$ rpki-client -vvf rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft File: ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft (raw, json) Hash identifier: d7FOC/UGRXMRxxmQwBM6+9uijsD5PvelhQj/oOiWYnw= Subject key identifier: E8:13:30:07:02:48:A5:8C:41:8E:D2:80:81:92:12:93:B3:30:D6:5A Authority key identifier: A2:5E:D8:A1:42:7A:E9:3B:24:D3:0D:CC:DF:A8:32:53:8B:50:08:AD Certificate issuer: /CN=A914A139/serialNumber=A25ED8A1427AE93B24D30DCCDFA832538B5008AD Certificate serial: 0BA7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft Manifest number: 0B94 Signing time: Wed 02 Apr 2025 19:02:43 +0000 Manifest this update: Wed 02 Apr 2025 19:02:42 +0000 Manifest next update: Wed 09 Apr 2025 19:02:42 +0000 Files and hashes: 1: ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl (hash: PyXyEn9lBs139/XfXlRWRU0ok+/FVpQzgUyywxL/qzE=) 2: 65BB2B42C0E311EEBEF3D409C4F9AE02.roa (hash: r+qQMJg9WeT3dBS1G2eddJkWAZzyHZW7YUPhUNiXmvc=) 3: 10CF1D82C0E311EE81F3E987C4F9AE02.roa (hash: 78NzvvcCG2D0+YLHvm0WI7AAwqsj2ir6ZRecAq/XKO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 19:02:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2983 (0xba7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A139 Validity Not Before: Apr 2 19:02:42 2025 GMT Not After : Apr 9 19:02:42 2025 GMT Subject: CN=67ed89d3-4b01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:50:29:fa:1f:e6:6b:de:16:8e:d5:76:bf:4b: 49:e3:d1:53:ae:06:49:fe:7d:5d:25:4b:2e:8c:3c: 85:c8:df:0b:aa:e7:d1:c3:bf:6f:cf:61:41:2b:a2: 00:99:5a:13:71:45:92:19:4c:1d:c0:18:4e:4d:61: 91:80:cd:97:bb:f7:d8:f6:00:0d:c7:5b:e8:d8:b9: 15:01:07:da:0a:24:c6:62:ee:aa:47:ba:db:0c:b0: c9:72:2e:a0:3e:e5:1c:43:65:77:c8:6f:bd:7a:6b: df:2a:17:73:36:3e:29:ce:13:76:60:8a:97:93:9d: d9:ac:ec:1f:ce:65:3a:e5:10:ce:c7:70:42:29:8a: 1c:d4:61:17:0f:4e:6b:2f:a1:e4:78:54:a8:36:14: e9:3a:ef:6b:3d:37:59:03:c1:9a:93:98:a6:10:e7: b7:a5:bc:98:2e:ed:59:81:b6:4a:27:74:66:86:44: 12:e6:84:31:2e:fa:22:12:e7:18:61:fd:5e:05:81: 84:08:1b:0e:46:39:00:a6:f7:c5:75:01:36:76:d4: 4c:a6:00:a9:1d:b9:64:c7:2b:10:b9:5c:5c:25:d1: 7e:42:6b:aa:d0:6c:f9:60:57:6f:c7:cb:83:dc:8f: 19:b1:80:0b:eb:ae:3d:9e:af:f0:4b:71:93:8b:dc: 45:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:13:30:07:02:48:A5:8C:41:8E:D2:80:81:92:12:93:B3:30:D6:5A X509v3 Authority Key Identifier: keyid:A2:5E:D8:A1:42:7A:E9:3B:24:D3:0D:CC:DF:A8:32:53:8B:50:08:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:ec:88:e7:06:ed:73:54:f8:76:ea:ce:93:2a:cd:3b:ca:0d: 32:4c:51:08:d4:11:a7:7f:df:cd:eb:a4:6a:fa:a1:3a:ab:69: b4:97:79:4b:9d:d6:bb:e5:ad:9e:02:de:62:36:b8:c7:bf:94: 51:8d:c0:ec:a0:37:71:6c:f5:d4:69:b1:b7:72:c7:51:76:da: 23:86:13:aa:5f:94:b4:ef:47:c6:e3:f9:5c:1d:3b:ea:1c:90: 63:91:8a:46:e1:6e:f6:09:19:18:61:a6:8a:2a:f2:c4:f9:f3: e8:6a:d2:5f:28:1f:67:7c:79:bf:66:49:25:22:28:06:21:88: 0d:97:15:d5:e3:74:6f:f9:36:f9:41:c9:73:56:a9:d4:ca:cc: 68:d9:cc:f0:d6:fa:8c:5c:53:2a:ed:1e:fd:c7:d7:b5:7b:66: 00:36:e3:fc:ba:6b:5c:40:cf:7f:d5:f9:fd:fe:b9:c0:09:f8: 4c:46:7e:81:c0:a7:40:69:98:27:9b:94:02:3e:59:ad:5a:39: 86:c9:3a:1b:45:68:49:0d:36:c8:c4:65:ea:ba:ca:74:3f:83: e6:ea:13:3d:24:77:ab:da:50:f8:72:40:cc:8a:89:85:ed:36: 58:54:32:bb:31:b6:c8:85:e5:91:0c:9c:84:1b:6d:a9:d0:55: d3:57:85:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEExMzkxMTAvBgNVBAUTKEEyNUVEOEExNDI3QUU5M0IyNEQzMERDQ0RGQTgzMjUz OEI1MDA4QUQwHhcNMjUwNDAyMTkwMjQyWhcNMjUwNDA5MTkwMjQyWjAYMRYwFAYD VQQDEw02N2VkODlkMy00YjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFAp+h/ma94WjtV2v0tJ49FTrgZJ/n1dJUsujDyFyN8LqufRw79vz2FBK6IA mVoTcUWSGUwdwBhOTWGRgM2Xu/fY9gANx1vo2LkVAQfaCiTGYu6qR7rbDLDJci6g PuUcQ2V3yG+9emvfKhdzNj4pzhN2YIqXk53ZrOwfzmU65RDOx3BCKYoc1GEXD05r L6HkeFSoNhTpOu9rPTdZA8Gak5imEOe3pbyYLu1ZgbZKJ3RmhkQS5oQxLvoiEucY Yf1eBYGECBsORjkApvfFdQE2dtRMpgCpHblkxysQuVxcJdF+Qmuq0Gz5YFdvx8uD 3I8ZsYAL6649nq/wS3GTi9xFwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOgTMAcC SKWMQY7SgIGSEpOzMNZaMB8GA1UdIwQYMBaAFKJe2KFCeuk7JNMNzN+oMlOLUAit MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTEzOS9FQkI5RUM2MDI0 Q0ExMUVBQUMyQUU1ODZDNEY5QUUwMi9vbDdZb1VKNjZUc2swdzNNMzZneVU0dFFD SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29sN1lvVUo2NlRzazB3M00zNmd5VTR0UUNLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTEzOS9FQkI5RUM2MDI0Q0ExMUVBQUMyQUU1ODZDNEY5QUUwMi9vbDdZb1VKNjZU c2swdzNNMzZneVU0dFFDSzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAx7IjnBu1zVPh26s6TKs07yg0yTFEI1BGnf9/N66Rq+qE6q2m0l3lL nda75a2eAt5iNrjHv5RRjcDsoDdxbPXUabG3csdRdtojhhOqX5S070fG4/lcHTvq HJBjkYpG4W72CRkYYaaKKvLE+fPoatJfKB9nfHm/ZkklIigGIYgNlxXV43Rv+Tb5 QclzVqnUysxo2czw1vqMXFMq7R79x9e1e2YANuP8umtcQM9/1fn9/rnACfhMRn6B wKdAaZgnm5QCPlmtWjmGyTobRWhJDTbIxGXqusp0P4Pm6hM9JHer2lD4ckDMiomF 7TZYVDK7MbbIheWRDJyEG22p0FXTV4V5 -----END CERTIFICATE-----Generated at Fri Apr 4 18:32:04 2025 by rpki-client