$ rpki-client -vvf rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft File: mOhT44UoY0okfIaH-hKOU07IRCY.mft (raw, json) Hash identifier: XvO2y+JNmJnib/O/TJuzaAGwDJO2cd+YoSlB43ykZP4= Subject key identifier: 12:FB:AC:6F:2A:3B:55:9B:10:20:5A:BB:1E:7F:FC:3F:9C:14:BC:16 Authority key identifier: 98:E8:53:E3:85:28:63:4A:24:7C:86:87:FA:12:8E:53:4E:C8:44:26 Certificate issuer: /CN=A915E18D/serialNumber=98E853E38528634A247C8687FA128E534EC84426 Certificate serial: 0759 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft Manifest number: 074F Signing time: Fri 30 May 2025 21:56:20 +0000 Manifest this update: Fri 30 May 2025 21:56:19 +0000 Manifest next update: Fri 06 Jun 2025 21:56:19 +0000 Files and hashes: 1: mOhT44UoY0okfIaH-hKOU07IRCY.crl (hash: tEaSJ09X5boTRNIbq18lt2ZEesOXMdog7tRaQUFQwmE=) 2: 10DD258E2AE711EBBFFCBC15C4F9AE02.roa (hash: leM38yyx2pimelGT4Atr89f7b203mmLzCrStLNglXFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.crl rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:56:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1881 (0x759) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E18D, serialNumber=98E853E38528634A247C8687FA128E534EC84426 Validity Not Before: May 30 21:56:19 2025 GMT Not After : Jun 6 21:56:19 2025 GMT Subject: CN=683a2984-fdb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0e:46:28:0d:e5:45:0d:79:3c:e5:ea:ea:29: 31:41:24:f6:4b:c5:98:cf:86:c5:16:72:3f:c6:f9: c7:5a:f3:c9:ca:68:92:01:f5:3a:c2:b3:4c:e6:7e: 89:f4:fa:9e:f1:64:d7:42:ec:b4:d2:ec:38:1d:ba: 8a:af:44:23:09:a5:7c:bc:b4:42:d2:3a:3c:be:5a: d4:ed:60:fb:74:25:16:20:8a:ff:2b:c6:81:85:6c: d5:17:fa:cc:76:1c:8d:7c:16:3c:a1:ad:26:b8:54: cb:e6:06:0b:b5:68:3a:47:0b:42:af:70:dd:31:1b: 8c:6f:ef:ed:f4:13:50:2a:43:2f:3c:b7:31:9a:98: 14:aa:84:f9:65:d1:7b:6b:f2:e2:18:d4:88:0d:3f: c6:26:de:2a:10:f2:76:8b:fe:c9:37:88:9d:0c:66: 42:85:4a:07:18:5d:65:34:3a:7a:e4:a6:2c:00:ee: a1:7c:10:7c:88:83:cc:f3:f4:8c:6a:1a:08:1b:4e: 30:09:10:0b:e1:58:c5:c3:04:82:1c:f7:0c:80:d0: d6:f7:2f:49:77:e4:c0:73:f4:9e:ba:cb:e1:c7:84: 37:c5:24:e6:59:7e:4e:8d:d8:80:2a:9c:5b:cf:c6: e4:91:78:89:6e:ed:9f:fb:fd:20:26:ed:8a:83:2a: 8b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:FB:AC:6F:2A:3B:55:9B:10:20:5A:BB:1E:7F:FC:3F:9C:14:BC:16 X509v3 Authority Key Identifier: keyid:98:E8:53:E3:85:28:63:4A:24:7C:86:87:FA:12:8E:53:4E:C8:44:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:f0:85:8f:75:a1:f5:ed:20:b2:e1:92:ad:d2:ed:16:c2:e7: 88:e9:bd:50:71:fd:12:df:a1:bc:cf:e2:21:0d:00:e1:9a:27: 60:56:00:41:0a:2a:e1:2a:f9:ab:fc:71:ba:64:64:eb:87:6f: fe:7c:5a:de:30:9d:f6:ca:50:86:d5:68:72:d6:1d:2b:50:bf: 91:38:c2:71:c2:95:ab:d8:09:bf:e6:06:73:3c:2f:1e:02:e1: d7:69:c3:c3:ff:ca:0b:06:f3:6a:c5:09:f0:4f:eb:54:29:24: 87:6e:e6:44:7f:9c:fa:d6:28:07:0c:69:d3:3e:ed:af:78:15: 9a:4a:fc:0c:7d:e0:97:b5:a9:91:31:9d:41:86:98:18:f0:79: a7:97:2d:ba:0e:09:6e:e8:93:5b:91:70:45:cb:ea:6a:78:f2: ab:fe:ac:1a:55:ed:e5:69:d9:57:70:1f:d2:ee:ae:da:14:75: 4a:a2:6d:9f:ba:be:cb:f9:1a:af:7a:aa:ab:6f:65:e4:f2:c4: 50:20:6a:32:0a:f7:9b:ed:ca:cd:02:56:fa:5c:6c:8e:5b:53: 8c:88:a1:ad:77:d1:7e:bb:f0:36:05:27:1b:85:f8:98:0c:c0: 12:5f:f5:00:9d:7e:8a:0a:9d:d1:39:0c:c4:f2:0d:4d:d2:d2: 2f:e5:57:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUUxOEQxMTAvBgNVBAUTKDk4RTg1M0UzODUyODYzNEEyNDdDODY4N0ZBMTI4RTUz NEVDODQ0MjYwHhcNMjUwNTMwMjE1NjE5WhcNMjUwNjA2MjE1NjE5WjAYMRYwFAYD VQQDEw02ODNhMjk4NC1mZGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmg5GKA3lRQ15POXq6ikxQST2S8WYz4bFFnI/xvnHWvPJymiSAfU6wrNM5n6J 9Pqe8WTXQuy00uw4HbqKr0QjCaV8vLRC0jo8vlrU7WD7dCUWIIr/K8aBhWzVF/rM dhyNfBY8oa0muFTL5gYLtWg6RwtCr3DdMRuMb+/t9BNQKkMvPLcxmpgUqoT5ZdF7 a/LiGNSIDT/GJt4qEPJ2i/7JN4idDGZChUoHGF1lNDp65KYsAO6hfBB8iIPM8/SM ahoIG04wCRAL4VjFwwSCHPcMgNDW9y9Jd+TAc/Seusvhx4Q3xSTmWX5OjdiAKpxb z8bkkXiJbu2f+/0gJu2KgyqLtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBL7rG8q O1WbECBaux5//D+cFLwWMB8GA1UdIwQYMBaAFJjoU+OFKGNKJHyGh/oSjlNOyEQm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTE4RC83QTEyNjk3RTJB RTIxMUVCQkJGQzRGMEFDNEY5QUUwMi9tT2hUNDRVb1kwb2tmSWFILWhLT1UwN0lS Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21PaFQ0NFVvWTBva2ZJYUgtaEtPVTA3SVJDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTE4RC83QTEyNjk3RTJBRTIxMUVCQkJGQzRGMEFDNEY5QUUwMi9tT2hUNDRVb1kw b2tmSWFILWhLT1UwN0lSQ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCm8IWPdaH17SCy4ZKt0u0WwueI6b1Qcf0S36G8z+IhDQDhmidgVgBB CirhKvmr/HG6ZGTrh2/+fFreMJ32ylCG1Why1h0rUL+ROMJxwpWr2Am/5gZzPC8e AuHXacPD/8oLBvNqxQnwT+tUKSSHbuZEf5z61igHDGnTPu2veBWaSvwMfeCXtamR MZ1BhpgY8Hmnly26Dglu6JNbkXBFy+pqePKr/qwaVe3ladlXcB/S7q7aFHVKom2f ur7L+Rqveqqrb2Xk8sRQIGoyCveb7crNAlb6XGyOW1OMiKGtd9F+u/A2BScbhfiY DMASX/UAnX6KCp3ROQzE8g1N0tIv5Vci -----END CERTIFICATE-----Generated at Sat May 31 17:20:39 2025 by rpki-client