$ rpki-client -vvf rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft File: O2jmA9GPVutmXvcukmQF8MEL4-c.mft (raw, json) Hash identifier: lH12HK1qZW389s6DiWyAUvfs4WNi3rB6mLHJjTBpuoM= Subject key identifier: 9A:1B:7A:D6:EF:77:61:F9:89:92:FE:24:46:DD:2E:CB:DB:F0:91:4F Authority key identifier: 3B:68:E6:03:D1:8F:56:EB:66:5E:F7:2E:92:64:05:F0:C1:0B:E3:E7 Certificate issuer: /CN=A912D1D1/serialNumber=3B68E603D18F56EB665EF72E926405F0C10BE3E7 Certificate serial: 087F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft Manifest number: 0879 Signing time: Fri 30 May 2025 20:50:50 +0000 Manifest this update: Fri 30 May 2025 20:50:49 +0000 Manifest next update: Fri 06 Jun 2025 20:50:49 +0000 Files and hashes: 1: O2jmA9GPVutmXvcukmQF8MEL4-c.crl (hash: G9t6EQ03XIfIJlzTMkES4W7gPtJqdNHTopxiWXt7rQw=) 2: 30CB037EC18E11EA8BF4FB68C4F9AE02.roa (hash: d1mOeGTfFGoxO3FpLGtyELB1KUYkFiEXG3WDXupnmMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.crl rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:50:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2175 (0x87f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D1D1, serialNumber=3B68E603D18F56EB665EF72E926405F0C10BE3E7 Validity Not Before: May 30 20:50:49 2025 GMT Not After : Jun 6 20:50:49 2025 GMT Subject: CN=683a1a29-8926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:28:4d:d7:8a:fb:d3:97:65:19:f6:d2:d4:25: 8c:d4:ed:17:b6:15:77:6e:f5:c0:1d:99:c7:86:b0: 28:88:79:91:a0:52:b9:cf:9d:ed:d4:08:31:fb:59: c9:8c:d9:7d:5a:ac:25:76:a5:f5:dd:02:37:d1:2c: 9f:10:59:1d:57:34:9a:19:24:84:88:a4:59:97:27: e6:55:f7:63:ce:34:65:95:dc:1e:c8:18:08:67:cd: c0:74:e8:e9:33:46:a3:53:bf:b3:b5:3a:64:aa:65: 2d:c5:b9:36:09:ee:f5:60:57:44:e6:f7:d7:70:11: a7:8d:98:60:cc:a4:0f:6d:0c:39:7a:23:c1:a3:10: 8e:1d:36:f7:09:eb:d5:3e:66:07:e5:2c:07:7d:3b: b0:f3:fe:44:68:c2:15:0f:96:21:81:4a:96:f2:e7: 94:c0:ce:f1:18:da:f9:a7:1f:31:96:da:02:54:fd: d7:38:1a:da:e4:de:be:34:5c:6f:72:17:4a:2d:a8: ae:14:c0:63:97:f9:da:03:b5:78:92:9d:a7:da:07: 2c:17:57:2c:1d:32:ad:84:53:18:88:e5:0a:19:72: 06:27:86:07:eb:37:46:10:9b:05:cc:e2:ee:8d:29: b3:6e:3a:e4:5b:b7:0e:6d:92:fe:0b:d4:af:a8:f4: f5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:1B:7A:D6:EF:77:61:F9:89:92:FE:24:46:DD:2E:CB:DB:F0:91:4F X509v3 Authority Key Identifier: keyid:3B:68:E6:03:D1:8F:56:EB:66:5E:F7:2E:92:64:05:F0:C1:0B:E3:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:73:91:24:05:2f:56:e5:ec:c6:c7:9b:cc:7f:16:0f:86:55: ab:4d:6d:76:e7:a1:2a:06:3f:e0:3f:85:0b:6a:45:f8:a0:9f: b1:de:29:ca:58:13:f6:fb:90:75:c2:02:66:16:2a:b0:6d:19: fd:5b:f8:8c:c2:f2:8b:cd:66:4f:20:db:f8:95:e4:82:22:8f: d4:86:98:fc:4a:d8:8d:44:9b:5a:dd:0b:1d:18:9d:a5:24:2c: b4:3f:a7:85:fe:06:5d:a0:be:ad:9a:50:43:ed:d1:57:b0:89: 29:02:b0:f0:1f:68:80:fa:fe:8f:fc:15:37:30:1a:62:d4:b5: b5:a4:9d:a3:dd:2d:7e:03:8c:05:f4:da:ed:24:6d:4b:f1:73: a3:a4:c3:00:7f:0f:f5:ec:ab:24:18:30:6c:ed:d2:1c:0a:b1: 3f:13:48:c6:8f:c9:f4:27:b3:f1:33:36:b7:a6:cf:23:ce:ad: 3f:d1:45:bf:8d:ab:88:b9:ad:cc:28:a6:85:a3:60:0a:17:2d: 3a:9a:b1:29:54:81:36:db:33:a3:97:59:de:04:f2:3e:43:0a: c9:78:57:36:d3:97:b1:42:97:21:83:b7:46:7c:e2:f9:2e:ac: a5:2c:26:47:f1:50:74:f8:57:c5:c5:3b:2a:54:74:64:10:5b: 06:29:a8:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQxRDExMTAvBgNVBAUTKDNCNjhFNjAzRDE4RjU2RUI2NjVFRjcyRTkyNjQwNUYw QzEwQkUzRTcwHhcNMjUwNTMwMjA1MDQ5WhcNMjUwNjA2MjA1MDQ5WjAYMRYwFAYD VQQDEw02ODNhMWEyOS04OTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzChN14r705dlGfbS1CWM1O0XthV3bvXAHZnHhrAoiHmRoFK5z53t1Agx+1nJ jNl9WqwldqX13QI30SyfEFkdVzSaGSSEiKRZlyfmVfdjzjRlldweyBgIZ83AdOjp M0ajU7+ztTpkqmUtxbk2Ce71YFdE5vfXcBGnjZhgzKQPbQw5eiPBoxCOHTb3CevV PmYH5SwHfTuw8/5EaMIVD5YhgUqW8ueUwM7xGNr5px8xltoCVP3XOBra5N6+NFxv chdKLaiuFMBjl/naA7V4kp2n2gcsF1csHTKthFMYiOUKGXIGJ4YH6zdGEJsFzOLu jSmzbjrkW7cObZL+C9SvqPT1YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJobetbv d2H5iZL+JEbdLsvb8JFPMB8GA1UdIwQYMBaAFDto5gPRj1brZl73LpJkBfDBC+Pn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDFEMS9DMTYwMDZGQ0Mx OEMxMUVBOEYzNjQxNjZDNEY5QUUwMi9PMmptQTlHUFZ1dG1YdmN1a21RRjhNRUw0 LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL08yam1BOUdQVnV0bVh2Y3VrbVFGOE1FTDQtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDFEMS9DMTYwMDZGQ0MxOEMxMUVBOEYzNjQxNjZDNEY5QUUwMi9PMmptQTlHUFZ1 dG1YdmN1a21RRjhNRUw0LWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgc5EkBS9W5ezGx5vMfxYPhlWrTW1256EqBj/gP4ULakX4oJ+x3inK WBP2+5B1wgJmFiqwbRn9W/iMwvKLzWZPINv4leSCIo/Uhpj8StiNRJta3QsdGJ2l JCy0P6eF/gZdoL6tmlBD7dFXsIkpArDwH2iA+v6P/BU3MBpi1LW1pJ2j3S1+A4wF 9NrtJG1L8XOjpMMAfw/17KskGDBs7dIcCrE/E0jGj8n0J7PxMza3ps8jzq0/0UW/ jauIua3MKKaFo2AKFy06mrEpVIE22zOjl1neBPI+QwrJeFc205exQpchg7dGfOL5 LqylLCZH8VB0+FfFxTsqVHRkEFsGKaiz -----END CERTIFICATE-----Generated at Sat May 31 14:58:06 2025 by rpki-client