$ rpki-client -vvf rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft File: Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft (raw, json) Hash identifier: QXqaZPl1w1tnwOGtG2sizUHbd3WR6daCXcYJ0trMVK8= Subject key identifier: D9:7F:3A:9E:CA:B7:C1:FC:F4:2D:1A:08:AB:BB:6E:94:A4:E5:85:63 Authority key identifier: 3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60 Certificate issuer: /CN=A91188EE/serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360 Certificate serial: C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft Manifest number: BA Signing time: Thu 03 Apr 2025 05:15:41 +0000 Manifest this update: Thu 03 Apr 2025 05:15:40 +0000 Manifest next update: Thu 10 Apr 2025 05:15:40 +0000 Files and hashes: 1: Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl (hash: lNueYCzQUNN1XQDjMrpFXCNz5/T0rEj7DI2vvVsfO2U=) 2: 6313E67C8D5711EFB5214A3AC4F9AE02.roa (hash: BxxzK7GYnNA6XmcJ/JSez9aRNvqpHtoWf05MXCUT/Bs=) 3: 9EE9468811FB11EFB73CB561C4F9AE02.roa (hash: pka10Uc6nzlxGkED9VZp9bJBwLv9g+b02qwlKzxKN2c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 05:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 192 (0xc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91188EE Validity Not Before: Apr 3 05:15:40 2025 GMT Not After : Apr 10 05:15:40 2025 GMT Subject: CN=67ee197c-8160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:89:e9:c2:14:65:5c:8f:40:50:ee:5f:9a:87: cd:ae:45:da:be:69:b6:c8:68:b0:c7:f8:eb:01:1e: 51:31:a2:3b:41:41:eb:18:4c:8e:77:43:e9:9f:f4: 49:cc:0b:fd:bf:4b:bc:6f:d6:5f:8e:22:c5:23:4e: ce:b2:3c:5e:02:9e:ca:1f:e9:88:47:e9:33:aa:33: b6:6d:4a:ba:0a:7c:99:fc:69:c4:d8:25:3b:31:a1: eb:a9:03:71:62:5b:85:80:19:4a:1a:34:fc:2c:94: aa:7e:66:53:b9:d2:5a:3f:68:4e:cc:c5:47:ca:0e: 65:88:a9:63:a5:5b:dd:54:94:c9:f6:e0:66:3e:bb: 7d:b4:40:33:94:a2:05:36:9b:4a:be:36:b6:20:2b: 2e:f9:8d:33:3b:c0:5a:d4:10:0e:57:3c:df:6c:25: c2:b2:33:22:68:6e:aa:25:96:1c:ca:4b:29:20:cb: 03:ec:e6:37:32:48:2a:2d:f9:bd:66:7d:39:dd:39: 35:f7:83:df:03:5b:fc:7b:77:1a:d6:12:53:45:a0: 8f:3a:23:c0:55:fb:7e:41:83:1e:8e:f0:9b:36:f2: 46:bf:05:86:94:8f:85:fa:25:b8:14:c3:be:d2:b7: 31:66:cc:aa:ca:30:a7:9f:3e:23:d1:c6:ce:da:45: 2f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:7F:3A:9E:CA:B7:C1:FC:F4:2D:1A:08:AB:BB:6E:94:A4:E5:85:63 X509v3 Authority Key Identifier: keyid:3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:d5:58:8b:cb:ae:e8:02:c7:ab:f7:c7:89:81:a0:bb:08:83: 5a:90:d0:5d:10:86:be:c1:c7:95:49:65:d7:71:c8:f6:7c:36: 59:31:f7:e3:0e:fe:ba:62:ed:cb:33:90:20:86:ed:3e:db:97: f6:38:f8:32:8c:f5:36:82:4b:cd:fc:a9:17:30:fd:7f:e9:10: c4:41:57:e7:a8:c6:41:fe:ed:ea:ff:05:82:ec:08:87:d3:e7: 15:b4:e4:64:47:9b:60:b1:72:ce:7e:70:63:8e:29:3d:9e:3e: 80:09:f4:88:06:22:0d:9e:73:19:29:5d:e0:0d:78:37:44:dc: 2b:2d:a8:de:9f:f7:bf:9e:0c:3f:88:c1:f8:a1:af:e2:a1:e7: 18:3e:16:ff:1e:45:d3:fd:8f:87:46:4e:b7:10:52:3f:01:59: d5:11:c4:c1:3f:08:7c:3d:f5:0f:07:c3:1f:de:8a:e3:15:e1: 77:29:0f:bb:27:96:a4:fd:6b:71:5a:a9:ab:e2:e4:58:2b:7f: 19:30:9e:21:6a:17:95:69:ac:e2:f1:0b:e0:9f:61:3e:ee:e4: 59:16:99:9e:c0:4c:db:6d:4f:64:e5:f9:d8:34:58:be:13:1e: ca:fe:44:be:02:a4:13:15:e0:6f:2b:03:9a:f6:a0:ea:5d:04: 28:b3:52:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg4RUUxMTAvBgNVBAUTKDNBRURBODA0MDdENzdCQjUyODQ4QUJEOUY3MjU5QkQ4 MDdBNUQzNjAwHhcNMjUwNDAzMDUxNTQwWhcNMjUwNDEwMDUxNTQwWjAYMRYwFAYD VQQDEw02N2VlMTk3Yy04MTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1onpwhRlXI9AUO5fmofNrkXavmm2yGiwx/jrAR5RMaI7QUHrGEyOd0Ppn/RJ zAv9v0u8b9ZfjiLFI07OsjxeAp7KH+mIR+kzqjO2bUq6CnyZ/GnE2CU7MaHrqQNx YluFgBlKGjT8LJSqfmZTudJaP2hOzMVHyg5liKljpVvdVJTJ9uBmPrt9tEAzlKIF NptKvja2ICsu+Y0zO8Ba1BAOVzzfbCXCsjMiaG6qJZYcykspIMsD7OY3MkgqLfm9 Zn053Tk194PfA1v8e3ca1hJTRaCPOiPAVft+QYMejvCbNvJGvwWGlI+F+iW4FMO+ 0rcxZsyqyjCnnz4j0cbO2kUvBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNl/Op7K t8H89C0aCKu7bpSk5YVjMB8GA1UdIwQYMBaAFDrtqAQH13u1KEir2fclm9gHpdNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODhFRS8zMjA5NzMxQUZC QUYxMUVFQTZCQzM5NTJDNEY5QUUwMi9PdTJvQkFmWGU3VW9TS3ZaOXlXYjJBZWww MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL091Mm9CQWZYZTdVb1NLdlo5eVdiMkFlbDAyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODhFRS8zMjA5NzMxQUZCQUYxMUVFQTZCQzM5NTJDNEY5QUUwMi9PdTJvQkFmWGU3 VW9TS3ZaOXlXYjJBZWwwMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCa1ViLy67oAser98eJgaC7CINakNBdEIa+wceVSWXXccj2fDZZMffj Dv66Yu3LM5Aghu0+25f2OPgyjPU2gkvN/KkXMP1/6RDEQVfnqMZB/u3q/wWC7AiH 0+cVtORkR5tgsXLOfnBjjik9nj6ACfSIBiINnnMZKV3gDXg3RNwrLajen/e/ngw/ iMH4oa/ioecYPhb/HkXT/Y+HRk63EFI/AVnVEcTBPwh8PfUPB8Mf3orjFeF3KQ+7 J5ak/WtxWqmr4uRYK38ZMJ4haheVaazi8Qvgn2E+7uRZFpmewEzbbU9k5fnYNFi+ Ex7K/kS+AqQTFeBvKwOa9qDqXQQos1J6 -----END CERTIFICATE-----Generated at Fri Apr 4 22:10:50 2025 by rpki-client