$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft File: OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft (raw, json) Hash identifier: 8+XiIMuQxauXTkXn+X5KdTSOsnbJIl5RSZeqqDWYaP0= Subject key identifier: C8:CF:E4:10:46:D5:BB:93:CA:EF:C8:7E:46:C9:38:0D:56:A8:52:67 Authority key identifier: 38:C0:B1:C5:8D:00:DE:3F:73:AD:5B:58:87:D4:24:9B:DE:E7:BB:A2 Certificate issuer: /CN=A91D1200/serialNumber=38C0B1C58D00DE3F73AD5B5887D4249BDEE7BBA2 Certificate serial: 0197 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OMCxxY0A3j9zrVtYh9Qkm97nu6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft Manifest number: 018B Signing time: Thu 03 Apr 2025 03:01:01 +0000 Manifest this update: Thu 03 Apr 2025 03:01:01 +0000 Manifest next update: Thu 10 Apr 2025 03:01:01 +0000 Files and hashes: 1: OMCxxY0A3j9zrVtYh9Qkm97nu6I.crl (hash: 2rTAOS6RlngmZRsId00tIWCtR31uc5l+FR7io6OTr9s=) 2: 3FD9A0B2CC6411EDA7970484C4F9AE02.roa (hash: 57nO5jOvkVp0+vX7iv3bKgXM7+O7quZxwLxBFz3+RLU=) 3: 3F3E2A10CC6411EDA7970484C4F9AE02.roa (hash: zTbUbYoqbVGTCB7vV/9Oi8BgtnQrV/KuVcCelWmi5sI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.crl rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OMCxxY0A3j9zrVtYh9Qkm97nu6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 03:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 407 (0x197) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1200 Validity Not Before: Apr 3 03:01:01 2025 GMT Not After : Apr 10 03:01:01 2025 GMT Subject: CN=67edf9ed-4ec3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:61:3b:f6:84:82:03:fe:18:5e:c5:dc:7f:b7: 97:75:2d:37:e4:3c:67:49:d8:4f:fd:29:8e:db:bf: 97:84:b3:4e:86:0c:54:72:e4:dd:96:fa:3d:5c:14: af:a1:68:17:fd:c2:ae:ef:ad:15:e8:2e:94:8e:3f: 68:1f:b5:f0:56:d8:d8:0f:1c:bd:cd:d4:18:ec:fe: 31:ab:69:f7:8f:b7:fc:8d:61:27:f4:59:e3:53:bc: da:9a:2b:b3:57:de:1e:08:07:0c:d8:b5:13:ea:0c: a5:48:e7:a0:81:82:42:73:a4:c8:0e:4e:d4:18:f6: fd:cb:88:86:33:0d:d7:d7:e3:92:9a:a4:19:3c:b9: 42:8b:0c:6b:be:86:a7:8c:b5:c9:4f:9f:84:54:3b: 07:6e:79:5c:7d:b4:13:96:30:8c:59:0f:2b:9e:08: 0b:20:bc:f9:30:d6:91:09:eb:69:d9:e4:a6:c3:41: 71:ad:b6:e2:b0:63:c5:e6:2f:61:67:36:ef:30:b3: b4:95:4f:3d:59:ff:5e:bd:6b:2b:57:07:3e:0d:60: 29:a1:07:fd:63:b6:25:63:3d:92:9d:1e:88:be:c1: 40:bb:e9:12:da:11:c0:09:ec:c4:6a:5e:1d:27:bd: aa:1a:4b:7d:ef:9f:da:95:d4:be:1d:7f:a7:37:07: eb:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:CF:E4:10:46:D5:BB:93:CA:EF:C8:7E:46:C9:38:0D:56:A8:52:67 X509v3 Authority Key Identifier: keyid:38:C0:B1:C5:8D:00:DE:3F:73:AD:5B:58:87:D4:24:9B:DE:E7:BB:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OMCxxY0A3j9zrVtYh9Qkm97nu6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:04:c8:1c:ea:89:23:17:42:bb:5a:a6:09:dc:e7:0f:a8:e9: 08:38:e2:b7:ee:6d:f4:bd:94:d0:09:c8:36:48:46:a5:ce:31: 9d:a6:a7:92:3c:f3:40:d3:b6:77:72:c1:d0:79:b1:2f:e1:4c: 6d:12:89:e7:39:09:2c:6a:1c:73:33:45:65:cc:a6:51:e3:0c: 30:e4:94:38:43:55:da:6c:b6:b5:c0:1a:ca:ae:61:9c:3b:0e: 81:89:6a:84:61:bb:a4:53:02:4b:ef:e7:17:7b:56:c5:30:1b: ae:78:db:a8:13:d0:49:fb:1e:a8:6d:ba:6b:c5:72:06:f7:dd: eb:78:09:bc:ed:33:b1:7b:3e:4e:5e:45:82:b3:9f:b3:f4:6a: f0:05:e8:a1:15:e3:c1:ac:8b:97:4f:4a:9d:20:13:4e:4c:c2: 37:de:d2:af:89:66:85:f5:2a:41:5e:72:1c:66:20:a3:ce:fa: 75:2d:63:1b:bb:40:31:0c:03:fb:c3:67:3a:69:81:5e:9d:17: a3:cb:e6:b7:4e:f7:7a:c6:af:bb:49:63:72:23:8f:aa:59:40: 4a:17:c3:5b:08:d3:28:a0:8f:bf:67:1d:4a:c8:e4:6f:0a:c2: a5:01:67:82:15:28:df:c8:d2:b2:ec:02:b1:d6:b8:e9:8b:09: 21:c7:6f:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDEyMDAxMTAvBgNVBAUTKDM4QzBCMUM1OEQwMERFM0Y3M0FENUI1ODg3RDQyNDlC REVFN0JCQTIwHhcNMjUwNDAzMDMwMTAxWhcNMjUwNDEwMDMwMTAxWjAYMRYwFAYD VQQDEw02N2VkZjllZC00ZWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwmE79oSCA/4YXsXcf7eXdS035DxnSdhP/SmO27+XhLNOhgxUcuTdlvo9XBSv oWgX/cKu760V6C6Ujj9oH7XwVtjYDxy9zdQY7P4xq2n3j7f8jWEn9FnjU7zamiuz V94eCAcM2LUT6gylSOeggYJCc6TIDk7UGPb9y4iGMw3X1+OSmqQZPLlCiwxrvoan jLXJT5+EVDsHbnlcfbQTljCMWQ8rnggLILz5MNaRCetp2eSmw0FxrbbisGPF5i9h ZzbvMLO0lU89Wf9evWsrVwc+DWApoQf9Y7YlYz2SnR6IvsFAu+kS2hHACezEal4d J72qGkt975/aldS+HX+nNwfrBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMjP5BBG 1buTyu/IfkbJOA1WqFJnMB8GA1UdIwQYMBaAFDjAscWNAN4/c61bWIfUJJve57ui MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTIwMC9GNUE5NTJFMEND MDMxMUVEQTk3QUNBNURDNEY5QUUwMi9PTUN4eFkwQTNqOXpyVnRZaDlRa205N251 NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09NQ3h4WTBBM2o5enJWdFloOVFrbTk3bnU2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTIwMC9GNUE5NTJFMENDMDMxMUVEQTk3QUNBNURDNEY5QUUwMi9PTUN4eFkwQTNq OXpyVnRZaDlRa205N251NkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVBMgc6okjF0K7WqYJ3OcPqOkIOOK37m30vZTQCcg2SEalzjGdpqeS PPNA07Z3csHQebEv4UxtEonnOQksahxzM0VlzKZR4www5JQ4Q1XabLa1wBrKrmGc Ow6BiWqEYbukUwJL7+cXe1bFMBuueNuoE9BJ+x6obbprxXIG993reAm87TOxez5O XkWCs5+z9GrwBeihFePBrIuXT0qdIBNOTMI33tKviWaF9SpBXnIcZiCjzvp1LWMb u0AxDAP7w2c6aYFenRejy+a3Tvd6xq+7SWNyI4+qWUBKF8NbCNMooI+/Zx1KyORv CsKlAWeCFSjfyNKy7AKx1rjpiwkhx29o -----END CERTIFICATE-----Generated at Fri Apr 4 18:44:12 2025 by rpki-client