$ rpki-client -vvf rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft File: P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft (raw, json) Hash identifier: m47cX0ZicJ+h2bBj9UFS/FnEUAPkuRCPeIBxfD6vqgU= Subject key identifier: E0:58:69:AC:EC:4C:E9:FC:D2:C9:53:FA:05:4A:73:40:4E:11:81:47 Authority key identifier: 3F:E3:AE:35:5A:92:77:B9:1D:73:E2:AC:52:F5:38:7F:09:5F:18:9A Certificate issuer: /CN=A91C37DD/serialNumber=3FE3AE355A9277B91D73E2AC52F5387F095F189A Certificate serial: CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-OuNVqSd7kdc-KsUvU4fwlfGJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft Manifest number: C8 Signing time: Thu 15 May 2025 05:08:46 +0000 Manifest this update: Thu 15 May 2025 05:08:45 +0000 Manifest next update: Thu 22 May 2025 05:08:45 +0000 Files and hashes: 1: P-OuNVqSd7kdc-KsUvU4fwlfGJo.crl (hash: vcWuJoRkrkNFLssGStpNEJUZ+hROhb/gv1A3rwUo0C8=) 2: 8670D60E096611EF99F30750C4F9AE02.roa (hash: 9x3A7j08LRpC1gpJOubZns71PbS9EeGE42Z1Nuk8UHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.crl rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-OuNVqSd7kdc-KsUvU4fwlfGJo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 05:08:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 206 (0xce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C37DD, serialNumber=3FE3AE355A9277B91D73E2AC52F5387F095F189A Validity Not Before: May 15 05:08:45 2025 GMT Not After : May 22 05:08:45 2025 GMT Subject: CN=682576dd-bb3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:41:82:66:a0:6f:6c:b8:e0:81:19:c3:d0:a9: a5:f6:5a:8b:47:c9:99:8f:8c:21:90:fd:67:61:fc: 41:1c:1f:40:66:98:b6:da:d6:95:8b:81:ad:3c:19: 29:1f:98:9b:74:9b:b4:13:03:c9:54:40:b2:cb:00: 30:b2:a1:d2:a3:b1:85:79:ab:7a:d2:05:6a:2a:66: 44:92:ef:51:6e:6b:4a:60:44:70:37:79:cb:de:41: aa:e6:2e:c5:92:df:ba:3e:4e:3f:a9:de:32:55:04: d1:a2:e8:09:59:6b:93:44:30:cb:c3:1c:94:0d:df: 05:86:ae:0a:69:72:f7:1c:83:a6:80:6c:cd:91:cd: 62:f1:8f:52:fe:80:eb:1d:b2:bb:4b:50:fd:51:ed: 87:45:75:fc:22:0c:9f:60:1e:64:05:c2:d8:46:0c: 82:df:45:98:d1:5d:88:cb:b5:b4:83:5a:cc:2c:31: a9:8f:42:9d:8d:9b:73:42:33:d5:b0:7e:2b:5e:00: 76:5e:10:5e:9c:0b:dc:e3:5d:14:0c:6a:40:ae:40: 40:f3:e2:4b:40:18:0f:ac:1b:e3:63:14:ce:43:2e: 9e:fe:88:d9:64:1f:c8:18:55:38:c6:78:30:b6:8a: 95:12:6b:5d:b1:60:84:35:fd:4e:bd:c0:68:15:fa: f5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:58:69:AC:EC:4C:E9:FC:D2:C9:53:FA:05:4A:73:40:4E:11:81:47 X509v3 Authority Key Identifier: keyid:3F:E3:AE:35:5A:92:77:B9:1D:73:E2:AC:52:F5:38:7F:09:5F:18:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-OuNVqSd7kdc-KsUvU4fwlfGJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:a4:5d:6f:ca:eb:20:0a:1a:20:df:87:7b:b2:7a:6f:a3:6e: ab:f7:9a:4c:29:a6:08:60:5c:bc:c2:d7:43:d5:ce:fb:cc:97: 53:7c:07:eb:f1:28:3c:08:0f:63:02:1a:a9:57:42:e4:cd:38: 2d:19:6e:dc:5a:63:5b:1b:4b:80:f0:33:de:6f:8a:cc:08:b0: 58:84:b1:26:ac:c4:9b:b7:aa:f2:2b:38:41:55:69:1b:0f:54: 66:a1:a5:52:0c:57:3e:06:8a:a7:7f:d2:5c:5c:2c:0f:a8:b6: d2:cd:17:e3:62:2d:1a:f4:cc:bc:8e:b6:05:c7:ab:e6:1f:79: f1:74:03:36:a4:55:26:be:ec:35:24:af:56:f8:3a:fd:6f:9a: 4f:68:92:c4:3a:91:fa:08:81:45:27:99:b0:88:dc:90:fd:ad: 01:68:3d:8e:ed:9a:13:64:27:01:4a:3a:08:c7:16:da:46:4c: f7:8e:37:30:cc:ca:f7:e1:1e:95:3c:ee:23:3f:7c:e7:48:90: f6:d3:8c:df:08:2a:cc:c9:79:b9:1f:b3:4d:bb:98:9d:19:80: 6d:e8:1a:7c:1b:60:4d:11:07:48:19:81:0d:c0:ed:2d:51:09: da:d7:5a:23:d2:16:07:6a:b9:b6:e9:0a:c4:be:26:f6:d2:f2: 6d:59:b8:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM3REQxMTAvBgNVBAUTKDNGRTNBRTM1NUE5Mjc3QjkxRDczRTJBQzUyRjUzODdG MDk1RjE4OUEwHhcNMjUwNTE1MDUwODQ1WhcNMjUwNTIyMDUwODQ1WjAYMRYwFAYD VQQDEw02ODI1NzZkZC1iYjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwUGCZqBvbLjggRnD0Kml9lqLR8mZj4whkP1nYfxBHB9AZpi22taVi4GtPBkp H5ibdJu0EwPJVECyywAwsqHSo7GFeat60gVqKmZEku9RbmtKYERwN3nL3kGq5i7F kt+6Pk4/qd4yVQTRougJWWuTRDDLwxyUDd8Fhq4KaXL3HIOmgGzNkc1i8Y9S/oDr HbK7S1D9Ue2HRXX8IgyfYB5kBcLYRgyC30WY0V2Iy7W0g1rMLDGpj0KdjZtzQjPV sH4rXgB2XhBenAvc410UDGpArkBA8+JLQBgPrBvjYxTOQy6e/ojZZB/IGFU4xngw toqVEmtdsWCENf1OvcBoFfr1gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOBYaazs TOn80slT+gVKc0BOEYFHMB8GA1UdIwQYMBaAFD/jrjVakne5HXPirFL1OH8JXxia MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzdERC8yNDg1NUQ4MDA5 NjUxMUVGQTRCQ0U4N0FDNEY5QUUwMi9QLU91TlZxU2Q3a2RjLUtzVXZVNGZ3bGZH Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AtT3VOVnFTZDdrZGMtS3NVdlU0ZndsZkdKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzdERC8yNDg1NUQ4MDA5NjUxMUVGQTRCQ0U4N0FDNEY5QUUwMi9QLU91TlZxU2Q3 a2RjLUtzVXZVNGZ3bGZHSm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBipF1vyusgChog34d7snpvo26r95pMKaYIYFy8wtdD1c77zJdTfAfr 8Sg8CA9jAhqpV0LkzTgtGW7cWmNbG0uA8DPeb4rMCLBYhLEmrMSbt6ryKzhBVWkb D1RmoaVSDFc+Boqnf9JcXCwPqLbSzRfjYi0a9My8jrYFx6vmH3nxdAM2pFUmvuw1 JK9W+Dr9b5pPaJLEOpH6CIFFJ5mwiNyQ/a0BaD2O7ZoTZCcBSjoIxxbaRkz3jjcw zMr34R6VPO4jP3znSJD204zfCCrMyXm5H7NNu5idGYBt6Bp8G2BNEQdIGYENwO0t UQna11oj0hYHarm26QrEvib20vJtWbjF -----END CERTIFICATE-----Generated at Fri May 16 07:08:13 2025 by rpki-client