$ rpki-client -vvf rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft File: OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft (raw, json) Hash identifier: lxEOO+w9D1oeVNiTBfTebAvvmpp1WVo2eFaIj4nhPvI= Subject key identifier: C5:40:CA:7D:D7:24:FF:84:6B:62:48:5C:60:CC:6B:7F:51:63:20:ED Authority key identifier: 38:6C:30:0E:D7:2F:12:B9:05:47:8A:33:CE:F2:77:99:25:4A:69:1C Certificate issuer: /CN=A911E502/serialNumber=386C300ED72F12B905478A33CEF27799254A691C Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft Manifest number: 23 Signing time: Fri 09 May 2025 06:51:26 +0000 Manifest this update: Fri 09 May 2025 06:51:26 +0000 Manifest next update: Fri 16 May 2025 06:51:26 +0000 Files and hashes: 1: OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl (hash: 7jGfI3ZDBXpGE5Sy7U1b5btVt4tO8V7B4tZwr2l97y0=) 2: 54DA33D2FB2E11EFB488A95EC4F9AE02.roa (hash: L/7VzM2fbo0IdE808LBeTzf3z0geWQ0SpeUJCZmWPBg=) 3: 53E9C44CFB2E11EFB488A95EC4F9AE02.roa (hash: hzaK0MTBJLVrmr0hWnuGmH3SdcFclIxCzlQUZOQabQ8=) 4: 5460E9C8FB2E11EFB488A95EC4F9AE02.roa (hash: bkhjgOMD/IEHS+ly/VrsRugL9cN6Yu5sgUx5f40TuYM=) 5: 553798E2FB2E11EFB488A95EC4F9AE02.roa (hash: p8161Irka1RhOlKGL72R+iegNNjEoBL5dnyvjeUTVQY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 06:51:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E502, serialNumber=386C300ED72F12B905478A33CEF27799254A691C Validity Not Before: May 9 06:51:26 2025 GMT Not After : May 16 06:51:26 2025 GMT Subject: CN=681da5ee-7d76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ab:02:4d:34:90:d3:9f:e7:11:d2:f6:46:a4: 42:a4:31:83:de:f7:45:25:25:22:ee:82:91:8d:6e: cd:af:0f:07:5e:4d:3e:14:1c:99:03:b7:77:15:82: 05:0d:06:8b:55:43:83:06:ac:fb:fe:99:48:16:98: 72:c7:75:d7:a9:9a:a7:c2:f2:e9:1f:04:c2:fa:d2: bd:92:30:57:ca:2a:2e:3a:37:f8:fa:6c:a9:69:e3: 91:f2:55:ae:12:4a:58:d4:2f:33:75:8b:92:a1:83: 40:83:e4:cf:a0:04:78:76:bd:f1:f0:34:c3:f2:b6: cd:4d:81:d8:52:11:44:1e:37:08:12:dd:ef:e5:13: 13:87:a9:b8:bf:9e:63:12:8a:95:dd:00:f2:92:62: 56:44:f3:ae:b2:e9:da:68:e7:17:81:84:ea:92:f1: 28:c5:a3:ee:4b:01:00:9b:dc:d7:11:34:8e:68:9d: d5:9c:0b:9d:9f:9b:b5:52:18:ec:86:60:ac:b0:07: e4:70:3b:5b:8c:5c:5a:ab:13:8e:f1:42:8c:f5:b5: ef:e5:20:31:4e:6b:d5:d1:80:b3:fc:4d:48:48:38: 03:11:bf:82:07:ed:3d:12:6b:d0:58:9a:cf:8c:59: 99:4c:74:7f:56:b6:53:fe:0b:ba:9c:63:4f:f7:7b: 7a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:40:CA:7D:D7:24:FF:84:6B:62:48:5C:60:CC:6B:7F:51:63:20:ED X509v3 Authority Key Identifier: keyid:38:6C:30:0E:D7:2F:12:B9:05:47:8A:33:CE:F2:77:99:25:4A:69:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:e9:f7:78:87:62:06:f6:3d:fd:ac:29:66:40:3e:c6:4f:a1: 66:48:7a:91:17:36:c8:90:4a:34:3b:ac:47:05:77:1d:a5:5b: 1d:22:0e:dc:68:72:11:82:71:e5:c6:fa:25:c5:da:da:1d:a8: 90:f1:7a:39:34:7c:05:9c:98:60:29:0d:98:3a:b4:24:ab:5c: ff:26:69:d9:79:2d:18:aa:43:52:2e:e8:44:f6:f1:a7:e4:24: 5d:9a:cc:6d:60:f1:b0:2b:73:83:17:2b:25:74:82:90:f9:3b: 52:7d:7f:b2:ef:84:35:85:15:c2:33:c0:f1:eb:d7:b6:e2:d2: 37:03:08:97:b3:a4:dc:58:11:cd:7a:ff:ed:b9:19:0a:40:bc: e0:45:dc:63:a5:3e:48:5a:42:74:57:9f:84:00:81:ca:7e:f1: c8:5a:52:38:ea:fd:bd:00:55:34:ef:29:5d:9e:6b:d7:f6:05: f1:db:d8:bf:5a:b1:8b:bd:5f:ff:2c:29:f2:7a:e4:98:05:6a: bf:04:d5:f3:50:75:64:9f:1d:10:d1:d9:ac:a6:8d:f0:40:0f: 41:2e:fc:a8:50:c6:ca:1c:b5:71:a0:03:06:07:e5:21:47:2b: b7:1f:f6:93:51:a6:10:66:00:d9:c9:31:9e:40:28:76:54:fc: 27:f5:7a:00 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RTUwMjExMC8GA1UEBRMoMzg2QzMwMEVENzJGMTJCOTA1NDc4QTMzQ0VGMjc3OTky NTRBNjkxQzAeFw0yNTA1MDkwNjUxMjZaFw0yNTA1MTYwNjUxMjZaMBgxFjAUBgNV BAMTDTY4MWRhNWVlLTdkNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpqwJNNJDTn+cR0vZGpEKkMYPe90UlJSLugpGNbs2vDwdeTT4UHJkDt3cVggUN BotVQ4MGrPv+mUgWmHLHddepmqfC8ukfBML60r2SMFfKKi46N/j6bKlp45HyVa4S SljULzN1i5Khg0CD5M+gBHh2vfHwNMPyts1NgdhSEUQeNwgS3e/lExOHqbi/nmMS ipXdAPKSYlZE866y6dpo5xeBhOqS8SjFo+5LAQCb3NcRNI5ondWcC52fm7VSGOyG YKywB+RwO1uMXFqrE47xQoz1te/lIDFOa9XRgLP8TUhIOAMRv4IH7T0Sa9BYms+M WZlMdH9WtlP+C7qcY0/3e3pbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxUDKfdck /4RrYkhcYMxrf1FjIO0wHwYDVR0jBBgwFoAUOGwwDtcvErkFR4ozzvJ3mSVKaRww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFFNTAyLzg3QzNGRDBBRkIy OTExRUZCNzY2REM3NkM0RjlBRTAyL09Hd3dEdGN2RXJrRlI0b3p6dkozbVNWS2FS dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT0d3d0R0Y3ZFcmtGUjRvenp2SjNtU1ZLYVJ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFF NTAyLzg3QzNGRDBBRkIyOTExRUZCNzY2REM3NkM0RjlBRTAyL09Hd3dEdGN2RXJr RlI0b3p6dkozbVNWS2FSdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAzp93iHYgb2Pf2sKWZAPsZPoWZIepEXNsiQSjQ7rEcFdx2lWx0iDtxo chGCceXG+iXF2todqJDxejk0fAWcmGApDZg6tCSrXP8madl5LRiqQ1Iu6ET28afk JF2azG1g8bArc4MXKyV0gpD5O1J9f7LvhDWFFcIzwPHr17bi0jcDCJezpNxYEc16 /+25GQpAvOBF3GOlPkhaQnRXn4QAgcp+8chaUjjq/b0AVTTvKV2ea9f2BfHb2L9a sYu9X/8sKfJ65JgFar8E1fNQdWSfHRDR2aymjfBAD0Eu/KhQxsoctXGgAwYH5SFH K7cf9pNRphBmANnJMZ5AKHZU/Cf1egA= -----END CERTIFICATE-----Generated at Sat May 10 18:47:14 2025 by rpki-client