$ rpki-client -vvf rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft File: oTW4FOHrHifJWX7tLoIoVJMNP88.mft (raw, json) Hash identifier: JILXrR1RNYLQPJJUzkWrIV84HXO8XEt/pgRt2LRAxOA= Subject key identifier: B5:D2:DD:D0:A5:83:82:34:A1:EE:A5:05:8C:F0:C8:23:14:13:30:B1 Authority key identifier: A1:35:B8:14:E1:EB:1E:27:C9:59:7E:ED:2E:82:28:54:93:0D:3F:CF Certificate issuer: /CN=A9197390/serialNumber=A135B814E1EB1E27C9597EED2E822854930D3FCF Certificate serial: 018E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft Manifest number: 016E Signing time: Thu 15 May 2025 03:39:06 +0000 Manifest this update: Thu 15 May 2025 03:39:06 +0000 Manifest next update: Thu 22 May 2025 03:39:06 +0000 Files and hashes: 1: oTW4FOHrHifJWX7tLoIoVJMNP88.crl (hash: gMA1T8mloAmfohEMjc5/SQ7TFzlZilGKFbs16vExIu8=) 2: CD168A226C2111EFB0ACC153C4F9AE02.roa (hash: F8BQEsLxz2XO34zN3GNH3AuMPZU87rOGItPVHiqWabQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.crl rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 03:39:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 398 (0x18e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197390, serialNumber=A135B814E1EB1E27C9597EED2E822854930D3FCF Validity Not Before: May 15 03:39:06 2025 GMT Not After : May 22 03:39:06 2025 GMT Subject: CN=682561da-0936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:40:84:4a:b1:7d:b0:dd:10:65:4a:04:87:0f: 1f:f7:a1:a9:c4:54:e7:73:cd:a2:7a:62:5e:1b:09: af:2b:de:b3:e4:fe:c1:24:7b:b4:67:19:8b:fd:ed: 14:9c:e0:5f:93:26:6e:90:8a:30:9c:af:78:4f:8c: 1c:1a:59:8a:47:e7:19:c5:24:61:b0:ae:51:d6:b0: b6:fc:8d:59:65:b3:cd:9e:0e:d3:6c:d6:d5:f3:ec: a0:2a:4a:b3:e1:d7:c9:b7:4c:38:af:4e:fb:99:1f: bf:dd:c3:b1:d3:bf:35:04:bb:e6:eb:e7:97:12:bc: 94:6c:32:0c:c1:eb:75:3b:6e:cf:58:da:7b:5e:79: 54:fd:de:70:3f:77:dc:d1:fe:ef:0f:42:3c:5c:50: 2d:f8:a3:c4:08:38:95:d7:84:77:51:b6:f9:69:79: 7c:ba:5f:17:7d:a3:91:c8:d1:f5:e3:f1:0d:8d:ce: cb:57:67:54:cd:33:1e:dd:19:4a:5c:32:36:c4:88: e5:ed:89:63:61:4f:9a:0e:81:d3:1f:d1:56:e8:42: 8f:56:c4:8b:58:a8:85:fe:19:73:b7:bf:37:e6:a8: 5b:89:ff:cb:b3:6c:64:7d:6b:8c:bf:2c:b1:c1:67: f8:1f:ed:15:ee:25:c3:2e:48:b7:e2:46:0e:5e:d2: 69:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:D2:DD:D0:A5:83:82:34:A1:EE:A5:05:8C:F0:C8:23:14:13:30:B1 X509v3 Authority Key Identifier: keyid:A1:35:B8:14:E1:EB:1E:27:C9:59:7E:ED:2E:82:28:54:93:0D:3F:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:1f:99:69:ab:a7:71:5d:05:58:61:00:6b:71:69:30:40:10: 82:4e:21:71:47:c7:ad:a8:92:18:7e:38:6c:89:bc:76:af:fd: dd:26:be:b5:a3:58:cf:e7:1b:9d:cb:73:04:eb:9b:2b:ba:ec: 72:c6:f2:8c:4c:fb:ac:0e:00:be:4b:e5:e5:f1:68:e3:9b:bb: e9:62:83:30:44:5d:b1:98:22:71:88:1c:85:77:6d:9b:94:7d: 81:f8:d0:c6:5b:79:3c:92:69:8d:55:24:50:59:43:c7:f9:14: df:4a:17:42:f7:98:7f:e8:3a:df:88:75:06:ad:7f:89:97:ac: 44:ae:0c:f4:9e:6e:0f:f3:09:df:02:cc:ea:25:66:bd:70:4b: de:88:15:3a:97:6d:ce:d2:dd:a6:80:89:10:db:04:45:61:88: f7:86:af:51:1b:48:ef:71:71:f7:03:b9:20:b8:93:67:0c:28: e9:dc:c1:30:c6:47:c5:f4:77:b8:e3:e1:8e:f5:bd:6c:93:8c: d1:2c:c3:ff:aa:59:c3:7e:ae:67:db:e8:36:df:72:0c:48:7f: 99:6a:1c:4e:fd:54:ee:cb:ea:4a:a0:3a:ea:0c:fa:20:ab:89: 7a:65:3b:e5:a7:05:6f:46:06:42:e9:db:f8:02:6d:ef:79:5e: c0:b3:e2:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTczOTAxMTAvBgNVBAUTKEExMzVCODE0RTFFQjFFMjdDOTU5N0VFRDJFODIyODU0 OTMwRDNGQ0YwHhcNMjUwNTE1MDMzOTA2WhcNMjUwNTIyMDMzOTA2WjAYMRYwFAYD VQQDEw02ODI1NjFkYS0wOTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqkCESrF9sN0QZUoEhw8f96GpxFTnc82iemJeGwmvK96z5P7BJHu0ZxmL/e0U nOBfkyZukIownK94T4wcGlmKR+cZxSRhsK5R1rC2/I1ZZbPNng7TbNbV8+ygKkqz 4dfJt0w4r077mR+/3cOx0781BLvm6+eXEryUbDIMwet1O27PWNp7XnlU/d5wP3fc 0f7vD0I8XFAt+KPECDiV14R3Ubb5aXl8ul8XfaORyNH14/ENjc7LV2dUzTMe3RlK XDI2xIjl7YljYU+aDoHTH9FW6EKPVsSLWKiF/hlzt7835qhbif/Ls2xkfWuMvyyx wWf4H+0V7iXDLki34kYOXtJpJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLXS3dCl g4I0oe6lBYzwyCMUEzCxMB8GA1UdIwQYMBaAFKE1uBTh6x4nyVl+7S6CKFSTDT/P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzM5MC9EMkM3RTcxNjNF N0ExMUVFQTk3N0Q2MjBDNEY5QUUwMi9vVFc0Rk9IckhpZkpXWDd0TG9Jb1ZKTU5Q ODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29UVzRGT0hySGlmSldYN3RMb0lvVkpNTlA4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzM5MC9EMkM3RTcxNjNFN0ExMUVFQTk3N0Q2MjBDNEY5QUUwMi9vVFc0Rk9Ickhp ZkpXWDd0TG9Jb1ZKTU5QODgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkH5lpq6dxXQVYYQBrcWkwQBCCTiFxR8etqJIYfjhsibx2r/3dJr61 o1jP5xudy3ME65sruuxyxvKMTPusDgC+S+Xl8Wjjm7vpYoMwRF2xmCJxiByFd22b lH2B+NDGW3k8kmmNVSRQWUPH+RTfShdC95h/6DrfiHUGrX+Jl6xErgz0nm4P8wnf AszqJWa9cEveiBU6l23O0t2mgIkQ2wRFYYj3hq9RG0jvcXH3A7kguJNnDCjp3MEw xkfF9He44+GO9b1sk4zRLMP/qlnDfq5n2+g233IMSH+ZahxO/VTuy+pKoDrqDPog q4l6ZTvlpwVvRgZC6dv4Am3veV7As+Ja -----END CERTIFICATE-----Generated at Fri May 16 16:50:07 2025 by rpki-client