$ rpki-client -vvf rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft File: 4OynvFsloMo3TZqDzEz5DdbPIgk.mft (raw, json) Hash identifier: Rv9MV4QKwb3g0K3E013d88oZiL8pn3BSaMLStFmoiBA= Subject key identifier: C2:6C:95:60:9F:FB:E4:B5:4D:59:18:0E:AB:0A:7C:05:32:96:E8:E4 Authority key identifier: E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09 Certificate issuer: /CN=A91C74B5/serialNumber=E0ECA7BC5B25A0CA374D9A83CC4CF90DD6CF2209 Certificate serial: 015E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft Manifest number: 0150 Signing time: Tue 13 May 2025 03:26:06 +0000 Manifest this update: Tue 13 May 2025 03:26:06 +0000 Manifest next update: Tue 20 May 2025 03:26:06 +0000 Files and hashes: 1: 4OynvFsloMo3TZqDzEz5DdbPIgk.crl (hash: 6PztDpBMD6CbHHPYkxZoOblBjueXFjb6zi/hO3J0Iq0=) 2: FBCA5E628A4E11EE8EFFA44BC4F9AE02.roa (hash: n7d+wfVovpgFh/VPuHK0Be+tZJiAokXkxVBH6z58Cdo=) 3: 23E0203034AF11EE90E6263DC4F9AE02.roa (hash: qRwojUTlxnLhuw/Mk800h2tw73R4wHeoNMLoVaIWLSQ=) 4: FE53F0DE34AA11EE85FF0735C4F9AE02.roa (hash: FSryM40tOFsx9/9SakfMh/QfDHk+qmxC9WGqNR/nxQA=) 5: 2343647034AF11EE90E6263DC4F9AE02.roa (hash: O7wU5uPOsDFh8TlK1r/cSTqhuO+kftwlxz4zNibCfJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:26:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 350 (0x15e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C74B5, serialNumber=E0ECA7BC5B25A0CA374D9A83CC4CF90DD6CF2209 Validity Not Before: May 13 03:26:06 2025 GMT Not After : May 20 03:26:06 2025 GMT Subject: CN=6822bbce-6ae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4a:93:05:9f:1a:7e:e8:6f:0d:0d:8c:6b:d6: 77:fb:0b:12:dc:30:8b:2c:db:c3:15:df:b1:e7:29: 0c:fc:84:9c:08:9b:25:56:a1:3b:a0:6f:39:19:16: 13:b1:5a:f9:a1:31:12:4a:f6:6b:c6:73:3b:c4:bd: 7a:0b:d7:ec:da:e0:cc:b4:df:36:54:b2:55:9b:78: 5d:ee:f5:be:98:55:34:c7:8b:93:93:21:a8:c3:a1: a1:22:d8:3e:7d:8f:f2:0a:3a:12:c3:87:2a:2a:f8: 0a:df:b9:78:91:86:bc:1a:bf:78:76:74:11:c2:d8: a2:87:b4:ef:ee:f7:60:b4:a3:9c:27:7b:52:14:bb: ce:a6:81:c6:a5:65:29:25:0c:46:26:a1:96:fd:ba: f2:55:9f:86:2b:49:d6:e6:75:96:eb:58:9d:f1:0f: 80:a2:ae:a1:4c:53:57:d1:ae:14:01:0b:5e:fb:a0: 83:2a:de:28:c4:f4:5e:4a:ef:cd:7b:7d:54:98:c4: 26:6d:03:bc:3f:4a:a0:35:ab:ad:3b:55:64:f9:2d: 8d:b4:5b:aa:88:82:91:79:65:27:84:27:ee:37:37: f6:e9:68:1c:0b:bc:a9:d4:33:cb:08:40:d8:a6:fa: 19:83:61:ed:8b:df:f3:4c:9e:1d:3b:02:8f:df:34: ef:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:6C:95:60:9F:FB:E4:B5:4D:59:18:0E:AB:0A:7C:05:32:96:E8:E4 X509v3 Authority Key Identifier: keyid:E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:92:b4:26:97:57:ac:2f:00:aa:69:9d:90:ad:75:43:58:e4: 96:55:c0:17:1f:69:37:97:8d:2b:b9:47:ff:9c:61:97:67:35: ea:e7:7f:86:3b:b1:a6:81:20:e5:de:ef:72:bd:be:5e:be:a8: af:2e:fb:e1:61:c4:90:c0:2e:1b:96:12:af:a4:1e:80:38:a4: c3:f5:ae:09:25:65:bc:5a:21:30:cb:f8:cd:7c:41:eb:d3:dd: 50:5a:d4:32:07:20:72:06:d8:43:67:7b:d3:cc:f5:dc:af:34: 3c:92:51:c1:2d:d0:b8:59:7e:2f:00:aa:6b:48:62:11:b1:30: 02:78:8b:be:08:4c:a2:db:69:d4:f2:10:86:02:b9:a4:95:66: d0:7c:d2:95:c5:4c:8b:4c:f1:3c:ff:e8:7c:60:74:49:c6:67: a7:4b:90:a1:92:e0:8a:aa:a2:26:08:2e:68:a3:aa:d3:9e:a5: 42:c2:7b:e2:32:10:65:59:38:89:92:bc:4e:d8:b2:49:de:1b: 05:9d:13:a7:7b:f1:bc:52:16:60:c7:f5:31:fc:5d:c1:0e:a7: 6b:e8:97:41:c7:a1:13:71:c7:1a:7c:df:58:f1:d8:a1:7f:63: d6:2f:71:5c:5b:8d:e8:cc:e2:0e:13:bb:1d:c4:ec:54:7c:3b: 66:71:66:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc0QjUxMTAvBgNVBAUTKEUwRUNBN0JDNUIyNUEwQ0EzNzREOUE4M0NDNENGOTBE RDZDRjIyMDkwHhcNMjUwNTEzMDMyNjA2WhcNMjUwNTIwMDMyNjA2WjAYMRYwFAYD VQQDEw02ODIyYmJjZS02YWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuEqTBZ8afuhvDQ2Ma9Z3+wsS3DCLLNvDFd+x5ykM/IScCJslVqE7oG85GRYT sVr5oTESSvZrxnM7xL16C9fs2uDMtN82VLJVm3hd7vW+mFU0x4uTkyGow6GhItg+ fY/yCjoSw4cqKvgK37l4kYa8Gr94dnQRwtiih7Tv7vdgtKOcJ3tSFLvOpoHGpWUp JQxGJqGW/bryVZ+GK0nW5nWW61id8Q+Aoq6hTFNX0a4UAQte+6CDKt4oxPReSu/N e31UmMQmbQO8P0qgNautO1Vk+S2NtFuqiIKReWUnhCfuNzf26WgcC7yp1DPLCEDY pvoZg2Hti9/zTJ4dOwKP3zTvuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMJslWCf ++S1TVkYDqsKfAUylujkMB8GA1UdIwQYMBaAFODsp7xbJaDKN02ag8xM+Q3WzyIJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzRCNS85ODA0MzU2RTM0 QUExMUVFQTA2QUUxMzNDNEY5QUUwMi80T3ludkZzbG9NbzNUWnFEekV6NURkYlBJ Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRPeW52RnNsb01vM1RacUR6RXo1RGRiUElnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzRCNS85ODA0MzU2RTM0QUExMUVFQTA2QUUxMzNDNEY5QUUwMi80T3ludkZzbG9N bzNUWnFEekV6NURkYlBJZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnkrQml1esLwCqaZ2QrXVDWOSWVcAXH2k3l40ruUf/nGGXZzXq53+G O7GmgSDl3u9yvb5evqivLvvhYcSQwC4blhKvpB6AOKTD9a4JJWW8WiEwy/jNfEHr 091QWtQyByByBthDZ3vTzPXcrzQ8klHBLdC4WX4vAKprSGIRsTACeIu+CEyi22nU 8hCGArmklWbQfNKVxUyLTPE8/+h8YHRJxmenS5ChkuCKqqImCC5oo6rTnqVCwnvi MhBlWTiJkrxO2LJJ3hsFnROne/G8UhZgx/Ux/F3BDqdr6JdBx6ETcccafN9Y8dih f2PWL3FcW43ozOIOE7sdxOxUfDtmcWbA -----END CERTIFICATE-----Generated at Wed May 14 11:52:22 2025 by rpki-client