$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft File: OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft (raw, json) Hash identifier: oKEzwXN3EqzpNM8XcCCJfdsycKmcupUDbrIfMqeWyi8= Subject key identifier: 2A:15:AB:A8:3C:A5:7D:A1:85:24:80:89:7D:B0:F5:51:F4:4D:8E:A3 Authority key identifier: 3A:83:0D:43:F3:59:44:FF:B2:86:01:D3:33:30:20:AC:3C:31:92:41 Certificate issuer: /CN=A919F0DA/serialNumber=3A830D43F35944FFB28601D3333020AC3C319241 Certificate serial: 23CF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft Manifest number: 5FC7 Signing time: Thu 10 Apr 2025 14:15:20 +0000 Manifest this update: Thu 10 Apr 2025 14:15:19 +0000 Manifest next update: Thu 17 Apr 2025 14:15:19 +0000 Files and hashes: 1: OoMNQ_NZRP-yhgHTMzAgrDwxkkE.crl (hash: Pb11/JIVvj+MSiuMDF7la8WMTKlEI9iliZdttY7FWn0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.crl rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9167 (0x23cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F0DA Validity Not Before: Apr 10 14:15:19 2025 GMT Not After : Apr 17 14:15:19 2025 GMT Subject: CN=67f7d278-a760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4c:19:79:44:c8:3b:d8:2c:b3:42:aa:8b:75: 82:d8:0d:f8:73:6a:f3:07:ca:7d:39:01:1b:9c:db: 69:7c:9c:ee:9e:4a:b3:af:a9:33:6b:ae:2a:e2:c1: 69:13:bf:33:c9:c7:ff:da:8d:36:14:31:4b:b4:14: 31:f5:ed:1b:4c:ba:8d:e7:a7:2c:0c:90:76:ea:5e: 9c:d9:7a:e1:76:b3:bd:36:2b:55:73:bf:26:13:d6: 69:43:48:a4:4b:04:19:ee:89:1e:b4:7c:28:33:d7: f7:8f:45:a7:ee:60:2d:30:b3:38:d3:c4:a3:62:d3: b0:ee:9c:00:1a:70:7f:d2:f7:ab:e5:7a:10:f6:9a: 24:0a:f1:52:a6:3e:20:c8:31:54:c1:ca:c0:51:bf: 01:ee:b0:3c:ad:48:d2:d7:33:be:b6:4a:07:66:5c: 4d:bd:ed:b3:49:f8:64:cb:6d:42:03:71:2d:a3:c4: 92:f9:fe:75:3c:93:ee:46:9c:90:b2:81:33:84:bf: ba:97:a9:8e:6a:61:1b:bc:49:ca:1e:49:7f:e9:d3: c5:b2:bf:58:ab:fd:8e:e9:b6:cd:6d:60:29:83:05: f6:8a:71:f7:b4:52:af:9b:ba:9f:7d:ea:6f:8f:49: ff:0c:6c:97:fd:1a:35:8d:95:51:5b:6a:44:2d:b1: c1:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:15:AB:A8:3C:A5:7D:A1:85:24:80:89:7D:B0:F5:51:F4:4D:8E:A3 X509v3 Authority Key Identifier: keyid:3A:83:0D:43:F3:59:44:FF:B2:86:01:D3:33:30:20:AC:3C:31:92:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:2e:72:f9:b7:de:57:1a:4b:87:df:3c:7c:4b:69:7b:89:a4: 01:c4:67:4f:17:39:e3:ee:c3:bc:9d:d7:3b:92:4f:7d:fd:37: fd:81:ab:f9:e7:92:cf:4e:6f:b9:f1:bd:61:f1:0d:1f:3d:67: 72:c9:2f:77:b1:19:49:7f:e5:18:aa:91:c6:5f:7d:7c:7f:a0: a2:98:de:07:da:5a:2c:e9:2f:1c:1d:3a:9c:74:4f:2b:2d:ce: 14:24:41:45:f1:ed:8d:cb:d0:a0:b0:a6:ad:15:0d:3e:7e:a5: 1e:5f:8e:e7:9c:d5:19:2f:8e:82:d3:6e:09:a9:75:f1:1c:b3: 7d:7b:cd:c0:9b:85:6d:84:58:67:17:45:92:22:91:7c:03:40: 76:31:fe:19:13:c8:b9:1f:0e:69:df:60:a6:0e:1c:b3:5b:6f: 63:53:6e:73:13:68:e2:7a:77:2e:cc:36:53:b0:dd:26:b5:6e: 10:44:8d:13:5f:e8:fd:bb:59:ec:d5:c7:49:da:ed:ac:f8:78: 6d:d9:25:c3:b8:82:91:96:ea:2b:70:c8:4e:ed:d4:e0:9d:27: ff:99:7b:f0:4e:85:d8:11:80:3a:bc:ef:2f:8f:60:7e:66:bf: 3c:13:81:cf:41:b0:33:4a:df:b2:df:55:74:53:1d:48:ff:87: 6e:09:c2:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI88wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYwREExMTAvBgNVBAUTKDNBODMwRDQzRjM1OTQ0RkZCMjg2MDFEMzMzMzAyMEFD M0MzMTkyNDEwHhcNMjUwNDEwMTQxNTE5WhcNMjUwNDE3MTQxNTE5WjAYMRYwFAYD VQQDEw02N2Y3ZDI3OC1hNzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn0wZeUTIO9gss0Kqi3WC2A34c2rzB8p9OQEbnNtpfJzunkqzr6kza64q4sFp E78zycf/2o02FDFLtBQx9e0bTLqN56csDJB26l6c2XrhdrO9NitVc78mE9ZpQ0ik SwQZ7oketHwoM9f3j0Wn7mAtMLM408SjYtOw7pwAGnB/0ver5XoQ9pokCvFSpj4g yDFUwcrAUb8B7rA8rUjS1zO+tkoHZlxNve2zSfhky21CA3Eto8SS+f51PJPuRpyQ soEzhL+6l6mOamEbvEnKHkl/6dPFsr9Yq/2O6bbNbWApgwX2inH3tFKvm7qffepv j0n/DGyX/Ro1jZVRW2pELbHBsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCoVq6g8 pX2hhSSAiX2w9VH0TY6jMB8GA1UdIwQYMBaAFDqDDUPzWUT/soYB0zMwIKw8MZJB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjBEQS9GQzYxRTAwODFE NjcxMUUyOEMxODI4QTQwOEIwMkNEMi9Pb01OUV9OWlJQLXloZ0hUTXpBZ3JEd3hr a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09vTU5RX05aUlAteWhnSFRNekFnckR3eGtrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjBEQS9GQzYxRTAwODFENjcxMUUyOEMxODI4QTQwOEIwMkNEMi9Pb01OUV9OWlJQ LXloZ0hUTXpBZ3JEd3hra0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOLnL5t95XGkuH3zx8S2l7iaQBxGdPFznj7sO8ndc7kk99/Tf9gav5 55LPTm+58b1h8Q0fPWdyyS93sRlJf+UYqpHGX318f6CimN4H2los6S8cHTqcdE8r Lc4UJEFF8e2Ny9CgsKatFQ0+fqUeX47nnNUZL46C024JqXXxHLN9e83Am4VthFhn F0WSIpF8A0B2Mf4ZE8i5Hw5p32CmDhyzW29jU25zE2jiencuzDZTsN0mtW4QRI0T X+j9u1ns1cdJ2u2s+Hht2SXDuIKRluorcMhO7dTgnSf/mXvwToXYEYA6vO8vj2B+ Zr88E4HPQbAzSt+y31V0Ux1I/4duCcJO -----END CERTIFICATE-----Generated at Thu Apr 10 22:58:27 2025 by rpki-client