$ rpki-client -vvf rpki.apnic.net/member_repository/A911D080/5C24970AE4AC11EB99710A15C4F9AE02/ORpvZ19Lqtwh3Xmpu0_wlWNWV7I.mft File: ORpvZ19Lqtwh3Xmpu0_wlWNWV7I.mft (raw, json) Hash identifier: 8FeUo2dZ5n76HUXTm1mMeVCHUiTZqAe+XJ5XStQsim0= Subject key identifier: C2:DD:50:4E:AE:0E:55:B1:F3:04:2D:76:EA:85:42:87:3A:6F:13:09 Authority key identifier: 39:1A:6F:67:5F:4B:AA:DC:21:DD:79:A9:BB:4F:F0:95:63:56:57:B2 Certificate issuer: /CN=A911D080/serialNumber=391A6F675F4BAADC21DD79A9BB4FF095635657B2 Certificate serial: 0565 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORpvZ19Lqtwh3Xmpu0_wlWNWV7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D080/5C24970AE4AC11EB99710A15C4F9AE02/ORpvZ19Lqtwh3Xmpu0_wlWNWV7I.mft Manifest number: 055F Signing time: Sat 10 May 2025 22:58:55 +0000 Manifest this update: Sat 10 May 2025 22:58:54 +0000 Manifest next update: Sat 17 May 2025 22:58:54 +0000 Files and hashes: 1: ORpvZ19Lqtwh3Xmpu0_wlWNWV7I.crl (hash: hoVViONi6xtonEBNH3xgyfBSl+Jor0mEaEznDLDjVCI=) 2: 0D0106EAE5BF11EB801D410DC4F9AE02.roa (hash: 3jMfh6JrAWUp0w/oStB2daKxlSbx8MU7h4k/yNQbZVo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D080/5C24970AE4AC11EB99710A15C4F9AE02/ORpvZ19Lqtwh3Xmpu0_wlWNWV7I.crl rsync://rpki.apnic.net/member_repository/A911D080/5C24970AE4AC11EB99710A15C4F9AE02/ORpvZ19Lqtwh3Xmpu0_wlWNWV7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORpvZ19Lqtwh3Xmpu0_wlWNWV7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 22:58:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1381 (0x565) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D080, serialNumber=391A6F675F4BAADC21DD79A9BB4FF095635657B2 Validity Not Before: May 10 22:58:54 2025 GMT Not After : May 17 22:58:54 2025 GMT Subject: CN=681fda2e-25d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3d:0c:4e:ec:e8:71:82:bb:8e:fa:14:72:e1: ad:95:c5:b0:9f:5d:99:2c:40:e5:80:d6:47:85:97: 72:1c:a2:32:51:3f:b8:80:a8:22:60:42:27:27:9d: f7:f7:c0:3e:55:75:3d:ff:2b:79:02:11:c1:7e:1a: f9:50:24:43:21:f5:e7:9d:03:3b:23:61:01:dc:31: 28:50:8a:47:57:96:d8:2d:bb:4d:05:c6:26:a3:db: 76:32:61:75:c1:19:a3:03:4f:af:c2:24:d0:68:99: 7d:d0:a9:09:51:a2:8f:d1:e3:77:ab:ae:20:8f:31: 7b:4d:15:52:e1:21:6a:a4:9b:b2:d3:c4:ac:1f:0b: 5a:54:8f:0f:d3:9e:7d:c9:9e:c5:27:b0:7c:d2:c2: 91:89:8d:13:9c:57:b4:ab:92:56:3a:d8:d8:b7:4d: 27:af:d3:92:06:bb:c0:fd:3f:02:1f:aa:84:03:7e: dc:ba:57:18:ec:da:4a:5a:d7:a7:c0:42:b0:be:16: 85:f6:0c:58:26:37:7f:f3:5d:21:05:cf:c9:68:94: ef:7e:e2:4f:0d:b1:aa:53:7c:cc:2d:93:b3:d7:f6: 98:48:30:57:d7:ae:5b:21:c8:42:d9:98:2f:6d:df: 89:e7:72:45:1c:9e:5b:32:2b:bf:f9:d7:7a:ad:f6: 39:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:DD:50:4E:AE:0E:55:B1:F3:04:2D:76:EA:85:42:87:3A:6F:13:09 X509v3 Authority Key Identifier: keyid:39:1A:6F:67:5F:4B:AA:DC:21:DD:79:A9:BB:4F:F0:95:63:56:57:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D080/5C24970AE4AC11EB99710A15C4F9AE02/ORpvZ19Lqtwh3Xmpu0_wlWNWV7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORpvZ19Lqtwh3Xmpu0_wlWNWV7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D080/5C24970AE4AC11EB99710A15C4F9AE02/ORpvZ19Lqtwh3Xmpu0_wlWNWV7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:95:27:4b:5a:9b:38:44:39:a9:b2:59:af:b6:ec:84:0d:7b: 8d:3f:9c:cd:75:e7:ee:93:81:f7:63:16:9e:00:0c:b1:ad:8f: fc:5f:36:91:89:fc:21:11:b4:12:ca:11:95:8d:6a:db:ce:01: 62:3d:62:c8:e4:92:28:7c:1a:b5:ab:1e:cd:78:19:80:98:d8: 91:01:07:9e:86:56:db:71:49:60:cc:d9:d2:28:dc:1c:46:c3: f1:e8:f1:2c:b9:9a:3b:3f:0c:11:90:50:ea:7b:7a:33:65:e1: d2:b5:55:6c:a7:07:88:60:eb:de:0b:df:3f:12:13:93:ec:f7: fd:8f:2c:92:02:54:bb:48:c8:d3:60:82:fb:58:c1:6a:45:03: cd:c1:d1:4e:2c:0a:37:89:83:39:a4:c9:90:7f:c0:84:83:db: a4:03:17:31:63:c2:4d:53:4f:a1:c9:83:de:f7:c2:2b:12:9c: bd:86:fe:b5:76:2b:6e:3f:24:53:bc:5b:32:b4:dd:d1:c0:b0: c6:47:72:26:a2:fd:73:76:1b:63:73:ab:1c:84:c3:6d:3f:a9: 5a:a4:45:c2:41:e8:c3:73:0a:5b:a7:ad:a2:c8:19:44:c2:2a: c2:21:af:78:e6:e9:5d:7e:7b:7a:4e:a1:b3:ac:33:d1:ae:39: 91:e2:e7:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQwODAxMTAvBgNVBAUTKDM5MUE2RjY3NUY0QkFBREMyMURENzlBOUJCNEZGMDk1 NjM1NjU3QjIwHhcNMjUwNTEwMjI1ODU0WhcNMjUwNTE3MjI1ODU0WjAYMRYwFAYD VQQDEw02ODFmZGEyZS0yNWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyz0MTuzocYK7jvoUcuGtlcWwn12ZLEDlgNZHhZdyHKIyUT+4gKgiYEInJ533 98A+VXU9/yt5AhHBfhr5UCRDIfXnnQM7I2EB3DEoUIpHV5bYLbtNBcYmo9t2MmF1 wRmjA0+vwiTQaJl90KkJUaKP0eN3q64gjzF7TRVS4SFqpJuy08SsHwtaVI8P0559 yZ7FJ7B80sKRiY0TnFe0q5JWOtjYt00nr9OSBrvA/T8CH6qEA37culcY7NpKWten wEKwvhaF9gxYJjd/810hBc/JaJTvfuJPDbGqU3zMLZOz1/aYSDBX165bIchC2Zgv bd+J53JFHJ5bMiu/+dd6rfY5dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMLdUE6u DlWx8wQtduqFQoc6bxMJMB8GA1UdIwQYMBaAFDkab2dfS6rcId15qbtP8JVjVley MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDA4MC81QzI0OTcwQUU0 QUMxMUVCOTk3MTBBMTVDNEY5QUUwMi9PUnB2WjE5THF0d2gzWG1wdTBfd2xXTldW N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09ScHZaMTlMcXR3aDNYbXB1MF93bFdOV1Y3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDA4MC81QzI0OTcwQUU0QUMxMUVCOTk3MTBBMTVDNEY5QUUwMi9PUnB2WjE5THF0 d2gzWG1wdTBfd2xXTldWN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATlSdLWps4RDmpslmvtuyEDXuNP5zNdefuk4H3YxaeAAyxrY/8XzaR ifwhEbQSyhGVjWrbzgFiPWLI5JIofBq1qx7NeBmAmNiRAQeehlbbcUlgzNnSKNwc RsPx6PEsuZo7PwwRkFDqe3ozZeHStVVspweIYOveC98/EhOT7Pf9jyySAlS7SMjT YIL7WMFqRQPNwdFOLAo3iYM5pMmQf8CEg9ukAxcxY8JNU0+hyYPe98IrEpy9hv61 dituPyRTvFsytN3RwLDGR3Imov1zdhtjc6schMNtP6lapEXCQejDcwpbp62iyBlE wirCIa945uldfnt6TqGzrDPRrjmR4ufC -----END CERTIFICATE-----Generated at Sun May 11 22:03:23 2025 by rpki-client