$ rpki-client -vvf rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft File: OS824KRQBTw9xm0uOJThDKcz3aY.mft (raw, json) Hash identifier: 0ZiVaAuJYbo4xjYpZYHf7SAVex9SVafmnftAx0C1kXE= Subject key identifier: AC:C5:27:51:5E:E6:F3:9F:E2:49:A6:13:9F:4E:E0:05:50:77:42:5B Authority key identifier: 39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6 Certificate issuer: /CN=A91C326F/serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6 Certificate serial: 06D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft Manifest number: 06AF Signing time: Tue 08 Apr 2025 21:58:27 +0000 Manifest this update: Tue 08 Apr 2025 21:58:27 +0000 Manifest next update: Tue 15 Apr 2025 21:58:26 +0000 Files and hashes: 1: OS824KRQBTw9xm0uOJThDKcz3aY.crl (hash: C8LLkh5UMyE0XZVlBdmKMvjSX3Rgv6920+TOtEZQAM8=) 2: 8A1515887C7D11EFB24A9F51C4F9AE02.roa (hash: yu+vAXz85+ImzGtz2dS0WwomfVbOz0/fHg5Ts/b0h74=) 3: 59DE107A14CF11EE81C44276C4F9AE02.roa (hash: dorNefehc4jcrYiPb1SmTT9WWjQeQbu3xTbAJUr9xp0=) 4: B9CCEC5A72E411ED833AE326C4F9AE02.roa (hash: 7STuNNvyySdvKLv0ZARurOGrWZyKElkT0Pp3fy6yFYY=) 5: BCC1E04E33C011EE83E9A61BC4F9AE02.roa (hash: gEcFdCTf52NARTThJUnsykol1LheMWgXpMpHapO3A8E=) 6: BC41A65E33C011EE83E9A61BC4F9AE02.roa (hash: CaitNOKQkm3AvYSLSTJmnVLMkDD1jkPzfCvAkZPYXwc=) 7: B76C776472E411ED833AE326C4F9AE02.roa (hash: G40zS/jPmT/MABYrNCr8KjGZKmGs9oISV/lw5AZ1PqY=) 8: B8D1689472E411ED833AE326C4F9AE02.roa (hash: JSwTLZ+Ks+XHKVTbFIphlZkac86sl1CWT662kq+fPJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 21:58:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1747 (0x6d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C326F Validity Not Before: Apr 8 21:58:27 2025 GMT Not After : Apr 15 21:58:26 2025 GMT Subject: CN=67f59c03-1c0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f8:30:bd:3f:54:ac:6d:d7:08:36:e8:57:dc: 5c:5a:c0:55:ec:8d:9d:03:10:41:1d:4b:9c:63:2d: a4:7d:b6:4b:a0:b4:b6:55:b6:f1:81:d5:59:7f:d5: 25:ac:6e:ce:c1:8a:f6:d2:36:18:09:6f:d3:bc:25: ef:e7:7f:cc:20:2f:3a:fa:16:a4:09:dc:29:4f:70: f8:2c:e2:d3:b9:d9:bb:6d:d7:fa:33:86:3e:b1:8e: 02:fe:7b:70:9d:34:c8:c9:67:85:22:4e:43:c4:99: a3:a0:1f:71:cb:82:7e:57:ce:4b:35:14:cd:19:92: 8e:52:86:97:19:37:0e:a9:85:69:09:ff:79:ae:f6: 8e:28:09:d7:08:04:88:06:bb:87:ff:6b:d8:b2:f9: 47:2d:b8:e4:4c:8a:ed:ee:7a:80:c3:c7:f2:e5:ac: ce:c1:5c:28:47:fe:51:f3:8d:f7:9e:50:91:13:51: 4a:3a:51:62:ac:22:1b:50:f9:56:66:77:ac:64:30: 67:5a:bf:c7:58:06:cd:15:a6:8f:c7:39:fd:9f:d7: c3:2d:4e:75:81:d7:a5:c6:48:b5:14:73:7f:70:84: 74:b6:9a:1f:be:8e:e9:d9:76:4b:b2:f6:89:3c:d3: af:76:b4:9f:2c:4c:65:eb:0c:cd:b2:24:c2:4e:74: 65:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:C5:27:51:5E:E6:F3:9F:E2:49:A6:13:9F:4E:E0:05:50:77:42:5B X509v3 Authority Key Identifier: keyid:39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:a8:63:3d:a0:3a:f9:f0:31:d3:e9:5e:d8:03:41:1d:2d:e0: 0e:af:17:2c:42:c4:71:5c:cf:f2:bb:46:32:4b:00:15:32:12: 8d:e6:67:c9:d3:6f:04:ca:4f:60:3a:4b:af:07:0a:4b:7a:4f: 8e:b1:0d:3a:a8:8e:8e:a3:5e:f6:ae:7c:cf:c9:27:49:83:b3: 42:63:76:e1:8a:1f:5a:ee:d1:3e:86:c7:95:81:9a:20:b3:81: 00:ab:80:e4:70:45:4c:db:48:4a:23:df:9b:a2:e5:a0:3d:c3: 6c:67:a7:e0:e0:dd:b7:ad:d3:6b:00:6a:f5:2c:ef:79:14:ad: 83:9f:4c:68:e4:06:d8:a2:13:4c:9f:5c:e7:cc:32:92:bc:f2: 11:0e:e6:9a:1e:05:89:d4:45:16:70:cf:39:e4:01:43:0f:ef: bb:c3:ac:d7:74:4e:87:e9:b9:69:11:6f:87:0f:6d:f8:9a:f3: fb:da:26:88:87:c0:f0:65:41:44:45:59:06:96:cb:4b:da:64: c3:2d:a7:9c:c1:40:67:6f:78:80:16:6b:b9:eb:7a:c8:ef:02: d3:c5:42:b5:b0:5e:6b:a7:be:0e:59:a2:a2:8b:ba:10:ff:de: 67:d0:51:d5:36:0f:51:8b:9a:56:d8:4c:9e:fc:bd:cf:47:c8: 8e:b8:71:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMyNkYxMTAvBgNVBAUTKDM5MkYzNkUwQTQ1MDA1M0MzREM2NkQyRTM4OTRFMTBD QTczM0REQTYwHhcNMjUwNDA4MjE1ODI3WhcNMjUwNDE1MjE1ODI2WjAYMRYwFAYD VQQDEw02N2Y1OWMwMy0xYzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxvgwvT9UrG3XCDboV9xcWsBV7I2dAxBBHUucYy2kfbZLoLS2VbbxgdVZf9Ul rG7OwYr20jYYCW/TvCXv53/MIC86+hakCdwpT3D4LOLTudm7bdf6M4Y+sY4C/ntw nTTIyWeFIk5DxJmjoB9xy4J+V85LNRTNGZKOUoaXGTcOqYVpCf95rvaOKAnXCASI BruH/2vYsvlHLbjkTIrt7nqAw8fy5azOwVwoR/5R8433nlCRE1FKOlFirCIbUPlW ZnesZDBnWr/HWAbNFaaPxzn9n9fDLU51gdelxki1FHN/cIR0tpofvo7p2XZLsvaJ PNOvdrSfLExl6wzNsiTCTnRlrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKzFJ1Fe 5vOf4kmmE59O4AVQd0JbMB8GA1UdIwQYMBaAFDkvNuCkUAU8PcZtLjiU4QynM92m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzI2Ri83ODY2RjUzMDVG QzcxMUVCOEE2OTIwMkVDNEY5QUUwMi9PUzgyNEtSUUJUdzl4bTB1T0pUaERLY3oz YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09TODI0S1JRQlR3OXhtMHVPSlRoREtjejNhWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzI2Ri83ODY2RjUzMDVGQzcxMUVCOEE2OTIwMkVDNEY5QUUwMi9PUzgyNEtSUUJU dzl4bTB1T0pUaERLY3ozYVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMqGM9oDr58DHT6V7YA0EdLeAOrxcsQsRxXM/yu0YySwAVMhKN5mfJ 028Eyk9gOkuvBwpLek+OsQ06qI6Oo172rnzPySdJg7NCY3bhih9a7tE+hseVgZog s4EAq4DkcEVM20hKI9+bouWgPcNsZ6fg4N23rdNrAGr1LO95FK2Dn0xo5AbYohNM n1znzDKSvPIRDuaaHgWJ1EUWcM855AFDD++7w6zXdE6H6blpEW+HD234mvP72iaI h8DwZUFERVkGlstL2mTDLaecwUBnb3iAFmu563rI7wLTxUK1sF5rp74OWaKii7oQ /95n0FHVNg9Ri5pW2Eye/L3PR8iOuHEL -----END CERTIFICATE-----Generated at Thu Apr 10 22:05:39 2025 by rpki-client