$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft File: pOaGeeZ7phon9Pib0JKu5cH3ITk.mft (raw, json) Hash identifier: WuUKLaEbG1RqWZ9BzG2sd80YtsK9tPm0/y6IDUA6uRU= Subject key identifier: B5:59:17:73:C4:34:76:BC:7D:F1:6A:CE:87:2F:2B:10:B3:1F:3D:A3 Authority key identifier: A4:E6:86:79:E6:7B:A6:1A:27:F4:F8:9B:D0:92:AE:E5:C1:F7:21:39 Certificate issuer: /CN=A91E1B48/serialNumber=A4E68679E67BA61A27F4F89BD092AEE5C1F72139 Certificate serial: 69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft Manifest number: 68 Signing time: Tue 13 May 2025 06:10:08 +0000 Manifest this update: Tue 13 May 2025 06:10:08 +0000 Manifest next update: Tue 20 May 2025 06:10:08 +0000 Files and hashes: 1: pOaGeeZ7phon9Pib0JKu5cH3ITk.crl (hash: ZpI5ByiDXrH8y/UZma72v+9WqdqPlNQgY/RWwxl3sJI=) 2: FB03B42C927411EF870E655AC4F9AE02.roa (hash: u4w+Qp27Y9kvTk+tCZ+0s7VTT7TtAcdJXuu92GYJlRA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.crl rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:10:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1B48, serialNumber=A4E68679E67BA61A27F4F89BD092AEE5C1F72139 Validity Not Before: May 13 06:10:08 2025 GMT Not After : May 20 06:10:08 2025 GMT Subject: CN=6822e240-0cd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:cb:cc:d5:82:19:af:34:42:b5:c4:3f:5e:69: bd:00:e5:7c:e9:6f:e7:bb:a3:0a:c7:d6:04:7f:71: 16:a9:1f:2a:15:1c:34:85:4f:f0:90:a9:17:b5:7a: 22:40:76:e9:fd:76:47:bd:7a:a6:49:4a:48:37:99: 63:60:bd:77:2f:5a:fa:f4:5b:52:c6:ba:e8:87:84: d4:40:bd:8c:5a:ca:99:b3:aa:a6:d5:a6:89:8b:1e: 74:f0:93:2c:a2:6c:c6:28:76:76:8b:b3:ef:3a:42: d7:c6:a4:0c:aa:dc:ab:2c:c4:07:2b:aa:42:a1:86: da:7f:68:f3:3f:90:91:b7:fd:1b:05:5e:81:61:a3: 52:84:7c:b6:b5:f4:03:46:b0:ff:c3:d4:15:88:ef: 70:03:7d:c6:0c:9e:f8:43:fa:3f:50:41:d8:20:44: 8a:e6:9e:5b:c2:f7:b5:00:b7:1e:45:26:fb:f7:fd: 16:81:23:ea:ef:13:14:dc:5e:8a:3c:70:34:85:c8: 09:9c:19:12:b8:fa:b2:cd:5c:ae:31:c3:06:e7:9f: ee:49:0b:d9:49:de:d4:b1:4a:75:56:c5:0d:95:80: f8:58:c1:5e:84:1b:15:e4:c3:04:e2:9c:97:30:76: 2d:47:69:47:7b:5f:b1:c1:e0:77:fc:1e:6f:18:19: ff:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:59:17:73:C4:34:76:BC:7D:F1:6A:CE:87:2F:2B:10:B3:1F:3D:A3 X509v3 Authority Key Identifier: keyid:A4:E6:86:79:E6:7B:A6:1A:27:F4:F8:9B:D0:92:AE:E5:C1:F7:21:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:38:c5:cc:b8:cd:d4:05:38:d9:e3:85:64:b2:6f:7b:13:fd: bc:cf:2e:dc:f2:70:16:ef:27:37:08:e3:e5:a9:fd:2b:79:36: 61:82:fb:88:ff:01:19:db:53:be:13:b2:17:dd:5e:55:88:ab: 6d:e3:cd:f2:21:34:b2:24:1c:58:8f:c1:15:d3:71:e9:90:4e: 37:11:f7:c9:3e:f8:7c:8a:06:95:ba:a1:c2:32:9a:41:c8:9d: 14:eb:9c:69:15:37:82:72:13:28:f3:5e:ec:1a:5f:13:7a:fa: ac:7a:b0:b6:1b:b7:a7:f9:ab:36:b2:6b:3e:ed:de:c9:8e:f1: 42:3b:ee:b8:41:d0:2a:60:4d:df:77:e0:c5:66:81:d7:5a:ee: 5b:be:32:d4:f9:dc:c0:4e:8e:af:1e:46:ac:00:09:71:10:b9: b9:2d:ac:a0:d6:1c:8b:dc:53:57:b4:b4:56:81:21:4d:f1:ad: 44:da:44:2f:e9:20:f6:2c:02:e4:04:17:8b:34:d8:c8:9c:46: 3e:c9:27:2d:3c:3b:b6:3a:67:fe:48:a1:19:ac:bb:5a:0d:60: 33:cc:df:98:b2:d4:5c:cd:eb:da:d1:10:b4:67:6f:f6:2f:43: fa:84:57:94:b2:76:26:51:fd:11:df:18:1a:cf:b7:ee:44:bf: a0:52:7b:70 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MUI0ODExMC8GA1UEBRMoQTRFNjg2NzlFNjdCQTYxQTI3RjRGODlCRDA5MkFFRTVD MUY3MjEzOTAeFw0yNTA1MTMwNjEwMDhaFw0yNTA1MjAwNjEwMDhaMBgxFjAUBgNV BAMTDTY4MjJlMjQwLTBjZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHy8zVghmvNEK1xD9eab0A5Xzpb+e7owrH1gR/cRapHyoVHDSFT/CQqRe1eiJA dun9dke9eqZJSkg3mWNgvXcvWvr0W1LGuuiHhNRAvYxaypmzqqbVpomLHnTwkyyi bMYodnaLs+86QtfGpAyq3KssxAcrqkKhhtp/aPM/kJG3/RsFXoFho1KEfLa19ANG sP/D1BWI73ADfcYMnvhD+j9QQdggRIrmnlvC97UAtx5FJvv3/RaBI+rvExTcXoo8 cDSFyAmcGRK4+rLNXK4xwwbnn+5JC9lJ3tSxSnVWxQ2VgPhYwV6EGxXkwwTinJcw di1HaUd7X7HB4Hf8Hm8YGf9PAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtVkXc8Q0 drx98WrOhy8rELMfPaMwHwYDVR0jBBgwFoAUpOaGeeZ7phon9Pib0JKu5cH3ITkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxQjQ4LzY2RjU3NjQ0OTI3 NDExRUZCRjg2NEEzREM0RjlBRTAyL3BPYUdlZVo3cGhvbjlQaWIwSkt1NWNIM0lU ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcE9hR2VlWjdwaG9uOVBpYjBKS3U1Y0gzSVRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx QjQ4LzY2RjU3NjQ0OTI3NDExRUZCRjg2NEEzREM0RjlBRTAyL3BPYUdlZVo3cGhv bjlQaWIwSkt1NWNIM0lUay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABo4xcy4zdQFONnjhWSyb3sT/bzPLtzycBbvJzcI4+Wp/St5NmGC+4j/ ARnbU74TshfdXlWIq23jzfIhNLIkHFiPwRXTcemQTjcR98k++HyKBpW6ocIymkHI nRTrnGkVN4JyEyjzXuwaXxN6+qx6sLYbt6f5qzayaz7t3smO8UI77rhB0CpgTd93 4MVmgdda7lu+MtT53MBOjq8eRqwACXEQubktrKDWHIvcU1e0tFaBIU3xrUTaRC/p IPYsAuQEF4s02MicRj7JJy08O7Y6Z/5IoRmsu1oNYDPM35iy1FzN69rRELRnb/Yv Q/qEV5SydiZR/RHfGBrPt+5Ev6BSe3A= -----END CERTIFICATE-----Generated at Wed May 14 09:37:55 2025 by rpki-client