$ rpki-client -vvf rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft File: 5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft (raw, json) Hash identifier: IF8n8KcJyKWp8PToSnYxjquYBss+4iM8JNYsgqOGjhM= Subject key identifier: D5:03:D2:58:C6:AA:D7:3A:A3:24:5C:AF:38:57:85:5B:64:5E:90:BD Authority key identifier: E4:E1:01:EE:F4:43:15:0C:62:11:0A:CA:FA:88:15:54:C0:89:FC:53 Certificate issuer: /CN=A9131612/serialNumber=E4E101EEF443150C62110ACAFA881554C089FC53 Certificate serial: 0DB5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft Manifest number: 0DA3 Signing time: Wed 14 May 2025 18:03:35 +0000 Manifest this update: Wed 14 May 2025 18:03:34 +0000 Manifest next update: Wed 21 May 2025 18:03:34 +0000 Files and hashes: 1: 5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl (hash: jeKvzweyr7EwJhv80w69UUBIb8o3NMOMFoc9EOWbwU8=) 2: 26F281DEDDF811EAA553705EC4F9AE02.roa (hash: yfx8lsCL6G/ov0fWwE1WTE6uXL656onMX4rdjMifJrY=) 3: 279B0372DDF811EAA553705EC4F9AE02.roa (hash: TXNMP48c0k6G4JxEf3t+PnW7SOJPV7z8Od5Inbeh5Gs=) 4: 923C51A8BE8811E998F37222C4F9AE02.roa (hash: aRzYWRPVSTTgYa3Czpj2Qj/z5H39rDEjDg/TNXrra84=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 18:03:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3509 (0xdb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131612, serialNumber=E4E101EEF443150C62110ACAFA881554C089FC53 Validity Not Before: May 14 18:03:34 2025 GMT Not After : May 21 18:03:34 2025 GMT Subject: CN=6824daf7-adea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:0e:9a:49:61:64:6e:8f:49:64:70:e3:1e:8a: c5:66:e7:63:e5:6f:6d:16:13:93:80:7b:91:96:4e: 6c:c3:60:94:ae:2a:75:98:0d:86:53:11:10:c5:51: 87:6e:f3:eb:40:18:dd:1f:60:20:fd:28:17:3d:bb: ea:05:3d:0f:57:9c:ea:fc:f7:92:e0:3a:8f:88:e8: 34:43:4f:f5:4f:d5:dd:3e:b5:06:97:b8:a6:be:dd: 11:6f:6d:08:37:21:0e:43:26:0c:bd:15:a4:68:57: 0b:85:f8:9c:95:fa:38:37:17:f8:07:af:aa:0c:bc: ec:b2:53:8d:a6:6d:32:a7:4f:cf:48:03:0e:a9:be: b6:54:cd:e9:e1:33:a2:5c:df:89:3b:02:cf:3c:bd: 22:28:3e:f0:99:1d:0a:3e:52:f0:a2:01:aa:89:83: 3b:a9:11:00:a9:0d:97:99:ca:47:77:00:48:7c:f8: 4b:d8:15:43:b4:75:be:37:5a:d4:42:b7:e1:70:6f: 52:21:7f:80:33:da:d6:21:a4:25:c8:91:dd:cd:6a: 44:a8:da:70:b7:91:9c:1d:4f:31:e8:a5:36:1a:a3: bb:57:4d:25:02:78:32:7f:dd:d0:d1:01:50:07:40: a0:e9:ec:ac:f9:31:df:5e:e0:39:f9:99:b8:e0:b0: c4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:03:D2:58:C6:AA:D7:3A:A3:24:5C:AF:38:57:85:5B:64:5E:90:BD X509v3 Authority Key Identifier: keyid:E4:E1:01:EE:F4:43:15:0C:62:11:0A:CA:FA:88:15:54:C0:89:FC:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:2c:88:b9:01:aa:c2:7d:b5:60:82:68:36:2f:0d:fa:20:2a: 67:28:27:9e:1f:d2:f2:38:6e:e9:52:93:e9:0e:4b:b4:d7:c5: b9:f4:1e:2e:36:5c:dd:24:5f:d8:81:a4:45:63:93:c7:3b:17: 6c:32:9d:10:84:75:ae:72:e3:e4:4c:24:c1:1a:b9:15:34:f3: cb:d3:5f:87:0f:72:bf:c2:09:aa:5d:96:69:16:b7:fc:cf:ee: e4:78:02:c5:47:1b:43:2a:da:f4:34:b6:d4:43:4c:2d:c8:32: 41:6c:c2:8a:2c:b0:9b:33:c4:62:7b:ad:19:50:6e:b3:ff:ec: 70:0f:4d:58:72:d7:b1:31:03:20:89:6d:93:8c:7e:66:a4:7a: c2:d6:25:5a:20:13:fd:66:e9:22:74:b2:e0:c5:d0:01:12:98: 5e:01:4c:fb:28:36:fe:13:82:13:5e:be:9f:93:7e:b3:b0:dd: 6e:dc:10:da:56:c4:31:be:3b:0b:a3:0c:1e:68:21:16:6a:a3: 29:8e:b8:a0:cc:58:dd:44:82:4e:2e:53:90:05:0d:76:3f:1e: 09:7a:68:93:11:16:d8:85:c1:e0:3a:6f:19:a1:5c:12:83:d3: 33:a1:b4:ba:1c:7c:84:e7:01:e1:66:b8:38:a4:7d:51:73:a3: db:48:2a:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE2MTIxMTAvBgNVBAUTKEU0RTEwMUVFRjQ0MzE1MEM2MjExMEFDQUZBODgxNTU0 QzA4OUZDNTMwHhcNMjUwNTE0MTgwMzM0WhcNMjUwNTIxMTgwMzM0WjAYMRYwFAYD VQQDEw02ODI0ZGFmNy1hZGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9w6aSWFkbo9JZHDjHorFZudj5W9tFhOTgHuRlk5sw2CUrip1mA2GUxEQxVGH bvPrQBjdH2Ag/SgXPbvqBT0PV5zq/PeS4DqPiOg0Q0/1T9XdPrUGl7imvt0Rb20I NyEOQyYMvRWkaFcLhficlfo4Nxf4B6+qDLzsslONpm0yp0/PSAMOqb62VM3p4TOi XN+JOwLPPL0iKD7wmR0KPlLwogGqiYM7qREAqQ2XmcpHdwBIfPhL2BVDtHW+N1rU QrfhcG9SIX+AM9rWIaQlyJHdzWpEqNpwt5GcHU8x6KU2GqO7V00lAngyf93Q0QFQ B0Cg6eys+THfXuA5+Zm44LDEHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNUD0ljG qtc6oyRcrzhXhVtkXpC9MB8GA1UdIwQYMBaAFOThAe70QxUMYhEKyvqIFVTAifxT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTYxMi9FM0I4NEM4Q0JF ODYxMUU5OUE2QzAxMUZDNEY5QUUwMi81T0VCN3ZSREZReGlFUXJLLW9nVlZNQ0pf Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVPRUI3dlJERlF4aUVRckstb2dWVk1DSl9GTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTYxMi9FM0I4NEM4Q0JFODYxMUU5OUE2QzAxMUZDNEY5QUUwMi81T0VCN3ZSREZR eGlFUXJLLW9nVlZNQ0pfRk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkLIi5AarCfbVggmg2Lw36ICpnKCeeH9LyOG7pUpPpDku018W59B4u NlzdJF/YgaRFY5PHOxdsMp0QhHWucuPkTCTBGrkVNPPL01+HD3K/wgmqXZZpFrf8 z+7keALFRxtDKtr0NLbUQ0wtyDJBbMKKLLCbM8Rie60ZUG6z/+xwD01YctexMQMg iW2TjH5mpHrC1iVaIBP9ZukidLLgxdABEpheAUz7KDb+E4ITXr6fk36zsN1u3BDa VsQxvjsLowweaCEWaqMpjrigzFjdRIJOLlOQBQ12Px4JemiTERbYhcHgOm8ZoVwS g9MzobS6HHyE5wHhZrg4pH1Rc6PbSCpo -----END CERTIFICATE-----Generated at Thu May 15 22:19:52 2025 by rpki-client