$ rpki-client -vvf rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft File: oxVOxxr_DOw2jHltJXw6nAWJo_8.mft (raw, json) Hash identifier: NFkPyJ6BNFj3IFARbmeD074wqX9cEcgcNvitdBOX+hI= Subject key identifier: 41:C6:A1:CF:39:1A:A2:2E:56:75:67:63:77:03:E3:57:51:C8:23:48 Authority key identifier: A3:15:4E:C7:1A:FF:0C:EC:36:8C:79:6D:25:7C:3A:9C:05:89:A3:FF Certificate issuer: /CN=A914A2C1/serialNumber=A3154EC71AFF0CEC368C796D257C3A9C0589A3FF Certificate serial: F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxVOxxr_DOw2jHltJXw6nAWJo_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft Manifest number: EF Signing time: Sun 11 May 2025 04:08:59 +0000 Manifest this update: Sun 11 May 2025 04:08:59 +0000 Manifest next update: Sun 18 May 2025 04:08:59 +0000 Files and hashes: 1: oxVOxxr_DOw2jHltJXw6nAWJo_8.crl (hash: +CFkQ9plYKUEGY+q2yYtWtt6PBQiR2qGORN3koTTN5k=) 2: 4A30B41CC09F11EEB2E48256C4F9AE02.roa (hash: IQwoPmbNS6EWj4SfGYbMHUkyg+0iQUeFh2X1891ay/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.crl rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxVOxxr_DOw2jHltJXw6nAWJo_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 241 (0xf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A2C1, serialNumber=A3154EC71AFF0CEC368C796D257C3A9C0589A3FF Validity Not Before: May 11 04:08:59 2025 GMT Not After : May 18 04:08:59 2025 GMT Subject: CN=682022db-97da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:81:14:2d:88:bd:e4:c7:51:d8:8d:01:ea:a6: c7:b8:ec:bb:fe:71:fd:b0:44:e2:4f:54:85:bd:e2: e2:d3:df:2a:ba:b7:bd:b8:80:50:41:74:dd:4d:50: b5:7a:b9:f3:bb:bf:03:7d:f9:5e:9a:68:81:9b:86: c6:f4:62:46:29:c3:af:84:30:47:82:82:02:6c:e0: 56:7d:f6:db:9f:d5:4a:4c:e0:f6:a6:8e:9c:f3:de: f1:95:8b:e1:f6:f6:38:74:78:fe:24:1d:4c:f4:44: f4:a9:3c:87:ca:08:bc:f8:65:16:23:a2:57:f3:20: cc:15:ce:e9:18:c7:cf:f9:a1:5c:e1:bf:40:b4:9b: 06:ad:52:3a:30:3b:9f:d6:e5:eb:d7:ba:cb:19:de: 62:68:82:45:f8:29:8a:4f:8b:56:cb:0b:f9:bb:63: 32:8e:e9:b6:73:3c:38:a9:1c:77:5e:e4:5c:e2:21: 02:b0:0a:8c:7a:c0:c8:4d:85:c9:e1:14:0c:c8:11: 14:8e:ad:d8:4e:51:3e:69:2d:ae:6a:29:bf:5a:57: 50:2a:f5:ba:bb:d3:d4:0a:bd:81:fa:6b:46:2a:15: 3c:17:e0:0c:ec:87:79:e1:eb:dd:f9:67:d1:48:31: be:2d:23:13:9d:e6:6e:f9:50:a0:b9:48:f7:f5:ad: c7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C6:A1:CF:39:1A:A2:2E:56:75:67:63:77:03:E3:57:51:C8:23:48 X509v3 Authority Key Identifier: keyid:A3:15:4E:C7:1A:FF:0C:EC:36:8C:79:6D:25:7C:3A:9C:05:89:A3:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxVOxxr_DOw2jHltJXw6nAWJo_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:7a:ac:e7:c5:c0:09:52:eb:9a:7a:b1:71:b2:6f:a5:57:c0: 9c:ad:97:10:76:21:42:3e:49:70:ab:6b:ee:cc:e0:ec:9b:ba: b6:04:e5:a9:8f:03:05:4e:1b:5a:c0:32:d0:ad:63:f3:f3:14: 4c:c2:e9:a2:b3:46:2e:f4:11:7f:d4:21:b7:7a:d1:a4:a6:5a: 3c:46:d4:09:58:13:19:06:ce:0e:c9:e7:f0:54:df:7c:ae:79: d7:42:e6:26:3b:6f:56:56:03:55:d7:30:f2:f3:02:0f:cd:68: 69:a3:94:11:65:ab:3e:60:7b:83:dc:04:86:4f:03:30:52:11: 2b:44:96:74:73:f8:6d:3a:e0:e2:68:ae:8a:5b:eb:38:ca:56: 81:fd:33:f7:e3:d0:50:65:a1:66:f5:18:0c:a8:da:c1:bc:44: b8:33:ca:df:e6:a4:1b:4d:05:bc:c8:98:ea:32:67:4e:2f:30: 96:79:22:28:78:2d:82:a6:93:59:9f:7c:5a:4f:88:b9:59:49: 27:dc:35:b1:f6:29:cc:01:2e:9b:f1:fb:89:fa:4c:f8:7d:e1: 87:e7:fa:be:d0:dd:af:e6:74:56:eb:e6:67:ba:dc:1d:77:e9: 33:36:3f:59:b4:24:df:d7:67:b1:43:2f:9d:b5:a5:e9:c9:18: 8e:9f:83:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEEyQzExMTAvBgNVBAUTKEEzMTU0RUM3MUFGRjBDRUMzNjhDNzk2RDI1N0MzQTlD MDU4OUEzRkYwHhcNMjUwNTExMDQwODU5WhcNMjUwNTE4MDQwODU5WjAYMRYwFAYD VQQDEw02ODIwMjJkYi05N2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsYEULYi95MdR2I0B6qbHuOy7/nH9sETiT1SFveLi098qure9uIBQQXTdTVC1 ernzu78DfflemmiBm4bG9GJGKcOvhDBHgoICbOBWffbbn9VKTOD2po6c897xlYvh 9vY4dHj+JB1M9ET0qTyHygi8+GUWI6JX8yDMFc7pGMfP+aFc4b9AtJsGrVI6MDuf 1uXr17rLGd5iaIJF+CmKT4tWywv5u2Myjum2czw4qRx3XuRc4iECsAqMesDITYXJ 4RQMyBEUjq3YTlE+aS2uaim/WldQKvW6u9PUCr2B+mtGKhU8F+AM7Id54evd+WfR SDG+LSMTneZu+VCguUj39a3HMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEHGoc85 GqIuVnVnY3cD41dRyCNIMB8GA1UdIwQYMBaAFKMVTsca/wzsNox5bSV8OpwFiaP/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTJDMS83RkZERkI2NEMw OUUxMUVFQUQzQjg1NTRDNEY5QUUwMi9veFZPeHhyX0RPdzJqSGx0Slh3Nm5BV0pv XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL294Vk94eHJfRE93MmpIbHRKWHc2bkFXSm9fOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTJDMS83RkZERkI2NEMwOUUxMUVFQUQzQjg1NTRDNEY5QUUwMi9veFZPeHhyX0RP dzJqSGx0Slh3Nm5BV0pvXzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmeqznxcAJUuuaerFxsm+lV8CcrZcQdiFCPklwq2vuzODsm7q2BOWp jwMFThtawDLQrWPz8xRMwumis0Yu9BF/1CG3etGkplo8RtQJWBMZBs4OyefwVN98 rnnXQuYmO29WVgNV1zDy8wIPzWhpo5QRZas+YHuD3ASGTwMwUhErRJZ0c/htOuDi aK6KW+s4ylaB/TP349BQZaFm9RgMqNrBvES4M8rf5qQbTQW8yJjqMmdOLzCWeSIo eC2CppNZn3xaT4i5WUkn3DWx9inMAS6b8fuJ+kz4feGH5/q+0N2v5nRW6+Znutwd d+kzNj9ZtCTf12exQy+dtaXpyRiOn4PZ -----END CERTIFICATE-----Generated at Mon May 12 18:54:13 2025 by rpki-client