$ rpki-client -vvf rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft File: Op4IQWhX5XRXw49Tbg1usjbf-2E.mft (raw, json) Hash identifier: LZ6dxqUocH0b7VCKgQ3Pod53MGKNh6okn0JkNaOwHvs= Subject key identifier: 82:D8:E5:7D:2D:54:7D:E6:D6:03:3D:EC:F8:BB:B2:46:C6:0F:06:55 Authority key identifier: 3A:9E:08:41:68:57:E5:74:57:C3:8F:53:6E:0D:6E:B2:36:DF:FB:61 Certificate issuer: /CN=A9197CED/serialNumber=3A9E08416857E57457C38F536E0D6EB236DFFB61 Certificate serial: 359E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft Manifest number: 3513 Signing time: Fri 04 Apr 2025 14:24:03 +0000 Manifest this update: Fri 04 Apr 2025 14:24:02 +0000 Manifest next update: Fri 11 Apr 2025 14:24:02 +0000 Files and hashes: 1: Op4IQWhX5XRXw49Tbg1usjbf-2E.crl (hash: CghjdhWsrkNoBLVGi6rYdoPsNJs8IJ+tx38Gt1KnWvg=) 2: FD7F9B32113911F0924C8A55C4F9AE02.roa (hash: EyI9QQhGRVaD8EnoJzZ4f+KyGVuAtUyRVez/as+esQo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.crl rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 14:24:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13726 (0x359e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197CED Validity Not Before: Apr 4 14:24:02 2025 GMT Not After : Apr 11 14:24:02 2025 GMT Subject: CN=67efeb83-cede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8f:3f:e8:56:c8:d9:8f:a8:13:82:85:ad:0a: 70:1a:08:3b:d4:ff:cf:3d:dd:0f:37:1b:62:79:7c: 87:25:02:2e:9f:f4:98:a1:10:d3:3d:ed:2b:14:8e: cd:ff:ef:08:48:b1:2b:c6:13:6c:ea:20:ae:a6:54: ab:40:97:0f:84:a2:a4:3f:18:5d:99:e3:ce:fc:81: 70:a0:bc:8f:aa:75:99:64:da:2c:38:6f:94:a3:c5: 20:75:7f:da:9c:f8:16:73:8c:1f:35:1b:21:03:17: 7e:0a:b1:13:a1:46:a4:2d:e3:18:7b:c7:eb:73:19: 46:b6:7e:91:57:74:60:e8:fa:77:df:5f:f6:dc:ff: 9d:30:e1:97:8b:a8:26:7e:6d:36:9a:2a:b7:5f:c1: 54:8a:0a:7f:8d:58:f3:cc:6e:c2:f6:09:4d:27:48: c1:39:20:69:a8:e7:ae:b8:01:0e:a1:98:65:8e:fa: 6d:f9:1e:65:b0:40:3e:1c:74:4d:51:2a:34:03:b5: 2a:64:82:6f:00:68:63:cd:b9:f8:3f:8c:79:cd:2b: 0e:ff:63:58:0e:2a:54:00:ec:23:5f:dc:8f:a7:fa: ae:d2:d9:ad:8f:c6:24:7f:d9:22:e2:6d:11:b3:b9: 9c:10:42:26:80:1d:ba:85:73:f9:c3:42:6f:98:1e: 3b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:D8:E5:7D:2D:54:7D:E6:D6:03:3D:EC:F8:BB:B2:46:C6:0F:06:55 X509v3 Authority Key Identifier: keyid:3A:9E:08:41:68:57:E5:74:57:C3:8F:53:6E:0D:6E:B2:36:DF:FB:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:d9:bc:a5:b8:64:8e:3e:41:c6:ac:3d:12:31:0d:c1:35:1c: c0:f2:1a:fc:23:28:ee:a6:38:67:f9:36:87:89:6d:8d:52:09: 0c:1c:e4:27:d6:a1:2a:f7:2a:51:07:02:11:03:e1:fc:f7:d0: 74:df:cd:4a:da:20:1f:b9:fb:12:e1:d3:09:a2:7b:b3:b5:9a: cb:f2:9f:66:c0:16:4f:fe:b7:02:02:96:5e:20:d2:c5:a6:f1: b8:1d:ed:4a:f0:7d:61:85:90:1d:b0:1c:d8:40:40:56:55:c6: df:a8:b8:2e:55:c2:db:8f:12:7c:36:85:55:a8:57:a0:e8:10: fe:b1:4e:c2:a0:63:c9:42:75:8b:91:f8:3f:00:51:d1:67:41: ce:4b:c1:3c:bd:1d:a2:63:e1:d0:74:b8:80:0d:61:cd:40:24: c0:b2:17:d8:b3:80:b7:a8:fa:77:d6:9c:a1:92:7d:ff:6e:01: e2:12:97:c4:8a:78:7f:a3:26:61:25:25:59:a7:b3:65:a2:0b: d6:4b:1c:3e:8c:2e:c4:6c:0c:65:4c:a9:a6:b9:3f:38:3c:44: c7:e8:04:76:1c:03:71:d3:0d:67:ed:1c:87:cb:7e:fd:c1:a1: e1:b1:e9:4d:e6:5a:ef:c8:92:7f:aa:a6:24:ca:c2:6a:fd:aa: 6f:64:94:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdDRUQxMTAvBgNVBAUTKDNBOUUwODQxNjg1N0U1NzQ1N0MzOEY1MzZFMEQ2RUIy MzZERkZCNjEwHhcNMjUwNDA0MTQyNDAyWhcNMjUwNDExMTQyNDAyWjAYMRYwFAYD VQQDEw02N2VmZWI4My1jZWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArY8/6FbI2Y+oE4KFrQpwGgg71P/PPd0PNxtieXyHJQIun/SYoRDTPe0rFI7N /+8ISLErxhNs6iCuplSrQJcPhKKkPxhdmePO/IFwoLyPqnWZZNosOG+Uo8UgdX/a nPgWc4wfNRshAxd+CrEToUakLeMYe8frcxlGtn6RV3Rg6Pp331/23P+dMOGXi6gm fm02miq3X8FUigp/jVjzzG7C9glNJ0jBOSBpqOeuuAEOoZhljvpt+R5lsEA+HHRN USo0A7UqZIJvAGhjzbn4P4x5zSsO/2NYDipUAOwjX9yPp/qu0tmtj8Ykf9ki4m0R s7mcEEImgB26hXP5w0JvmB470wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFILY5X0t VH3m1gM97Pi7skbGDwZVMB8GA1UdIwQYMBaAFDqeCEFoV+V0V8OPU24NbrI23/th MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0NFRC84M0Y1NkRBQzFE ODQxMUUyOTEwNjg5REEwOEIwMkNEMi9PcDRJUVdoWDVYUlh3NDlUYmcxdXNqYmYt MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09wNElRV2hYNVhSWHc0OVRiZzF1c2piZi0yRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0NFRC84M0Y1NkRBQzFEODQxMUUyOTEwNjg5REEwOEIwMkNEMi9PcDRJUVdoWDVY Ulh3NDlUYmcxdXNqYmYtMkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJ2byluGSOPkHGrD0SMQ3BNRzA8hr8Iyjupjhn+TaHiW2NUgkMHOQn 1qEq9ypRBwIRA+H899B0381K2iAfufsS4dMJonuztZrL8p9mwBZP/rcCApZeINLF pvG4He1K8H1hhZAdsBzYQEBWVcbfqLguVcLbjxJ8NoVVqFeg6BD+sU7CoGPJQnWL kfg/AFHRZ0HOS8E8vR2iY+HQdLiADWHNQCTAshfYs4C3qPp31pyhkn3/bgHiEpfE inh/oyZhJSVZp7NlogvWSxw+jC7EbAxlTKmmuT84PETH6AR2HANx0w1n7RyHy379 waHhselN5lrvyJJ/qqYkysJq/apvZJRq -----END CERTIFICATE-----Generated at Fri Apr 4 22:00:33 2025 by rpki-client