$ rpki-client -vvf rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft File: OGxcstbg7GFBrrc_STUhsFIKPPo.mft (raw, json) Hash identifier: kKmP/NoCQSkWIJ92bpCDWRFk5GTWpOrZV98a0i6etaI= Subject key identifier: 43:65:61:36:8E:9B:20:CC:A0:65:E3:8F:44:14:75:A4:9D:6A:33:FD Authority key identifier: 38:6C:5C:B2:D6:E0:EC:61:41:AE:B7:3F:49:35:21:B0:52:0A:3C:FA Certificate issuer: /CN=A9123AB4/serialNumber=386C5CB2D6E0EC6141AEB73F493521B0520A3CFA Certificate serial: 1D25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft Manifest number: 1D18 Signing time: Tue 08 Apr 2025 16:10:00 +0000 Manifest this update: Tue 08 Apr 2025 16:10:00 +0000 Manifest next update: Tue 15 Apr 2025 16:10:00 +0000 Files and hashes: 1: OGxcstbg7GFBrrc_STUhsFIKPPo.crl (hash: q+B9xG0pTNihYY6B347TEUglxpaYBYlT/615UFoT1W8=) 2: DE5B018C8D8B11EBB959991DC4F9AE02.roa (hash: jfTk7qLtFGzciF3MjfSmzCLIXIS5E+uoDhIbl0HSies=) 3: DD9C07828D8B11EBB959991DC4F9AE02.roa (hash: gqOrlTvQP7NE8QcpWskAg9stXohxZ5iMQQauxzl2p0w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.crl rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 16:09:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7461 (0x1d25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123AB4 Validity Not Before: Apr 8 16:10:00 2025 GMT Not After : Apr 15 16:10:00 2025 GMT Subject: CN=67f54a58-a542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:89:64:e0:a6:1f:b2:1e:bf:91:61:78:c3:38: 74:89:ef:a1:46:78:04:c5:2f:a1:82:15:d0:67:ea: 61:f1:17:0f:34:a2:53:fe:07:8b:53:64:1a:da:9c: f1:e0:89:2e:5b:f5:90:45:10:4b:95:ca:79:df:2e: f9:de:23:21:b9:e1:95:e7:c4:45:9d:4b:72:40:d5: 94:87:66:be:4b:2b:fe:e2:20:01:e6:17:69:b0:9d: 41:c9:ab:8f:62:b1:08:06:96:fa:60:c6:0c:73:54: 1a:ca:38:02:f1:0a:21:7c:2b:8a:75:c6:65:e6:79: 99:ca:63:9b:58:af:54:1b:d6:3e:00:5b:cf:5a:8e: 69:37:7e:81:2f:63:6e:f9:8c:71:ad:19:14:53:ce: ec:23:a7:f8:77:e4:74:f4:ea:39:ac:2e:e2:ba:c8: 78:c7:32:95:db:35:91:a0:08:aa:32:e9:48:41:cb: 1f:a0:66:e4:b6:97:33:bc:ad:cb:08:51:88:55:aa: dd:a5:69:ac:69:4d:77:56:3b:13:47:2b:ee:82:88: 9f:d3:95:5e:ae:bf:48:03:e1:9e:ce:b6:49:9c:56: 25:bc:1d:e5:d4:05:46:7c:38:82:9e:dd:52:01:e2: af:0c:b5:c7:c1:00:8c:e3:85:79:9e:97:64:df:40: c2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:65:61:36:8E:9B:20:CC:A0:65:E3:8F:44:14:75:A4:9D:6A:33:FD X509v3 Authority Key Identifier: keyid:38:6C:5C:B2:D6:E0:EC:61:41:AE:B7:3F:49:35:21:B0:52:0A:3C:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:53:61:d2:a1:71:86:89:24:43:61:e7:00:fa:d3:ba:77:5f: 08:20:28:2e:cc:42:d8:55:43:a2:cc:5b:b7:94:e5:bb:b9:f4: 82:c5:5d:ce:02:7c:e5:48:d3:41:82:95:bf:5a:d5:78:7c:79: 73:92:12:d4:f3:b9:5c:de:1f:1d:0c:19:ac:f2:8b:52:12:fe: 9d:89:a5:7e:22:72:ec:06:9a:4e:0a:36:36:d7:b6:ed:e1:6f: 1e:0c:33:60:1c:fd:55:83:7b:51:d2:87:fe:ab:a7:e5:9f:62: cb:83:22:44:34:e6:83:84:1c:e8:30:bf:f1:f0:69:dc:69:1f: 40:25:26:77:22:13:fa:9e:7c:d6:47:a2:32:97:56:a0:17:2d: 5d:32:fd:78:56:b2:de:92:19:8b:34:6b:18:82:06:c5:58:3f: b6:0e:21:dd:35:4c:ff:a9:82:a2:2d:08:2d:36:08:85:c2:04: de:1d:45:d6:17:af:ad:9e:b7:98:1f:59:9c:73:d1:ea:23:36: 39:d4:d7:25:97:65:54:9c:85:a6:fd:c4:cc:83:ad:f4:61:c6: 69:b3:4d:44:c8:26:b7:c1:ad:a1:74:8f:61:89:94:af:25:70: a3:8a:03:57:08:01:6f:c6:4a:df:1b:8e:e0:0c:4d:73:4a:de: 60:53:55:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNBQjQxMTAvBgNVBAUTKDM4NkM1Q0IyRDZFMEVDNjE0MUFFQjczRjQ5MzUyMUIw NTIwQTNDRkEwHhcNMjUwNDA4MTYxMDAwWhcNMjUwNDE1MTYxMDAwWjAYMRYwFAYD VQQDEw02N2Y1NGE1OC1hNTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Ilk4KYfsh6/kWF4wzh0ie+hRngExS+hghXQZ+ph8RcPNKJT/geLU2Qa2pzx 4IkuW/WQRRBLlcp53y753iMhueGV58RFnUtyQNWUh2a+Syv+4iAB5hdpsJ1ByauP YrEIBpb6YMYMc1QayjgC8QohfCuKdcZl5nmZymObWK9UG9Y+AFvPWo5pN36BL2Nu +YxxrRkUU87sI6f4d+R09Oo5rC7iush4xzKV2zWRoAiqMulIQcsfoGbktpczvK3L CFGIVardpWmsaU13VjsTRyvugoif05Verr9IA+GezrZJnFYlvB3l1AVGfDiCnt1S AeKvDLXHwQCM44V5npdk30DC1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFENlYTaO myDMoGXjj0QUdaSdajP9MB8GA1UdIwQYMBaAFDhsXLLW4OxhQa63P0k1IbBSCjz6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0FCNC8xRkIwNDBBMEIx NzQxMUU2OEVDODg1MThDNEY5QUUwMi9PR3hjc3RiZzdHRkJycmNfU1RVaHNGSUtQ UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09HeGNzdGJnN0dGQnJyY19TVFVoc0ZJS1BQby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0FCNC8xRkIwNDBBMEIxNzQxMUU2OEVDODg1MThDNEY5QUUwMi9PR3hjc3RiZzdH RkJycmNfU1RVaHNGSUtQUG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABU2HSoXGGiSRDYecA+tO6d18IICguzELYVUOizFu3lOW7ufSCxV3O AnzlSNNBgpW/WtV4fHlzkhLU87lc3h8dDBms8otSEv6diaV+InLsBppOCjY217bt 4W8eDDNgHP1Vg3tR0of+q6fln2LLgyJENOaDhBzoML/x8GncaR9AJSZ3IhP6nnzW R6Iyl1agFy1dMv14VrLekhmLNGsYggbFWD+2DiHdNUz/qYKiLQgtNgiFwgTeHUXW F6+tnreYH1mcc9HqIzY51Ncll2VUnIWm/cTMg630YcZps01EyCa3wa2hdI9hiZSv JXCjigNXCAFvxkrfG47gDE1zSt5gU1VT -----END CERTIFICATE-----Generated at Wed Apr 9 10:30:05 2025 by rpki-client