$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft File: OopqLuXcCfyqgv8BjwnBr4S0EZY.mft (raw, json) Hash identifier: 7vnTLD8bhKt46vTxsXLpSA2lynZTLoLE2bGIZXbH8Kg= Subject key identifier: 84:3A:AD:EC:D1:52:EE:07:93:79:86:A8:97:0D:6D:93:15:C2:86:07 Authority key identifier: 3A:8A:6A:2E:E5:DC:09:FC:AA:82:FF:01:8F:09:C1:AF:84:B4:11:96 Certificate issuer: /CN=A91CCCDD/serialNumber=3A8A6A2EE5DC09FCAA82FF018F09C1AF84B41196 Certificate serial: 019E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft Manifest number: 019B Signing time: Sat 29 Mar 2025 02:55:51 +0000 Manifest this update: Sat 29 Mar 2025 02:55:50 +0000 Manifest next update: Sat 05 Apr 2025 02:55:50 +0000 Files and hashes: 1: OopqLuXcCfyqgv8BjwnBr4S0EZY.crl (hash: qOEyW/FDOTIGBbp7jn7aQ0gqpIR+SHhl+ukGeGrR/+A=) 2: F77C1438964111EDAAB8E74AC4F9AE02.roa (hash: VtazFFTqbixljqAtcsaeza2iwr0OPiOznwFcK1HtWtU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.crl rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 02:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 414 (0x19e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCCDD Validity Not Before: Mar 29 02:55:50 2025 GMT Not After : Apr 5 02:55:50 2025 GMT Subject: CN=67e76136-512a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8a:8f:6f:ce:2d:99:ac:66:77:b8:c1:4d:e6: 22:be:f6:13:62:6e:0d:90:24:4a:0b:2b:47:86:2b: 25:3c:6e:e4:83:77:46:8f:8e:04:cd:de:7f:5e:4f: 27:dd:9e:76:e0:71:7a:12:5d:9c:c2:61:28:98:95: 3e:71:20:7e:df:d9:6e:e4:0d:df:b4:db:2f:92:a5: d4:bb:4a:4c:9e:53:8c:ab:86:b6:3d:7d:97:2a:65: 98:18:19:c2:c3:93:32:dc:e4:ba:1e:3a:6e:cf:10: dd:12:64:c5:a3:6a:6c:6a:36:84:2b:36:b3:d3:71: 7c:ba:fb:cb:6a:f5:4a:85:f7:ae:d9:c7:1f:8a:65: c3:5d:ae:a6:0f:f2:ae:a2:6a:f4:12:66:89:88:52: f4:5e:87:35:64:d6:ca:94:dd:dc:86:90:a0:5f:0d: ba:e4:a4:1b:e3:ac:a9:fe:84:ed:b9:29:18:b4:85: 19:24:46:18:88:92:59:19:c8:5f:35:71:d8:ed:c6: 74:60:9f:45:40:1c:5b:d2:01:ad:5b:eb:8d:f5:f8: 31:66:83:9b:b7:60:ea:82:c8:ef:e2:b3:09:a4:a0: 51:6f:6e:9e:c2:02:38:d1:8f:7e:43:25:50:dc:b4: 33:f8:66:5d:f0:2e:ce:12:5e:a2:29:46:64:77:bd: 86:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:3A:AD:EC:D1:52:EE:07:93:79:86:A8:97:0D:6D:93:15:C2:86:07 X509v3 Authority Key Identifier: keyid:3A:8A:6A:2E:E5:DC:09:FC:AA:82:FF:01:8F:09:C1:AF:84:B4:11:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:19:98:53:a4:df:c9:97:d4:0e:d5:5e:71:d6:f4:b5:1f:f7: 78:6b:1e:57:cf:96:f9:32:f7:47:cc:f6:f8:dc:f8:79:00:19: 74:a4:59:11:bf:53:d6:b0:ef:55:8d:49:cd:83:b3:73:6e:43: dc:5c:e9:dc:37:e3:5a:da:1a:3e:48:c6:ba:78:7d:09:3c:f8: 79:aa:38:eb:0a:a9:81:79:cd:75:17:b7:16:97:f4:31:48:2d: 0b:e7:5d:88:00:b4:9d:14:80:11:87:92:70:d5:de:fa:b0:30: 9f:ac:9a:54:12:df:f9:34:b5:db:38:16:c1:4b:0c:0e:55:8c: d4:11:1e:73:6c:97:e5:35:ae:bb:80:fb:bd:1c:75:75:f0:99: 1b:d4:c9:f7:e0:8c:6a:ae:34:e0:75:0e:b0:8e:c7:65:a1:ef: e8:4e:c0:6f:28:ce:86:ae:92:d8:24:df:7a:dd:28:34:2b:a6: 16:60:30:51:75:c7:34:1a:bd:94:7d:4e:c8:91:65:bc:f0:30: 05:f7:88:d2:32:63:16:f0:e4:39:11:06:d2:dd:12:66:74:92: b7:30:5b:0d:6e:98:ac:1e:02:76:75:ee:40:d5:0b:53:c6:03: 86:b5:40:f2:d6:d8:4f:5c:a6:b0:ed:7a:eb:2d:fc:99:bb:71: b1:cd:2e:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NDREQxMTAvBgNVBAUTKDNBOEE2QTJFRTVEQzA5RkNBQTgyRkYwMThGMDlDMUFG ODRCNDExOTYwHhcNMjUwMzI5MDI1NTUwWhcNMjUwNDA1MDI1NTUwWjAYMRYwFAYD VQQDEw02N2U3NjEzNi01MTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1oqPb84tmaxmd7jBTeYivvYTYm4NkCRKCytHhislPG7kg3dGj44Ezd5/Xk8n 3Z524HF6El2cwmEomJU+cSB+39lu5A3ftNsvkqXUu0pMnlOMq4a2PX2XKmWYGBnC w5My3OS6HjpuzxDdEmTFo2psajaEKzaz03F8uvvLavVKhfeu2ccfimXDXa6mD/Ku omr0EmaJiFL0Xoc1ZNbKlN3chpCgXw265KQb46yp/oTtuSkYtIUZJEYYiJJZGchf NXHY7cZ0YJ9FQBxb0gGtW+uN9fgxZoObt2Dqgsjv4rMJpKBRb26ewgI40Y9+QyVQ 3LQz+GZd8C7OEl6iKUZkd72GNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIQ6rezR Uu4Hk3mGqJcNbZMVwoYHMB8GA1UdIwQYMBaAFDqKai7l3An8qoL/AY8Jwa+EtBGW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0NERC9GM0JCRTc2RTk2 M0QxMUVEQkUzRkQwMUFDNEY5QUUwMi9Pb3BxTHVYY0NmeXFndjhCanduQnI0UzBF WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09vcHFMdVhjQ2Z5cWd2OEJqd25CcjRTMEVaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0NERC9GM0JCRTc2RTk2M0QxMUVEQkUzRkQwMUFDNEY5QUUwMi9Pb3BxTHVYY0Nm eXFndjhCanduQnI0UzBFWlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkGZhTpN/Jl9QO1V5x1vS1H/d4ax5Xz5b5MvdHzPb43Ph5ABl0pFkR v1PWsO9VjUnNg7NzbkPcXOncN+Na2ho+SMa6eH0JPPh5qjjrCqmBec11F7cWl/Qx SC0L512IALSdFIARh5Jw1d76sDCfrJpUEt/5NLXbOBbBSwwOVYzUER5zbJflNa67 gPu9HHV18Jkb1Mn34IxqrjTgdQ6wjsdloe/oTsBvKM6GrpLYJN963Sg0K6YWYDBR dcc0Gr2UfU7IkWW88DAF94jSMmMW8OQ5EQbS3RJmdJK3MFsNbpisHgJ2de5A1QtT xgOGtUDy1thPXKaw7XrrLfyZu3GxzS5P -----END CERTIFICATE-----Generated at Fri Apr 4 22:30:09 2025 by rpki-client