$ rpki-client -vvf rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft File: oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft (raw, json) Hash identifier: 8LT2bGUp5Qc9kObhNg0ZNqbBbMa6RhUqmhUOjs1gDQI= Subject key identifier: C4:BF:95:DF:CC:C4:FE:8F:07:0D:90:50:89:6A:8E:D6:89:23:0B:1A Authority key identifier: A3:21:53:71:25:37:60:0D:71:34:2E:C0:69:A5:7F:3E:ED:60:D7:0C Certificate issuer: /CN=A918D771/serialNumber=A32153712537600D71342EC069A57F3EED60D70C Certificate serial: 074F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft Manifest number: 073B Signing time: Wed 16 Apr 2025 21:27:19 +0000 Manifest this update: Wed 16 Apr 2025 21:27:19 +0000 Manifest next update: Wed 23 Apr 2025 21:27:19 +0000 Files and hashes: 1: oyFTcSU3YA1xNC7AaaV_Pu1g1ww.crl (hash: scV31L+r+ry43Zh2gqQxpWmOajeTG56xbabTuXBLaqM=) 2: B10AE62CBC4711EFAB43324BC4F9AE02.roa (hash: Cg9ICYE9I7QHfG+L0DGU6D2Wt92m7BQcheqj3kGMwFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.crl rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 21:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1871 (0x74f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D771, serialNumber=A32153712537600D71342EC069A57F3EED60D70C Validity Not Before: Apr 16 21:27:19 2025 GMT Not After : Apr 23 21:27:19 2025 GMT Subject: CN=680020b7-38e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:69:74:ef:b1:7e:77:32:e0:be:06:e9:6a:37: d9:b3:5f:88:b6:a9:f2:ce:7a:d9:ea:a1:bf:54:2b: 39:2f:d3:e8:fa:3d:28:6f:33:81:1f:2c:29:39:5d: 36:d7:09:dd:1f:e5:6b:0a:1f:9d:5b:90:c8:4e:c1: 02:7a:d2:b4:d3:08:52:6e:f2:23:3b:5a:90:74:9e: 19:04:3c:dd:6c:81:13:4a:fa:2c:52:a4:13:ab:5d: ae:2a:8a:a4:38:d9:22:68:fd:fe:b1:83:f4:52:3a: 49:73:2f:4b:85:1c:60:94:da:cf:d7:ae:4f:df:81: ec:15:0b:d3:b0:78:71:9c:68:7a:fd:17:3f:0a:bb: 47:4f:86:e2:38:28:2f:24:3a:57:16:54:ed:dc:4e: ea:de:28:5f:de:72:ef:28:e1:6b:7b:a1:c6:73:49: d1:96:fc:3f:7f:7c:e2:a1:b8:b6:a6:ec:22:fa:94: 9f:91:ac:8b:04:c9:d0:0c:2a:02:3e:81:7f:c5:1b: 99:bf:0e:32:dc:35:4a:58:de:bd:40:d7:1f:0d:a2: 7a:2d:e8:ee:cb:c0:a1:18:ba:67:fb:41:55:dd:6e: 7c:35:98:fb:9d:eb:eb:e2:c8:6b:38:e1:13:ea:b0: 5a:57:4e:8e:38:fa:31:b4:97:42:2d:a3:ff:2a:31: 16:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:BF:95:DF:CC:C4:FE:8F:07:0D:90:50:89:6A:8E:D6:89:23:0B:1A X509v3 Authority Key Identifier: keyid:A3:21:53:71:25:37:60:0D:71:34:2E:C0:69:A5:7F:3E:ED:60:D7:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:29:10:05:b3:63:81:1d:9e:3f:7e:b7:74:39:ef:ad:b3:e3: 71:55:e6:17:fd:8d:5f:c0:6b:28:1e:b8:c8:53:05:94:78:f6: 5b:30:e9:7d:77:c2:83:57:c9:e1:83:1b:65:79:ff:f8:89:6b: 76:19:4b:9b:95:8b:6e:72:a8:d1:bc:ff:a5:e6:ac:1a:66:de: 6f:ea:2f:57:82:9c:a1:34:1d:82:bc:06:9b:26:0e:e5:6a:19: 71:2e:88:63:06:c8:fe:90:47:fd:b2:be:db:66:ad:6b:3a:b8: d9:68:fb:76:da:2f:3d:c9:55:3a:be:b4:de:fe:23:7e:0a:6b: 5a:04:97:9e:b2:85:40:e3:92:82:80:55:d3:4a:d5:f0:17:fa: 8b:07:7e:f7:38:67:3d:d8:66:90:5d:64:3c:4c:9d:7c:27:fc: 5e:dd:5a:ae:42:fd:87:56:de:b2:e9:d9:8c:0a:06:a0:84:d0: 8d:54:e5:99:1e:fe:3a:5b:e9:76:13:e3:b9:7b:17:5c:52:ff: ff:5d:23:97:4b:39:69:3a:19:87:91:bd:60:3a:4e:08:68:ac: a0:ee:eb:05:69:e2:0d:84:bc:02:29:b9:54:bf:8d:f0:78:45: db:61:db:da:91:b2:d3:80:e4:f5:8c:26:8e:d8:b2:2c:5e:ca: 17:c3:4d:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB08wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ3NzExMTAvBgNVBAUTKEEzMjE1MzcxMjUzNzYwMEQ3MTM0MkVDMDY5QTU3RjNF RUQ2MEQ3MEMwHhcNMjUwNDE2MjEyNzE5WhcNMjUwNDIzMjEyNzE5WjAYMRYwFAYD VQQDEw02ODAwMjBiNy0zOGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwml077F+dzLgvgbpajfZs1+ItqnyznrZ6qG/VCs5L9Po+j0obzOBHywpOV02 1wndH+VrCh+dW5DITsECetK00whSbvIjO1qQdJ4ZBDzdbIETSvosUqQTq12uKoqk ONkiaP3+sYP0UjpJcy9LhRxglNrP165P34HsFQvTsHhxnGh6/Rc/CrtHT4biOCgv JDpXFlTt3E7q3ihf3nLvKOFre6HGc0nRlvw/f3ziobi2puwi+pSfkayLBMnQDCoC PoF/xRuZvw4y3DVKWN69QNcfDaJ6Lejuy8ChGLpn+0FV3W58NZj7nevr4shrOOET 6rBaV06OOPoxtJdCLaP/KjEWQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMS/ld/M xP6PBw2QUIlqjtaJIwsaMB8GA1UdIwQYMBaAFKMhU3ElN2ANcTQuwGmlfz7tYNcM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDc3MS81MEMwODA0RTI5 NEIxMUVCQTc4QzFCMkZDNEY5QUUwMi9veUZUY1NVM1lBMXhOQzdBYWFWX1B1MWcx d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL295RlRjU1UzWUExeE5DN0FhYVZfUHUxZzF3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDc3MS81MEMwODA0RTI5NEIxMUVCQTc4QzFCMkZDNEY5QUUwMi9veUZUY1NVM1lB MXhOQzdBYWFWX1B1MWcxd3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgKRAFs2OBHZ4/frd0Oe+ts+NxVeYX/Y1fwGsoHrjIUwWUePZbMOl9 d8KDV8nhgxtlef/4iWt2GUublYtucqjRvP+l5qwaZt5v6i9XgpyhNB2CvAabJg7l ahlxLohjBsj+kEf9sr7bZq1rOrjZaPt22i89yVU6vrTe/iN+CmtaBJeesoVA45KC gFXTStXwF/qLB373OGc92GaQXWQ8TJ18J/xe3VquQv2HVt6y6dmMCgaghNCNVOWZ Hv46W+l2E+O5exdcUv//XSOXSzlpOhmHkb1gOk4IaKyg7usFaeINhLwCKblUv43w eEXbYdvakbLTgOT1jCaO2LIsXsoXw00H -----END CERTIFICATE-----Generated at Fri Apr 18 17:42:50 2025 by rpki-client