$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.mft File: oPojd21UTId5RsrHxId0ZRmTfbg.mft (raw, json) Hash identifier: Y9nzdwpO3Q3Ie3A6+E68XSMXvfZ8dbJzeNqiLXMtSfg= Subject key identifier: F1:53:11:53:66:C3:97:CE:4F:B4:0F:E5:72:D7:C5:40:E2:E5:D8:13 Authority key identifier: A0:FA:23:77:6D:54:4C:87:79:46:CA:C7:C4:87:74:65:19:93:7D:B8 Certificate issuer: /CN=A91DD584/serialNumber=A0FA23776D544C877946CAC7C487746519937DB8 Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPojd21UTId5RsrHxId0ZRmTfbg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.mft Manifest number: 65 Signing time: Tue 13 May 2025 06:14:25 +0000 Manifest this update: Tue 13 May 2025 06:14:24 +0000 Manifest next update: Tue 20 May 2025 06:14:24 +0000 Files and hashes: 1: oPojd21UTId5RsrHxId0ZRmTfbg.crl (hash: tCgsQGcKsrpC8gX9dYYS/5ZIiPhVcad5ysIlr+v0WFw=) 2: B4C685B09CB111EFA6F8E627C4F9AE02.roa (hash: GuNo7IUV7Thwoh9B3txt8mnx9fY3g5B8M+APQokJxqg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.crl rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPojd21UTId5RsrHxId0ZRmTfbg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:14:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD584, serialNumber=A0FA23776D544C877946CAC7C487746519937DB8 Validity Not Before: May 13 06:14:24 2025 GMT Not After : May 20 06:14:24 2025 GMT Subject: CN=6822e340-004f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:33:43:28:e7:4e:5e:f2:62:9e:48:de:4c:b7: d9:70:16:7a:7c:e6:82:57:72:2a:ff:8c:a9:95:6f: a9:0e:45:05:d8:08:9b:6d:56:bb:1e:c5:64:93:f8: 7e:4c:f1:5c:1a:ce:ab:d7:2a:d6:3f:d6:df:cc:46: cb:8d:9e:cb:3f:5b:49:32:36:bc:a4:57:3b:79:bd: c9:41:5f:27:9d:35:ce:c4:a3:9c:55:f1:0b:60:ff: eb:cc:4e:e3:af:aa:cb:5f:bc:c7:44:e1:2e:4c:20: 8c:37:e2:79:6f:a1:54:3b:79:c3:03:2b:84:8b:01: 90:71:57:12:57:83:45:c4:f8:9e:30:ec:cc:a3:55: 21:2b:46:18:bc:c0:12:66:a0:10:8b:9e:20:72:d4: 81:e4:30:c7:4f:7b:1d:9d:a6:71:9f:75:2d:ed:f2: da:55:90:0c:10:89:f1:4a:77:dc:a1:ce:1c:2b:0d: 4b:02:46:3d:e8:40:2e:ec:e8:12:61:12:f3:dc:1f: bc:5c:0d:e5:5d:d0:71:fa:c4:d8:69:d1:d0:0d:34: 45:82:62:0e:fb:33:38:34:1c:82:e2:e0:7d:fa:d9: 02:90:82:8f:d2:27:56:25:10:14:65:01:3f:10:5f: cd:f8:66:15:9d:74:6d:13:6e:68:1c:e0:dd:1a:cb: a0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:53:11:53:66:C3:97:CE:4F:B4:0F:E5:72:D7:C5:40:E2:E5:D8:13 X509v3 Authority Key Identifier: keyid:A0:FA:23:77:6D:54:4C:87:79:46:CA:C7:C4:87:74:65:19:93:7D:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPojd21UTId5RsrHxId0ZRmTfbg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:08:44:1e:a3:95:d8:5f:c9:13:0f:1f:88:50:ee:2a:71:b0: ca:c7:4b:9a:29:11:1f:85:cd:0a:f4:b2:d9:24:fe:9e:ee:f5: 47:b2:0d:3f:88:1e:2d:0f:24:5f:3a:c3:f7:d0:cd:45:e1:15: 38:00:4e:4d:af:32:59:f2:91:e3:aa:67:e5:3d:ea:9d:e4:f8: 91:ed:3a:71:30:40:17:13:e2:7e:d0:81:1a:23:53:20:7e:aa: b7:6c:f6:e2:f6:29:16:4c:8d:2b:fb:df:54:96:2a:89:8c:ee: 64:ed:7f:78:e9:d3:c0:c5:fd:9b:f5:aa:33:a5:a2:6f:36:27: 5b:b3:79:f4:4a:37:28:a8:1e:f2:4d:bd:18:15:91:34:21:38: 56:21:e7:10:b5:00:da:b4:ba:a0:c4:e6:e8:0f:d4:09:8e:b4: f2:e7:40:f2:7c:fd:4a:c8:e4:09:44:d0:e0:73:57:c9:b8:f9: d4:14:03:bf:0b:74:8e:8b:40:7d:be:81:9a:8a:76:40:a5:20: bd:43:aa:5f:b9:f9:be:19:4a:70:e4:be:65:e3:a8:d1:fc:46: 1a:2f:e7:50:38:ed:73:74:47:cb:93:9b:dd:ca:30:d0:f9:d0: 47:b6:13:93:9a:dd:bd:d0:f9:79:86:cc:44:2b:8c:25:c9:f4: 41:3d:8e:97 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RDU4NDExMC8GA1UEBRMoQTBGQTIzNzc2RDU0NEM4Nzc5NDZDQUM3QzQ4Nzc0NjUx OTkzN0RCODAeFw0yNTA1MTMwNjE0MjRaFw0yNTA1MjAwNjE0MjRaMBgxFjAUBgNV BAMTDTY4MjJlMzQwLTAwNGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNM0Mo505e8mKeSN5Mt9lwFnp85oJXcir/jKmVb6kORQXYCJttVrsexWST+H5M 8VwazqvXKtY/1t/MRsuNnss/W0kyNrykVzt5vclBXyedNc7Eo5xV8Qtg/+vMTuOv qstfvMdE4S5MIIw34nlvoVQ7ecMDK4SLAZBxVxJXg0XE+J4w7MyjVSErRhi8wBJm oBCLniBy1IHkMMdPex2dpnGfdS3t8tpVkAwQifFKd9yhzhwrDUsCRj3oQC7s6BJh EvPcH7xcDeVd0HH6xNhp0dANNEWCYg77Mzg0HILi4H362QKQgo/SJ1YlEBRlAT8Q X834ZhWddG0Tbmgc4N0ay6CzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8VMRU2bD l85PtA/lctfFQOLl2BMwHwYDVR0jBBgwFoAUoPojd21UTId5RsrHxId0ZRmTfbgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURENTg0LzMyNzA3MzgyOUNC MTExRUZBRUEwMEQyNUM0RjlBRTAyL29Qb2pkMjFVVElkNVJzckh4SWQwWlJtVGZi Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb1BvamQyMVVUSWQ1UnNySHhJZDBaUm1UZmJnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE NTg0LzMyNzA3MzgyOUNCMTExRUZBRUEwMEQyNUM0RjlBRTAyL29Qb2pkMjFVVElk NVJzckh4SWQwWlJtVGZiZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIQIRB6jldhfyRMPH4hQ7ipxsMrHS5opER+FzQr0stkk/p7u9UeyDT+I Hi0PJF86w/fQzUXhFTgATk2vMlnykeOqZ+U96p3k+JHtOnEwQBcT4n7QgRojUyB+ qrds9uL2KRZMjSv731SWKomM7mTtf3jp08DF/Zv1qjOlom82J1uzefRKNyioHvJN vRgVkTQhOFYh5xC1ANq0uqDE5ugP1AmOtPLnQPJ8/UrI5AlE0OBzV8m4+dQUA78L dI6LQH2+gZqKdkClIL1Dql+5+b4ZSnDkvmXjqNH8Rhov51A47XN0R8uTm93KMND5 0Ee2E5Oa3b3Q+XmGzEQrjCXJ9EE9jpc= -----END CERTIFICATE-----Generated at Wed May 14 04:03:27 2025 by rpki-client