$ rpki-client -vvf rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft File: 0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft (raw, json) Hash identifier: oMBxac0pPGnCaORi4vj6bhQcCSSGq3JmCBbStDC0+Ms= Subject key identifier: 0B:3C:53:CF:75:8B:3B:E8:D7:AB:B1:0F:A2:8F:DE:34:45:2F:97:5B Authority key identifier: D0:E5:44:05:B0:3D:3D:12:34:59:DE:01:BB:40:0F:4D:7A:83:29:D0 Certificate issuer: /CN=A91B834D/serialNumber=D0E54405B03D3D123459DE01BB400F4D7A8329D0 Certificate serial: 01AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft Manifest number: 01A5 Signing time: Mon 05 May 2025 02:18:08 +0000 Manifest this update: Mon 05 May 2025 02:18:08 +0000 Manifest next update: Mon 12 May 2025 02:18:08 +0000 Files and hashes: 1: 0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl (hash: XO4hU/wFo1g0lN9ABRPofgrEJ5qaMMOW6w2jnuQcrts=) 2: F9B10D46ADAA11ED810C6C45C4F9AE02.roa (hash: 9uR9cVnp9mE1i5KXBSkkfpXEwSfx3/BMoE6xrI/LuMM=) 3: 61883292ADA511EDB2C68947C4F9AE02.roa (hash: jVsOkESQWaLXR1oAo7YvVLXTH7CGZNa6Fnq6GGFvuF4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 02:18:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 430 (0x1ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B834D, serialNumber=D0E54405B03D3D123459DE01BB400F4D7A8329D0 Validity Not Before: May 5 02:18:08 2025 GMT Not After : May 12 02:18:08 2025 GMT Subject: CN=68181fe0-719f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:85:61:ea:b0:a7:18:b9:2a:0a:07:2f:08:79: 25:8d:54:a2:4a:9f:93:2a:d5:a7:32:70:4f:48:4a: 21:c3:85:30:dd:e5:df:60:35:ad:42:69:24:38:cc: bd:b4:5d:e7:1f:d4:f4:a6:0a:27:e1:49:41:d7:4f: d4:f0:a1:31:c4:c6:2a:63:75:9f:89:eb:08:4d:11: 14:02:65:b1:94:ee:8a:0f:83:4c:68:d0:92:08:db: 78:d0:7f:53:2e:8a:58:df:40:f7:8d:f9:9b:c9:c6: 1f:f3:da:d7:81:d3:41:7c:6c:7f:f6:b4:e5:74:48: 9f:fc:81:e8:c1:30:cb:0e:59:8e:b5:2f:d5:6f:39: c2:ce:a2:20:d0:40:9a:05:fe:8a:6b:80:95:d3:36: 77:85:66:8e:6c:67:2c:f5:8d:6f:94:df:e8:5c:95: 3c:c5:df:dd:a7:f9:f3:25:49:22:db:51:c0:6d:af: 0d:06:ed:e2:3c:47:10:3b:4c:71:74:18:04:ab:11: ba:60:68:6f:01:d3:80:db:d3:2e:7f:31:66:0d:6b: c9:f7:aa:0c:69:cd:a3:07:87:37:24:02:02:c0:5d: 0b:cb:3a:d3:4c:1b:82:0c:86:df:45:4d:01:97:3c: 94:2e:fc:d1:e0:26:21:42:ee:05:b4:b3:29:9f:26: 51:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:3C:53:CF:75:8B:3B:E8:D7:AB:B1:0F:A2:8F:DE:34:45:2F:97:5B X509v3 Authority Key Identifier: keyid:D0:E5:44:05:B0:3D:3D:12:34:59:DE:01:BB:40:0F:4D:7A:83:29:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:1b:a1:4d:fc:6e:8b:5a:04:18:70:ff:10:ce:03:02:15:8b: 94:f4:89:b1:ea:d2:60:8e:37:6d:0d:83:bc:af:ef:84:92:72: 2f:60:8d:1e:98:89:e6:e5:53:3f:ca:97:6b:de:4e:a6:64:d8: 52:bb:75:2b:49:dd:72:78:0c:e3:4f:2f:70:1f:94:2b:b5:51: b1:7a:00:a8:a8:cf:5f:26:34:bd:be:2d:8b:e2:e2:34:d6:22: 07:a6:7a:d8:ab:ee:d1:58:91:dc:27:99:40:3a:ee:8b:a2:22: ed:90:3b:0c:d6:79:3e:2e:58:09:32:5f:91:8e:ea:19:3b:91: e9:94:02:2a:ff:8f:e8:14:75:c8:6c:0c:1a:35:a4:49:b6:01: dc:77:95:d7:c3:2d:60:2a:1a:9e:8e:1f:a5:f3:5a:ae:0b:f7: 7d:23:3d:ac:9d:63:06:9d:a7:c7:43:3c:f0:7e:9c:ef:15:09: 8b:ed:0a:13:a3:13:a6:c4:cc:e4:df:2d:8a:34:4f:c1:fe:4c: 10:b3:42:a6:ce:81:b3:49:e9:32:9d:7c:06:14:35:de:86:75: 59:79:78:ed:fa:88:4e:e1:d9:ca:80:ae:b5:0b:ca:ad:e1:51: 70:19:8c:1a:92:3c:23:c2:82:8e:d0:97:47:94:b9:9f:86:ae: 30:8f:0c:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgzNEQxMTAvBgNVBAUTKEQwRTU0NDA1QjAzRDNEMTIzNDU5REUwMUJCNDAwRjRE N0E4MzI5RDAwHhcNMjUwNTA1MDIxODA4WhcNMjUwNTEyMDIxODA4WjAYMRYwFAYD VQQDEw02ODE4MWZlMC03MTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4Vh6rCnGLkqCgcvCHkljVSiSp+TKtWnMnBPSEohw4Uw3eXfYDWtQmkkOMy9 tF3nH9T0pgon4UlB10/U8KExxMYqY3WfiesITREUAmWxlO6KD4NMaNCSCNt40H9T LopY30D3jfmbycYf89rXgdNBfGx/9rTldEif/IHowTDLDlmOtS/VbznCzqIg0ECa Bf6Ka4CV0zZ3hWaObGcs9Y1vlN/oXJU8xd/dp/nzJUki21HAba8NBu3iPEcQO0xx dBgEqxG6YGhvAdOA29MufzFmDWvJ96oMac2jB4c3JAICwF0LyzrTTBuCDIbfRU0B lzyULvzR4CYhQu4FtLMpnyZR5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAs8U891 izvo16uxD6KP3jRFL5dbMB8GA1UdIwQYMBaAFNDlRAWwPT0SNFneAbtAD016gynQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODM0RC8zQTJDNTE5NkFE QTExMUVEQUI2REY0MkRDNEY5QUUwMi8wT1ZFQmJBOVBSSTBXZDRCdTBBUFRYcURL ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBPVkVCYkE5UFJJMFdkNEJ1MEFQVFhxREtkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODM0RC8zQTJDNTE5NkFEQTExMUVEQUI2REY0MkRDNEY5QUUwMi8wT1ZFQmJBOVBS STBXZDRCdTBBUFRYcURLZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYG6FN/G6LWgQYcP8QzgMCFYuU9Imx6tJgjjdtDYO8r++EknIvYI0e mInm5VM/ypdr3k6mZNhSu3UrSd1yeAzjTy9wH5QrtVGxegCoqM9fJjS9vi2L4uI0 1iIHpnrYq+7RWJHcJ5lAOu6LoiLtkDsM1nk+LlgJMl+RjuoZO5HplAIq/4/oFHXI bAwaNaRJtgHcd5XXwy1gKhqejh+l81quC/d9Iz2snWMGnafHQzzwfpzvFQmL7QoT oxOmxMzk3y2KNE/B/kwQs0KmzoGzSekynXwGFDXehnVZeXjt+ohO4dnKgK61C8qt 4VFwGYwakjwjwoKO0JdHlLmfhq4wjwwE -----END CERTIFICATE-----Generated at Mon May 5 13:15:02 2025 by rpki-client