$ rpki-client -vvf rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft File: oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft (raw, json) Hash identifier: c2CKaOKDGj9VaLaGNm97O+dq9y8y8KoIi6uq0c/be0o= Subject key identifier: 8D:C4:CC:1F:47:4C:CC:A5:F4:20:78:9E:A0:6C:8E:BF:CF:4D:C9:3C Authority key identifier: A0:DE:57:2A:46:CF:32:4B:AE:08:C3:E9:30:BC:AF:E7:39:A0:15:D1 Certificate issuer: /CN=A915BF4F/serialNumber=A0DE572A46CF324BAE08C3E930BCAFE739A015D1 Certificate serial: 0288 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft Manifest number: 027F Signing time: Thu 17 Apr 2025 01:17:38 +0000 Manifest this update: Thu 17 Apr 2025 01:17:38 +0000 Manifest next update: Thu 24 Apr 2025 01:17:38 +0000 Files and hashes: 1: oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl (hash: gkL0RezNIb3x8NCT2D4ZN6CY030HxEn1utFbA+tOCdg=) 2: 42D236F0042111ED888BB024C4F9AE02.roa (hash: idGZCp14CeJ+hgIGhq15biNKPAF3xFUAz3T9o9jel9U=) 3: 41F88F22042111ED888BB024C4F9AE02.roa (hash: u7Xzmc+Z0Bg/MwCVSoDiBZBPaHlbZugtPr2Bm1jVv2c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 01:17:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 648 (0x288) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BF4F, serialNumber=A0DE572A46CF324BAE08C3E930BCAFE739A015D1 Validity Not Before: Apr 17 01:17:38 2025 GMT Not After : Apr 24 01:17:38 2025 GMT Subject: CN=680056b2-d3f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ba:71:e5:3b:e9:68:51:4d:11:17:21:95:02: ff:e6:eb:26:29:94:8d:da:83:cb:19:57:66:f5:90: 21:a1:ab:eb:ef:74:5f:c6:7a:0e:53:c6:96:03:2a: 05:87:7d:ae:fb:91:29:27:ce:5e:88:ae:c9:7a:c4: eb:9f:7f:b8:b0:3c:f1:a3:8d:b2:1c:2a:45:e6:9c: a4:4e:ec:01:19:76:9b:44:86:39:a6:57:88:75:09: 1b:06:1c:fc:c1:79:12:ed:13:49:32:f0:c0:ba:3c: 30:74:0f:e1:0c:cc:f7:70:92:66:d6:43:dd:77:3f: 05:84:f9:23:3f:a1:24:31:15:3c:77:8f:29:8a:e2: 8b:1e:9a:9f:e5:bc:c0:10:3e:a1:7b:60:4a:e1:b7: 2b:4c:10:c5:91:63:6c:7a:7e:30:b7:62:81:4f:a2: db:7a:c7:4f:41:b1:60:13:80:00:e8:b2:b2:ea:c6: b5:73:c8:af:d7:87:02:66:1f:14:f8:77:c6:fa:7a: e6:f6:8c:5d:d6:d3:fc:ee:81:8e:82:59:b5:9d:6d: fc:8a:86:d7:19:37:a8:68:da:19:37:8d:f5:5a:6b: 2f:07:2d:08:5e:ea:7d:99:57:57:9f:f5:b5:c2:63: f7:8e:81:89:9c:24:9b:10:88:06:b9:b5:c1:ef:3f: 69:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:C4:CC:1F:47:4C:CC:A5:F4:20:78:9E:A0:6C:8E:BF:CF:4D:C9:3C X509v3 Authority Key Identifier: keyid:A0:DE:57:2A:46:CF:32:4B:AE:08:C3:E9:30:BC:AF:E7:39:A0:15:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:4d:6e:84:37:5e:1f:82:c5:17:49:5c:af:73:0f:5c:b5:b6: 18:53:85:95:9d:9d:a9:4c:1b:63:16:8f:dd:67:6e:fd:85:30: 72:51:44:ce:df:f0:70:e0:f8:a6:f4:8d:6d:50:a8:95:f2:7e: dc:af:57:85:f5:03:68:8d:b3:0d:72:b0:06:ac:0f:59:26:1c: e6:82:68:2f:48:6b:d9:f1:d7:c7:76:90:27:83:de:fc:6c:b8: e9:aa:48:c5:89:58:53:c6:11:f5:ce:4b:11:1b:54:ff:fa:5a: a1:f5:ff:06:13:9c:40:a4:dd:44:c3:ac:9e:22:3b:92:59:b0: ce:a6:0e:cf:fc:52:36:25:6f:d9:7f:bb:48:39:d4:6e:eb:47: 93:c5:f9:b8:ed:dd:74:43:3c:4f:53:ed:bb:23:e1:34:c4:96: 6d:af:5d:5b:ec:1c:86:41:16:f3:de:c1:2a:1f:0e:2d:c6:be: 35:76:0c:7b:7f:83:5e:d6:20:1c:28:0c:1f:0c:81:eb:73:b3: 45:de:63:85:7b:25:e4:2f:ab:48:63:d7:b7:e3:83:c8:8a:f0: 37:56:dd:b5:94:92:02:e9:5d:29:31:55:ce:b1:9c:6d:fb:3f: 72:b7:c0:59:5e:15:17:e6:52:89:01:97:70:3f:67:18:f6:fa: b4:b5:40:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJGNEYxMTAvBgNVBAUTKEEwREU1NzJBNDZDRjMyNEJBRTA4QzNFOTMwQkNBRkU3 MzlBMDE1RDEwHhcNMjUwNDE3MDExNzM4WhcNMjUwNDI0MDExNzM4WjAYMRYwFAYD VQQDEw02ODAwNTZiMi1kM2Y2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs7px5TvpaFFNERchlQL/5usmKZSN2oPLGVdm9ZAhoavr73RfxnoOU8aWAyoF h32u+5EpJ85eiK7JesTrn3+4sDzxo42yHCpF5pykTuwBGXabRIY5pleIdQkbBhz8 wXkS7RNJMvDAujwwdA/hDMz3cJJm1kPddz8FhPkjP6EkMRU8d48piuKLHpqf5bzA ED6he2BK4bcrTBDFkWNsen4wt2KBT6LbesdPQbFgE4AA6LKy6sa1c8iv14cCZh8U +HfG+nrm9oxd1tP87oGOglm1nW38iobXGTeoaNoZN431WmsvBy0IXup9mVdXn/W1 wmP3joGJnCSbEIgGubXB7z9pIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI3EzB9H TMyl9CB4nqBsjr/PTck8MB8GA1UdIwQYMBaAFKDeVypGzzJLrgjD6TC8r+c5oBXR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkY0Ri9DNUUyRDcxRTA0 MTkxMUVEOTE1NzY1MjhDNEY5QUUwMi9vTjVYS2tiUE1rdXVDTVBwTUx5djV6bWdG ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29ONVhLa2JQTWt1dUNNUHBNTHl2NXptZ0ZkRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkY0Ri9DNUUyRDcxRTA0MTkxMUVEOTE1NzY1MjhDNEY5QUUwMi9vTjVYS2tiUE1r dXVDTVBwTUx5djV6bWdGZEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtTW6EN14fgsUXSVyvcw9ctbYYU4WVnZ2pTBtjFo/dZ279hTByUUTO 3/Bw4Pim9I1tUKiV8n7cr1eF9QNojbMNcrAGrA9ZJhzmgmgvSGvZ8dfHdpAng978 bLjpqkjFiVhTxhH1zksRG1T/+lqh9f8GE5xApN1Ew6yeIjuSWbDOpg7P/FI2JW/Z f7tIOdRu60eTxfm47d10QzxPU+27I+E0xJZtr11b7ByGQRbz3sEqHw4txr41dgx7 f4Ne1iAcKAwfDIHrc7NF3mOFeyXkL6tIY9e344PIivA3Vt21lJIC6V0pMVXOsZxt +z9yt8BZXhUX5lKJAZdwP2cY9vq0tUCn -----END CERTIFICATE-----Generated at Sat Apr 19 00:38:03 2025 by rpki-client