$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.mft File: oWw_hyQag9GqVIDUKnT099HOXS4.mft (raw, json) Hash identifier: hAPnHe4d5UoXGUQLe9Cp/mEDKOWMR9KSFyFWCIoazMo= Subject key identifier: B9:49:A1:74:B7:BE:B7:E7:9F:92:1F:F0:C4:C0:F8:93:58:EA:03:61 Authority key identifier: A1:6C:3F:87:24:1A:83:D1:AA:54:80:D4:2A:74:F4:F7:D1:CE:5D:2E Certificate issuer: /CN=A91CE620/serialNumber=A16C3F87241A83D1AA5480D42A74F4F7D1CE5D2E Certificate serial: FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWw_hyQag9GqVIDUKnT099HOXS4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.mft Manifest number: FA Signing time: Thu 03 Apr 2025 04:23:27 +0000 Manifest this update: Thu 03 Apr 2025 04:23:26 +0000 Manifest next update: Thu 10 Apr 2025 04:23:26 +0000 Files and hashes: 1: oWw_hyQag9GqVIDUKnT099HOXS4.crl (hash: PK5o5fzzePrNmgJe4Gtua7Z+TArqYCl/0dmvu8Wjsvc=) 2: 1960E628919111EE9A03A712C4F9AE02.roa (hash: 9Znpr7cUcbnkoOK/tzYENSEz+mUbSse0tP+On0Rl+NI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.crl rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWw_hyQag9GqVIDUKnT099HOXS4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 04:23:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 252 (0xfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE620 Validity Not Before: Apr 3 04:23:26 2025 GMT Not After : Apr 10 04:23:26 2025 GMT Subject: CN=67ee0d3e-a70b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a6:40:f4:7b:e0:e2:a5:57:64:5a:3b:12:09: 98:4d:26:89:93:41:21:12:28:40:f8:3a:83:4b:5a: cf:f2:57:28:41:ee:62:a1:89:32:7e:33:ce:36:c4: 70:44:bc:82:46:f1:71:78:a7:f6:7b:ec:2b:06:20: f0:eb:9a:07:9a:b5:50:c6:70:f2:70:4f:d7:a9:48: 5e:b8:ef:7f:f8:04:47:b6:01:0e:09:a5:a8:8b:07: 03:ae:c3:7b:30:a9:fa:c5:41:51:61:51:c0:4d:89: 84:02:89:cb:1e:8a:2f:3e:89:b1:bc:de:3e:a9:db: 63:83:81:f1:06:ba:85:78:43:e0:9f:40:3a:3b:78: 1c:47:71:97:b2:33:cb:93:1c:01:27:7c:08:12:16: f7:1c:c4:ac:bf:0f:cf:01:3b:2e:8a:f3:93:c6:dc: 0f:4c:ea:71:87:51:7d:90:25:b7:40:dc:26:cb:11: 2f:e6:c4:6e:c7:05:83:04:19:65:e7:b8:a8:0a:2a: 4a:eb:04:ef:e5:f5:90:2c:8b:38:81:a6:72:d5:57: 99:c2:1d:14:c2:37:a8:3a:cd:ff:00:ae:9c:4c:12: 99:85:df:ca:d9:f8:71:4b:ee:1a:49:d4:49:fe:80: 51:46:aa:3b:e1:7f:17:8f:52:b7:a9:5b:96:8d:28: ba:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:49:A1:74:B7:BE:B7:E7:9F:92:1F:F0:C4:C0:F8:93:58:EA:03:61 X509v3 Authority Key Identifier: keyid:A1:6C:3F:87:24:1A:83:D1:AA:54:80:D4:2A:74:F4:F7:D1:CE:5D:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWw_hyQag9GqVIDUKnT099HOXS4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:65:4c:4e:3d:b9:c8:a8:ff:79:42:16:ca:62:f5:9e:6c:5b: 69:3e:41:f3:b8:d1:24:cd:9d:b4:fa:e1:66:4e:9d:d0:9e:1f: 4d:84:56:ab:ed:a3:c8:35:b5:82:3d:59:b7:a6:d8:82:1c:a3: ec:92:38:c8:8f:0b:6f:fc:87:74:96:7b:e6:66:1f:6b:35:f5: c9:3e:fe:23:0a:8b:08:a6:28:68:f2:5d:c7:63:75:49:bf:e0: b0:13:27:9d:72:1e:8a:65:8f:80:f0:8a:bb:81:67:c7:07:71: c2:70:91:9f:62:78:7d:ba:82:f3:d5:bf:ee:87:c7:be:45:b9: 68:70:52:2f:55:a1:3b:62:0f:0b:fb:70:a9:73:04:36:04:84: dd:c1:97:4c:9b:29:8d:f0:6b:f8:91:51:0f:0c:39:44:4e:cf: 28:e6:1f:c0:77:68:49:6f:1c:59:ae:5f:82:fb:b1:d9:23:da: 50:66:f1:c6:2c:65:f8:25:fc:21:85:1c:b1:83:38:2f:37:c4: 2e:db:0e:93:dd:ac:2f:62:53:a1:b7:49:ec:f9:0b:f2:9f:6f: da:5a:ac:68:83:90:40:38:cc:4b:10:35:fd:9c:25:15:5c:97: 36:00:24:02:35:11:af:01:bc:55:21:15:d0:33:9f:31:2a:b4: 46:7b:50:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U2MjAxMTAvBgNVBAUTKEExNkMzRjg3MjQxQTgzRDFBQTU0ODBENDJBNzRGNEY3 RDFDRTVEMkUwHhcNMjUwNDAzMDQyMzI2WhcNMjUwNDEwMDQyMzI2WjAYMRYwFAYD VQQDEw02N2VlMGQzZS1hNzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsqZA9Hvg4qVXZFo7EgmYTSaJk0EhEihA+DqDS1rP8lcoQe5ioYkyfjPONsRw RLyCRvFxeKf2e+wrBiDw65oHmrVQxnDycE/XqUheuO9/+ARHtgEOCaWoiwcDrsN7 MKn6xUFRYVHATYmEAonLHoovPomxvN4+qdtjg4HxBrqFeEPgn0A6O3gcR3GXsjPL kxwBJ3wIEhb3HMSsvw/PATsuivOTxtwPTOpxh1F9kCW3QNwmyxEv5sRuxwWDBBll 57ioCipK6wTv5fWQLIs4gaZy1VeZwh0UwjeoOs3/AK6cTBKZhd/K2fhxS+4aSdRJ /oBRRqo74X8Xj1K3qVuWjSi6CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLlJoXS3 vrfnn5If8MTA+JNY6gNhMB8GA1UdIwQYMBaAFKFsP4ckGoPRqlSA1Cp09PfRzl0u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTYyMC8zQUE1OUFEQzkx OTAxMUVFODdGRUUwMEJDNEY5QUUwMi9vV3dfaHlRYWc5R3FWSURVS25UMDk5SE9Y UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Xd19oeVFhZzlHcVZJRFVLblQwOTlIT1hTNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTYyMC8zQUE1OUFEQzkxOTAxMUVFODdGRUUwMEJDNEY5QUUwMi9vV3dfaHlRYWc5 R3FWSURVS25UMDk5SE9YUzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPZUxOPbnIqP95QhbKYvWebFtpPkHzuNEkzZ20+uFmTp3Qnh9NhFar 7aPINbWCPVm3ptiCHKPskjjIjwtv/Id0lnvmZh9rNfXJPv4jCosIpiho8l3HY3VJ v+CwEyedch6KZY+A8Iq7gWfHB3HCcJGfYnh9uoLz1b/uh8e+RblocFIvVaE7Yg8L +3CpcwQ2BITdwZdMmymN8Gv4kVEPDDlETs8o5h/Ad2hJbxxZrl+C+7HZI9pQZvHG LGX4JfwhhRyxgzgvN8Qu2w6T3awvYlOht0ns+Qvyn2/aWqxog5BAOMxLEDX9nCUV XJc2ACQCNRGvAbxVIRXQM58xKrRGe1Cj -----END CERTIFICATE-----Generated at Fri Apr 4 22:34:53 2025 by rpki-client