$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft File: OU6gholcbxfZNlSKMiOLgs95KU0.mft (raw, json) Hash identifier: Otyuef2T8DcAHS3sfHSMtPkoV7EWpgTlEDD81pWH150= Subject key identifier: AA:A8:4E:91:1E:0E:13:C1:F1:7B:48:78:01:63:68:7A:86:5F:8D:08 Authority key identifier: 39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D Certificate issuer: /CN=A91AAE16/serialNumber=394EA086895C6F17D936548A32238B82CF79294D Certificate serial: 0FB3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft Manifest number: 0FA4 Signing time: Wed 14 May 2025 17:39:07 +0000 Manifest this update: Wed 14 May 2025 17:39:07 +0000 Manifest next update: Wed 21 May 2025 17:39:07 +0000 Files and hashes: 1: OU6gholcbxfZNlSKMiOLgs95KU0.crl (hash: bmAtZIYD+8w2j8ZbDBvG7oJVDr2/deNUE7z8VwJRGhY=) 2: 68DA14E65BB211E9BF474F16C4F9AE02.roa (hash: +yhzJzGn+WxW2d4EtUHBstgfBIaoIoaYoJwg0N+/u2I=) 3: B2409F28DF9311EEBF6BC36DC4F9AE02.roa (hash: bOx/MaRmXB38ne/1h1RZYscRhBFAXmNorXwlc1KE7w8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.crl rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 17:39:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4019 (0xfb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAE16, serialNumber=394EA086895C6F17D936548A32238B82CF79294D Validity Not Before: May 14 17:39:07 2025 GMT Not After : May 21 17:39:07 2025 GMT Subject: CN=6824d53b-6b57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:5f:f3:1f:e7:f2:03:36:9b:b6:06:38:d4:f7: be:4e:5d:23:40:12:6a:b5:3a:71:e2:41:e8:dc:45: 8a:85:f3:50:21:7a:2b:5e:26:9d:6d:13:1a:99:ac: 44:0e:d8:6e:6d:68:59:16:8c:ea:c0:c6:2c:45:cb: d1:1d:5c:08:d9:6f:f5:0b:b8:93:48:c3:7c:2f:e7: 7d:38:32:92:f3:5a:60:97:84:40:df:91:cd:b7:77: 45:4c:91:96:fe:84:31:bf:cb:39:a5:f0:f3:d6:ff: ba:73:fe:71:fe:07:7b:8f:32:1d:b2:b7:e9:65:b2: 69:04:2a:97:d7:7e:f5:d5:45:a2:18:2b:7e:2f:4d: ca:61:73:4e:df:b8:2f:81:34:42:61:93:f1:12:d6: d6:46:df:32:9c:37:27:f1:4c:86:89:de:45:55:70: 40:97:c3:8b:05:fc:d1:ca:46:2b:40:d0:cf:1f:f9: 34:4b:27:66:ef:ec:97:d2:54:da:e4:44:ea:6e:11: e7:8c:80:a3:b7:68:09:26:82:e5:27:d8:5d:7c:dc: e9:6d:d6:2d:32:0b:72:43:f8:70:74:6f:3a:c7:35: 00:da:95:f2:14:b3:db:a1:d3:3f:4f:f0:8f:a6:ac: 40:c1:64:24:e6:a9:76:a4:d9:fc:67:81:31:b1:2e: cb:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A8:4E:91:1E:0E:13:C1:F1:7B:48:78:01:63:68:7A:86:5F:8D:08 X509v3 Authority Key Identifier: keyid:39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:3f:fd:ff:cf:df:6f:51:f6:21:68:32:45:7f:89:03:17:10: 58:1c:cc:d8:39:15:39:16:04:88:90:53:50:f6:17:ab:25:4f: dd:3f:5a:fc:fe:30:e4:23:5b:f7:0a:50:fe:92:0e:e7:40:69: 3f:bd:1b:60:56:50:02:96:09:f1:c9:e1:ec:8d:6a:03:01:40: db:70:74:2d:e0:26:7d:74:e9:93:b8:3a:2a:ea:75:a3:a7:ee: d4:f3:3c:bc:98:63:0f:94:7a:fa:95:02:0b:54:eb:85:49:dd: 8d:8b:67:f9:2e:14:40:d0:44:17:44:71:45:86:46:a6:03:b2: 38:c4:76:77:06:e9:cc:b9:22:81:7c:32:3d:34:45:c0:1f:4c: 7f:8d:36:3d:a7:e5:f7:84:e9:6d:24:09:9b:0a:24:5d:08:03: 82:51:ba:85:db:4a:53:ce:39:f1:9a:54:02:82:a5:0e:75:b0: c0:51:d4:7f:ae:c6:21:c6:ad:ee:89:9c:27:6a:cf:90:79:55: c3:92:c2:0d:1b:ce:ee:75:a0:27:80:f4:3c:62:43:96:60:b6: a5:cf:53:34:ae:b6:60:93:cb:16:67:a7:3d:70:47:ac:7a:3d: 49:40:55:6b:0a:e5:82:f0:d5:c6:b4:52:e0:db:29:51:de:dc: c6:86:a5:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD7MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFMTYxMTAvBgNVBAUTKDM5NEVBMDg2ODk1QzZGMTdEOTM2NTQ4QTMyMjM4Qjgy Q0Y3OTI5NEQwHhcNMjUwNTE0MTczOTA3WhcNMjUwNTIxMTczOTA3WjAYMRYwFAYD VQQDEw02ODI0ZDUzYi02YjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4l/zH+fyAzabtgY41Pe+Tl0jQBJqtTpx4kHo3EWKhfNQIXorXiadbRMamaxE DthubWhZFozqwMYsRcvRHVwI2W/1C7iTSMN8L+d9ODKS81pgl4RA35HNt3dFTJGW /oQxv8s5pfDz1v+6c/5x/gd7jzIdsrfpZbJpBCqX13711UWiGCt+L03KYXNO37gv gTRCYZPxEtbWRt8ynDcn8UyGid5FVXBAl8OLBfzRykYrQNDPH/k0Sydm7+yX0lTa 5ETqbhHnjICjt2gJJoLlJ9hdfNzpbdYtMgtyQ/hwdG86xzUA2pXyFLPbodM/T/CP pqxAwWQk5ql2pNn8Z4ExsS7LQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKqoTpEe DhPB8XtIeAFjaHqGX40IMB8GA1UdIwQYMBaAFDlOoIaJXG8X2TZUijIji4LPeSlN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUUxNi8xNzQ4ODU1MDVC QjExMUU5OEIxMDNCMTNDNEY5QUUwMi9PVTZnaG9sY2J4ZlpObFNLTWlPTGdzOTVL VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09VNmdob2xjYnhmWk5sU0tNaU9MZ3M5NUtVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUUxNi8xNzQ4ODU1MDVCQjExMUU5OEIxMDNCMTNDNEY5QUUwMi9PVTZnaG9sY2J4 ZlpObFNLTWlPTGdzOTVLVTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABP/3/z99vUfYhaDJFf4kDFxBYHMzYORU5FgSIkFNQ9herJU/dP1r8 /jDkI1v3ClD+kg7nQGk/vRtgVlAClgnxyeHsjWoDAUDbcHQt4CZ9dOmTuDoq6nWj p+7U8zy8mGMPlHr6lQILVOuFSd2Ni2f5LhRA0EQXRHFFhkamA7I4xHZ3BunMuSKB fDI9NEXAH0x/jTY9p+X3hOltJAmbCiRdCAOCUbqF20pTzjnxmlQCgqUOdbDAUdR/ rsYhxq3uiZwnas+QeVXDksING87udaAngPQ8YkOWYLalz1M0rrZgk8sWZ6c9cEes ej1JQFVrCuWC8NXGtFLg2ylR3tzGhqXw -----END CERTIFICATE-----Generated at Thu May 15 16:47:42 2025 by rpki-client