$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft File: cOo3wZMr00-ztIWaNIMaEOYR0PY.mft (raw, json) Hash identifier: WlBTNEHBfoCDpGf3tMCPWWbBx9YcLmvX3yL6x5I8lHc= Subject key identifier: A3:B5:D4:E0:73:8B:60:D7:2D:65:1E:D5:86:BD:08:08:98:3C:B8:2C Authority key identifier: 70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6 Certificate issuer: /CN=A91BA1BF/serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6 Certificate serial: 0128 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft Manifest number: 0124 Signing time: Thu 15 May 2025 04:03:32 +0000 Manifest this update: Thu 15 May 2025 04:03:32 +0000 Manifest next update: Thu 22 May 2025 04:03:32 +0000 Files and hashes: 1: cOo3wZMr00-ztIWaNIMaEOYR0PY.crl (hash: 5nWun8KtmjHIRCG+PYhCp8tPMFcV0aeRaF+3RBII0Vk=) 2: BC630BAE84FC11EE9887345FC4F9AE02.roa (hash: E3DVtUK4PKLNRTNWPdaED3S506iNVROikAhxbftKIaQ=) 3: 7C58D40872CD11EE81C60650C4F9AE02.roa (hash: hhVy8VlS8PQRYDzu0z2SFqVi4xOaWLt/VFPzg2LCqTM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 04:03:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA1BF, serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6 Validity Not Before: May 15 04:03:32 2025 GMT Not After : May 22 04:03:32 2025 GMT Subject: CN=68256794-67ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:16:29:65:73:c2:aa:29:e4:28:67:67:48:5a: 76:d7:4e:1d:8e:54:2e:c2:d1:be:44:5d:f5:b1:bf: 6f:e8:24:5d:14:96:56:69:12:37:15:c1:43:a2:a5: e8:e8:fc:7b:6f:fe:75:23:d7:85:a7:6f:11:d6:c1: ca:bc:1a:24:77:d3:96:14:c2:b6:cb:4e:46:46:ea: dd:86:45:c1:a1:15:f3:0b:6e:c5:32:9c:80:b7:7f: 4f:37:12:a7:19:fc:02:4e:0d:38:14:d4:e0:70:19: 0f:66:ef:10:37:9b:ab:96:fe:d5:ad:c6:ea:cd:f1: 5e:25:79:da:39:ed:a7:48:c6:8a:e7:cb:1b:fd:21: 25:1c:08:49:9f:fa:a4:80:e1:92:a0:25:b9:ac:98: d2:7a:83:2b:be:70:65:c7:ad:6a:b6:74:4c:e1:ba: a4:32:76:5d:34:14:1e:b3:f4:3d:4e:d6:9a:3e:84: 1a:f9:0a:ee:d2:da:1a:f3:ab:b9:5a:25:8a:35:81: ae:42:a6:98:6e:20:06:2d:26:8c:87:fd:e6:2c:a4: b7:8f:34:88:97:dc:02:5d:04:33:7f:bf:e8:a9:4a: 36:cf:13:71:7d:a2:5a:6d:10:87:a4:1d:d6:7e:b8: 08:f0:1f:89:29:39:a4:17:6a:fe:ea:59:dd:d5:e3: ba:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:B5:D4:E0:73:8B:60:D7:2D:65:1E:D5:86:BD:08:08:98:3C:B8:2C X509v3 Authority Key Identifier: keyid:70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:1f:9a:c9:b1:53:9f:3e:85:67:37:9a:13:84:b1:f0:aa:aa: d9:ec:95:68:3c:e7:1c:73:07:85:0b:82:1c:17:e1:15:21:36: b1:5d:d3:aa:b2:54:36:37:fb:93:3c:56:94:d6:ef:c4:24:53: 3f:5f:b3:17:0a:07:12:a5:e5:5d:69:82:32:66:ee:e9:b9:80: 3b:a9:cd:b2:d8:cb:8d:67:cf:55:6a:26:85:4e:60:c4:fe:b4: 7a:78:49:27:55:67:30:60:99:4b:27:c9:53:47:b2:41:a2:32: 8c:33:75:bc:d3:1d:9c:47:15:38:90:ed:e8:81:32:14:7c:f4: 4d:c2:33:22:a2:d2:22:39:f4:5f:a7:3f:2f:bb:2a:0f:f9:4b: 65:66:04:dc:63:88:96:0e:47:3f:18:79:55:5a:26:da:01:27: b6:20:b1:4f:be:39:2c:15:b7:4d:de:f1:d6:3e:30:ab:d6:b7: b1:7d:44:5b:cb:63:d2:d4:d0:9d:01:74:62:2d:96:1d:cd:c8: 28:da:fd:a0:b3:c8:5a:2d:e5:47:e9:b8:fc:d4:07:28:7c:28: d2:0d:b1:cf:e5:bd:4e:21:de:79:2b:99:b7:8f:65:06:90:e9: 7c:5b:7a:5b:51:b7:bb:51:42:84:f6:f6:d7:d3:a8:c9:00:d2: 32:b3:18:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkExQkYxMTAvBgNVBAUTKDcwRUEzN0MxOTMyQkQzNEZCM0I0ODU5QTM0ODMxQTEw RTYxMUQwRjYwHhcNMjUwNTE1MDQwMzMyWhcNMjUwNTIyMDQwMzMyWjAYMRYwFAYD VQQDEw02ODI1Njc5NC02N2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwxYpZXPCqinkKGdnSFp2104djlQuwtG+RF31sb9v6CRdFJZWaRI3FcFDoqXo 6Px7b/51I9eFp28R1sHKvBokd9OWFMK2y05GRurdhkXBoRXzC27FMpyAt39PNxKn GfwCTg04FNTgcBkPZu8QN5urlv7VrcbqzfFeJXnaOe2nSMaK58sb/SElHAhJn/qk gOGSoCW5rJjSeoMrvnBlx61qtnRM4bqkMnZdNBQes/Q9TtaaPoQa+Qru0toa86u5 WiWKNYGuQqaYbiAGLSaMh/3mLKS3jzSIl9wCXQQzf7/oqUo2zxNxfaJabRCHpB3W frgI8B+JKTmkF2r+6lnd1eO6OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKO11OBz i2DXLWUe1Ya9CAiYPLgsMB8GA1UdIwQYMBaAFHDqN8GTK9NPs7SFmjSDGhDmEdD2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTFCRi84NEUxMEE0Mjcy Q0MxMUVFQjc5NDVBNERDNEY5QUUwMi9jT28zd1pNcjAwLXp0SVdhTklNYUVPWVIw UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NPbzN3Wk1yMDAtenRJV2FOSU1hRU9ZUjBQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTFCRi84NEUxMEE0MjcyQ0MxMUVFQjc5NDVBNERDNEY5QUUwMi9jT28zd1pNcjAw LXp0SVdhTklNYUVPWVIwUFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8H5rJsVOfPoVnN5oThLHwqqrZ7JVoPOcccweFC4IcF+EVITaxXdOq slQ2N/uTPFaU1u/EJFM/X7MXCgcSpeVdaYIyZu7puYA7qc2y2MuNZ89VaiaFTmDE /rR6eEknVWcwYJlLJ8lTR7JBojKMM3W80x2cRxU4kO3ogTIUfPRNwjMiotIiOfRf pz8vuyoP+UtlZgTcY4iWDkc/GHlVWibaASe2ILFPvjksFbdN3vHWPjCr1rexfURb y2PS1NCdAXRiLZYdzcgo2v2gs8haLeVH6bj81AcofCjSDbHP5b1OId55K5m3j2UG kOl8W3pbUbe7UUKE9vbX06jJANIysxg8 -----END CERTIFICATE-----Generated at Fri May 16 06:27:20 2025 by rpki-client