 +0000 Files and hashes: 1: oAONXyzMSsJeuvdxJC50MA_PeCw.crl (hash: byi9z5WTJpfBOBj0nh4uk271PGUOZdQYvdaF+PBc/wQ=) 2: 1D86F90A988D11EABE02F23DC4F9AE02.roa (hash: eXMB9dV7xihStPr0BmetBSssUWM8QZG3PMbHIo5WHpA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E60A4/6C7140EE829D11EAB78F8B3DC4F9AE02/oAONXyzMSsJeuvdxJC50MA_PeCw.crl rsync://rpki.apnic.net/member_repository/A91E60A4/6C7140EE829D11EAB78F8B3DC4F9AE02/oAONXyzMSsJeuvdxJC50MA_PeCw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oAONXyzMSsJeuvdxJC50MA_PeCw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:53:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2493 (0x9bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E60A4, serialNumber=A0038D5F2CCC4AC25EBAF771242E74300FCF782C Validity Not Before: Apr 24 19:53:27 2025 GMT Not After : May 1 19:53:27 2025 GMT Subject: CN=680a96b7-1178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:95:b3:d3:37:73:ec:66:63:1d:17:9e:d6:56: 66:71:da:78:2f:87:53:40:ad:3b:ac:a4:5b:e0:c3: 42:02:35:f2:2c:06:57:6a:2e:76:e8:a8:8d:15:25: 01:88:82:f6:70:c7:0f:4d:61:c3:1c:0f:c8:72:39: 9a:c1:bd:1e:c3:81:1e:14:00:e0:99:0c:a5:ee:16: 8c:c4:c9:78:db:e2:cf:d7:e5:bd:db:3b:4f:28:49: 70:6b:22:45:d8:c3:84:3c:10:b0:c8:79:b2:91:7b: 6a:bc:e8:3e:07:07:b8:8c:75:16:31:4a:93:b7:f6: c4:9a:45:91:73:c6:da:b8:13:23:5b:4c:68:95:a5: 91:5c:56:63:47:ed:cd:de:15:89:64:62:c6:47:5b: c9:e4:9b:60:b3:e8:cb:f7:0f:d8:81:a3:5b:6a:d2: e5:e8:68:6e:12:5b:87:9b:37:7d:52:96:a8:5e:56: 05:b7:fe:5f:24:77:67:47:0a:9b:cb:05:c4:7c:3f: 3f:80:21:7c:ac:7d:4a:d9:51:d3:f5:a3:79:ee:93: 91:ee:a2:fa:6d:74:32:e3:8c:bd:1c:a2:35:da:02: 88:2a:63:8c:03:52:c4:29:0c:28:d5:24:10:fd:34: 75:9a:87:e6:b0:7e:7a:ee:8f:38:04:16:56:93:ab: da:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:8C:C3:DB:B1:22:BE:F8:E9:4E:B1:74:58:38:42:88:88:4C:FC:B0 X509v3 Authority Key Identifier: keyid:A0:03:8D:5F:2C:CC:4A:C2:5E:BA:F7:71:24:2E:74:30:0F:CF:78:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E60A4/6C7140EE829D11EAB78F8B3DC4F9AE02/oAONXyzMSsJeuvdxJC50MA_PeCw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oAONXyzMSsJeuvdxJC50MA_PeCw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E60A4/6C7140EE829D11EAB78F8B3DC4F9AE02/oAONXyzMSsJeuvdxJC50MA_PeCw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:8c:f6:4f:4b:34:3a:19:b5:9a:af:ed:1d:ce:02:40:df:ba: 02:7b:7b:5d:66:a5:9a:32:6c:82:8e:7d:d1:da:90:4e:b4:a1: 7f:c6:c2:f0:61:9c:c0:a0:8d:88:2b:ba:d0:61:c3:fa:5a:69: 85:0b:ee:74:b8:f1:af:75:1a:43:1a:c0:2f:b4:90:d7:93:a0: df:68:7c:9b:ee:f4:36:c7:47:79:85:ea:e7:c0:e8:2f:6b:59: fa:84:cf:01:aa:4c:72:00:8a:a5:da:48:7f:56:fd:d8:50:4d: 8c:88:8d:48:e3:4d:0c:a8:0b:2b:ba:32:a7:ca:02:97:5e:ef: 5e:69:36:b4:5f:44:c6:19:8c:d1:0e:be:74:b0:16:a5:23:76: 43:13:c5:30:1e:fa:ee:50:7a:29:d9:08:51:dc:8d:50:5f:fd: 9e:0d:d5:b5:5d:6a:9d:51:15:28:36:18:c4:81:c2:ff:80:16: fe:19:f2:f1:f6:42:71:00:ab:f6:98:9f:e7:3c:69:ec:52:b8: a2:85:ce:80:f1:c0:9f:1e:2a:bf:25:a7:5f:af:26:39:0e:1b: 41:70:59:d8:02:99:68:d6:a1:fe:36:a0:a4:31:7b:d1:3d:46: 90:22:35:eb:07:86:f2:96:b8:fd:06:87:0c:92:e0:ff:1b:ae: 30:3a:24:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYwQTQxMTAvBgNVBAUTKEEwMDM4RDVGMkNDQzRBQzI1RUJBRjc3MTI0MkU3NDMw MEZDRjc4MkMwHhcNMjUwNDI0MTk1MzI3WhcNMjUwNTAxMTk1MzI3WjAYMRYwFAYD VQQDEw02ODBhOTZiNy0xMTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6ZWz0zdz7GZjHRee1lZmcdp4L4dTQK07rKRb4MNCAjXyLAZXai526KiNFSUB iIL2cMcPTWHDHA/Icjmawb0ew4EeFADgmQyl7haMxMl42+LP1+W92ztPKElwayJF 2MOEPBCwyHmykXtqvOg+Bwe4jHUWMUqTt/bEmkWRc8bauBMjW0xolaWRXFZjR+3N 3hWJZGLGR1vJ5Jtgs+jL9w/YgaNbatLl6GhuEluHmzd9UpaoXlYFt/5fJHdnRwqb ywXEfD8/gCF8rH1K2VHT9aN57pOR7qL6bXQy44y9HKI12gKIKmOMA1LEKQwo1SQQ /TR1mofmsH567o84BBZWk6vawQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI2Mw9ux Ir746U6xdFg4QoiITPywMB8GA1UdIwQYMBaAFKADjV8szErCXrr3cSQudDAPz3gs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjBBNC82QzcxNDBFRTgy OUQxMUVBQjc4RjhCM0RDNEY5QUUwMi9vQU9OWHl6TVNzSmV1dmR4SkM1ME1BX1Bl Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29BT05YeXpNU3NKZXV2ZHhKQzUwTUFfUGVDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjBBNC82QzcxNDBFRTgyOUQxMUVBQjc4RjhCM0RDNEY5QUUwMi9vQU9OWHl6TVNz SmV1dmR4SkM1ME1BX1BlQ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCjPZPSzQ6GbWar+0dzgJA37oCe3tdZqWaMmyCjn3R2pBOtKF/xsLw YZzAoI2IK7rQYcP6WmmFC+50uPGvdRpDGsAvtJDXk6DfaHyb7vQ2x0d5hernwOgv a1n6hM8BqkxyAIql2kh/Vv3YUE2MiI1I400MqAsrujKnygKXXu9eaTa0X0TGGYzR Dr50sBalI3ZDE8UwHvruUHop2QhR3I1QX/2eDdW1XWqdURUoNhjEgcL/gBb+GfLx 9kJxAKv2mJ/nPGnsUriihc6A8cCfHiq/JadfryY5DhtBcFnYAplo1qH+NqCkMXvR PUaQIjXrB4bylrj9BocMkuD/G64wOiR7 -----END CERTIFICATE-----Generated at Sat Apr 26 04:33:16 2025 by rpki-client