$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.mft File: o0K4Har3eauhbTK2-wuDD4ULT_A.mft (raw, json) Hash identifier: E6emkv2RCq0a5Z5YuJvx5JV8sP+uY4obz7PItkaMvU4= Subject key identifier: D2:7A:E8:56:9C:94:B3:C2:CA:4C:B2:E8:63:B5:69:A7:6E:D9:C9:27 Authority key identifier: A3:42:B8:1D:AA:F7:79:AB:A1:6D:32:B6:FB:0B:83:0F:85:0B:4F:F0 Certificate issuer: /CN=A91A1205/serialNumber=A342B81DAAF779ABA16D32B6FB0B830F850B4FF0 Certificate serial: 0BD9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0K4Har3eauhbTK2-wuDD4ULT_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.mft Manifest number: 0BD3 Signing time: Fri 30 May 2025 19:01:26 +0000 Manifest this update: Fri 30 May 2025 19:01:25 +0000 Manifest next update: Fri 06 Jun 2025 19:01:25 +0000 Files and hashes: 1: o0K4Har3eauhbTK2-wuDD4ULT_A.crl (hash: MJYgrLNWUTPw0xgGJZvRNOK+39URCBkPuUHqR5xBJPg=) 2: 3D992D3A1A8411EAA026D229C4F9AE02.roa (hash: j0DWhsEHoal3Q4LsD1CyE+J4i6jhKjEMjW9pXFwYCvw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.crl rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0K4Har3eauhbTK2-wuDD4ULT_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3033 (0xbd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1205, serialNumber=A342B81DAAF779ABA16D32B6FB0B830F850B4FF0 Validity Not Before: May 30 19:01:25 2025 GMT Not After : Jun 6 19:01:25 2025 GMT Subject: CN=683a0086-5219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d2:cc:9e:22:00:60:ff:b4:53:51:f9:48:22: b9:13:a4:16:66:58:b1:21:18:ba:71:9e:ac:b2:2f: e2:18:c6:5d:cc:25:20:8c:49:2d:54:31:91:f0:55: f6:ef:6c:76:5f:36:5c:3e:32:2d:2a:8c:80:36:bf: 56:30:56:6a:e2:62:5f:a8:d8:cd:b7:44:28:68:40: 8c:dd:13:34:cb:c9:f3:84:2b:dd:a8:87:86:dc:1b: 17:2f:9b:68:71:de:af:a0:9b:89:de:7f:fd:81:00: 11:b6:d9:42:1b:cf:9e:86:e1:df:72:60:25:bc:9b: 35:ed:27:70:7e:75:5b:3e:dc:f4:0c:e5:74:e6:dd: 7b:b1:74:e0:02:5f:ab:93:3f:99:36:81:2d:e2:43: 66:a4:fd:85:49:36:2c:b5:36:42:40:5e:35:24:60: 10:e9:50:89:d6:3f:83:49:0f:7d:52:d8:d2:50:9c: 1e:6a:d0:eb:3e:0d:0e:92:0e:6e:46:1e:f2:89:77: af:81:6b:58:a9:01:8c:96:c5:66:f6:4f:8e:b5:07: 48:29:3a:96:11:41:4e:8a:3a:aa:ee:2f:2c:65:be: bd:d2:25:1b:d4:69:68:b9:95:c7:94:77:8d:b6:91: a7:ab:da:3f:be:80:72:d5:ee:ec:3e:7a:d6:ac:9e: 55:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:7A:E8:56:9C:94:B3:C2:CA:4C:B2:E8:63:B5:69:A7:6E:D9:C9:27 X509v3 Authority Key Identifier: keyid:A3:42:B8:1D:AA:F7:79:AB:A1:6D:32:B6:FB:0B:83:0F:85:0B:4F:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0K4Har3eauhbTK2-wuDD4ULT_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:ac:1a:7d:11:96:29:07:5f:b9:df:a9:e2:a2:df:45:25:28: 95:29:17:05:34:94:30:80:b7:cb:45:d2:ff:6f:6f:34:4c:69: 94:b6:b0:d3:ef:87:3d:b7:d1:c8:f8:6a:39:90:4a:d9:0d:1d: 04:65:0a:ef:8b:17:a7:df:7b:ea:e0:6c:ff:ce:72:9d:c4:dd: d0:5f:1c:9a:89:48:e0:88:db:33:7f:c3:fc:b0:f2:d0:a7:0d: bd:0c:1a:2b:4b:9a:c9:5e:53:4b:20:ea:f0:24:ab:46:58:e8: 3b:ce:10:2d:a1:39:10:ce:d3:a7:f6:f3:d0:d6:a4:81:54:d2: a4:e3:e1:b8:4d:23:20:39:b9:3d:cd:47:41:eb:28:0f:52:62: 38:60:ad:ed:9e:a8:90:a7:44:26:fb:ce:2d:c5:34:21:31:1c: 29:ea:d9:ca:9f:ea:bd:11:30:09:63:d1:2f:d5:1d:f8:ed:4d: 05:85:0f:45:7f:b6:40:0e:a4:ca:c1:1e:92:a0:67:03:f3:23: b5:18:44:65:b8:9f:b2:86:cd:6d:de:62:31:67:a6:55:27:2a: 9f:25:36:30:78:fd:17:c9:6d:65:05:77:9c:96:52:46:56:4c: de:26:80:28:8a:1d:e0:94:8e:a6:1e:24:5c:30:58:a9:d5:38: 20:4c:df:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTEyMDUxMTAvBgNVBAUTKEEzNDJCODFEQUFGNzc5QUJBMTZEMzJCNkZCMEI4MzBG ODUwQjRGRjAwHhcNMjUwNTMwMTkwMTI1WhcNMjUwNjA2MTkwMTI1WjAYMRYwFAYD VQQDEw02ODNhMDA4Ni01MjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9LMniIAYP+0U1H5SCK5E6QWZlixIRi6cZ6ssi/iGMZdzCUgjEktVDGR8FX2 72x2XzZcPjItKoyANr9WMFZq4mJfqNjNt0QoaECM3RM0y8nzhCvdqIeG3BsXL5to cd6voJuJ3n/9gQARttlCG8+ehuHfcmAlvJs17SdwfnVbPtz0DOV05t17sXTgAl+r kz+ZNoEt4kNmpP2FSTYstTZCQF41JGAQ6VCJ1j+DSQ99UtjSUJweatDrPg0Okg5u Rh7yiXevgWtYqQGMlsVm9k+OtQdIKTqWEUFOijqq7i8sZb690iUb1GlouZXHlHeN tpGnq9o/voBy1e7sPnrWrJ5VQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNJ66Fac lLPCykyy6GO1aadu2cknMB8GA1UdIwQYMBaAFKNCuB2q93mroW0ytvsLgw+FC0/w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTIwNS83RDIzMUUwNDFB NTUxMUVBODgwNDIyMTFDNEY5QUUwMi9vMEs0SGFyM2VhdWhiVEsyLXd1REQ0VUxU X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28wSzRIYXIzZWF1aGJUSzItd3VERDRVTFRfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTIwNS83RDIzMUUwNDFBNTUxMUVBODgwNDIyMTFDNEY5QUUwMi9vMEs0SGFyM2Vh dWhiVEsyLXd1REQ0VUxUX0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsrBp9EZYpB1+536niot9FJSiVKRcFNJQwgLfLRdL/b280TGmUtrDT 74c9t9HI+Go5kErZDR0EZQrvixen33vq4Gz/znKdxN3QXxyaiUjgiNszf8P8sPLQ pw29DBorS5rJXlNLIOrwJKtGWOg7zhAtoTkQztOn9vPQ1qSBVNKk4+G4TSMgObk9 zUdB6ygPUmI4YK3tnqiQp0Qm+84txTQhMRwp6tnKn+q9ETAJY9Ev1R347U0FhQ9F f7ZADqTKwR6SoGcD8yO1GERluJ+yhs1t3mIxZ6ZVJyqfJTYweP0XyW1lBXecllJG VkzeJoAoih3glI6mHiRcMFip1TggTN+s -----END CERTIFICATE-----Generated at Sat May 31 17:34:19 2025 by rpki-client