$ rpki-client -vvf rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.mft File: 1O0zil4gh9gu9ML2RZm0ERJy5eA.mft (raw, json) Hash identifier: VGtdEpTjFdH0J65ogS2lYFmjffd8baKzAja4wK67ZVo= Subject key identifier: 09:D8:7E:D2:8C:0F:B4:09:17:36:45:2D:C3:FC:BA:82:53:03:B7:75 Authority key identifier: D4:ED:33:8A:5E:20:87:D8:2E:F4:C2:F6:45:99:B4:11:12:72:E5:E0 Certificate issuer: /CN=A914ECA4/serialNumber=D4ED338A5E2087D82EF4C2F64599B4111272E5E0 Certificate serial: 0715 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1O0zil4gh9gu9ML2RZm0ERJy5eA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.mft Manifest number: 070E Signing time: Wed 14 May 2025 21:56:39 +0000 Manifest this update: Wed 14 May 2025 21:56:38 +0000 Manifest next update: Wed 21 May 2025 21:56:38 +0000 Files and hashes: 1: 1O0zil4gh9gu9ML2RZm0ERJy5eA.crl (hash: sp08U4P63aAB/KRmNFvwN9eE66eXyATqTRG0SwDw6yw=) 2: FC07CE5C3A7C11EBB38FF025C4F9AE02.roa (hash: P6M32s9N/Ait6pG90TBg5gFRqcz9Jw3z+OITkwygUn4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.crl rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1O0zil4gh9gu9ML2RZm0ERJy5eA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 21:56:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1813 (0x715) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914ECA4, serialNumber=D4ED338A5E2087D82EF4C2F64599B4111272E5E0 Validity Not Before: May 14 21:56:38 2025 GMT Not After : May 21 21:56:38 2025 GMT Subject: CN=68251196-4d6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:aa:ab:59:09:8f:5f:78:1b:20:d2:92:f4:60: 04:41:c3:95:42:38:77:73:35:11:c0:92:19:ff:79: 7b:63:00:38:20:97:9b:db:77:77:d5:3a:59:91:97: be:a7:9e:f2:6e:19:d6:b3:8c:9d:9e:d6:b4:e7:83: 8f:ea:68:aa:57:98:aa:63:3c:f4:33:2b:8f:11:ae: 13:89:47:76:0e:63:35:95:cc:05:26:98:2f:26:a5: a5:79:5b:3e:ff:51:b3:9a:24:ef:d2:2e:65:0d:e4: d8:40:81:64:60:11:ab:fa:d5:ca:a9:1b:dd:09:27: fa:25:9e:fa:02:9a:36:a8:8d:5f:73:58:29:80:5e: ba:83:ae:4c:48:22:70:b0:ed:e6:a9:a7:79:ab:7e: 10:fe:79:10:d3:b3:d4:b0:c4:b2:bb:01:00:a4:d6: 33:b2:ef:42:63:fb:fa:86:23:0e:fc:f6:ef:3f:9a: b3:ae:f5:d6:b2:d5:cc:92:f3:10:70:83:79:b7:01: 21:a8:bf:a5:1d:71:8c:c6:60:fb:8d:f4:86:06:55: c5:f7:2e:63:31:20:59:64:35:9e:f9:fd:07:e2:a4: 48:47:90:9c:ff:8a:6c:53:a2:a0:a4:ea:bc:fd:37: b9:5a:b9:73:4d:84:bc:f1:c1:97:4b:44:44:2c:45: f0:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:D8:7E:D2:8C:0F:B4:09:17:36:45:2D:C3:FC:BA:82:53:03:B7:75 X509v3 Authority Key Identifier: keyid:D4:ED:33:8A:5E:20:87:D8:2E:F4:C2:F6:45:99:B4:11:12:72:E5:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1O0zil4gh9gu9ML2RZm0ERJy5eA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:57:63:63:13:2f:04:db:b0:2f:d3:d9:7a:66:e4:71:f5:ee: 6c:84:03:4d:c4:9a:b9:76:41:ca:fb:eb:b5:e3:e8:e6:af:5d: 7a:d4:ee:f0:1a:a5:0a:6b:65:42:81:5b:89:56:8c:83:00:05: 8e:7c:03:d0:15:06:5c:ad:f3:54:60:ec:e4:1b:c1:ee:80:db: c3:1b:75:6d:9f:b5:9f:a0:a0:ea:80:41:07:02:61:2e:64:0d: 03:c0:ad:ee:f8:69:83:34:ab:ea:a2:5b:4b:4c:5f:46:53:f4: c8:54:62:8d:32:e5:bd:77:c1:85:b9:48:bb:95:27:60:6c:de: e1:7a:01:8e:71:29:10:3a:5c:23:1e:08:c0:b7:a0:6c:bc:39: 82:84:50:96:10:0b:fb:2c:1d:1d:68:6b:aa:27:f7:e9:7d:c5: 88:a2:3b:83:4f:31:71:4e:12:03:2e:53:0e:fe:00:94:b5:04: aa:99:e4:bc:b9:31:f0:1f:04:c2:ef:cc:c1:66:5d:4d:d3:ee: b0:da:79:44:32:5b:f0:3f:c5:aa:95:89:b4:f2:4b:5a:9c:48: 74:c5:ca:bf:79:46:a7:d9:b9:d2:ae:76:dc:8a:41:9e:c6:9a: 25:13:88:90:98:08:8e:82:a3:fa:80:06:2a:a0:db:9f:cd:3d: b7:a1:8a:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVDQTQxMTAvBgNVBAUTKEQ0RUQzMzhBNUUyMDg3RDgyRUY0QzJGNjQ1OTlCNDEx MTI3MkU1RTAwHhcNMjUwNTE0MjE1NjM4WhcNMjUwNTIxMjE1NjM4WjAYMRYwFAYD VQQDEw02ODI1MTE5Ni00ZDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA26qrWQmPX3gbINKS9GAEQcOVQjh3czURwJIZ/3l7YwA4IJeb23d31TpZkZe+ p57ybhnWs4ydnta054OP6miqV5iqYzz0MyuPEa4TiUd2DmM1lcwFJpgvJqWleVs+ /1GzmiTv0i5lDeTYQIFkYBGr+tXKqRvdCSf6JZ76Apo2qI1fc1gpgF66g65MSCJw sO3mqad5q34Q/nkQ07PUsMSyuwEApNYzsu9CY/v6hiMO/PbvP5qzrvXWstXMkvMQ cIN5twEhqL+lHXGMxmD7jfSGBlXF9y5jMSBZZDWe+f0H4qRIR5Cc/4psU6KgpOq8 /Te5WrlzTYS88cGXS0RELEXwhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAnYftKM D7QJFzZFLcP8uoJTA7d1MB8GA1UdIwQYMBaAFNTtM4peIIfYLvTC9kWZtBEScuXg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUNBNC83QUU5RkVENjNB N0IxMUVCQjc4NjlDMjRDNEY5QUUwMi8xTzB6aWw0Z2g5Z3U5TUwyUlptMEVSSnk1 ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFPMHppbDRnaDlndTlNTDJSWm0wRVJKeTVlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUNBNC83QUU5RkVENjNBN0IxMUVCQjc4NjlDMjRDNEY5QUUwMi8xTzB6aWw0Z2g5 Z3U5TUwyUlptMEVSSnk1ZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArV2NjEy8E27Av09l6ZuRx9e5shANNxJq5dkHK++u14+jmr1161O7w GqUKa2VCgVuJVoyDAAWOfAPQFQZcrfNUYOzkG8HugNvDG3Vtn7WfoKDqgEEHAmEu ZA0DwK3u+GmDNKvqoltLTF9GU/TIVGKNMuW9d8GFuUi7lSdgbN7hegGOcSkQOlwj HgjAt6BsvDmChFCWEAv7LB0daGuqJ/fpfcWIojuDTzFxThIDLlMO/gCUtQSqmeS8 uTHwHwTC78zBZl1N0+6w2nlEMlvwP8WqlYm08ktanEh0xcq/eUan2bnSrnbcikGe xpolE4iQmAiOgqP6gAYqoNufzT23oYrD -----END CERTIFICATE-----Generated at Thu May 15 16:40:53 2025 by rpki-client