$ rpki-client -vvf rpki.apnic.net/member_repository/A91C66B7/66CDA4E8911611EA91C4650CC4F9AE02/w0Ozu4On4j-tla-NIytSBSoP3nI.mft File: w0Ozu4On4j-tla-NIytSBSoP3nI.mft (raw, json) Hash identifier: F+oiwUW4RBT2HDnqwE0HRufrJwdkIY+p+ZRUTTx14M0= Subject key identifier: FD:10:0D:B2:D3:E8:E8:46:46:2F:FA:3D:1C:66:AA:68:CC:C5:C3:E1 Authority key identifier: C3:43:B3:BB:83:A7:E2:3F:AD:95:AF:8D:23:2B:52:05:2A:0F:DE:72 Certificate issuer: /CN=A91C66B7/serialNumber=C343B3BB83A7E23FAD95AF8D232B52052A0FDE72 Certificate serial: 0986 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w0Ozu4On4j-tla-NIytSBSoP3nI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C66B7/66CDA4E8911611EA91C4650CC4F9AE02/w0Ozu4On4j-tla-NIytSBSoP3nI.mft Manifest number: 096B Signing time: Mon 14 Apr 2025 20:04:02 +0000 Manifest this update: Mon 14 Apr 2025 20:04:01 +0000 Manifest next update: Mon 21 Apr 2025 20:04:01 +0000 Files and hashes: 1: w0Ozu4On4j-tla-NIytSBSoP3nI.crl (hash: a5IPFnfPD9hBUtYK9sQKb3C1xZq5kPIn6NyhP/aDOUk=) 2: 8A480EFE80EE11EBA01B8C79C4F9AE02.roa (hash: nGCSzyeCGWb2by2Ok6xODoRNUK8MF0tF735aj9iyb9Y=) 3: 63FE6F90232411EB87A6CB0DC4F9AE02.roa (hash: MFp+TQFdjUkWq8YrpZoPX+xKXmHG4qHFMaA4FACPOxE=) 4: 023564E6D5BE11ECA8BE4666C4F9AE02.roa (hash: wHZWRXwKbEVincv7YJ3e25Slz3Zw4ni306PAKoBPm2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C66B7/66CDA4E8911611EA91C4650CC4F9AE02/w0Ozu4On4j-tla-NIytSBSoP3nI.crl rsync://rpki.apnic.net/member_repository/A91C66B7/66CDA4E8911611EA91C4650CC4F9AE02/w0Ozu4On4j-tla-NIytSBSoP3nI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w0Ozu4On4j-tla-NIytSBSoP3nI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 20:04:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2438 (0x986) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C66B7, serialNumber=C343B3BB83A7E23FAD95AF8D232B52052A0FDE72 Validity Not Before: Apr 14 20:04:01 2025 GMT Not After : Apr 21 20:04:01 2025 GMT Subject: CN=67fd6a31-c708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:61:05:1a:1a:28:2a:f7:e6:ff:ef:83:24:0f: 42:f7:30:5c:25:81:36:13:1b:a8:13:30:b7:13:62: bc:36:96:93:f3:67:6d:01:0e:aa:4c:61:ee:3a:be: 43:4f:e1:09:10:3f:c7:70:c3:4c:c7:61:bb:5f:c3: 47:7c:1d:b8:55:2c:2e:fb:c0:fc:56:ef:22:62:54: 61:83:67:23:89:be:22:7f:2a:a2:f7:f7:88:1a:d2: 80:ad:ab:c6:4e:97:72:76:bd:32:68:58:b9:c8:4a: 85:93:0b:6f:3a:29:bc:4d:2d:7f:99:60:0f:2d:51: a7:55:24:7f:b5:0b:03:0d:78:f1:96:41:56:d3:71: 8a:0e:39:db:18:fc:d3:16:db:24:fc:d1:8c:c3:61: 94:b7:40:1d:9c:ac:ad:00:8e:aa:5a:73:3c:a5:aa: bb:d6:1a:6e:0f:aa:c5:fb:16:c3:0b:85:cd:5f:d8: b4:f5:68:02:35:0a:6b:3e:c0:52:3c:1e:c0:34:f0: 17:3a:60:cb:c0:c4:5b:c5:29:51:1d:82:30:5e:db: 37:f3:5a:0c:a0:23:cd:ea:0a:7e:b6:5e:c8:e0:86: 77:75:7d:a0:09:ea:d3:76:3a:15:56:22:fd:56:c1: 67:cf:1c:eb:44:02:29:ef:cf:89:b1:a2:99:ee:60: d7:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:10:0D:B2:D3:E8:E8:46:46:2F:FA:3D:1C:66:AA:68:CC:C5:C3:E1 X509v3 Authority Key Identifier: keyid:C3:43:B3:BB:83:A7:E2:3F:AD:95:AF:8D:23:2B:52:05:2A:0F:DE:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C66B7/66CDA4E8911611EA91C4650CC4F9AE02/w0Ozu4On4j-tla-NIytSBSoP3nI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w0Ozu4On4j-tla-NIytSBSoP3nI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C66B7/66CDA4E8911611EA91C4650CC4F9AE02/w0Ozu4On4j-tla-NIytSBSoP3nI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:0e:07:1b:a2:85:c3:ca:6b:39:b0:b1:19:6c:c5:d6:b7:bc: 0e:bd:c2:b9:44:2c:0d:4a:d8:2b:2a:ef:03:b9:a0:20:d8:b6: ad:97:39:12:5c:b7:e6:c7:4a:69:d4:01:83:ff:3c:87:7c:a1: f1:82:78:03:0a:51:87:40:9f:84:9c:89:9d:8c:86:dd:c6:01: 38:82:de:dc:6a:28:1c:dc:e6:79:79:ae:69:5f:f5:5f:0d:5c: 66:e7:3c:36:5e:67:23:bb:60:62:a9:f9:7d:83:bc:de:3b:44: 03:31:7c:90:c4:dc:1b:ee:ec:05:4a:c0:54:46:4b:13:b1:10: de:b0:4d:97:eb:03:8b:f5:04:21:ea:5c:18:c7:7d:6f:b0:2d: c3:04:33:f5:8a:4b:85:fa:2e:18:40:31:31:33:84:01:ff:62: 8f:02:50:b7:2a:84:f0:39:2e:cf:d8:be:08:9e:ac:51:b3:09: 2b:96:6d:f3:07:15:dd:04:7d:37:c3:39:4b:a0:86:cc:c7:84: cb:ff:13:fd:92:7d:59:51:22:b9:e1:df:37:4b:1a:d3:cc:b1: fc:d2:bf:57:c2:ab:0d:ee:b3:0c:60:23:39:ae:f6:03:51:8c: f3:28:ff:87:63:4a:f6:c6:bc:9b:de:d7:a8:7a:cd:b8:8f:58: 95:64:71:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY2QjcxMTAvBgNVBAUTKEMzNDNCM0JCODNBN0UyM0ZBRDk1QUY4RDIzMkI1MjA1 MkEwRkRFNzIwHhcNMjUwNDE0MjAwNDAxWhcNMjUwNDIxMjAwNDAxWjAYMRYwFAYD VQQDEw02N2ZkNmEzMS1jNzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq2EFGhooKvfm/++DJA9C9zBcJYE2ExuoEzC3E2K8NpaT82dtAQ6qTGHuOr5D T+EJED/HcMNMx2G7X8NHfB24VSwu+8D8Vu8iYlRhg2cjib4ifyqi9/eIGtKAravG Tpdydr0yaFi5yEqFkwtvOim8TS1/mWAPLVGnVSR/tQsDDXjxlkFW03GKDjnbGPzT Ftsk/NGMw2GUt0AdnKytAI6qWnM8paq71hpuD6rF+xbDC4XNX9i09WgCNQprPsBS PB7ANPAXOmDLwMRbxSlRHYIwXts381oMoCPN6gp+tl7I4IZ3dX2gCerTdjoVViL9 VsFnzxzrRAIp78+JsaKZ7mDXpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP0QDbLT 6OhGRi/6PRxmqmjMxcPhMB8GA1UdIwQYMBaAFMNDs7uDp+I/rZWvjSMrUgUqD95y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjZCNy82NkNEQTRFODkx MTYxMUVBOTFDNDY1MENDNEY5QUUwMi93ME96dTRPbjRqLXRsYS1OSXl0U0JTb1Az bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3cwT3p1NE9uNGotdGxhLU5JeXRTQlNvUDNuSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjZCNy82NkNEQTRFODkxMTYxMUVBOTFDNDY1MENDNEY5QUUwMi93ME96dTRPbjRq LXRsYS1OSXl0U0JTb1AzbkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiDgcbooXDyms5sLEZbMXWt7wOvcK5RCwNStgrKu8DuaAg2LatlzkS XLfmx0pp1AGD/zyHfKHxgngDClGHQJ+EnImdjIbdxgE4gt7caigc3OZ5ea5pX/Vf DVxm5zw2Xmcju2Biqfl9g7zeO0QDMXyQxNwb7uwFSsBURksTsRDesE2X6wOL9QQh 6lwYx31vsC3DBDP1ikuF+i4YQDExM4QB/2KPAlC3KoTwOS7P2L4InqxRswkrlm3z BxXdBH03wzlLoIbMx4TL/xP9kn1ZUSK54d83SxrTzLH80r9XwqsN7rMMYCM5rvYD UYzzKP+HY0r2xryb3teoes24j1iVZHHj -----END CERTIFICATE-----Generated at Wed Apr 16 17:16:38 2025 by rpki-client