$ rpki-client -vvf rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft File: oTW4FOHrHifJWX7tLoIoVJMNP88.mft (raw, json) Hash identifier: quv6YDppJfjCsbI1He8v7h793foCLMPuWJ27g5z6mJc= Subject key identifier: 15:73:82:47:BA:A5:28:65:25:4F:17:25:4D:B5:44:32:CC:A7:68:26 Authority key identifier: A1:35:B8:14:E1:EB:1E:27:C9:59:7E:ED:2E:82:28:54:93:0D:3F:CF Certificate issuer: /CN=A9197390/serialNumber=A135B814E1EB1E27C9597EED2E822854930D3FCF Certificate serial: 0179 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft Manifest number: 0159 Signing time: Thu 03 Apr 2025 03:44:52 +0000 Manifest this update: Thu 03 Apr 2025 03:44:51 +0000 Manifest next update: Thu 10 Apr 2025 03:44:51 +0000 Files and hashes: 1: oTW4FOHrHifJWX7tLoIoVJMNP88.crl (hash: ntHln4uCFbfvT9k9gm4qz/TYo3oHgvfLM8z0qRR+3lI=) 2: CD168A226C2111EFB0ACC153C4F9AE02.roa (hash: F8BQEsLxz2XO34zN3GNH3AuMPZU87rOGItPVHiqWabQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.crl rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 03:44:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 377 (0x179) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197390 Validity Not Before: Apr 3 03:44:51 2025 GMT Not After : Apr 10 03:44:51 2025 GMT Subject: CN=67ee0434-39e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:67:bf:ad:f9:7f:a0:60:80:d2:45:e1:cf:03: af:8e:ff:04:1a:0a:59:24:b9:9b:5f:1c:50:a1:09: 74:b7:54:2b:b1:65:b5:40:64:ae:68:5e:ac:29:1a: 58:26:9c:2c:e8:90:69:21:ad:4a:3e:86:6a:df:3d: 12:cf:d6:88:37:7d:9b:a2:86:e1:c0:65:c4:b7:8a: e2:a5:0d:a0:66:32:fe:3b:8b:1d:8d:7e:d1:f5:10: 50:66:b0:d8:b7:51:52:bf:ac:95:ff:8a:ab:ad:64: 62:48:12:46:f5:01:0e:ca:90:94:76:bb:71:14:6e: 3a:62:91:38:cf:ea:6d:48:84:81:10:83:ba:40:77: 17:34:0c:32:3b:47:9c:d7:d2:d4:9a:a4:b3:84:77: d0:da:d1:1d:7d:3c:75:8e:57:03:05:77:d4:fe:77: 89:25:c4:a6:ff:41:24:80:75:49:c0:db:d3:15:86: 5a:9a:70:65:61:a7:80:dd:ff:d7:b0:d4:4c:ee:1e: e5:7d:f5:a0:65:2b:e3:85:e0:38:6b:f2:17:a8:9f: 00:98:21:73:94:cd:98:e7:7c:f2:81:11:a8:de:91: b1:30:14:27:20:51:2b:bc:ff:99:84:fc:4c:e8:dc: 33:0b:b3:6f:93:c2:e2:18:ee:3a:e2:f2:14:d5:4d: 41:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:73:82:47:BA:A5:28:65:25:4F:17:25:4D:B5:44:32:CC:A7:68:26 X509v3 Authority Key Identifier: keyid:A1:35:B8:14:E1:EB:1E:27:C9:59:7E:ED:2E:82:28:54:93:0D:3F:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:03:8a:85:81:59:26:a2:be:80:f9:c4:ff:75:01:7a:e5:11: 13:eb:91:7a:55:c4:2b:18:88:b1:22:09:e7:56:90:a3:8f:cf: 42:c8:fe:d8:ec:ac:f2:db:c6:ff:6c:31:ac:c7:84:75:e3:62: 1a:5c:38:b2:98:fd:c7:76:0f:a0:bf:d4:d4:b2:41:57:1e:1f: 40:77:d3:29:ec:ae:67:31:c4:ed:3b:cf:5f:76:a7:6d:cc:7e: f1:3c:61:1b:fa:ec:e3:ad:88:48:b7:42:8e:2d:74:0a:35:1e: 3b:0c:48:98:5c:6f:79:4a:d7:d1:92:8e:e7:88:76:ef:ef:88: e7:45:03:8e:ad:87:43:88:91:5b:a9:3f:bd:17:5e:37:98:ce: 0f:79:72:42:a2:da:2b:a5:e2:64:04:fa:bd:e2:92:a1:c3:c0: 89:28:2d:61:92:9f:ba:65:3f:c1:79:6e:fa:26:5d:82:a1:34: b0:97:1f:91:36:90:d1:aa:41:c7:2b:39:55:71:aa:cf:d5:b8: 53:3f:d9:98:8a:92:80:17:b4:77:a3:9b:9f:4d:30:ef:ca:3b: e1:ef:00:18:74:3e:12:3c:d4:6f:31:9f:38:14:bd:ac:f6:38: 0a:0b:2a:a6:3d:4d:0a:1e:00:09:a9:a2:70:dd:f4:9c:56:1e: 0b:3a:8a:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTczOTAxMTAvBgNVBAUTKEExMzVCODE0RTFFQjFFMjdDOTU5N0VFRDJFODIyODU0 OTMwRDNGQ0YwHhcNMjUwNDAzMDM0NDUxWhcNMjUwNDEwMDM0NDUxWjAYMRYwFAYD VQQDEw02N2VlMDQzNC0zOWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAume/rfl/oGCA0kXhzwOvjv8EGgpZJLmbXxxQoQl0t1QrsWW1QGSuaF6sKRpY Jpws6JBpIa1KPoZq3z0Sz9aIN32boobhwGXEt4ripQ2gZjL+O4sdjX7R9RBQZrDY t1FSv6yV/4qrrWRiSBJG9QEOypCUdrtxFG46YpE4z+ptSISBEIO6QHcXNAwyO0ec 19LUmqSzhHfQ2tEdfTx1jlcDBXfU/neJJcSm/0EkgHVJwNvTFYZamnBlYaeA3f/X sNRM7h7lffWgZSvjheA4a/IXqJ8AmCFzlM2Y53zygRGo3pGxMBQnIFErvP+ZhPxM 6NwzC7Nvk8LiGO464vIU1U1BfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBVzgke6 pShlJU8XJU21RDLMp2gmMB8GA1UdIwQYMBaAFKE1uBTh6x4nyVl+7S6CKFSTDT/P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzM5MC9EMkM3RTcxNjNF N0ExMUVFQTk3N0Q2MjBDNEY5QUUwMi9vVFc0Rk9IckhpZkpXWDd0TG9Jb1ZKTU5Q ODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29UVzRGT0hySGlmSldYN3RMb0lvVkpNTlA4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzM5MC9EMkM3RTcxNjNFN0ExMUVFQTk3N0Q2MjBDNEY5QUUwMi9vVFc0Rk9Ickhp ZkpXWDd0TG9Jb1ZKTU5QODgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwA4qFgVkmor6A+cT/dQF65RET65F6VcQrGIixIgnnVpCjj89CyP7Y 7Kzy28b/bDGsx4R142IaXDiymP3Hdg+gv9TUskFXHh9Ad9Mp7K5nMcTtO89fdqdt zH7xPGEb+uzjrYhIt0KOLXQKNR47DEiYXG95StfRko7niHbv74jnRQOOrYdDiJFb qT+9F143mM4PeXJCotorpeJkBPq94pKhw8CJKC1hkp+6ZT/BeW76Jl2CoTSwlx+R NpDRqkHHKzlVcarP1bhTP9mYipKAF7R3o5ufTTDvyjvh7wAYdD4SPNRvMZ84FL2s 9jgKCyqmPU0KHgAJqaJw3fScVh4LOopC -----END CERTIFICATE-----Generated at Fri Apr 4 22:34:56 2025 by rpki-client