$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft File: oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft (raw, json) Hash identifier: tFRXvj0lv7reEO6MRrpEYs9O6AtOU4SvVwjrSRh7PJo= Subject key identifier: E3:C6:21:0A:17:A1:37:63:CB:A9:DB:C5:A1:63:25:59:55:54:9D:E5 Authority key identifier: A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57 Certificate issuer: /CN=A91FAA91/serialNumber=A0C80CEE063C9CC82CDCB0BC745C4FE46DD02657 Certificate serial: 01AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft Manifest number: 0192 Signing time: Sat 31 May 2025 03:30:14 +0000 Manifest this update: Sat 31 May 2025 03:30:13 +0000 Manifest next update: Sat 07 Jun 2025 03:30:13 +0000 Files and hashes: 1: oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl (hash: 967ptf1w8vOVPUcasK2naYglIdj2SOI3AMSfN+ybHFU=) 2: CE65A4E4A57E11EFA1B6E428C4F9AE02.roa (hash: 1SKbx2XsDMYzA80POo6zzafuauDwKbPNh6n7Ob5AjVA=) 3: D0103496FD6611EE9188C568C4F9AE02.roa (hash: PxpNeamT7nJAO8ypf86mF4tTFHjbBgphhBI0WaQ2K6I=) 4: 13D68EB430AB11F0A15DC75AC4F9AE02.roa (hash: 8ceZRP/XUhaUyTjeioD/K4mCivFkQCLXcH6cjJ7JFq0=) 5: E762B166FAF811EE92A3642EC4F9AE02.roa (hash: e/dOTjn5zjRzl7VVF4lYBqEjUR3aP4ajbLKyVpxXtqo=) 6: 1D9A36F40C6B11EF95ACFA13C4F9AE02.roa (hash: NJPr7OZom8PgcjW18JJjDNXMEozgSB9WGNPuyE4apbo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:30:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 430 (0x1ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAA91, serialNumber=A0C80CEE063C9CC82CDCB0BC745C4FE46DD02657 Validity Not Before: May 31 03:30:13 2025 GMT Not After : Jun 7 03:30:13 2025 GMT Subject: CN=683a77c5-157b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:42:69:ff:8f:c6:12:b0:93:c0:93:49:23:9a: a2:92:dc:06:93:00:92:39:3c:f6:87:48:3b:d2:9a: d7:0f:29:5f:ad:9e:ab:66:df:32:34:7d:76:09:09: b1:18:33:2c:3d:5d:2f:a3:1a:3d:50:14:a2:9c:db: 2a:d7:3c:b4:48:2c:20:83:27:a2:09:bd:ef:82:c8: ea:29:fb:62:53:86:40:01:86:cf:a1:76:97:ef:03: 7d:7b:1a:23:7e:92:b9:2a:f3:01:f7:1f:11:c7:be: 54:52:6b:43:a9:67:9b:f5:80:94:69:47:da:90:ad: e0:2d:bf:b6:7f:5e:20:50:f8:14:d2:30:9d:5c:ec: 87:97:17:cd:5b:6e:7e:4c:fc:6e:8e:a3:ed:23:18: 18:d2:d2:37:85:84:6d:f6:b4:d2:19:0b:e5:d8:fc: b7:ff:a3:11:e9:f2:07:c6:01:26:34:0e:3e:8a:33: 19:09:e6:d5:0c:66:62:bb:66:6b:cc:bb:26:b1:af: d1:8e:82:71:a2:4a:24:ba:2a:20:3d:56:eb:f9:94: 33:1c:2b:7b:fa:f8:7b:8f:97:a1:8a:9e:bf:6e:2b: f4:05:5d:5f:f1:90:60:78:b1:91:2d:55:c8:3d:50: 60:4a:9f:9f:37:1e:6b:b0:68:6e:42:ef:00:1a:d8: 39:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:C6:21:0A:17:A1:37:63:CB:A9:DB:C5:A1:63:25:59:55:54:9D:E5 X509v3 Authority Key Identifier: keyid:A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:ff:16:73:56:c5:07:4e:23:22:39:68:36:db:00:9c:37:86: 39:77:38:b7:ba:d1:4b:8f:ab:59:41:46:97:4d:9c:4f:65:18: cb:2f:11:80:85:83:00:b9:4b:cd:2d:16:6a:57:d0:6c:90:13: 5d:ad:e1:be:21:15:87:1c:f0:3c:6c:7d:f4:83:8c:32:75:bd: f5:45:cf:9b:2d:a7:79:f5:76:53:55:a6:56:4c:b9:cb:3c:78: 4a:f6:6e:41:ea:1b:e6:7f:7e:80:6d:b0:86:89:60:ec:51:4b: 1a:05:15:d8:c1:97:2f:9b:e1:32:ce:ac:b5:88:5f:4c:3e:a4: 0f:a4:e6:3b:55:9e:f4:e8:89:1b:ae:50:29:3e:36:06:6d:b2: 4e:5c:0e:66:5e:0d:0b:14:1b:bc:bf:9d:b6:57:b8:c2:04:fb: 85:49:15:d8:5e:ff:0d:b8:3a:db:8e:5c:37:a9:35:53:f2:6f: 95:e2:db:cb:6a:6f:54:21:d8:3b:ca:6b:39:01:d8:cd:79:45: 19:69:31:9b:06:71:ff:0a:ad:c8:3f:c0:3f:a6:37:92:85:ef: c7:70:a1:e5:10:7a:ad:45:74:1f:1c:54:df:1a:9d:19:03:10: 70:ab:35:80:60:49:bb:f2:a2:e0:31:28:43:0d:ca:96:b6:5d: ee:41:d1:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFBOTExMTAvBgNVBAUTKEEwQzgwQ0VFMDYzQzlDQzgyQ0RDQjBCQzc0NUM0RkU0 NkREMDI2NTcwHhcNMjUwNTMxMDMzMDEzWhcNMjUwNjA3MDMzMDEzWjAYMRYwFAYD VQQDEw02ODNhNzdjNS0xNTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA70Jp/4/GErCTwJNJI5qiktwGkwCSOTz2h0g70prXDylfrZ6rZt8yNH12CQmx GDMsPV0voxo9UBSinNsq1zy0SCwggyeiCb3vgsjqKftiU4ZAAYbPoXaX7wN9exoj fpK5KvMB9x8Rx75UUmtDqWeb9YCUaUfakK3gLb+2f14gUPgU0jCdXOyHlxfNW25+ TPxujqPtIxgY0tI3hYRt9rTSGQvl2Py3/6MR6fIHxgEmNA4+ijMZCebVDGZiu2Zr zLsmsa/RjoJxokokuiogPVbr+ZQzHCt7+vh7j5ehip6/biv0BV1f8ZBgeLGRLVXI PVBgSp+fNx5rsGhuQu8AGtg52wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOPGIQoX oTdjy6nbxaFjJVlVVJ3lMB8GA1UdIwQYMBaAFKDIDO4GPJzILNywvHRcT+Rt0CZX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUE5MS85NDIwRDIxMDBB NUExMUVFQTNGNUI0NDFDNEY5QUUwMi9vTWdNN2dZOG5NZ3MzTEM4ZEZ4UDVHM1FK bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29NZ003Z1k4bk1nczNMQzhkRnhQNUczUUpsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUE5MS85NDIwRDIxMDBBNUExMUVFQTNGNUI0NDFDNEY5QUUwMi9vTWdNN2dZOG5N Z3MzTEM4ZEZ4UDVHM1FKbGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAI/xZzVsUHTiMiOWg22wCcN4Y5dzi3utFLj6tZQUaXTZxPZRjLLxGA hYMAuUvNLRZqV9BskBNdreG+IRWHHPA8bH30g4wydb31Rc+bLad59XZTVaZWTLnL PHhK9m5B6hvmf36AbbCGiWDsUUsaBRXYwZcvm+Eyzqy1iF9MPqQPpOY7VZ706Ikb rlApPjYGbbJOXA5mXg0LFBu8v522V7jCBPuFSRXYXv8NuDrbjlw3qTVT8m+V4tvL am9UIdg7yms5AdjNeUUZaTGbBnH/Cq3IP8A/pjeShe/HcKHlEHqtRXQfHFTfGp0Z AxBwqzWAYEm78qLgMShDDcqWtl3uQdHu -----END CERTIFICATE-----Generated at Sat May 31 17:46:22 2025 by rpki-client