$ rpki-client -vvf rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft File: Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft (raw, json) Hash identifier: 3oIU2650Xd1CyXNdgxdHP0ADodkr2XN5FW312gL+MjM= Subject key identifier: B7:F2:86:00:9F:3A:1B:41:49:92:DD:ED:7D:EB:5A:06:9B:C9:CF:30 Authority key identifier: 3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B Certificate issuer: /CN=A915087F/serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B Certificate serial: 0205 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft Manifest number: 01F3 Signing time: Sat 15 Feb 2025 03:50:36 +0000 Manifest this update: Sat 15 Feb 2025 03:50:35 +0000 Manifest next update: Sat 22 Feb 2025 03:50:35 +0000 Files and hashes: 1: Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl (hash: ZpwWNKQ47f4ttFiA8S7rTN6N0rIfN8YsSnevQJPxMZ4=) 2: 7CC6F3AAE53311EF884A4360C4F9AE02.roa (hash: SdihL210gPCDV8+I91wffCGT616SJGuUi8ixJc1Exmw=) 3: 3EAA12E2396811ED8AF52966C4F9AE02.roa (hash: A4Vjdj02sAdMTWXmHWvjF6Tlm0O4U6o+nFtk8u+txVM=) 4: 2EDB67C460C911EEB34E5064C4F9AE02.roa (hash: 3MY+LBjMkWn0JVtEZnXJmpiFK4xoYWEhCoPkhLW/buM=) 5: 602984F09C0611EE93EA142EC4F9AE02.roa (hash: 0X4T0YrSiOWFmPbWRm4BMiWwIJYzgP1cN8sgOgLAcS4=) 6: 3DD9ED2C4AE811EF9BCF4B47C4F9AE02.roa (hash: l4d1oVoyEM+HQ07ha4YtFHp1DrvW7G3vGypNnIxNS0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 517 (0x205) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915087F Validity Not Before: Feb 15 03:50:35 2025 GMT Not After : Feb 22 03:50:35 2025 GMT Subject: CN=67b00f0b-8814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:71:64:43:24:94:26:ce:12:50:3c:2c:bb:e8: 8d:0b:de:85:c4:6c:7f:52:26:09:eb:24:b2:a3:24: 6b:30:bf:76:f0:f4:b4:60:7f:0b:de:c6:d5:35:2a: 48:a3:3f:da:4f:2e:36:9e:ff:07:bc:02:ac:fe:b5: c7:60:42:47:55:01:23:58:18:fb:5d:57:70:d0:fe: dd:a9:99:8e:d6:68:82:b8:d9:fc:3a:a2:af:bc:f4: 8d:33:b5:d5:c9:70:3f:8e:b9:af:e8:25:af:57:4d: b9:9a:54:38:fd:0e:31:68:bf:79:0b:de:19:2b:e1: 3d:ad:b6:e6:d5:89:9a:ca:ae:ef:02:99:b5:b9:11: 4f:19:ab:e0:5f:7f:ca:b4:2d:4f:d9:98:11:1d:05: 8f:e3:73:a3:49:3e:19:f7:51:e2:6c:99:1c:4d:9a: 21:23:22:05:1f:55:3b:92:57:20:08:07:d2:2c:a1: 7f:61:6b:b1:7d:c1:5a:7a:54:b3:b2:9d:ae:dc:76: 7b:9f:63:f1:57:1d:83:c4:76:e4:99:4d:b2:8b:70: 4a:c5:22:79:51:16:96:6c:6e:d9:12:a0:fc:ba:67: 54:77:94:a7:0b:47:5b:82:8a:83:68:e0:de:03:4d: b3:84:fd:41:61:02:92:49:37:a5:8c:06:8d:e8:f7: ee:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:F2:86:00:9F:3A:1B:41:49:92:DD:ED:7D:EB:5A:06:9B:C9:CF:30 X509v3 Authority Key Identifier: keyid:3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:8d:49:a5:33:35:d8:15:99:f3:9e:ec:ca:68:4f:68:9d:c5: 93:02:93:11:e7:ad:37:55:0d:ba:ab:3d:41:0f:96:5b:95:bd: 64:2c:b2:71:72:8c:ac:e5:87:79:d4:8c:bb:c7:3f:f4:35:5e: 2a:e1:19:a2:46:8d:01:3f:86:23:6a:39:43:13:a7:ee:a0:25: b9:bd:07:d8:b0:ac:6d:b5:70:e0:09:77:f6:e6:94:f5:22:c5: 35:fa:81:0e:c6:a7:88:07:bd:fa:f8:c8:99:19:fc:c1:19:bc: 3b:4e:73:12:f3:c5:1f:5e:0a:9a:9b:d5:08:df:ab:24:a0:e4: 8d:32:d7:f3:9d:d7:24:ee:46:ff:ea:ba:34:92:9b:83:08:21: 25:d7:71:1d:9f:f9:19:0e:51:6b:83:28:fa:9d:2c:96:0e:62: b5:9d:15:45:11:dd:18:d5:46:a9:0f:85:c6:11:c0:7d:a9:ec: d3:17:cd:0c:4c:2f:6d:d5:ee:36:2c:df:52:81:67:70:51:21: a1:d0:48:28:83:a1:4f:20:51:c7:1e:b7:d0:89:55:86:c2:8e: 40:2c:27:99:e2:b3:bc:f7:08:11:bf:ba:72:63:5f:2c:05:1c: 88:f1:c6:99:9c:cd:21:9b:ae:04:e6:1b:02:15:64:12:bf:6e: 37:15:de:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA4N0YxMTAvBgNVBAUTKDNBNkRENEI3MEM0NTYwRUFDMzdFODFFNjIyQ0M0Mzgw OUY1MjNCNEIwHhcNMjUwMjE1MDM1MDM1WhcNMjUwMjIyMDM1MDM1WjAYMRYwFAYD VQQDEw02N2IwMGYwYi04ODE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu3FkQySUJs4SUDwsu+iNC96FxGx/UiYJ6ySyoyRrML928PS0YH8L3sbVNSpI oz/aTy42nv8HvAKs/rXHYEJHVQEjWBj7XVdw0P7dqZmO1miCuNn8OqKvvPSNM7XV yXA/jrmv6CWvV025mlQ4/Q4xaL95C94ZK+E9rbbm1Ymayq7vApm1uRFPGavgX3/K tC1P2ZgRHQWP43OjST4Z91HibJkcTZohIyIFH1U7klcgCAfSLKF/YWuxfcFaelSz sp2u3HZ7n2PxVx2DxHbkmU2yi3BKxSJ5URaWbG7ZEqD8umdUd5SnC0dbgoqDaODe A02zhP1BYQKSSTeljAaN6PfutQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLfyhgCf OhtBSZLd7X3rWgabyc8wMB8GA1UdIwQYMBaAFDpt1LcMRWDqw36B5iLMQ4CfUjtL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDg3Ri9GNzMxOTZBQTMz RTExMUVEQjNBMEVBNThDNEY5QUUwMi9PbTNVdHd4RllPckRmb0htSXN4RGdKOVNP MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09tM1V0d3hGWU9yRGZvSG1Jc3hEZ0o5U08wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDg3Ri9GNzMxOTZBQTMzRTExMUVEQjNBMEVBNThDNEY5QUUwMi9PbTNVdHd4RllP ckRmb0htSXN4RGdKOVNPMHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzjUmlMzXYFZnznuzKaE9oncWTApMR5603VQ26qz1BD5Zblb1kLLJx coys5Yd51Iy7xz/0NV4q4RmiRo0BP4YjajlDE6fuoCW5vQfYsKxttXDgCXf25pT1 IsU1+oEOxqeIB736+MiZGfzBGbw7TnMS88UfXgqam9UI36skoOSNMtfzndck7kb/ 6ro0kpuDCCEl13Edn/kZDlFrgyj6nSyWDmK1nRVFEd0Y1UapD4XGEcB9qezTF80M TC9t1e42LN9SgWdwUSGh0Egog6FPIFHHHrfQiVWGwo5ALCeZ4rO89wgRv7pyY18s BRyI8caZnM0hm64E5hsCFWQSv243Fd5S -----END CERTIFICATE-----Generated at Sun Feb 16 21:43:25 2025 by rpki-client