$ rpki-client -vvf rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft File: _OAw6zAgOlEM28-cfDpDADu9-mI.mft (raw, json) Hash identifier: 14zgypdwFxrXjyffBTDXUpCdgcU+uf0kj2vCoilYEOU= Subject key identifier: 52:D3:C6:25:4A:F7:9C:98:29:58:D1:47:C3:D3:6C:2F:F8:21:73:22 Authority key identifier: FC:E0:30:EB:30:20:3A:51:0C:DB:CF:9C:7C:3A:43:00:3B:BD:FA:62 Certificate issuer: /CN=A9127E8D/serialNumber=FCE030EB30203A510CDBCF9C7C3A43003BBDFA62 Certificate serial: E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_OAw6zAgOlEM28-cfDpDADu9-mI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft Manifest number: DF Signing time: Sat 05 Apr 2025 04:49:49 +0000 Manifest this update: Sat 05 Apr 2025 04:49:49 +0000 Manifest next update: Sat 12 Apr 2025 04:49:49 +0000 Files and hashes: 1: _OAw6zAgOlEM28-cfDpDADu9-mI.crl (hash: S43WQY8IvKOJZwsSkR+gBfRStq1cVy0Sy35Z9RbTtfQ=) 2: D13703C6BF4611EE9ECAAC65C4F9AE02.roa (hash: 9XQ8E57rDZy0hs4By4P58wDNjTR7DCt1F2KaYrqVcoc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.crl rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_OAw6zAgOlEM28-cfDpDADu9-mI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 04:49:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127E8D Validity Not Before: Apr 5 04:49:49 2025 GMT Not After : Apr 12 04:49:49 2025 GMT Subject: CN=67f0b66d-49a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:79:37:17:fa:2a:3a:ae:f8:51:db:93:98:32: 7d:cb:7f:68:1b:7c:ec:9b:6a:27:85:58:26:08:6d: 55:24:71:57:a3:54:d7:37:01:54:fe:db:13:a0:fe: 0e:55:ac:92:24:0d:06:8b:7f:ed:f3:bc:ce:37:8a: e4:a8:ba:e2:d7:1a:e9:c4:0e:10:b4:78:a5:71:95: e1:7a:67:ab:c6:59:e3:34:7f:14:24:40:f2:ed:9e: 53:95:85:a4:06:4a:40:a7:13:63:ac:9b:5d:1b:ce: b2:cb:f5:dc:c6:cb:f8:d0:9f:67:79:1f:01:8e:89: 80:2a:eb:10:de:e1:36:59:9b:67:01:21:4b:7c:49: 2a:be:19:1f:b4:4c:e4:4f:89:1d:06:87:a1:8f:32: 4e:07:b7:fa:27:5a:73:17:2a:e4:a4:56:a2:df:40: d3:42:14:5c:c7:6d:91:dd:c0:4b:ef:c1:f3:ea:63: 07:5d:80:bd:fb:dc:50:dc:7d:ef:fe:19:bb:1f:0e: db:40:3e:3a:bd:7d:d6:e2:48:19:19:a1:d4:db:48: 84:38:b0:25:48:bf:77:67:fe:46:0b:e9:79:d9:ce: a3:87:75:2b:88:81:87:c1:02:92:43:6a:b2:23:28: 05:00:60:92:7f:8c:3f:6f:da:40:1d:55:c7:af:b1: b2:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:D3:C6:25:4A:F7:9C:98:29:58:D1:47:C3:D3:6C:2F:F8:21:73:22 X509v3 Authority Key Identifier: keyid:FC:E0:30:EB:30:20:3A:51:0C:DB:CF:9C:7C:3A:43:00:3B:BD:FA:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_OAw6zAgOlEM28-cfDpDADu9-mI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:fe:27:48:c1:be:50:7b:5c:71:bc:6c:30:4f:ae:56:f7:1b: 02:a3:f6:87:71:eb:5a:fc:f7:02:32:3c:f5:bf:97:a0:ba:57: e8:3b:a3:b6:c1:aa:ca:83:0a:20:56:d2:16:d4:c7:d9:73:e5: de:86:2e:0f:25:88:b0:b9:3d:25:b3:d2:c7:43:58:0a:5b:e2: 50:32:14:68:33:13:97:7e:a9:74:91:ba:7e:56:2a:2f:d6:db: 9d:15:96:18:78:25:ab:2b:e2:1d:69:eb:df:88:8e:a6:79:41: 9e:9f:c4:aa:80:08:b6:73:52:5a:cf:25:26:65:13:5c:83:20: 90:bb:3a:62:2f:ac:d9:cc:91:19:33:37:ad:59:13:67:a2:04: 3f:7a:52:8d:5f:03:ac:d0:7e:f4:69:e0:8e:4e:28:02:2f:c4: 3c:cb:bc:d6:8c:53:21:e1:26:f9:6e:5a:d6:20:8e:9d:4a:1a: 3b:0b:a8:bb:6b:82:2b:53:c3:12:14:bb:73:95:fe:87:d6:b5: 0e:56:d0:33:f9:48:cf:99:6d:37:0f:34:ed:04:a0:b0:5f:b5: ff:b9:9e:0b:1a:8f:e2:d5:0d:26:29:0e:29:5c:5c:98:8d:7f: 8d:32:b1:0b:f3:ac:27:d9:df:81:5b:bc:ef:4f:88:d4:39:ec: d1:16:1c:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdFOEQxMTAvBgNVBAUTKEZDRTAzMEVCMzAyMDNBNTEwQ0RCQ0Y5QzdDM0E0MzAw M0JCREZBNjIwHhcNMjUwNDA1MDQ0OTQ5WhcNMjUwNDEyMDQ0OTQ5WjAYMRYwFAYD VQQDEw02N2YwYjY2ZC00OWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt3k3F/oqOq74UduTmDJ9y39oG3zsm2onhVgmCG1VJHFXo1TXNwFU/tsToP4O VaySJA0Gi3/t87zON4rkqLri1xrpxA4QtHilcZXhemerxlnjNH8UJEDy7Z5TlYWk BkpApxNjrJtdG86yy/Xcxsv40J9neR8BjomAKusQ3uE2WZtnASFLfEkqvhkftEzk T4kdBoehjzJOB7f6J1pzFyrkpFai30DTQhRcx22R3cBL78Hz6mMHXYC9+9xQ3H3v /hm7Hw7bQD46vX3W4kgZGaHU20iEOLAlSL93Z/5GC+l52c6jh3UriIGHwQKSQ2qy IygFAGCSf4w/b9pAHVXHr7GyawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFLTxiVK 95yYKVjRR8PTbC/4IXMiMB8GA1UdIwQYMBaAFPzgMOswIDpRDNvPnHw6QwA7vfpi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0U4RC82NEIxNkE5OEJG NDYxMUVFQjFCM0Q3NjRDNEY5QUUwMi9fT0F3NnpBZ09sRU0yOC1jZkRwREFEdTkt bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19PQXc2ekFnT2xFTTI4LWNmRHBEQUR1OS1tSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0U4RC82NEIxNkE5OEJGNDYxMUVFQjFCM0Q3NjRDNEY5QUUwMi9fT0F3NnpBZ09s RU0yOC1jZkRwREFEdTktbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1/idIwb5Qe1xxvGwwT65W9xsCo/aHceta/PcCMjz1v5egulfoO6O2 warKgwogVtIW1MfZc+Xehi4PJYiwuT0ls9LHQ1gKW+JQMhRoMxOXfql0kbp+Viov 1tudFZYYeCWrK+IdaevfiI6meUGen8SqgAi2c1JazyUmZRNcgyCQuzpiL6zZzJEZ MzetWRNnogQ/elKNXwOs0H70aeCOTigCL8Q8y7zWjFMh4Sb5blrWII6dSho7C6i7 a4IrU8MSFLtzlf6H1rUOVtAz+UjPmW03DzTtBKCwX7X/uZ4LGo/i1Q0mKQ4pXFyY jX+NMrEL86wn2d+BW7zvT4jUOezRFhxp -----END CERTIFICATE-----Generated at Sat Apr 5 08:15:45 2025 by rpki-client