$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft File: oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft (raw, json) Hash identifier: Bq+dHn9cTxB08bxOmdCqmFSxncpF2ZoixQKFxiqmH8k= Subject key identifier: 55:A9:E4:40:AA:AF:01:9E:E3:FD:A7:6C:69:CC:FD:C6:8C:F4:84:73 Authority key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D Certificate issuer: /CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D Certificate serial: 0183 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft Manifest number: 015A Signing time: Tue 15 Apr 2025 03:18:54 +0000 Manifest this update: Tue 15 Apr 2025 03:18:54 +0000 Manifest next update: Tue 22 Apr 2025 03:18:54 +0000 Files and hashes: 1: oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl (hash: LIN/s3wKWwj+FdVyMd+fJZvZmgqDSTYyxAXRO9x5Xbo=) 2: A1C2C588366311EEB376DC3AC4F9AE02.roa (hash: eMfy7OINYllKPw/hYmLN+RLPDufOse3B1bVnfxelXA4=) 3: A14DCC1A366311EEB376DC3AC4F9AE02.roa (hash: uXWLPj49wt34ZFOdgRvzFts1coN6e2ycjWdiQjNmKsk=) 4: FAC35354610611EFB6324A30C4F9AE02.roa (hash: 3fkGbyflBIYBaEGX9UwZRIaOP3YpNHP6p1lJeAeN+Pc=) 5: 9EBF44EC366311EEB376DC3AC4F9AE02.roa (hash: 2T6E2IzaBIpKo85tSWVvYebgls3pQQ9SNaIoG7eWLz4=) 6: AEC0C8428C5811EFA0E8E859C4F9AE02.roa (hash: q1C12AJZxBjIQzqN4k7K7GMZE1FYJg2qefZeo78vHPs=) 7: A08711E2366311EEB376DC3AC4F9AE02.roa (hash: ekGkDDIKWLiqVV7h6ESwSg8vnFxwfp+WHxsTHsOalhs=) 8: A309A0BA366311EEB376DC3AC4F9AE02.roa (hash: AW+Nxj8w4krax5vO+aa2r3fRVGb6J4InT/gDIakIwPQ=) 9: AA36D97EFC7511EE9C9CD67CC4F9AE02.roa (hash: xzZgqMDA4sRVnfCdaLDA6dVoRCpm16rxzJc3wo1vyY4=) 10: A22F20AC366311EEB376DC3AC4F9AE02.roa (hash: DKGzaOaDogHp8zZnJNJ8Xu7A6tqaHSnOfSE1S0tRHtw=) 11: 9DC673EE366311EEB376DC3AC4F9AE02.roa (hash: 2dWDYylTvBf7qUkUKq2WQpJFP4UJD1LaLQZoGDi+eMQ=) 12: 9D563A7A366311EEB376DC3AC4F9AE02.roa (hash: jf5vNKMEs/HYJC+ZfLIR6MHcZqRlwRNx9C1pqFQO2oU=) 13: 5B76DF12820611EE8A06123AC4F9AE02.roa (hash: 2F6msvEoxhf3yMkdkG6hwiZZB9ls61DIlAbmxkj7kXQ=) 14: 544F13A6B78111EF84611770C4F9AE02.roa (hash: b+cobkm/t+8VplbAM/uAvE/ze4s0B8PJ3bqKjF7kQOA=) 15: 9FE1BE90366311EEB376DC3AC4F9AE02.roa (hash: qF8dwyJS0OcLRM+lRZeGO8KZj/gqh2DhUGlNyStGdKM=) 16: A37A198A366311EEB376DC3AC4F9AE02.roa (hash: lahqqWdJv5iCoCPv96NgkWAwgDwpfB7aX0xa2UIAojg=) 17: CF415DDA520111EEBD942A6FC4F9AE02.roa (hash: sGNeudGsjKQYxdr3S2rAF3HoccrfyBnH+QSvEfzchv8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 03:18:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 387 (0x183) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919536C, serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D Validity Not Before: Apr 15 03:18:54 2025 GMT Not After : Apr 22 03:18:54 2025 GMT Subject: CN=67fdd01e-861b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0a:0d:c2:71:f9:68:8a:ce:79:47:b0:64:fb: 0c:d9:2b:ed:2a:9d:a5:90:c5:30:e7:03:3f:a8:cb: 3d:2e:11:7c:05:72:de:60:87:00:fe:4b:f3:98:0f: 78:b2:c9:db:e9:11:f9:c9:b4:9e:98:82:55:8c:46: 05:07:06:5b:d9:a0:63:7d:1e:1e:ec:f8:1b:6b:7a: e0:00:64:b2:7b:f5:a2:05:e3:84:6a:ae:3a:cc:8b: b6:9c:f9:15:1f:9e:92:95:aa:19:cb:16:68:59:a0: 15:96:5b:c4:fd:77:c7:e5:b0:b9:73:74:79:0f:a1: 0a:b9:0c:5a:fa:69:33:c9:71:29:25:45:7b:57:82: 13:29:6b:3c:a6:e8:94:de:cd:08:be:49:ef:08:0c: 91:62:f5:2a:91:e2:27:19:ae:f7:e6:63:6d:80:6a: 64:0a:49:8e:98:be:07:c3:9b:ae:79:1f:be:b9:de: d3:9c:51:fe:ac:00:80:dd:4a:87:84:af:a4:81:ae: e9:89:7d:ea:48:f5:78:4a:12:16:7a:66:01:55:b2: 9b:64:56:35:79:cd:bb:4d:20:e4:e8:3b:44:1c:bc: 43:8c:97:0b:25:a8:2a:0b:50:9b:c9:1c:16:48:43: 0a:18:4a:80:83:23:ca:d3:49:0d:fd:f3:4f:c2:7b: 4e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:A9:E4:40:AA:AF:01:9E:E3:FD:A7:6C:69:CC:FD:C6:8C:F4:84:73 X509v3 Authority Key Identifier: keyid:A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:70:46:15:9c:ac:10:a3:56:28:9b:f1:c7:1a:10:2f:f2:68: 92:fe:bc:30:d9:66:86:0a:0a:48:0f:da:6a:9d:b7:15:e9:3c: 1a:6e:a7:6c:76:84:df:1c:2c:4f:ef:84:47:80:3d:08:ed:6a: 43:75:e7:b5:d7:d7:0b:30:e8:6d:51:e6:76:0a:e4:0d:1b:8f: 7f:f4:02:f0:71:43:32:cd:50:d7:14:14:95:c6:4e:e7:f3:56: 07:6a:a0:58:23:8a:d6:94:02:2c:23:63:88:e4:1d:60:3f:1e: 28:e6:83:21:d9:c2:cb:d9:24:ac:dd:b6:d7:22:c4:66:bc:1d: 31:e5:41:3c:4b:b7:94:2a:35:46:8c:3a:89:1d:89:f5:60:c6: 6e:72:a8:9f:ad:1b:7e:2a:31:f4:e9:ee:8f:66:a3:5b:5e:ec: d2:db:ca:98:10:e2:c9:09:f9:58:98:a2:5f:cb:a4:cd:c3:b5: 16:07:43:2e:c8:d0:e4:bc:1d:40:a9:fa:40:d0:bf:c9:07:24: d4:6c:e1:16:1f:21:de:2e:81:ea:c5:86:fc:73:14:8e:e1:d3: 54:43:ed:2f:f8:e0:6d:89:ec:51:cc:26:e5:6c:b8:b1:b1:a4: ac:b5:72:59:40:ca:b1:98:14:fb:0f:d6:47:9f:74:74:1a:ed: 2a:d8:02:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTUzNkMxMTAvBgNVBAUTKEEwOTBFNTIwQkY5RDUxRjJGRENFRUQ0MTNBRjI3QUM3 NThGNkFFMUQwHhcNMjUwNDE1MDMxODU0WhcNMjUwNDIyMDMxODU0WjAYMRYwFAYD VQQDEw02N2ZkZDAxZS04NjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqgoNwnH5aIrOeUewZPsM2SvtKp2lkMUw5wM/qMs9LhF8BXLeYIcA/kvzmA94 ssnb6RH5ybSemIJVjEYFBwZb2aBjfR4e7Pgba3rgAGSye/WiBeOEaq46zIu2nPkV H56SlaoZyxZoWaAVllvE/XfH5bC5c3R5D6EKuQxa+mkzyXEpJUV7V4ITKWs8puiU 3s0IvknvCAyRYvUqkeInGa735mNtgGpkCkmOmL4Hw5uueR++ud7TnFH+rACA3UqH hK+kga7piX3qSPV4ShIWemYBVbKbZFY1ec27TSDk6DtEHLxDjJcLJagqC1CbyRwW SEMKGEqAgyPK00kN/fNPwntORQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFWp5ECq rwGe4/2nbGnM/caM9IRzMB8GA1UdIwQYMBaAFKCQ5SC/nVHy/c7tQTryesdY9q4d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTM2Qy83NUI5OEJGMDM2 NjAxMUVFODhFMEY1MzBDNEY5QUUwMi9vSkRsSUwtZFVmTDl6dTFCT3ZKNngxajJy aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL29KRGxJTC1kVWZMOXp1MUJPdko2eDFqMnJoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTM2Qy83NUI5OEJGMDM2NjAxMUVFODhFMEY1MzBDNEY5QUUwMi9vSkRsSUwtZFVm TDl6dTFCT3ZKNngxajJyaDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMcEYVnKwQo1Yom/HHGhAv8miS/rww2WaGCgpID9pqnbcV6Twabqds doTfHCxP74RHgD0I7WpDdee119cLMOhtUeZ2CuQNG49/9ALwcUMyzVDXFBSVxk7n 81YHaqBYI4rWlAIsI2OI5B1gPx4o5oMh2cLL2SSs3bbXIsRmvB0x5UE8S7eUKjVG jDqJHYn1YMZucqifrRt+KjH06e6PZqNbXuzS28qYEOLJCflYmKJfy6TNw7UWB0Mu yNDkvB1AqfpA0L/JByTUbOEWHyHeLoHqxYb8cxSO4dNUQ+0v+OBtiexRzCblbLix saSstXJZQMqxmBT7D9ZHn3R0Gu0q2AIg -----END CERTIFICATE-----Generated at Wed Apr 16 21:09:31 2025 by rpki-client