$ rpki-client -vvf rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft File: owkQUxBPCE11ymUhc2bq35hJE8E.mft (raw, json) Hash identifier: dDoHdm1f4PIgflVLnB/cqr3H3jAj0E2o+fFQh1UgHrI= Subject key identifier: D1:2E:71:4D:59:E4:36:88:84:3B:41:AE:31:5C:78:10:C5:0B:84:C8 Authority key identifier: A3:09:10:53:10:4F:08:4D:75:CA:65:21:73:66:EA:DF:98:49:13:C1 Certificate issuer: /CN=A912C12B/serialNumber=A3091053104F084D75CA65217366EADF984913C1 Certificate serial: 0C53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft Manifest number: 0C49 Signing time: Fri 04 Apr 2025 18:26:15 +0000 Manifest this update: Fri 04 Apr 2025 18:26:14 +0000 Manifest next update: Fri 11 Apr 2025 18:26:14 +0000 Files and hashes: 1: owkQUxBPCE11ymUhc2bq35hJE8E.crl (hash: KLOg53rJDeuab2JJee6ginwNHdW9Q6Lk0kBaQhOwjo0=) 2: 38D7B616768D11EB94573712C4F9AE02.roa (hash: osYkBFEZo4TGPYEkCTIfOfI2cJcgpXjHG6X4+VVwtkw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.crl rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:26:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3155 (0xc53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C12B Validity Not Before: Apr 4 18:26:14 2025 GMT Not After : Apr 11 18:26:14 2025 GMT Subject: CN=67f02447-cc2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ef:05:77:5a:1f:7f:4b:cb:a2:aa:ea:84:3b: 70:be:22:36:83:ce:b6:f0:af:13:0e:db:64:fb:e9: 2a:3f:4a:ba:a2:00:3f:cb:1a:37:72:35:d5:5b:b1: 67:a7:6b:a2:91:8a:84:f8:95:bd:12:dc:b4:48:9f: 17:24:d2:4c:03:6c:71:b9:29:bb:67:4d:a2:41:18: ab:83:b7:d1:7b:e3:fa:06:f3:ce:05:53:1e:0c:85: 02:37:fb:f3:80:cb:2b:f0:03:9a:b8:62:0b:9b:ef: 85:cf:2e:b3:46:c0:80:73:c7:05:69:f4:cf:1d:28: af:c3:aa:68:84:a3:d8:a8:66:b2:92:a8:d0:dd:6e: 4e:f7:e3:76:c6:95:30:14:08:9f:fd:79:94:ff:c6: 2b:e2:5a:e8:4e:60:4a:d8:e8:3c:92:a4:8e:54:f8: 3a:79:96:18:d3:92:60:a9:45:2c:d3:5e:fb:70:d0: 45:bd:db:11:df:b0:37:78:43:42:05:b5:88:3a:78: 9d:fc:47:b4:c1:ff:77:4f:b6:7a:7e:75:5f:97:c1: 52:e6:55:66:8c:21:08:c4:4b:e1:80:cf:57:d2:87: 2a:40:ea:79:33:01:1c:7d:3b:ea:ef:9b:e1:f8:6b: 51:26:e6:00:ef:be:57:3d:a7:c1:36:4d:91:8b:0a: 96:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:2E:71:4D:59:E4:36:88:84:3B:41:AE:31:5C:78:10:C5:0B:84:C8 X509v3 Authority Key Identifier: keyid:A3:09:10:53:10:4F:08:4D:75:CA:65:21:73:66:EA:DF:98:49:13:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:9b:11:31:bf:b8:e4:c5:f4:8d:fe:66:a3:34:69:ad:be:fc: 8d:b4:e2:ed:63:6f:ba:57:3b:17:e5:0e:e7:dc:19:8f:d1:03: e4:b4:59:39:06:ce:9f:0e:66:1a:ca:9e:0d:ce:88:d7:31:fd: 63:b4:09:42:7d:83:83:93:79:42:fe:bd:01:1b:bd:4a:81:27: 18:d1:08:e7:f9:c2:90:29:81:2f:e8:b9:77:ef:69:19:a2:9e: 8a:41:14:96:a1:ec:49:b0:91:61:da:94:2c:a4:08:c3:bc:73: bc:f5:d9:60:2b:96:4d:a1:12:92:b6:c6:2b:73:72:ad:bb:73: f7:b1:4a:04:d0:ab:ed:a7:c3:62:2f:87:e5:a6:ec:69:5c:9f: f1:34:34:e5:2d:0c:9a:7b:66:dc:3c:ab:80:ec:f2:86:42:0f: 31:5f:10:5a:22:a8:23:92:d3:bf:5c:df:3f:a2:77:2b:ff:c6: 41:7d:ae:cd:52:71:ca:9b:47:d8:32:08:95:a0:16:76:f3:0d: 86:c0:f3:c5:70:bd:e0:de:c0:95:15:a7:c1:82:ad:e8:c4:dd: 08:cc:9a:35:70:35:38:21:29:74:0c:56:91:5d:83:1e:70:4b: 17:f0:f3:67:00:c3:15:1d:20:d5:3a:68:29:67:2d:75:a2:aa: f9:a8:18:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMxMkIxMTAvBgNVBAUTKEEzMDkxMDUzMTA0RjA4NEQ3NUNBNjUyMTczNjZFQURG OTg0OTEzQzEwHhcNMjUwNDA0MTgyNjE0WhcNMjUwNDExMTgyNjE0WjAYMRYwFAYD VQQDEw02N2YwMjQ0Ny1jYzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvO8Fd1off0vLoqrqhDtwviI2g8628K8TDttk++kqP0q6ogA/yxo3cjXVW7Fn p2uikYqE+JW9Ety0SJ8XJNJMA2xxuSm7Z02iQRirg7fRe+P6BvPOBVMeDIUCN/vz gMsr8AOauGILm++Fzy6zRsCAc8cFafTPHSivw6pohKPYqGaykqjQ3W5O9+N2xpUw FAif/XmU/8Yr4lroTmBK2Og8kqSOVPg6eZYY05JgqUUs0177cNBFvdsR37A3eENC BbWIOnid/Ee0wf93T7Z6fnVfl8FS5lVmjCEIxEvhgM9X0ocqQOp5MwEcfTvq75vh +GtRJuYA775XPafBNk2RiwqWowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNEucU1Z 5DaIhDtBrjFceBDFC4TIMB8GA1UdIwQYMBaAFKMJEFMQTwhNdcplIXNm6t+YSRPB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzEyQi9GOUZFRDRDMkZG OUQxMUU5OTk2ODk1NzdDNEY5QUUwMi9vd2tRVXhCUENFMTF5bVVoYzJicTM1aEpF OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL293a1FVeEJQQ0UxMXltVWhjMmJxMzVoSkU4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzEyQi9GOUZFRDRDMkZGOUQxMUU5OTk2ODk1NzdDNEY5QUUwMi9vd2tRVXhCUENF MTF5bVVoYzJicTM1aEpFOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjmxExv7jkxfSN/majNGmtvvyNtOLtY2+6VzsX5Q7n3BmP0QPktFk5 Bs6fDmYayp4NzojXMf1jtAlCfYODk3lC/r0BG71KgScY0Qjn+cKQKYEv6Ll372kZ op6KQRSWoexJsJFh2pQspAjDvHO89dlgK5ZNoRKStsYrc3Ktu3P3sUoE0Kvtp8Ni L4flpuxpXJ/xNDTlLQyae2bcPKuA7PKGQg8xXxBaIqgjktO/XN8/oncr/8ZBfa7N UnHKm0fYMgiVoBZ28w2GwPPFcL3g3sCVFafBgq3oxN0IzJo1cDU4ISl0DFaRXYMe cEsX8PNnAMMVHSDVOmgpZy11oqr5qBha -----END CERTIFICATE-----Generated at Fri Apr 4 22:32:11 2025 by rpki-client