$ rpki-client -vvf rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft File: OS824KRQBTw9xm0uOJThDKcz3aY.mft (raw, json) Hash identifier: tnuuu9WNsrlNS9ugr0Xc+ERqC9mCt+VG3H6SGmbQkzw= Subject key identifier: 23:99:8B:09:96:5D:D7:2C:92:56:B8:83:08:1A:47:04:E1:03:88:A8 Authority key identifier: 39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6 Certificate issuer: /CN=A91C326F/serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6 Certificate serial: 06F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft Manifest number: 06CD Signing time: Fri 30 May 2025 22:21:09 +0000 Manifest this update: Fri 30 May 2025 22:21:09 +0000 Manifest next update: Fri 06 Jun 2025 22:21:09 +0000 Files and hashes: 1: OS824KRQBTw9xm0uOJThDKcz3aY.crl (hash: /2c8JZ8E4YSr//6WfyniBxG0EgRZSn8jFIwzuzT6jXQ=) 2: DE6E8CA8257F11F0823F9E46C4F9AE02.roa (hash: jUyUfVKqSzdQ1Jiv0y+K/4ZOmbxn+iVK0WY87xliBD0=) 3: B9CCEC5A72E411ED833AE326C4F9AE02.roa (hash: 7STuNNvyySdvKLv0ZARurOGrWZyKElkT0Pp3fy6yFYY=) 4: B8D1689472E411ED833AE326C4F9AE02.roa (hash: JSwTLZ+Ks+XHKVTbFIphlZkac86sl1CWT662kq+fPJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:21:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1779 (0x6f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C326F, serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6 Validity Not Before: May 30 22:21:09 2025 GMT Not After : Jun 6 22:21:09 2025 GMT Subject: CN=683a2f55-71fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5f:98:e4:c9:22:1f:44:f3:e8:e8:e8:d0:88: d9:57:70:f0:de:31:67:ab:f9:75:ba:74:75:53:1d: 8b:2e:03:fc:24:7f:cb:be:1c:6c:d2:68:69:95:0d: a7:3f:9c:82:7d:f4:d4:14:db:6c:20:d8:35:62:80: d6:74:4f:01:4e:c0:17:84:61:4f:d0:8b:e9:b5:18: c6:33:a7:9c:35:e7:45:a6:74:da:20:0a:23:26:99: bb:8a:6e:92:e8:2b:57:23:54:02:fb:96:65:e4:ae: 7f:e5:91:8b:35:50:d4:82:7d:29:37:7f:ea:68:38: 22:02:e3:e1:d2:72:06:cd:89:c7:39:d0:ea:ff:fe: 19:9c:e4:52:0a:6f:e4:ca:d2:2c:27:d2:d0:ca:1a: 9f:fe:88:8d:82:3a:78:02:28:79:af:16:e1:74:e7: 66:61:99:2a:b7:e6:4b:cd:dc:cb:12:39:8e:bb:46: d0:95:28:af:a7:a5:c7:ed:79:8b:73:26:89:f7:27: a4:f8:5d:33:51:cf:cf:1b:04:8b:19:bf:c9:4f:6e: 33:c0:0a:ea:71:ca:66:88:e1:3d:1c:cf:75:3b:2b: a1:64:8c:12:ae:b8:c2:f9:74:c4:80:0b:72:f1:c3: 47:91:03:0a:cb:28:cd:b9:24:69:1c:7f:37:42:9d: 30:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:99:8B:09:96:5D:D7:2C:92:56:B8:83:08:1A:47:04:E1:03:88:A8 X509v3 Authority Key Identifier: keyid:39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:15:f3:f4:55:cb:92:75:7f:27:d7:0d:d2:31:17:b1:ec:b5: c3:05:64:96:1f:f6:04:d8:3a:15:5f:82:41:b8:02:dc:f9:bf: 5e:1e:12:5f:d2:36:af:2b:5c:d0:a0:82:6e:1e:43:a0:d7:70: bd:7e:d8:e6:33:0a:b8:d7:26:7c:7f:f0:26:8d:69:2c:88:89: ac:63:b0:23:b8:f5:3e:e1:70:ae:a4:8b:12:50:95:2d:24:6a: 64:73:dd:2f:d3:b3:4d:4b:58:e7:19:6d:47:07:32:7f:2b:e4: 6b:20:e6:41:36:22:ee:0e:54:71:0d:b6:68:9a:e5:0b:8a:e0: 37:a0:c4:71:82:7d:c5:01:79:15:19:1d:b4:cb:c7:8c:1e:b5: f9:33:d7:cb:c8:d3:f5:c6:f1:ab:25:3c:d1:16:5c:b8:12:6a: ba:ee:c5:74:25:f7:49:fc:99:8c:78:fa:97:14:8c:3b:44:98: 40:27:6a:27:17:15:cc:db:7a:f1:a4:57:d1:b2:5a:07:d7:37: 80:fb:80:c1:cc:01:cd:fe:97:e4:f4:b9:49:52:0f:f3:21:e5: 55:b6:40:d9:7e:5b:23:82:8b:d8:52:a9:b6:03:7b:23:a8:94: e7:bd:b2:9b:fe:b4:05:55:b3:75:a9:3e:eb:3f:f1:58:b7:d4: 8a:4e:ae:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMyNkYxMTAvBgNVBAUTKDM5MkYzNkUwQTQ1MDA1M0MzREM2NkQyRTM4OTRFMTBD QTczM0REQTYwHhcNMjUwNTMwMjIyMTA5WhcNMjUwNjA2MjIyMTA5WjAYMRYwFAYD VQQDEw02ODNhMmY1NS03MWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAol+Y5MkiH0Tz6Ojo0IjZV3Dw3jFnq/l1unR1Ux2LLgP8JH/Lvhxs0mhplQ2n P5yCffTUFNtsINg1YoDWdE8BTsAXhGFP0IvptRjGM6ecNedFpnTaIAojJpm7im6S 6CtXI1QC+5Zl5K5/5ZGLNVDUgn0pN3/qaDgiAuPh0nIGzYnHOdDq//4ZnORSCm/k ytIsJ9LQyhqf/oiNgjp4Aih5rxbhdOdmYZkqt+ZLzdzLEjmOu0bQlSivp6XH7XmL cyaJ9yek+F0zUc/PGwSLGb/JT24zwArqccpmiOE9HM91OyuhZIwSrrjC+XTEgAty 8cNHkQMKyyjNuSRpHH83Qp0w8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCOZiwmW Xdcskla4gwgaRwThA4ioMB8GA1UdIwQYMBaAFDkvNuCkUAU8PcZtLjiU4QynM92m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzI2Ri83ODY2RjUzMDVG QzcxMUVCOEE2OTIwMkVDNEY5QUUwMi9PUzgyNEtSUUJUdzl4bTB1T0pUaERLY3oz YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09TODI0S1JRQlR3OXhtMHVPSlRoREtjejNhWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzI2Ri83ODY2RjUzMDVGQzcxMUVCOEE2OTIwMkVDNEY5QUUwMi9PUzgyNEtSUUJU dzl4bTB1T0pUaERLY3ozYVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuFfP0VcuSdX8n1w3SMRex7LXDBWSWH/YE2DoVX4JBuALc+b9eHhJf 0javK1zQoIJuHkOg13C9ftjmMwq41yZ8f/AmjWksiImsY7AjuPU+4XCupIsSUJUt JGpkc90v07NNS1jnGW1HBzJ/K+RrIOZBNiLuDlRxDbZomuULiuA3oMRxgn3FAXkV GR20y8eMHrX5M9fLyNP1xvGrJTzRFly4Emq67sV0JfdJ/JmMePqXFIw7RJhAJ2on FxXM23rxpFfRsloH1zeA+4DBzAHN/pfk9LlJUg/zIeVVtkDZflsjgovYUqm2A3sj qJTnvbKb/rQFVbN1qT7rP/FYt9SKTq7J -----END CERTIFICATE-----Generated at Sat May 31 16:47:47 2025 by rpki-client