$ rpki-client -vvf rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.mft File: opgFnwZTffjAi4klX3lZQaMcGAA.mft (raw, json) Hash identifier: gJd/LgPSHBhoH/f137A8Uwvn26RMioVdphHrQlP3TKc= Subject key identifier: 97:0C:01:75:6C:D3:FC:23:FF:2C:B5:B0:55:C8:F8:B1:2A:92:C4:F3 Authority key identifier: A2:98:05:9F:06:53:7D:F8:C0:8B:89:25:5F:79:59:41:A3:1C:18:00 Certificate issuer: /CN=A9144CB7/serialNumber=A298059F06537DF8C08B89255F795941A31C1800 Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opgFnwZTffjAi4klX3lZQaMcGAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.mft Manifest number: 36 Signing time: Thu 15 May 2025 06:53:12 +0000 Manifest this update: Thu 15 May 2025 06:53:12 +0000 Manifest next update: Thu 22 May 2025 06:53:12 +0000 Files and hashes: 1: opgFnwZTffjAi4klX3lZQaMcGAA.crl (hash: hhsqkElySFXwvWHovUUk5rUty/bNur/RyYD0hGWIpLA=) 2: E8716FD4EA3511EF89116C52C4F9AE02.roa (hash: /ib2O66BEz/+EIpjbYLfsm9ZEc6Tr2GDRN2PvAJwp9o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.crl rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opgFnwZTffjAi4klX3lZQaMcGAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:53:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144CB7, serialNumber=A298059F06537DF8C08B89255F795941A31C1800 Validity Not Before: May 15 06:53:12 2025 GMT Not After : May 22 06:53:12 2025 GMT Subject: CN=68258f58-76a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:08:a1:59:d9:52:af:53:11:6f:10:58:e0:10: 86:58:34:ad:b2:e2:8e:dd:fc:12:31:7c:c1:75:bb: 02:21:81:7c:93:b9:79:1a:da:96:f3:37:21:e5:b6: 4d:8f:ca:89:d6:2d:c6:c7:de:3e:24:96:da:a6:dc: 50:ae:ff:67:5f:e2:5c:bc:28:a3:54:16:8f:a4:ff: 55:17:24:1e:a9:9a:22:76:61:45:2d:54:16:f5:6d: 9c:95:25:8b:9a:92:6e:96:a8:aa:2b:c3:da:37:52: e9:06:79:92:95:b6:80:9c:f5:37:08:1a:a3:1c:58: 44:19:17:a9:69:63:17:00:05:de:17:10:9a:a6:7a: 08:28:8c:f3:56:eb:8d:39:14:aa:e6:e8:31:8c:18: 48:ba:a5:97:3c:9c:20:3d:95:4a:c3:03:1c:de:1a: a4:ce:3d:2e:e7:25:94:df:50:2e:91:e8:fe:eb:f8: d1:07:a8:7d:62:c3:2f:c7:4c:c1:c0:a5:2d:8e:65: ff:ea:6f:0d:75:cd:4c:af:e7:de:c0:e1:04:5b:e0: 9f:ad:bf:6d:32:ce:38:70:3e:62:ac:42:9b:7f:0f: 59:3c:f8:7f:9d:87:63:59:9b:16:a1:00:1c:b9:ab: d0:6d:02:e9:98:89:1a:9f:96:74:a8:01:c7:0b:92: 7a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:0C:01:75:6C:D3:FC:23:FF:2C:B5:B0:55:C8:F8:B1:2A:92:C4:F3 X509v3 Authority Key Identifier: keyid:A2:98:05:9F:06:53:7D:F8:C0:8B:89:25:5F:79:59:41:A3:1C:18:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opgFnwZTffjAi4klX3lZQaMcGAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:6e:e2:84:f2:c5:95:52:63:3d:26:d5:b6:75:48:85:3c:2a: 3d:12:b5:8f:ca:96:51:68:08:9e:e3:6d:c2:9e:3f:ae:2a:d4: 29:53:78:8c:86:66:af:41:cf:00:39:46:ec:d2:b2:a5:14:10: 44:04:a0:92:2b:ad:37:df:02:2d:a7:38:14:f8:79:7d:59:5d: 04:3b:5b:55:a3:5d:3c:33:56:d4:21:bd:90:38:d7:8e:b9:e8: 73:36:d8:e5:d0:d2:42:36:14:0d:f9:b0:52:8b:85:fd:6a:2b: 7e:ec:fb:c2:63:29:e0:42:95:74:6c:26:f1:d7:99:96:ee:cd: 45:01:9b:cf:09:17:98:52:67:55:37:f6:01:4b:f1:71:ea:80: 6c:55:04:db:5f:e3:7f:45:c8:98:62:24:3c:84:eb:44:c9:0f: ce:c6:ea:86:fc:12:a7:fe:50:f3:64:19:6f:c9:35:f6:59:73: 67:26:9f:5f:b8:01:5d:f9:a3:19:1e:fa:65:f4:fe:9f:37:08: 33:19:33:99:03:a1:21:9e:7a:f9:35:6e:47:5e:94:22:af:ee: 95:d3:f2:1d:8d:85:9e:fd:8f:55:06:1f:b7:d2:23:4f:38:e5: ad:11:9e:9a:8a:f3:67:7a:a8:fb:35:6f:d7:da:4c:f7:bf:40: 5d:43:10:51 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NENCNzExMC8GA1UEBRMoQTI5ODA1OUYwNjUzN0RGOEMwOEI4OTI1NUY3OTU5NDFB MzFDMTgwMDAeFw0yNTA1MTUwNjUzMTJaFw0yNTA1MjIwNjUzMTJaMBgxFjAUBgNV BAMTDTY4MjU4ZjU4LTc2YTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDnCKFZ2VKvUxFvEFjgEIZYNK2y4o7d/BIxfMF1uwIhgXyTuXka2pbzNyHltk2P yonWLcbH3j4kltqm3FCu/2df4ly8KKNUFo+k/1UXJB6pmiJ2YUUtVBb1bZyVJYua km6WqKorw9o3UukGeZKVtoCc9TcIGqMcWEQZF6lpYxcABd4XEJqmeggojPNW6405 FKrm6DGMGEi6pZc8nCA9lUrDAxzeGqTOPS7nJZTfUC6R6P7r+NEHqH1iwy/HTMHA pS2OZf/qbw11zUyv597A4QRb4J+tv20yzjhwPmKsQpt/D1k8+H+dh2NZmxahABy5 q9BtAumYiRqflnSoAccLknr5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlwwBdWzT /CP/LLWwVcj4sSqSxPMwHwYDVR0jBBgwFoAUopgFnwZTffjAi4klX3lZQaMcGAAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0Q0I3LzhDOTNGNzZDRTE3 NjExRUZCNzk4MUIxOUM0RjlBRTAyL29wZ0Zud1pUZmZqQWk0a2xYM2xaUWFNY0dB QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb3BnRm53WlRmZmpBaTRrbFgzbFpRYU1jR0FBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0 Q0I3LzhDOTNGNzZDRTE3NjExRUZCNzk4MUIxOUM0RjlBRTAyL29wZ0Zud1pUZmZq QWk0a2xYM2xaUWFNY0dBQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHtu4oTyxZVSYz0m1bZ1SIU8Kj0StY/KllFoCJ7jbcKeP64q1ClTeIyG Zq9BzwA5RuzSsqUUEEQEoJIrrTffAi2nOBT4eX1ZXQQ7W1WjXTwzVtQhvZA41465 6HM22OXQ0kI2FA35sFKLhf1qK37s+8JjKeBClXRsJvHXmZbuzUUBm88JF5hSZ1U3 9gFL8XHqgGxVBNtf439FyJhiJDyE60TJD87G6ob8Eqf+UPNkGW/JNfZZc2cmn1+4 AV35oxke+mX0/p83CDMZM5kDoSGeevk1bkdelCKv7pXT8h2NhZ79j1UGH7fSI084 5a0RnpqK82d6qPs1b9faTPe/QF1DEFE= -----END CERTIFICATE-----Generated at Fri May 16 15:11:33 2025 by rpki-client