$ rpki-client -vvf rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft File: mOhT44UoY0okfIaH-hKOU07IRCY.mft (raw, json) Hash identifier: aJY2tS6MeWm1xuKKHL32wYuci3s8gSWw3XsaBcuJyaY= Subject key identifier: 39:DA:BB:CB:F7:AE:83:81:73:A7:FE:31:7E:3C:1A:2E:3C:25:9D:6B Authority key identifier: 98:E8:53:E3:85:28:63:4A:24:7C:86:87:FA:12:8E:53:4E:C8:44:26 Certificate issuer: /CN=A915E18D/serialNumber=98E853E38528634A247C8687FA128E534EC84426 Certificate serial: 0738 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft Manifest number: 072F Signing time: Wed 02 Apr 2025 21:48:22 +0000 Manifest this update: Wed 02 Apr 2025 21:48:21 +0000 Manifest next update: Wed 09 Apr 2025 21:48:21 +0000 Files and hashes: 1: mOhT44UoY0okfIaH-hKOU07IRCY.crl (hash: ifpgbBjj75M821S/yPx+1Na6rxrH5Q1lsWFI1cQqv/g=) 2: 10DD258E2AE711EBBFFCBC15C4F9AE02.roa (hash: DvUe9tlMP9l91/7mh7+Tetbprk3jQc1ROYqAjOky4yU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.crl rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 21:48:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1848 (0x738) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E18D Validity Not Before: Apr 2 21:48:21 2025 GMT Not After : Apr 9 21:48:21 2025 GMT Subject: CN=67edb0a5-3ac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:32:62:56:91:0c:38:33:82:39:6b:03:74:0b: 7c:93:65:28:e5:08:55:91:2e:fd:ca:55:7e:9a:3e: c1:85:5b:c0:d0:51:9c:74:33:00:99:1c:f4:8e:51: bb:be:28:50:07:c8:75:f0:da:2c:ce:c4:3b:50:c0: 41:c3:94:25:55:c0:43:a0:47:64:e8:9a:9f:e2:2d: 6a:00:05:c3:57:99:8d:a4:bf:59:a3:bf:0c:f5:fd: de:83:f5:11:40:61:46:11:3e:41:50:48:cb:ea:41: 18:93:d2:20:01:d0:4a:99:f6:b8:00:18:a0:1d:96: 66:78:88:f0:c1:56:76:65:ae:71:b2:4d:d8:d7:41: 06:ed:5f:23:f9:cb:8b:c4:cc:ab:a2:11:66:d7:0a: ae:9c:2c:1f:ec:da:b7:5f:32:49:aa:97:a4:67:cc: a3:89:f0:06:b9:9e:ed:00:39:c3:15:72:a3:76:7b: 24:39:58:36:95:68:4c:52:e8:d9:c6:36:72:ae:9a: ec:bd:00:92:93:cb:55:d9:1b:14:6b:74:f6:6b:d4: 15:02:72:11:3c:29:9f:16:6d:1f:12:2d:7a:21:8e: 59:a4:47:ae:06:40:15:2b:22:52:b3:0a:67:a1:4c: 60:d5:28:2a:a0:ed:52:f5:4e:e4:72:d5:3b:94:b5: 80:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:DA:BB:CB:F7:AE:83:81:73:A7:FE:31:7E:3C:1A:2E:3C:25:9D:6B X509v3 Authority Key Identifier: keyid:98:E8:53:E3:85:28:63:4A:24:7C:86:87:FA:12:8E:53:4E:C8:44:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:d9:07:36:02:90:da:b2:ad:69:ab:e5:65:73:8f:04:d8:c5: d8:88:1d:7e:64:75:7f:b2:70:8b:cd:65:cf:1b:a9:d5:2d:e4: 6d:4e:b2:1e:46:3e:71:15:5b:ac:f7:b4:65:ce:99:56:5b:4a: f3:60:a5:66:66:9e:d3:a7:90:56:14:51:8c:da:ae:4e:7b:02: 26:50:87:9e:ac:52:b4:2e:84:6b:ff:f6:0a:39:28:ab:f5:89: a6:15:2e:b3:c4:da:27:65:2a:17:76:77:ab:98:63:38:ed:c8: be:4b:c6:bc:ec:23:7a:ee:5d:d4:b0:02:c0:9f:59:67:6e:74: 43:ae:58:1b:48:79:c7:0e:cb:d1:83:e9:94:20:31:98:f2:1b: 5c:ef:7a:4b:65:92:01:21:c4:1e:dc:f9:9e:58:b9:00:38:63: 6a:75:1d:97:7e:7e:c8:9e:b0:40:1a:47:a1:b7:a4:d1:96:af: b7:98:7c:c8:47:7d:b9:52:d2:fa:ac:e1:0e:47:48:a6:d9:89: e2:87:4f:a1:fa:2b:e3:8d:b8:7a:9c:f0:1f:54:13:a2:1c:53: 51:28:a9:ee:09:dc:5a:57:7a:7d:86:1b:23:26:67:f7:be:1a: 5d:3b:5e:c7:21:da:03:80:03:df:a3:dd:d4:72:c9:96:d9:6c: 17:f7:3c:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUUxOEQxMTAvBgNVBAUTKDk4RTg1M0UzODUyODYzNEEyNDdDODY4N0ZBMTI4RTUz NEVDODQ0MjYwHhcNMjUwNDAyMjE0ODIxWhcNMjUwNDA5MjE0ODIxWjAYMRYwFAYD VQQDEw02N2VkYjBhNS0zYWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5jJiVpEMODOCOWsDdAt8k2Uo5QhVkS79ylV+mj7BhVvA0FGcdDMAmRz0jlG7 vihQB8h18NoszsQ7UMBBw5QlVcBDoEdk6Jqf4i1qAAXDV5mNpL9Zo78M9f3eg/UR QGFGET5BUEjL6kEYk9IgAdBKmfa4ABigHZZmeIjwwVZ2Za5xsk3Y10EG7V8j+cuL xMyrohFm1wqunCwf7Nq3XzJJqpekZ8yjifAGuZ7tADnDFXKjdnskOVg2lWhMUujZ xjZyrprsvQCSk8tV2RsUa3T2a9QVAnIRPCmfFm0fEi16IY5ZpEeuBkAVKyJSswpn oUxg1SgqoO1S9U7kctU7lLWAlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDnau8v3 roOBc6f+MX48Gi48JZ1rMB8GA1UdIwQYMBaAFJjoU+OFKGNKJHyGh/oSjlNOyEQm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTE4RC83QTEyNjk3RTJB RTIxMUVCQkJGQzRGMEFDNEY5QUUwMi9tT2hUNDRVb1kwb2tmSWFILWhLT1UwN0lS Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21PaFQ0NFVvWTBva2ZJYUgtaEtPVTA3SVJDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTE4RC83QTEyNjk3RTJBRTIxMUVCQkJGQzRGMEFDNEY5QUUwMi9tT2hUNDRVb1kw b2tmSWFILWhLT1UwN0lSQ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBI2Qc2ApDasq1pq+Vlc48E2MXYiB1+ZHV/snCLzWXPG6nVLeRtTrIe Rj5xFVus97RlzplWW0rzYKVmZp7Tp5BWFFGM2q5OewImUIeerFK0LoRr//YKOSir 9YmmFS6zxNonZSoXdnermGM47ci+S8a87CN67l3UsALAn1lnbnRDrlgbSHnHDsvR g+mUIDGY8htc73pLZZIBIcQe3PmeWLkAOGNqdR2Xfn7InrBAGkeht6TRlq+3mHzI R325UtL6rOEOR0im2Ynih0+h+ivjjbh6nPAfVBOiHFNRKKnuCdxaV3p9hhsjJmf3 vhpdO17HIdoDgAPfo93UcsmW2WwX9zwk -----END CERTIFICATE-----Generated at Fri Apr 4 22:13:41 2025 by rpki-client