$ rpki-client -vvf rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft File: U-OPHbJadp7S9ONa2_fqxILGEaU.mft (raw, json) Hash identifier: TDPOmn6LrhJZrxx1zLcc+QANJm6tzxoGiSaL2ebFC/U= Subject key identifier: 78:72:39:27:A3:84:82:0C:20:C9:4D:46:ED:20:63:F0:2B:78:4E:E4 Authority key identifier: 53:E3:8F:1D:B2:5A:76:9E:D2:F4:E3:5A:DB:F7:EA:C4:82:C6:11:A5 Certificate issuer: /CN=A91449DF/serialNumber=53E38F1DB25A769ED2F4E35ADBF7EAC482C611A5 Certificate serial: 07DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-OPHbJadp7S9ONa2_fqxILGEaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft Manifest number: 07D0 Signing time: Fri 30 May 2025 21:21:32 +0000 Manifest this update: Fri 30 May 2025 21:21:32 +0000 Manifest next update: Fri 06 Jun 2025 21:21:32 +0000 Files and hashes: 1: U-OPHbJadp7S9ONa2_fqxILGEaU.crl (hash: q56HdDv6rkj8Vqa2wHss1oWHWjL4L+9nNekSEkVOrXQ=) 2: E5ADB5CAF73A11EAB074A016C4F9AE02.roa (hash: dLHVUNtLIV41+zRNY3QMkvAZyxZkYsTbNoR5dSniJzY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.crl rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-OPHbJadp7S9ONa2_fqxILGEaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:21:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2013 (0x7dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91449DF, serialNumber=53E38F1DB25A769ED2F4E35ADBF7EAC482C611A5 Validity Not Before: May 30 21:21:32 2025 GMT Not After : Jun 6 21:21:32 2025 GMT Subject: CN=683a215c-166e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:40:91:87:2b:9b:6f:f6:41:ac:9e:76:39:f8: f2:90:67:c4:94:2c:65:76:df:e8:db:3b:e1:61:05: 2f:36:ae:a9:78:61:cd:6e:9c:57:48:5c:97:f0:e2: 0e:c7:e0:2b:af:2f:25:f7:ca:55:1c:d7:5a:dc:09: 55:1b:1a:68:e8:3c:fe:05:33:b0:a0:60:ea:03:9b: 07:a3:29:15:21:e5:34:76:d4:8f:e1:49:05:33:b6: 63:75:8d:cb:ba:a7:54:b9:e2:54:6a:f3:6d:45:cc: ab:28:6b:ef:c6:e6:89:d2:0e:e4:a2:e7:f3:7b:e5: a9:50:49:f5:d0:9a:0d:ae:22:c1:d6:5b:0d:88:17: 6e:43:26:c6:ce:50:02:0d:e3:94:45:3c:94:7c:bb: 96:42:b5:85:d8:6a:15:92:5d:49:89:a8:1e:18:2d: a8:ff:72:1c:9b:8a:2e:19:4c:33:ab:31:7b:f7:c5: 59:cc:45:35:42:23:3c:8c:92:fa:5b:7c:ee:94:35: 08:20:f1:41:55:4e:2b:d9:18:34:11:9b:4f:33:63: f3:ed:16:bf:24:a4:10:28:a3:f3:ad:70:20:59:92: 6a:9e:29:7d:84:7f:d7:b1:b9:e7:fe:8f:f2:b4:42: 9f:ec:f3:54:41:a6:01:9e:b0:74:36:ce:b8:1c:26: 20:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:72:39:27:A3:84:82:0C:20:C9:4D:46:ED:20:63:F0:2B:78:4E:E4 X509v3 Authority Key Identifier: keyid:53:E3:8F:1D:B2:5A:76:9E:D2:F4:E3:5A:DB:F7:EA:C4:82:C6:11:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-OPHbJadp7S9ONa2_fqxILGEaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:72:fb:ed:84:ee:78:5e:7f:cf:98:a8:1a:4e:01:cc:c1:67: c2:c8:67:e6:4f:c8:24:a9:16:2d:e7:dd:21:2f:8d:38:18:f4: f7:18:13:58:fe:37:d8:0d:8e:6d:a6:a2:19:28:ca:e6:74:a6: b0:77:ed:b9:e9:f4:56:f3:82:4a:ea:c3:38:05:fa:d6:ac:ad: 84:92:23:9a:a4:d3:13:21:8c:f7:51:e5:e4:c7:14:98:24:c2: 53:f8:2b:d2:b5:69:d9:f9:cd:95:74:22:2e:a1:91:e5:fb:67: e8:aa:7b:22:7d:8a:07:b7:32:31:5a:cf:8d:aa:bd:b3:85:ba: f0:82:fe:cb:83:e1:89:ab:f7:8c:71:8c:a6:8f:52:ff:b0:79: 66:a6:e8:3e:b3:94:a4:1c:3a:61:30:65:8b:d3:14:98:88:87: cc:23:a5:66:3f:c8:ea:28:a3:66:f0:76:ad:1d:7b:3e:1e:79: 90:2f:12:dd:05:52:03:9b:9a:8f:52:17:f0:65:c0:e5:b3:b8: bd:bf:2d:b0:7f:e4:a9:fd:09:d5:33:0f:b7:74:82:69:24:97: f9:57:83:1c:f1:bc:de:ef:7f:53:19:c5:92:f4:11:34:66:fb: 7e:75:00:26:42:a6:0f:d2:97:78:53:e2:17:17:68:bd:e7:c2: bc:fb:74:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ5REYxMTAvBgNVBAUTKDUzRTM4RjFEQjI1QTc2OUVEMkY0RTM1QURCRjdFQUM0 ODJDNjExQTUwHhcNMjUwNTMwMjEyMTMyWhcNMjUwNjA2MjEyMTMyWjAYMRYwFAYD VQQDEw02ODNhMjE1Yy0xNjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxUCRhyubb/ZBrJ52OfjykGfElCxldt/o2zvhYQUvNq6peGHNbpxXSFyX8OIO x+Arry8l98pVHNda3AlVGxpo6Dz+BTOwoGDqA5sHoykVIeU0dtSP4UkFM7ZjdY3L uqdUueJUavNtRcyrKGvvxuaJ0g7koufze+WpUEn10JoNriLB1lsNiBduQybGzlAC DeOURTyUfLuWQrWF2GoVkl1JiageGC2o/3Icm4ouGUwzqzF798VZzEU1QiM8jJL6 W3zulDUIIPFBVU4r2Rg0EZtPM2Pz7Ra/JKQQKKPzrXAgWZJqnil9hH/Xsbnn/o/y tEKf7PNUQaYBnrB0Ns64HCYgzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHhyOSej hIIMIMlNRu0gY/AreE7kMB8GA1UdIwQYMBaAFFPjjx2yWnae0vTjWtv36sSCxhGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDlERi8wNEI3Q0Y3NEY3 M0ExMUVBODE1QTEzMTZDNEY5QUUwMi9VLU9QSGJKYWRwN1M5T05hMl9mcXhJTEdF YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UtT1BIYkphZHA3UzlPTmEyX2ZxeElMR0VhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDlERi8wNEI3Q0Y3NEY3M0ExMUVBODE1QTEzMTZDNEY5QUUwMi9VLU9QSGJKYWRw N1M5T05hMl9mcXhJTEdFYVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrcvvthO54Xn/PmKgaTgHMwWfCyGfmT8gkqRYt590hL404GPT3GBNY /jfYDY5tpqIZKMrmdKawd+256fRW84JK6sM4BfrWrK2EkiOapNMTIYz3UeXkxxSY JMJT+CvStWnZ+c2VdCIuoZHl+2foqnsifYoHtzIxWs+Nqr2zhbrwgv7Lg+GJq/eM cYymj1L/sHlmpug+s5SkHDphMGWL0xSYiIfMI6VmP8jqKKNm8HatHXs+HnmQLxLd BVIDm5qPUhfwZcDls7i9vy2wf+Sp/QnVMw+3dIJpJJf5V4Mc8bze739TGcWS9BE0 Zvt+dQAmQqYP0pd4U+IXF2i958K8+3SW -----END CERTIFICATE-----Generated at Sat May 31 17:32:54 2025 by rpki-client