$ rpki-client -vvf rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft File: oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft (raw, json) Hash identifier: nXXXgUYTzF+WmeqpSIn0DfDuMGKQ2nAygg19akxKVzc= Subject key identifier: AB:9E:9B:B5:A5:4D:65:2E:5D:41:64:1F:0E:70:22:6D:92:35:10:85 Authority key identifier: A0:DE:57:2A:46:CF:32:4B:AE:08:C3:E9:30:BC:AF:E7:39:A0:15:D1 Certificate issuer: /CN=A915BF4F/serialNumber=A0DE572A46CF324BAE08C3E930BCAFE739A015D1 Certificate serial: 0291 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft Manifest number: 0288 Signing time: Mon 05 May 2025 01:11:39 +0000 Manifest this update: Mon 05 May 2025 01:11:39 +0000 Manifest next update: Mon 12 May 2025 01:11:39 +0000 Files and hashes: 1: oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl (hash: m+3RoQxnDByHwg4qGPliN2Oc6QvmBwvUjV9Itoqy5NA=) 2: 42D236F0042111ED888BB024C4F9AE02.roa (hash: idGZCp14CeJ+hgIGhq15biNKPAF3xFUAz3T9o9jel9U=) 3: 41F88F22042111ED888BB024C4F9AE02.roa (hash: u7Xzmc+Z0Bg/MwCVSoDiBZBPaHlbZugtPr2Bm1jVv2c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 01:11:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 657 (0x291) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BF4F, serialNumber=A0DE572A46CF324BAE08C3E930BCAFE739A015D1 Validity Not Before: May 5 01:11:39 2025 GMT Not After : May 12 01:11:39 2025 GMT Subject: CN=6818104b-be98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:af:ef:f3:93:0f:ac:29:d6:9b:13:eb:f2:e9: ce:ec:80:da:17:2d:28:78:09:0c:1a:69:12:73:ab: 43:0b:88:46:2f:dd:5a:25:e7:74:05:f3:92:37:9e: 72:a7:04:8c:40:e8:31:de:99:73:94:1e:ae:62:88: c1:54:32:08:69:57:2c:46:b4:f6:3a:36:fe:64:31: 14:d1:fa:26:2d:ba:1a:7f:27:7b:8e:76:8a:35:f3: 82:29:1c:4c:19:e2:a5:f6:b2:09:5e:36:79:a3:cd: 02:27:ac:da:60:26:39:1c:b5:21:bc:c8:17:e9:ac: 11:ca:cf:81:0e:91:c4:4b:ef:94:4c:14:59:08:9c: 64:e9:76:a6:ab:68:d0:dc:58:78:06:7c:7b:d3:00: 1c:52:b0:48:28:0f:02:f0:4f:b9:c4:e9:99:79:82: a6:4d:e3:61:e0:58:05:57:69:26:47:0f:41:1b:ce: 50:a4:71:7f:a9:a5:4e:e6:89:bd:76:c2:c5:b0:99: 0b:e1:e9:97:cb:66:1a:25:63:8b:18:de:3a:83:50: 4a:90:15:a0:5a:a4:b2:43:19:24:f3:c9:ec:62:ab: 45:72:fe:d3:6d:ea:18:aa:ed:1c:ae:e9:f8:29:84: 39:7a:89:43:df:b7:40:ce:96:89:e4:7b:85:fd:d7: 7d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:9E:9B:B5:A5:4D:65:2E:5D:41:64:1F:0E:70:22:6D:92:35:10:85 X509v3 Authority Key Identifier: keyid:A0:DE:57:2A:46:CF:32:4B:AE:08:C3:E9:30:BC:AF:E7:39:A0:15:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:cf:d3:7d:2f:87:a2:71:5f:b9:b9:93:ff:b2:e6:4c:35:08: 1d:d0:91:b6:64:b6:16:8e:02:92:66:4b:58:6d:c8:cf:15:a6: bc:13:b9:09:05:39:f1:f9:6f:9e:a9:94:ff:0d:45:43:8f:b9: 13:e7:7c:51:f1:d3:9c:e5:fc:f9:b8:7a:ca:30:4a:12:8c:83: 2d:66:ce:14:e8:8c:96:9d:c3:0b:f4:90:50:29:b5:46:8a:e3: 16:32:71:73:b1:3d:0e:6c:10:92:94:2d:20:47:b2:09:73:e0: da:20:4e:0c:a4:92:e7:76:67:42:13:d7:12:fc:a3:98:8c:46: ff:0d:71:e7:9e:4d:1a:13:5b:1e:f4:76:d2:49:27:d5:5a:9e: b4:09:fe:00:84:bd:b0:5a:24:d6:27:19:22:68:bb:31:e4:5c: 6f:12:f1:b0:91:f6:69:fd:dc:95:0d:04:fb:63:b0:8a:51:43: 7b:06:da:b5:a0:77:6c:eb:a4:72:75:76:39:0a:cf:71:3d:5f: a9:67:45:b2:63:d2:fc:c8:44:07:b8:af:2d:1a:a1:ba:e2:b3: 23:5d:53:81:c2:3e:d6:94:ce:9c:04:6b:c9:ff:81:d2:3f:8c: d2:b9:23:78:38:23:1b:91:ec:59:cf:4a:9d:02:41:58:83:54: 0b:c9:e5:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJGNEYxMTAvBgNVBAUTKEEwREU1NzJBNDZDRjMyNEJBRTA4QzNFOTMwQkNBRkU3 MzlBMDE1RDEwHhcNMjUwNTA1MDExMTM5WhcNMjUwNTEyMDExMTM5WjAYMRYwFAYD VQQDEw02ODE4MTA0Yi1iZTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA76/v85MPrCnWmxPr8unO7IDaFy0oeAkMGmkSc6tDC4hGL91aJed0BfOSN55y pwSMQOgx3plzlB6uYojBVDIIaVcsRrT2Ojb+ZDEU0fomLboafyd7jnaKNfOCKRxM GeKl9rIJXjZ5o80CJ6zaYCY5HLUhvMgX6awRys+BDpHES++UTBRZCJxk6Xamq2jQ 3Fh4Bnx70wAcUrBIKA8C8E+5xOmZeYKmTeNh4FgFV2kmRw9BG85QpHF/qaVO5om9 dsLFsJkL4emXy2YaJWOLGN46g1BKkBWgWqSyQxkk88nsYqtFcv7TbeoYqu0crun4 KYQ5eolD37dAzpaJ5HuF/dd9FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKuem7Wl TWUuXUFkHw5wIm2SNRCFMB8GA1UdIwQYMBaAFKDeVypGzzJLrgjD6TC8r+c5oBXR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkY0Ri9DNUUyRDcxRTA0 MTkxMUVEOTE1NzY1MjhDNEY5QUUwMi9vTjVYS2tiUE1rdXVDTVBwTUx5djV6bWdG ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29ONVhLa2JQTWt1dUNNUHBNTHl2NXptZ0ZkRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkY0Ri9DNUUyRDcxRTA0MTkxMUVEOTE1NzY1MjhDNEY5QUUwMi9vTjVYS2tiUE1r dXVDTVBwTUx5djV6bWdGZEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARz9N9L4eicV+5uZP/suZMNQgd0JG2ZLYWjgKSZktYbcjPFaa8E7kJ BTnx+W+eqZT/DUVDj7kT53xR8dOc5fz5uHrKMEoSjIMtZs4U6IyWncML9JBQKbVG iuMWMnFzsT0ObBCSlC0gR7IJc+DaIE4MpJLndmdCE9cS/KOYjEb/DXHnnk0aE1se 9HbSSSfVWp60Cf4AhL2wWiTWJxkiaLsx5FxvEvGwkfZp/dyVDQT7Y7CKUUN7Btq1 oHds66RydXY5Cs9xPV+pZ0WyY9L8yEQHuK8tGqG64rMjXVOBwj7WlM6cBGvJ/4HS P4zSuSN4OCMbkexZz0qdAkFYg1QLyeUK -----END CERTIFICATE-----Generated at Mon May 5 14:55:12 2025 by rpki-client