$ rpki-client -vvf rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft File: Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft (raw, json) Hash identifier: z+hyd8KveWiIZl5+ZbEsn/7RY6FQqSaRJeVLrWqWgiU= Subject key identifier: E3:9C:4E:7F:55:DB:32:8F:FE:04:17:73:AF:63:61:B2:AF:00:CF:C4 Authority key identifier: 3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B Certificate issuer: /CN=A915087F/serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B Certificate serial: 0230 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft Manifest number: 021E Signing time: Sun 11 May 2025 01:31:05 +0000 Manifest this update: Sun 11 May 2025 01:31:05 +0000 Manifest next update: Sun 18 May 2025 01:31:05 +0000 Files and hashes: 1: Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl (hash: +F5mtF54GmeClAYzgX5Yi6NjdbWlK3if1AG8GH/Ub7w=) 2: 7CC6F3AAE53311EF884A4360C4F9AE02.roa (hash: SdihL210gPCDV8+I91wffCGT616SJGuUi8ixJc1Exmw=) 3: 3EAA12E2396811ED8AF52966C4F9AE02.roa (hash: A4Vjdj02sAdMTWXmHWvjF6Tlm0O4U6o+nFtk8u+txVM=) 4: 2EDB67C460C911EEB34E5064C4F9AE02.roa (hash: 3MY+LBjMkWn0JVtEZnXJmpiFK4xoYWEhCoPkhLW/buM=) 5: 602984F09C0611EE93EA142EC4F9AE02.roa (hash: 0X4T0YrSiOWFmPbWRm4BMiWwIJYzgP1cN8sgOgLAcS4=) 6: 3DD9ED2C4AE811EF9BCF4B47C4F9AE02.roa (hash: l4d1oVoyEM+HQ07ha4YtFHp1DrvW7G3vGypNnIxNS0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 01:31:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 560 (0x230) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915087F, serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B Validity Not Before: May 11 01:31:05 2025 GMT Not After : May 18 01:31:05 2025 GMT Subject: CN=681ffdd9-be1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1b:4b:23:5b:7d:de:86:02:33:f7:44:9b:66: 7c:18:36:e1:f7:a2:a2:d3:7c:35:21:ae:97:a7:68: 54:c8:9b:6d:c0:c0:d5:87:3d:da:1f:8a:c5:67:7a: e3:61:2d:36:34:41:2d:a7:e2:62:fc:c1:28:35:07: a2:1f:d5:ff:b0:94:9c:1f:40:6a:65:e3:ad:cb:79: fa:b8:1a:73:de:e3:88:bb:5f:36:e8:df:93:c0:14: 7e:9e:d8:4d:57:c9:89:a2:a2:c4:3e:ab:d0:2f:33: d5:1c:69:ff:2b:0f:8c:85:8c:46:78:4b:d0:88:89: 48:ba:2f:ca:dd:e8:54:44:24:d7:17:63:8d:88:3a: c9:e3:83:97:11:dc:68:8a:50:47:17:ff:5f:86:23: df:ea:a8:e8:f6:a8:d3:ca:f7:54:b9:a0:a0:8a:5e: 31:4d:ee:9c:b9:6e:e2:28:90:4b:a6:aa:bb:c4:21: 17:41:b1:e2:c6:55:ff:2a:5e:dd:93:b2:03:2a:72: 5b:c0:ca:ee:3e:95:2f:91:88:d7:32:99:10:72:f1: b0:f2:9d:9c:ec:a9:12:62:a7:99:fd:d1:84:64:4b: 17:ef:4c:a1:90:06:e8:ce:9b:f3:c7:d2:45:f8:75: 3a:19:97:7f:2a:70:28:79:4d:f5:0f:47:78:6a:23: 24:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:9C:4E:7F:55:DB:32:8F:FE:04:17:73:AF:63:61:B2:AF:00:CF:C4 X509v3 Authority Key Identifier: keyid:3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:d4:a5:ca:50:39:9f:20:4c:a9:cf:e5:56:a3:c6:e2:91:f7: 4a:fe:a5:00:56:78:3c:9d:d3:74:d8:56:35:10:2a:af:24:5c: 0d:89:c2:7b:4e:87:01:d4:af:54:92:a1:75:15:0e:05:1e:97: d3:a2:ee:a4:26:fa:c6:75:c2:22:91:3e:50:2f:ea:17:bd:d7: 22:ff:c8:25:19:4c:89:a3:bf:eb:79:c3:6c:c5:e3:03:d9:05: 89:c3:f6:73:f8:8a:72:54:80:31:31:e7:5b:ea:f7:22:20:55: 41:26:c5:51:a7:04:db:10:cd:64:0a:2a:23:33:da:a3:53:f4: fd:73:85:5a:11:94:34:18:5f:be:e5:36:10:eb:1c:db:90:92: 7a:55:09:5a:26:b2:29:92:ab:e3:d4:e1:0a:d0:96:98:92:b2: ad:24:cd:a8:e4:86:a3:c2:b8:28:44:c8:c0:08:a9:db:16:66: 13:c8:8a:ee:5a:dc:9a:99:66:f7:7f:20:8f:9f:00:d9:6a:c9: 7e:95:f2:35:31:f3:94:ad:38:78:3e:be:3d:54:d4:43:bb:66: e8:25:16:fc:49:b9:96:9f:ae:7a:29:31:a8:d4:c5:88:83:a7: 5a:42:8b:8a:33:10:9b:98:37:13:c7:c6:d1:b5:53:2e:99:7c: 6a:4e:25:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA4N0YxMTAvBgNVBAUTKDNBNkRENEI3MEM0NTYwRUFDMzdFODFFNjIyQ0M0Mzgw OUY1MjNCNEIwHhcNMjUwNTExMDEzMTA1WhcNMjUwNTE4MDEzMTA1WjAYMRYwFAYD VQQDEw02ODFmZmRkOS1iZTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqxtLI1t93oYCM/dEm2Z8GDbh96Ki03w1Ia6Xp2hUyJttwMDVhz3aH4rFZ3rj YS02NEEtp+Ji/MEoNQeiH9X/sJScH0BqZeOty3n6uBpz3uOIu1826N+TwBR+nthN V8mJoqLEPqvQLzPVHGn/Kw+MhYxGeEvQiIlIui/K3ehURCTXF2ONiDrJ44OXEdxo ilBHF/9fhiPf6qjo9qjTyvdUuaCgil4xTe6cuW7iKJBLpqq7xCEXQbHixlX/Kl7d k7IDKnJbwMruPpUvkYjXMpkQcvGw8p2c7KkSYqeZ/dGEZEsX70yhkAbozpvzx9JF +HU6GZd/KnAoeU31D0d4aiMkmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOOcTn9V 2zKP/gQXc69jYbKvAM/EMB8GA1UdIwQYMBaAFDpt1LcMRWDqw36B5iLMQ4CfUjtL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDg3Ri9GNzMxOTZBQTMz RTExMUVEQjNBMEVBNThDNEY5QUUwMi9PbTNVdHd4RllPckRmb0htSXN4RGdKOVNP MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09tM1V0d3hGWU9yRGZvSG1Jc3hEZ0o5U08wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDg3Ri9GNzMxOTZBQTMzRTExMUVEQjNBMEVBNThDNEY5QUUwMi9PbTNVdHd4RllP ckRmb0htSXN4RGdKOVNPMHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBa1KXKUDmfIEypz+VWo8bikfdK/qUAVng8ndN02FY1ECqvJFwNicJ7 TocB1K9UkqF1FQ4FHpfTou6kJvrGdcIikT5QL+oXvdci/8glGUyJo7/recNsxeMD 2QWJw/Zz+IpyVIAxMedb6vciIFVBJsVRpwTbEM1kCiojM9qjU/T9c4VaEZQ0GF++ 5TYQ6xzbkJJ6VQlaJrIpkqvj1OEK0JaYkrKtJM2o5IajwrgoRMjACKnbFmYTyIru WtyamWb3fyCPnwDZasl+lfI1MfOUrTh4Pr49VNRDu2boJRb8SbmWn656KTGo1MWI g6daQouKMxCbmDcTx8bRtVMumXxqTiUa -----END CERTIFICATE-----Generated at Mon May 12 02:12:03 2025 by rpki-client