$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft File: oYXAxXSCnF_NcURUSeU0za70E5Y.mft (raw, json) Hash identifier: d7iaD4K5tHOOx1rxLw3CKL30C9khIcKQ5ICA5f4loBU= Subject key identifier: E5:54:0C:F9:8F:90:D8:26:96:2F:56:E3:BF:44:EB:57:F9:F4:4D:E9 Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96 Certificate issuer: /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396 Certificate serial: 02E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft Manifest number: 02B1 Signing time: Sat 29 Mar 2025 01:52:50 +0000 Manifest this update: Sat 29 Mar 2025 01:52:49 +0000 Manifest next update: Sat 05 Apr 2025 01:52:49 +0000 Files and hashes: 1: oYXAxXSCnF_NcURUSeU0za70E5Y.crl (hash: we1wVhHMadvCjPz1zbGR7lDGA3naWKtl1VAwhMK8UZw=) 2: B5D1A1164E3111EFB475160AC4F9AE02.roa (hash: F7ZAiYqiaqgCjshmhAH40pkpaSlek68K5yOIUFIlCqE=) 3: 77B975EC79C511EF94E24B5EC4F9AE02.roa (hash: yEIwnuRJU6I6rs+jiNjI+mClNF9GymbQxuMkCMOp07U=) 4: 1C8BEF04E24511EF96354978C4F9AE02.roa (hash: EGZ/fvHina2YX+dj5xEN7cSS8R0XcNDfXd/tDVK1qcE=) 5: 1E1EB7789D8C11EF9B16D921C4F9AE02.roa (hash: TCFvbSrzX3ld7ReLyyVPKT1K5SyyyvX3oexEUzvLigY=) 6: A3571FDE47EC11EFB51C3666C4F9AE02.roa (hash: 2cEppnqVz6EA8cjixAQPIWKPT1GtTfD8PJaZqxpWTLE=) 7: B111111288B411EF80480527C4F9AE02.roa (hash: CjPKYAuDT4eI5JPa/G5V81ZBwDnMXPobI3BPswZB4kQ=) 8: 811803C270C111EF8A30EB51C4F9AE02.roa (hash: 89cYcTv3FMM/3M08ZzwOVhAvZtTfzr28mJIgkmfMCvo=) 9: B137DB2670EF11EFBEF21935C4F9AE02.roa (hash: gVhoaUxSYFZFX3pfYYhl9cQHoz5s0K+bPZd1cYQ52Y8=) 10: CD90ED68057211F0B6E2301BC4F9AE02.roa (hash: VUKsMbXUZ/VFyFAP8kRF14O9sqE9uokELiAUUcFuG5M=) 11: D4E4D8FCA7C311EFB1AAAD55C4F9AE02.roa (hash: Xf5Ju4zh/ec55xkKs2QH4FHNMxaxZH8+1mgQURFonS4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 01:52:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 738 (0x2e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4E32 Validity Not Before: Mar 29 01:52:49 2025 GMT Not After : Apr 5 01:52:49 2025 GMT Subject: CN=67e75271-5750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7a:95:24:f8:37:d4:e9:89:ef:60:39:f0:03: 45:b7:33:8e:40:29:7f:c8:a4:9a:5f:31:7f:99:a7: b4:40:21:8a:a2:7e:66:4d:00:14:f6:f1:e7:18:5e: f2:bc:de:d8:56:70:51:59:af:60:cd:44:a3:0c:88: cf:29:17:8d:60:69:df:51:7d:4a:4b:eb:66:db:9b: 3e:9f:80:82:04:54:04:6f:1c:38:c5:be:a5:d8:b8: 7d:fc:4e:6f:56:f2:8e:5b:a7:92:63:ba:ab:d5:11: 6f:1a:6c:0b:1f:ec:df:6b:6e:2e:b7:de:d5:57:81: bb:20:99:4c:52:c4:e1:4e:17:ef:6b:53:1d:92:93: 3e:6e:a2:11:3d:a2:4f:bf:58:ae:0f:68:3f:77:f7: 8a:f3:aa:0a:d5:d0:02:7d:2b:fb:27:51:a5:e8:65: 1d:2d:44:e2:e6:04:97:b3:8c:f6:c2:45:44:fa:76: a6:2b:f7:29:41:ea:46:7d:37:d4:bd:3d:1c:cb:b9: 1a:d5:34:56:9b:25:37:ac:b0:7b:e2:31:bc:e1:78: 3a:63:6b:fb:f1:e8:55:3f:5e:71:62:db:7e:8d:47: 43:85:8c:d1:1a:13:df:ee:f7:a4:1d:8e:f1:3d:c9: 82:5a:bd:af:fd:c9:45:26:93:4b:9d:ed:54:99:ef: 5f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:54:0C:F9:8F:90:D8:26:96:2F:56:E3:BF:44:EB:57:F9:F4:4D:E9 X509v3 Authority Key Identifier: keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:52:9b:21:07:50:71:10:7e:d7:b5:59:96:d9:12:89:ed:ec: d2:88:70:2f:fe:6b:75:b7:28:28:43:89:80:a0:80:9a:68:54: bb:48:f0:e6:1e:4b:e6:cc:b5:a1:2d:7d:c0:55:07:77:5e:da: 7b:85:3c:84:30:76:c5:ca:ea:7e:43:5a:73:24:e2:4b:1f:c7: 1c:46:d5:78:59:fd:96:41:fa:ad:a1:7d:7b:cf:83:8c:24:83: 78:bd:a3:a0:e2:ad:99:f8:17:04:0b:f9:f0:6f:a2:fa:f9:79: fd:e5:f1:34:7d:01:1c:0e:35:c8:2a:ea:5a:99:66:36:cd:08: 65:16:24:58:db:f0:85:58:51:73:ea:6d:46:7b:35:0b:7e:d9: da:33:d2:17:70:36:70:00:6a:76:68:2d:2e:32:34:69:e3:0d: df:09:b5:ae:06:03:ca:d6:86:62:a4:b9:7a:d5:29:85:02:85: b4:77:77:b8:79:76:d2:b9:be:a3:5a:f9:60:43:8c:88:b1:ec: f4:05:75:a8:6c:0e:63:71:f4:59:f1:da:81:c6:2f:e9:3f:1f: c7:f2:70:b1:37:a6:1a:27:d0:5c:b7:b4:2a:3b:50:f6:60:c4: aa:c0:b6:04:d5:8e:a8:14:62:9b:17:fc:7f:c0:b9:3b:ed:e1: a8:a0:fe:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFMzIxMTAvBgNVBAUTKEExODVDMEM1NzQ4MjlDNUZDRDcxNDQ1NDQ5RTUzNENE QUVGNDEzOTYwHhcNMjUwMzI5MDE1MjQ5WhcNMjUwNDA1MDE1MjQ5WjAYMRYwFAYD VQQDEw02N2U3NTI3MS01NzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3qVJPg31OmJ72A58ANFtzOOQCl/yKSaXzF/mae0QCGKon5mTQAU9vHnGF7y vN7YVnBRWa9gzUSjDIjPKReNYGnfUX1KS+tm25s+n4CCBFQEbxw4xb6l2Lh9/E5v VvKOW6eSY7qr1RFvGmwLH+zfa24ut97VV4G7IJlMUsThThfva1MdkpM+bqIRPaJP v1iuD2g/d/eK86oK1dACfSv7J1Gl6GUdLUTi5gSXs4z2wkVE+namK/cpQepGfTfU vT0cy7ka1TRWmyU3rLB74jG84Xg6Y2v78ehVP15xYtt+jUdDhYzRGhPf7vekHY7x PcmCWr2v/clFJpNLne1Ume9fkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOVUDPmP kNgmli9W479E61f59E3pMB8GA1UdIwQYMBaAFKGFwMV0gpxfzXFEVEnlNM2u9BOW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEUzMi83MjA5NTlGQzAx QzAxMUVEQkQ3QzZGNThDNEY5QUUwMi9vWVhBeFhTQ25GX05jVVJVU2VVMHphNzBF NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29ZWEF4WFNDbkZfTmNVUlVTZVUwemE3MEU1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEUzMi83MjA5NTlGQzAxQzAxMUVEQkQ3QzZGNThDNEY5QUUwMi9vWVhBeFhTQ25G X05jVVJVU2VVMHphNzBFNVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbUpshB1BxEH7XtVmW2RKJ7ezSiHAv/mt1tygoQ4mAoICaaFS7SPDm HkvmzLWhLX3AVQd3Xtp7hTyEMHbFyup+Q1pzJOJLH8ccRtV4Wf2WQfqtoX17z4OM JIN4vaOg4q2Z+BcEC/nwb6L6+Xn95fE0fQEcDjXIKupamWY2zQhlFiRY2/CFWFFz 6m1GezULftnaM9IXcDZwAGp2aC0uMjRp4w3fCbWuBgPK1oZipLl61SmFAoW0d3e4 eXbSub6jWvlgQ4yIsez0BXWobA5jcfRZ8dqBxi/pPx/H8nCxN6YaJ9Bct7QqO1D2 YMSqwLYE1Y6oFGKbF/x/wLk77eGooP5I -----END CERTIFICATE-----Generated at Fri Apr 4 22:22:04 2025 by rpki-client