$ rpki-client -vvf rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft File: 31OLuqk3tpugC7J7caS3dubkGf4.mft (raw, json) Hash identifier: okooMns2WC8+LZZMFhz1Jcg61X3baMxYlxLmbhgffMM= Subject key identifier: 72:52:E1:77:1D:45:9C:CD:DC:5B:25:C3:98:16:16:A9:85:21:3F:A3 Authority key identifier: DF:53:8B:BA:A9:37:B6:9B:A0:0B:B2:7B:71:A4:B7:76:E6:E4:19:FE Certificate issuer: /CN=A9191170/serialNumber=DF538BBAA937B69BA00BB27B71A4B776E6E419FE Certificate serial: 0164 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31OLuqk3tpugC7J7caS3dubkGf4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft Manifest number: 0160 Signing time: Thu 17 Apr 2025 02:57:48 +0000 Manifest this update: Thu 17 Apr 2025 02:57:47 +0000 Manifest next update: Thu 24 Apr 2025 02:57:47 +0000 Files and hashes: 1: 31OLuqk3tpugC7J7caS3dubkGf4.crl (hash: oSJEjyuW/rySCbCTMOSHFxCZScicxpH4cqkDF5pP9JU=) 2: 086823BE07B911F0875CC733C4F9AE02.roa (hash: M5+rFpRElgL5MsNDAAy/cLdqoRb25PYbimpSg/t1Z3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.crl rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31OLuqk3tpugC7J7caS3dubkGf4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 02:57:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 356 (0x164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191170, serialNumber=DF538BBAA937B69BA00BB27B71A4B776E6E419FE Validity Not Before: Apr 17 02:57:47 2025 GMT Not After : Apr 24 02:57:47 2025 GMT Subject: CN=68006e2c-e4e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c7:07:22:ed:81:12:03:db:25:25:c9:14:2c: 9a:60:41:18:6a:eb:93:ac:29:0e:00:0d:71:fd:5e: a3:36:86:9c:3a:63:c0:4b:33:8b:7c:0f:65:15:69: e3:64:fb:42:76:fe:87:c2:e7:4f:3a:57:ad:60:fc: 77:58:de:9a:94:e4:ee:bb:ad:ac:95:50:5b:be:b9: 10:09:f7:07:ce:c7:6b:2f:1a:cd:ca:7d:b8:f9:23: fe:f4:8a:8e:2d:6d:ac:d1:8e:d8:a8:72:a1:0f:46: 17:1b:0c:1e:81:f5:f8:ca:28:d3:51:e5:a7:78:e3: ce:8b:63:2e:7e:71:e7:a4:76:05:fb:5f:c9:72:4f: 71:d1:63:91:d4:ff:97:ca:92:d5:54:bc:5f:f6:48: c4:96:8f:a4:56:a8:ee:98:c9:cf:d6:c3:6a:af:17: 33:3f:5a:44:cd:d0:56:d0:0e:82:5e:39:d1:57:c1: 4d:21:52:fd:1f:00:69:f6:37:f3:b9:cc:e0:84:86: 92:cb:14:c2:bf:c2:0e:7b:12:c4:26:fe:e9:41:0b: 50:87:f5:45:c4:31:77:99:e9:8c:d1:41:c2:2c:42: 7c:6b:ed:f3:39:e8:3b:a8:95:9f:ef:b9:7b:f3:5d: c2:d7:ca:f9:a6:02:58:a9:f6:dc:b1:8c:46:f6:92: eb:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:52:E1:77:1D:45:9C:CD:DC:5B:25:C3:98:16:16:A9:85:21:3F:A3 X509v3 Authority Key Identifier: keyid:DF:53:8B:BA:A9:37:B6:9B:A0:0B:B2:7B:71:A4:B7:76:E6:E4:19:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31OLuqk3tpugC7J7caS3dubkGf4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:95:ea:46:3e:7a:2e:7b:e1:aa:50:15:b3:22:51:99:18:15: 8e:02:ec:d0:1b:e7:c5:21:45:06:79:db:d8:da:f1:18:10:7b: 88:65:85:76:5e:f8:ba:74:06:85:f3:4b:85:d6:cd:ae:86:86: aa:49:44:0b:65:9c:98:3a:12:44:ce:86:e1:56:3f:31:f2:3e: 78:e4:49:15:d1:cc:1b:82:d7:5b:c3:46:16:1a:d0:bc:f5:87: ed:5b:de:22:4a:5d:bd:8f:f4:e3:61:d2:0a:0a:a0:87:72:61: e4:8b:da:21:32:0b:59:b8:06:f7:3a:24:28:03:f9:94:fe:0b: e6:24:e8:63:6b:07:e8:08:f8:75:97:71:00:3c:1a:58:d0:54: cd:f2:d0:2d:03:cd:a7:57:4a:33:f9:34:ce:71:a8:dd:b0:47: ec:3b:b5:a3:63:6f:4c:69:85:c3:a6:fa:49:c8:69:14:33:69: a8:24:14:a8:df:7c:c6:7a:c0:0c:1d:1a:75:3d:7b:52:e3:99: 04:70:b5:86:af:37:90:41:68:7d:70:37:20:e0:e3:67:f5:49: d2:62:11:38:d4:f6:8f:23:93:b1:ce:d5:00:b9:a3:b3:b3:6b: ca:26:ef:f1:fd:18:5b:e7:b4:bc:cb:b0:23:97:2b:9b:24:ac: cd:76:61:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTExNzAxMTAvBgNVBAUTKERGNTM4QkJBQTkzN0I2OUJBMDBCQjI3QjcxQTRCNzc2 RTZFNDE5RkUwHhcNMjUwNDE3MDI1NzQ3WhcNMjUwNDI0MDI1NzQ3WjAYMRYwFAYD VQQDEw02ODAwNmUyYy1lNGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA08cHIu2BEgPbJSXJFCyaYEEYauuTrCkOAA1x/V6jNoacOmPASzOLfA9lFWnj ZPtCdv6HwudPOletYPx3WN6alOTuu62slVBbvrkQCfcHzsdrLxrNyn24+SP+9IqO LW2s0Y7YqHKhD0YXGwwegfX4yijTUeWneOPOi2MufnHnpHYF+1/Jck9x0WOR1P+X ypLVVLxf9kjElo+kVqjumMnP1sNqrxczP1pEzdBW0A6CXjnRV8FNIVL9HwBp9jfz uczghIaSyxTCv8IOexLEJv7pQQtQh/VFxDF3memM0UHCLEJ8a+3zOeg7qJWf77l7 813C18r5pgJYqfbcsYxG9pLrmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHJS4Xcd RZzN3Fslw5gWFqmFIT+jMB8GA1UdIwQYMBaAFN9Ti7qpN7aboAuye3Gkt3bm5Bn+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTE3MC9GMzIzMDhDMjA0 MkExMUVFOTRBODQ5NDFDNEY5QUUwMi8zMU9MdXFrM3RwdWdDN0o3Y2FTM2R1YmtH ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMxT0x1cWszdHB1Z0M3SjdjYVMzZHVia0dmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTE3MC9GMzIzMDhDMjA0MkExMUVFOTRBODQ5NDFDNEY5QUUwMi8zMU9MdXFrM3Rw dWdDN0o3Y2FTM2R1YmtHZjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWlepGPnoue+GqUBWzIlGZGBWOAuzQG+fFIUUGedvY2vEYEHuIZYV2 Xvi6dAaF80uF1s2uhoaqSUQLZZyYOhJEzobhVj8x8j545EkV0cwbgtdbw0YWGtC8 9YftW94iSl29j/TjYdIKCqCHcmHki9ohMgtZuAb3OiQoA/mU/gvmJOhjawfoCPh1 l3EAPBpY0FTN8tAtA82nV0oz+TTOcajdsEfsO7WjY29MaYXDpvpJyGkUM2moJBSo 33zGesAMHRp1PXtS45kEcLWGrzeQQWh9cDcg4ONn9UnSYhE41PaPI5OxztUAuaOz s2vKJu/x/Rhb57S8y7AjlyubJKzNdmGI -----END CERTIFICATE-----Generated at Fri Apr 18 05:42:38 2025 by rpki-client