$ rpki-client -vvf rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft File: OGxcstbg7GFBrrc_STUhsFIKPPo.mft (raw, json) Hash identifier: BU92poSPezGknCiweHDWDKhzd4CMTgPjT+SypnQdl2I= Subject key identifier: 56:75:CB:66:1D:08:27:46:B7:E8:23:1B:8C:54:64:24:A1:A7:48:1D Authority key identifier: 38:6C:5C:B2:D6:E0:EC:61:41:AE:B7:3F:49:35:21:B0:52:0A:3C:FA Certificate issuer: /CN=A9123AB4/serialNumber=386C5CB2D6E0EC6141AEB73F493521B0520A3CFA Certificate serial: 1D36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft Manifest number: 1D29 Signing time: Mon 12 May 2025 16:06:22 +0000 Manifest this update: Mon 12 May 2025 16:06:22 +0000 Manifest next update: Mon 19 May 2025 16:06:22 +0000 Files and hashes: 1: OGxcstbg7GFBrrc_STUhsFIKPPo.crl (hash: 89IIK+30eUssr7PrqFmVdFk2Sbkw3NaoCZFLJ7HLCb4=) 2: DE5B018C8D8B11EBB959991DC4F9AE02.roa (hash: jfTk7qLtFGzciF3MjfSmzCLIXIS5E+uoDhIbl0HSies=) 3: DD9C07828D8B11EBB959991DC4F9AE02.roa (hash: gqOrlTvQP7NE8QcpWskAg9stXohxZ5iMQQauxzl2p0w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.crl rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 16:06:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7478 (0x1d36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123AB4, serialNumber=386C5CB2D6E0EC6141AEB73F493521B0520A3CFA Validity Not Before: May 12 16:06:22 2025 GMT Not After : May 19 16:06:22 2025 GMT Subject: CN=68221c7e-b78d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4b:87:20:72:5e:09:6d:d4:0f:7c:6a:2f:c6: 0b:1e:be:82:7f:8c:5b:dc:20:c0:30:92:b6:f6:36: 32:3c:a5:35:f1:65:00:b6:6e:55:21:f4:f3:1a:bf: 7a:6a:e8:a2:38:3f:af:1a:8a:62:e3:88:65:67:e6: 99:f3:a2:67:82:cd:83:d9:91:65:68:93:32:cc:64: 44:69:9f:53:56:63:30:e4:9f:9d:f0:55:7f:7c:7b: d9:d7:63:d1:ce:69:f5:f7:10:da:3a:90:e6:c9:62: 94:25:54:8e:84:12:b2:28:df:4e:f5:13:2d:63:c6: f4:10:6a:d9:08:a7:62:68:48:56:bd:1e:0c:58:bc: c6:9d:ff:f9:b6:9e:c5:76:b6:7a:0f:b7:da:aa:99: 0d:29:a9:66:18:93:c6:c6:72:fd:2f:ef:4e:ad:c6: 63:c5:8f:29:97:a6:fe:30:de:b0:31:55:bf:9f:6e: 7f:8a:06:18:cc:c6:ba:05:53:4d:ca:37:ec:54:81: 6a:08:44:de:d8:61:7a:53:bf:b7:1e:2d:d3:06:47: d9:8a:69:ba:3e:61:64:75:52:f9:b3:8e:1b:f6:98: 7c:08:ad:e7:d8:a9:2f:09:6e:45:87:24:aa:92:18: 43:3f:6f:35:50:04:92:e1:55:78:76:c7:6d:85:ff: 42:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:75:CB:66:1D:08:27:46:B7:E8:23:1B:8C:54:64:24:A1:A7:48:1D X509v3 Authority Key Identifier: keyid:38:6C:5C:B2:D6:E0:EC:61:41:AE:B7:3F:49:35:21:B0:52:0A:3C:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:46:7a:da:f8:b4:cb:08:a7:70:59:f5:6c:c5:86:b3:93:1e: 0d:53:8f:84:99:e7:17:9f:9c:65:b6:3f:6a:d1:7d:72:ac:74: 59:b2:a5:cf:d7:2e:13:00:1b:e3:b6:1f:39:96:bc:74:b8:2c: 96:00:1c:d3:7d:76:ba:f6:d3:a4:22:36:8e:a2:bf:d5:af:5d: a8:b7:1c:10:c5:fd:28:cd:3c:0f:8b:99:4e:d6:42:b1:0c:34: 53:6e:03:22:75:5f:3b:8f:56:3e:72:30:2d:e6:38:74:73:a6: d0:a6:5c:91:82:16:48:36:e5:cb:76:ab:14:5f:01:09:b1:3c: 0f:d9:b5:c6:53:23:70:41:c1:39:4d:0c:db:5f:f1:c4:11:9f: 32:5e:e3:0f:11:a3:58:85:73:90:ae:21:af:b3:55:37:6e:2e: 33:46:7a:af:12:89:d2:b9:2f:36:2d:86:6d:c9:b9:3c:39:dc: 78:54:b2:fd:11:a8:b2:3d:44:95:2d:93:08:8b:f9:7e:14:d8: 94:4d:53:27:09:f2:06:37:17:67:31:6a:60:16:f8:2d:fa:cf: d7:a4:42:cf:9c:31:20:24:d8:54:3d:01:13:70:ac:9c:cc:c7: 07:0f:8f:1c:78:07:3a:b9:75:3f:0e:73:c6:09:64:30:4d:7e: 70:f4:d7:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHTYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNBQjQxMTAvBgNVBAUTKDM4NkM1Q0IyRDZFMEVDNjE0MUFFQjczRjQ5MzUyMUIw NTIwQTNDRkEwHhcNMjUwNTEyMTYwNjIyWhcNMjUwNTE5MTYwNjIyWjAYMRYwFAYD VQQDEw02ODIyMWM3ZS1iNzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwkuHIHJeCW3UD3xqL8YLHr6Cf4xb3CDAMJK29jYyPKU18WUAtm5VIfTzGr96 auiiOD+vGopi44hlZ+aZ86Jngs2D2ZFlaJMyzGREaZ9TVmMw5J+d8FV/fHvZ12PR zmn19xDaOpDmyWKUJVSOhBKyKN9O9RMtY8b0EGrZCKdiaEhWvR4MWLzGnf/5tp7F drZ6D7faqpkNKalmGJPGxnL9L+9OrcZjxY8pl6b+MN6wMVW/n25/igYYzMa6BVNN yjfsVIFqCETe2GF6U7+3Hi3TBkfZimm6PmFkdVL5s44b9ph8CK3n2KkvCW5FhySq khhDP281UASS4VV4dsdthf9CcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFZ1y2Yd CCdGt+gjG4xUZCShp0gdMB8GA1UdIwQYMBaAFDhsXLLW4OxhQa63P0k1IbBSCjz6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0FCNC8xRkIwNDBBMEIx NzQxMUU2OEVDODg1MThDNEY5QUUwMi9PR3hjc3RiZzdHRkJycmNfU1RVaHNGSUtQ UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09HeGNzdGJnN0dGQnJyY19TVFVoc0ZJS1BQby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0FCNC8xRkIwNDBBMEIxNzQxMUU2OEVDODg1MThDNEY5QUUwMi9PR3hjc3RiZzdH RkJycmNfU1RVaHNGSUtQUG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9Rnra+LTLCKdwWfVsxYazkx4NU4+EmecXn5xltj9q0X1yrHRZsqXP 1y4TABvjth85lrx0uCyWABzTfXa69tOkIjaOor/Vr12otxwQxf0ozTwPi5lO1kKx DDRTbgMidV87j1Y+cjAt5jh0c6bQplyRghZINuXLdqsUXwEJsTwP2bXGUyNwQcE5 TQzbX/HEEZ8yXuMPEaNYhXOQriGvs1U3bi4zRnqvEonSuS82LYZtybk8Odx4VLL9 EaiyPUSVLZMIi/l+FNiUTVMnCfIGNxdnMWpgFvgt+s/XpELPnDEgJNhUPQETcKyc zMcHD48ceAc6uXU/DnPGCWQwTX5w9Ne0 -----END CERTIFICATE-----Generated at Wed May 14 14:10:32 2025 by rpki-client