$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft File: ORjYC8twLsrPhMt6yogPh4oU_kg.mft (raw, json) Hash identifier: O0ZT1fNqYeQq9qPBNacAtRK4VR/7DTvikXMzp+84ZQk= Subject key identifier: E8:61:38:F7:3D:50:84:1B:95:64:79:87:E6:DA:D1:E9:05:7F:93:2F Authority key identifier: 39:18:D8:0B:CB:70:2E:CA:CF:84:CB:7A:CA:88:0F:87:8A:14:FE:48 Certificate issuer: /CN=A9146B24/serialNumber=3918D80BCB702ECACF84CB7ACA880F878A14FE48 Certificate serial: 0162 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft Manifest number: 013E Signing time: Sat 31 May 2025 04:29:13 +0000 Manifest this update: Sat 31 May 2025 04:29:13 +0000 Manifest next update: Sat 07 Jun 2025 04:29:13 +0000 Files and hashes: 1: ORjYC8twLsrPhMt6yogPh4oU_kg.crl (hash: asGXhaj60slvvvYeJm3lf052QcVyDfl98JdN6OzQ8ao=) 2: 0D16F5F4933211EEA5AC155DC4F9AE02.roa (hash: 1LEVeAmiTE8mfugUrgZ7PXJTh3jzct433M4/pCSC1j8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.crl rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:29:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 354 (0x162) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146B24, serialNumber=3918D80BCB702ECACF84CB7ACA880F878A14FE48 Validity Not Before: May 31 04:29:13 2025 GMT Not After : Jun 7 04:29:13 2025 GMT Subject: CN=683a8599-0bf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:78:e7:57:de:ee:3d:a2:f2:eb:e3:38:00:27: a7:af:b8:67:57:bb:d3:5a:91:bd:a6:64:eb:61:e4: 1e:d8:9e:7f:1e:75:79:5a:34:25:44:4f:3a:7e:3b: 76:2b:d8:01:b1:66:a8:67:f0:91:3c:7f:07:a5:e3: 53:b1:18:8f:3c:64:72:aa:be:c2:5a:7a:63:0b:36: 0a:e1:c6:63:ba:f3:97:66:d4:a9:e7:c2:71:2e:2f: d9:d9:21:62:8c:dd:43:62:4a:68:bf:55:1b:eb:c5: 32:31:68:fe:a8:2c:4f:f3:3d:2a:b5:e4:ae:a7:bb: be:2a:77:e6:e8:94:27:3b:93:4e:7c:09:2e:99:17: 28:dc:bc:ef:20:48:01:84:a2:39:78:c0:c0:17:11: b3:30:fe:98:b6:a2:f0:cd:f6:c8:da:d0:b4:0e:f3: 58:02:fa:41:d9:40:1f:d1:70:b2:f1:05:64:2a:8b: 8a:15:e7:4b:e6:e9:df:23:04:8c:ae:32:44:67:0b: f5:4c:2d:64:67:74:27:14:df:4e:69:cd:e6:d1:aa: f3:b7:cf:22:d5:1d:7e:7b:35:0e:94:96:82:6d:37: 6a:17:e4:e4:43:b1:08:cc:59:a7:12:68:0b:41:99: 56:12:18:84:98:4e:ef:37:29:cd:d0:72:24:75:e4: 70:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:61:38:F7:3D:50:84:1B:95:64:79:87:E6:DA:D1:E9:05:7F:93:2F X509v3 Authority Key Identifier: keyid:39:18:D8:0B:CB:70:2E:CA:CF:84:CB:7A:CA:88:0F:87:8A:14:FE:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:a4:94:fc:5d:de:39:55:5e:f2:2d:aa:e6:d3:1f:f8:fb:82: 46:8c:26:75:81:b9:2d:5f:c8:26:54:91:46:1f:1e:19:98:9b: d8:cf:71:3e:50:16:ed:d2:c2:0c:b3:c9:8c:c6:6c:a8:69:8e: 0c:18:4a:f9:25:fe:c0:24:d7:37:3e:46:54:11:dc:25:cf:13: 39:36:e3:c6:11:31:a2:c5:03:3d:41:d3:13:65:1e:a3:8d:83: 4c:9f:64:91:6b:bd:84:9e:95:50:ff:df:e8:3f:3e:94:ed:28: 7a:82:34:cf:1b:ea:d4:9e:ac:1c:10:59:93:78:40:a5:01:2d: 20:f7:ac:6c:07:af:ea:32:41:61:97:a9:66:1f:0d:48:25:69: 96:a6:8c:1e:3d:32:e1:41:ed:c2:8f:2c:ac:1a:04:39:e3:84: 40:e5:2b:7d:a0:77:64:4e:2b:8a:4f:1a:cf:86:c5:7b:b0:35: eb:ee:9e:16:a2:5f:b1:11:98:6c:ee:d2:0b:4c:69:d3:45:c2: 0c:38:94:3f:8b:19:58:21:cb:86:6f:26:70:c5:ca:ad:fa:53: 99:a7:3a:70:15:df:29:41:3b:2a:a7:43:c2:51:79:04:3b:47: fd:5c:50:5e:17:ca:8f:1c:81:9e:4b:31:ae:0b:b8:9d:ab:4f: 37:96:f0:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZCMjQxMTAvBgNVBAUTKDM5MThEODBCQ0I3MDJFQ0FDRjg0Q0I3QUNBODgwRjg3 OEExNEZFNDgwHhcNMjUwNTMxMDQyOTEzWhcNMjUwNjA3MDQyOTEzWjAYMRYwFAYD VQQDEw02ODNhODU5OS0wYmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2HjnV97uPaLy6+M4ACenr7hnV7vTWpG9pmTrYeQe2J5/HnV5WjQlRE86fjt2 K9gBsWaoZ/CRPH8HpeNTsRiPPGRyqr7CWnpjCzYK4cZjuvOXZtSp58JxLi/Z2SFi jN1DYkpov1Ub68UyMWj+qCxP8z0qteSup7u+Knfm6JQnO5NOfAkumRco3LzvIEgB hKI5eMDAFxGzMP6YtqLwzfbI2tC0DvNYAvpB2UAf0XCy8QVkKouKFedL5unfIwSM rjJEZwv1TC1kZ3QnFN9Oac3m0arzt88i1R1+ezUOlJaCbTdqF+TkQ7EIzFmnEmgL QZlWEhiEmE7vNynN0HIkdeRw3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOhhOPc9 UIQblWR5h+ba0ekFf5MvMB8GA1UdIwQYMBaAFDkY2AvLcC7Kz4TLesqID4eKFP5I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkIyNC9CNDczQzRCRTkz MzAxMUVFODIzMDgwNTlDNEY5QUUwMi9PUmpZQzh0d0xzclBoTXQ2eW9nUGg0b1Vf a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09SallDOHR3THNyUGhNdDZ5b2dQaDRvVV9rZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkIyNC9CNDczQzRCRTkzMzAxMUVFODIzMDgwNTlDNEY5QUUwMi9PUmpZQzh0d0xz clBoTXQ2eW9nUGg0b1Vfa2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBapJT8Xd45VV7yLarm0x/4+4JGjCZ1gbktX8gmVJFGHx4ZmJvYz3E+ UBbt0sIMs8mMxmyoaY4MGEr5Jf7AJNc3PkZUEdwlzxM5NuPGETGixQM9QdMTZR6j jYNMn2SRa72EnpVQ/9/oPz6U7Sh6gjTPG+rUnqwcEFmTeEClAS0g96xsB6/qMkFh l6lmHw1IJWmWpowePTLhQe3CjyysGgQ544RA5St9oHdkTiuKTxrPhsV7sDXr7p4W ol+xEZhs7tILTGnTRcIMOJQ/ixlYIcuGbyZwxcqt+lOZpzpwFd8pQTsqp0PCUXkE O0f9XFBeF8qPHIGeSzGuC7idq083lvBz -----END CERTIFICATE-----Generated at Sat May 31 16:33:08 2025 by rpki-client