$ rpki-client -vvf rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft File: oBoPBuMQs4EwEx14gpcL8WLdDWY.mft (raw, json) Hash identifier: PAoa2XYwZ7BxK0+jz9DR341ReTlbHxcc7dRrQhUCNao= Subject key identifier: 9E:01:1A:B8:8C:1A:10:5D:70:6C:4D:96:FD:EA:AA:5A:88:38:AE:13 Authority key identifier: A0:1A:0F:06:E3:10:B3:81:30:13:1D:78:82:97:0B:F1:62:DD:0D:66 Certificate issuer: /CN=A9150E55/serialNumber=A01A0F06E310B38130131D7882970BF162DD0D66 Certificate serial: 0316 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft Manifest number: 0310 Signing time: Sat 29 Mar 2025 01:27:16 +0000 Manifest this update: Sat 29 Mar 2025 01:27:15 +0000 Manifest next update: Sat 05 Apr 2025 01:27:15 +0000 Files and hashes: 1: oBoPBuMQs4EwEx14gpcL8WLdDWY.crl (hash: Tm4pAjZ4dJPFbsxUx4lAjobC9v4IwNLmPh9rmtuEh90=) 2: 2DC3DC54D54E11EF8C5B1651C4F9AE02.roa (hash: jj/VEZFojNzwFut6xQ2ddbaM/ffKwcFrBgOFEnS8TYI=) 3: 39952E50C6CB11ECB185E43EC4F9AE02.roa (hash: UriRXIOaFvm5u1qncQTi3IERwvU0QHA/1gyCNIPeCng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.crl rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 01:27:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 790 (0x316) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150E55 Validity Not Before: Mar 29 01:27:15 2025 GMT Not After : Apr 5 01:27:15 2025 GMT Subject: CN=67e74c73-ea6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9e:9f:d7:d5:c4:5c:77:c7:08:3b:2b:23:1f: d8:f5:52:89:b7:56:65:61:48:c4:4b:b3:4d:a4:aa: a6:f4:a5:c3:c4:e7:06:a3:63:36:8b:34:65:59:7b: 74:b8:0e:61:ac:2e:56:30:b8:4e:bb:82:94:e7:08: b5:3d:2e:2e:e3:b5:5f:e8:da:7f:2c:86:50:be:f7: 4a:8d:89:03:cb:1b:7d:58:07:ec:48:ab:6e:a2:64: 65:a6:b0:d3:5c:fa:a3:75:2b:33:fe:13:5c:de:05: da:d0:81:aa:03:17:8e:39:9a:81:1d:e8:69:6b:71: 43:0d:38:43:0f:8a:cc:db:fd:a4:95:4c:86:3a:bf: 46:ed:63:8f:ea:0a:e9:d6:d5:48:dc:4b:48:1a:4f: 27:d1:7d:12:87:d1:03:67:64:f9:66:4e:17:83:53: 3d:06:4c:6e:2d:49:01:17:5b:37:79:28:d0:bc:0b: 59:33:13:23:4e:17:1f:96:1f:2e:21:b8:16:38:d8: 1f:9f:0b:2c:ec:93:e8:7a:0e:1c:48:59:24:93:20: 03:c9:b3:86:29:12:18:d6:14:32:34:e5:74:07:df: ff:8d:c2:55:f1:79:9d:58:5d:b3:77:ba:6a:2c:1a: c0:c8:61:f6:34:c5:9b:0d:49:f3:47:a6:57:2c:df: 2d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:01:1A:B8:8C:1A:10:5D:70:6C:4D:96:FD:EA:AA:5A:88:38:AE:13 X509v3 Authority Key Identifier: keyid:A0:1A:0F:06:E3:10:B3:81:30:13:1D:78:82:97:0B:F1:62:DD:0D:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:39:7b:56:a4:cc:37:19:2e:c8:8b:d0:a1:22:d3:6a:72:c0: 19:66:de:7d:c6:85:35:6c:4a:6e:f8:3a:e5:50:5c:09:54:23: fd:4b:8d:81:0b:06:c5:dd:45:62:6c:7c:f4:5c:56:42:be:9c: d4:d8:64:6d:9e:05:a6:e6:4f:c9:1b:87:81:db:c6:fc:9a:ce: 81:db:fc:b2:ff:fb:bd:0d:b9:97:1b:a9:fd:4b:55:c8:8f:61: e9:c2:55:1f:75:58:1f:99:2e:5b:05:9a:ea:ce:32:0f:1d:53: ec:20:35:c5:9c:42:3a:a5:2f:8a:d0:93:54:ee:7d:86:73:fa: 1b:c8:74:99:38:31:c0:45:f8:84:b5:67:bd:73:98:76:78:3c: c9:57:3e:2b:d1:d5:10:66:c7:79:8b:ff:d0:05:c8:d3:22:23: 5a:20:f1:cf:af:c2:0b:36:cf:dd:81:49:ed:43:08:8e:04:00: df:54:fa:56:24:6a:1b:bb:4f:7f:c4:01:d1:8d:df:fe:0b:35: c8:53:4c:1a:c0:16:9c:18:6b:b5:7c:49:15:32:f9:20:9f:f6: 27:c0:40:2d:c3:db:ce:3d:a3:b5:21:8a:e4:fc:10:ba:dd:d9: d9:5e:5b:f2:89:78:94:7c:4e:65:ee:fb:d7:80:ae:f9:a6:60: 68:00:1d:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBFNTUxMTAvBgNVBAUTKEEwMUEwRjA2RTMxMEIzODEzMDEzMUQ3ODgyOTcwQkYx NjJERDBENjYwHhcNMjUwMzI5MDEyNzE1WhcNMjUwNDA1MDEyNzE1WjAYMRYwFAYD VQQDEw02N2U3NGM3My1lYTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwp6f19XEXHfHCDsrIx/Y9VKJt1ZlYUjES7NNpKqm9KXDxOcGo2M2izRlWXt0 uA5hrC5WMLhOu4KU5wi1PS4u47Vf6Np/LIZQvvdKjYkDyxt9WAfsSKtuomRlprDT XPqjdSsz/hNc3gXa0IGqAxeOOZqBHehpa3FDDThDD4rM2/2klUyGOr9G7WOP6grp 1tVI3EtIGk8n0X0Sh9EDZ2T5Zk4Xg1M9BkxuLUkBF1s3eSjQvAtZMxMjThcflh8u IbgWONgfnwss7JPoeg4cSFkkkyADybOGKRIY1hQyNOV0B9//jcJV8XmdWF2zd7pq LBrAyGH2NMWbDUnzR6ZXLN8txwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ4BGriM GhBdcGxNlv3qqlqIOK4TMB8GA1UdIwQYMBaAFKAaDwbjELOBMBMdeIKXC/Fi3Q1m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEU1NS83RDMyQTc0RUM2 MDAxMUVDODcwMDVDN0RDNEY5QUUwMi9vQm9QQnVNUXM0RXdFeDE0Z3BjTDhXTGRE V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Cb1BCdU1RczRFd0V4MTRncGNMOFdMZERXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEU1NS83RDMyQTc0RUM2MDAxMUVDODcwMDVDN0RDNEY5QUUwMi9vQm9QQnVNUXM0 RXdFeDE0Z3BjTDhXTGREV1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANOXtWpMw3GS7Ii9ChItNqcsAZZt59xoU1bEpu+DrlUFwJVCP9S42B CwbF3UVibHz0XFZCvpzU2GRtngWm5k/JG4eB28b8ms6B2/yy//u9DbmXG6n9S1XI j2HpwlUfdVgfmS5bBZrqzjIPHVPsIDXFnEI6pS+K0JNU7n2Gc/obyHSZODHARfiE tWe9c5h2eDzJVz4r0dUQZsd5i//QBcjTIiNaIPHPr8ILNs/dgUntQwiOBADfVPpW JGobu09/xAHRjd/+CzXIU0wawBacGGu1fEkVMvkgn/YnwEAtw9vOPaO1IYrk/BC6 3dnZXlvyiXiUfE5l7vvXgK75pmBoAB1F -----END CERTIFICATE-----Generated at Fri Apr 4 21:54:05 2025 by rpki-client