$ rpki-client -vvf rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.mft File: C-qOMYe9SY0l8kldarDunkU0p_E.mft (raw, json) Hash identifier: tQOWYaXeFzwXtPDYAE+BI6xM3UfblEaoCy1Np60/3KQ= Subject key identifier: 5B:95:79:28:2D:04:53:17:E4:55:54:9E:AC:4C:88:43:A3:CF:60:1C Authority key identifier: 0B:EA:8E:31:87:BD:49:8D:25:F2:49:5D:6A:B0:EE:9E:45:34:A7:F1 Certificate issuer: /CN=A918C64D/serialNumber=0BEA8E3187BD498D25F2495D6AB0EE9E4534A7F1 Certificate serial: 07D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-qOMYe9SY0l8kldarDunkU0p_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.mft Manifest number: 07D1 Signing time: Sat 10 May 2025 20:42:33 +0000 Manifest this update: Sat 10 May 2025 20:42:33 +0000 Manifest next update: Sat 17 May 2025 20:42:33 +0000 Files and hashes: 1: C-qOMYe9SY0l8kldarDunkU0p_E.crl (hash: u+QhI5wpa0r9ZUvrpZSko1NTg5wHtvdIuF3K4gkCTAk=) 2: B7362AE0EDC811EAAFF8BD46C4F9AE02.roa (hash: NrRaGTGhuuOTZ4sgZcXvRyo7s7nlCIeG2H0kiEu0fzA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.crl rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-qOMYe9SY0l8kldarDunkU0p_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 20:42:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2006 (0x7d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C64D, serialNumber=0BEA8E3187BD498D25F2495D6AB0EE9E4534A7F1 Validity Not Before: May 10 20:42:33 2025 GMT Not After : May 17 20:42:33 2025 GMT Subject: CN=681fba39-9881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c7:98:4b:34:47:71:fd:c8:de:a4:b9:02:16: 8b:a0:44:d7:91:fd:86:3e:0a:58:42:7e:7e:23:9a: 9a:17:de:a6:74:1f:4f:43:75:c9:2b:91:b6:9f:9a: fc:4a:0e:3a:be:54:3a:8d:7f:f1:3d:ee:5e:b7:8d: e5:9c:62:3f:61:66:24:09:9e:80:fc:30:af:59:e0: 4e:0a:41:14:69:40:02:8a:60:f9:75:a1:d4:98:8b: 9a:a7:d8:86:a4:9c:39:c3:7a:c0:5d:77:b9:05:d7: 9e:a4:5f:43:e8:e3:56:55:25:50:3c:7f:13:c3:ee: 48:5f:f5:3c:a4:3a:df:f2:99:cd:1d:a3:f4:58:54: 07:57:9d:5c:7e:70:3e:32:19:26:79:d6:21:df:e0: ee:81:eb:62:6b:ab:f0:0f:b4:e2:2d:70:1a:fa:a7: b6:f4:66:bd:ce:a5:06:43:eb:b5:6b:7d:e4:bb:1e: 5e:0d:01:1e:31:64:c5:0c:a9:0d:06:2c:e0:b4:9a: e0:71:1e:49:79:c5:1b:4a:28:79:db:76:d4:51:b0: a4:62:cb:10:60:67:24:af:78:21:99:c1:ba:37:c4: 0c:ad:ff:4f:e1:b9:e0:b9:17:65:db:32:95:a0:0b: ca:31:6c:14:5e:9a:f7:87:81:bc:78:5e:17:a0:ee: 18:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:95:79:28:2D:04:53:17:E4:55:54:9E:AC:4C:88:43:A3:CF:60:1C X509v3 Authority Key Identifier: keyid:0B:EA:8E:31:87:BD:49:8D:25:F2:49:5D:6A:B0:EE:9E:45:34:A7:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-qOMYe9SY0l8kldarDunkU0p_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:40:75:66:47:bc:84:fc:42:d1:dc:42:0f:c0:ff:b5:79:35: f5:32:1c:6f:cc:81:93:53:91:6b:b2:71:c3:50:1d:90:8d:8a: 6a:12:8a:05:87:fb:81:8a:6a:c3:a2:5a:10:21:d8:0b:94:e6: e0:2e:af:1e:92:6c:0a:16:b9:a6:b5:76:66:3a:f9:78:39:19: d3:6b:a9:a0:99:87:ca:c0:c8:1f:17:c2:5e:7e:3a:ea:4c:52: a4:b8:1f:1d:bf:a0:e7:9e:38:00:ad:3b:9f:d2:e1:e6:80:e3: bc:a6:95:fa:ad:0e:17:c8:e4:80:44:22:8e:94:c0:f8:82:f7: b3:c6:e4:d3:31:d5:be:b0:1b:78:aa:75:0f:f5:d8:1d:44:49: b5:ae:c2:57:eb:0b:a5:09:88:00:d4:e1:45:8b:78:41:9e:24: 86:74:f8:20:4d:f0:86:5e:e7:66:50:27:81:c3:7c:2d:8a:e2: 22:4a:f3:01:62:fc:b4:f7:4d:95:ba:8d:8c:00:1c:05:c5:67: df:cb:6d:2b:3d:77:9f:7c:e8:66:27:31:27:ad:7a:58:21:75: 02:68:c1:13:72:20:e3:e5:41:38:74:73:58:ac:ba:fa:8f:7a: 85:be:16:c8:1e:60:ba:20:1b:81:7c:14:85:73:5c:f0:31:d7: 81:40:c3:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM2NEQxMTAvBgNVBAUTKDBCRUE4RTMxODdCRDQ5OEQyNUYyNDk1RDZBQjBFRTlF NDUzNEE3RjEwHhcNMjUwNTEwMjA0MjMzWhcNMjUwNTE3MjA0MjMzWjAYMRYwFAYD VQQDEw02ODFmYmEzOS05ODgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnMeYSzRHcf3I3qS5AhaLoETXkf2GPgpYQn5+I5qaF96mdB9PQ3XJK5G2n5r8 Sg46vlQ6jX/xPe5et43lnGI/YWYkCZ6A/DCvWeBOCkEUaUACimD5daHUmIuap9iG pJw5w3rAXXe5BdeepF9D6ONWVSVQPH8Tw+5IX/U8pDrf8pnNHaP0WFQHV51cfnA+ MhkmedYh3+Dugetia6vwD7TiLXAa+qe29Ga9zqUGQ+u1a33kux5eDQEeMWTFDKkN BizgtJrgcR5JecUbSih523bUUbCkYssQYGckr3ghmcG6N8QMrf9P4bnguRdl2zKV oAvKMWwUXpr3h4G8eF4XoO4Y8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFuVeSgt BFMX5FVUnqxMiEOjz2AcMB8GA1UdIwQYMBaAFAvqjjGHvUmNJfJJXWqw7p5FNKfx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzY0RC9EQUQ0NTg2QUVE QzcxMUVBQkJBMTM3NDZDNEY5QUUwMi9DLXFPTVllOVNZMGw4a2xkYXJEdW5rVTBw X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MtcU9NWWU5U1kwbDhrbGRhckR1bmtVMHBfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzY0RC9EQUQ0NTg2QUVEQzcxMUVBQkJBMTM3NDZDNEY5QUUwMi9DLXFPTVllOVNZ MGw4a2xkYXJEdW5rVTBwX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZQHVmR7yE/ELR3EIPwP+1eTX1MhxvzIGTU5FrsnHDUB2QjYpqEooF h/uBimrDoloQIdgLlObgLq8ekmwKFrmmtXZmOvl4ORnTa6mgmYfKwMgfF8Jefjrq TFKkuB8dv6DnnjgArTuf0uHmgOO8ppX6rQ4XyOSARCKOlMD4gvezxuTTMdW+sBt4 qnUP9dgdREm1rsJX6wulCYgA1OFFi3hBniSGdPggTfCGXudmUCeBw3wtiuIiSvMB Yvy0902Vuo2MABwFxWffy20rPXeffOhmJzEnrXpYIXUCaMETciDj5UE4dHNYrLr6 j3qFvhbIHmC6IBuBfBSFc1zwMdeBQMNV -----END CERTIFICATE-----Generated at Sun May 11 19:59:35 2025 by rpki-client