$ rpki-client -vvf rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.mft File: OM4nbIW20tDq_p0_ilpQjN26uWg.mft (raw, json) Hash identifier: t84arRRzlRMLH8OE+HHR5XbcjOXXAtrqBaQFMje/G84= Subject key identifier: 6F:1C:D3:26:CA:C8:88:FF:B0:B9:D2:28:27:75:A1:71:39:86:56:47 Authority key identifier: 38:CE:27:6C:85:B6:D2:D0:EA:FE:9D:3F:8A:5A:50:8C:DD:BA:B9:68 Certificate issuer: /CN=A91F053E/serialNumber=38CE276C85B6D2D0EAFE9D3F8A5A508CDDBAB968 Certificate serial: 069F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OM4nbIW20tDq_p0_ilpQjN26uWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.mft Manifest number: 0698 Signing time: Mon 12 May 2025 22:00:31 +0000 Manifest this update: Mon 12 May 2025 22:00:30 +0000 Manifest next update: Mon 19 May 2025 22:00:30 +0000 Files and hashes: 1: OM4nbIW20tDq_p0_ilpQjN26uWg.crl (hash: YlcS0KbI90ynegidh13iZkY6tXSczzRDvDG26gZVn0A=) 2: 6473BE24979811EB97001639C4F9AE02.roa (hash: 2h+gg3bjxIldHS97Lzce3I89lkJGy2giiZHmYtJCKjs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.crl rsync://rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OM4nbIW20tDq_p0_ilpQjN26uWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1695 (0x69f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F053E, serialNumber=38CE276C85B6D2D0EAFE9D3F8A5A508CDDBAB968 Validity Not Before: May 12 22:00:30 2025 GMT Not After : May 19 22:00:30 2025 GMT Subject: CN=68226f7e-be9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:74:98:95:d3:5e:14:9e:5e:68:ec:c4:c8:ab: 70:fb:b0:6a:a0:98:5a:50:d0:b1:7b:68:00:55:76: a7:9c:21:22:91:54:09:76:8c:30:64:b4:cd:81:73: 94:f0:42:34:cf:ce:e4:9e:1d:7e:32:ac:93:3b:31: 5b:a9:39:f1:28:88:b9:c2:dd:6d:aa:ee:2d:f2:21: c1:fd:a9:36:2e:f8:53:da:2f:35:6a:b2:67:c5:e5: 08:25:79:ca:5b:a3:9d:0a:2c:3c:39:0b:45:0a:fe: 9f:69:76:f2:76:3e:5e:91:f2:3f:1f:b3:99:b7:3c: 63:12:ab:11:3b:c6:a2:76:32:4a:6e:aa:96:a7:de: 41:bb:9d:db:69:52:56:58:ff:19:58:d8:1e:34:04: 82:8c:81:68:8b:ac:d4:87:24:96:2f:e7:7f:fb:7d: 0b:67:98:d5:bb:50:9d:58:63:52:3d:37:63:20:5d: 8d:f7:d1:2e:91:44:50:95:0c:1a:72:34:33:30:22: 6d:d0:6b:84:e0:a4:f0:ad:c3:eb:39:58:de:a3:82: 86:5c:b1:ee:d0:c4:80:7c:e2:65:71:c5:99:7e:6e: 1b:25:9e:f0:8b:42:66:8b:3b:ea:68:4e:d4:42:e1: 99:36:fe:0a:6e:63:cc:ed:36:80:8b:99:2b:ae:aa: 47:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:1C:D3:26:CA:C8:88:FF:B0:B9:D2:28:27:75:A1:71:39:86:56:47 X509v3 Authority Key Identifier: keyid:38:CE:27:6C:85:B6:D2:D0:EA:FE:9D:3F:8A:5A:50:8C:DD:BA:B9:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OM4nbIW20tDq_p0_ilpQjN26uWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:aa:72:d9:83:fd:7b:ab:9c:3e:ca:7c:f4:39:c9:b5:93:d7: 77:59:c4:77:5e:a6:e5:cc:8a:27:d2:36:f0:98:60:d4:a8:ab: 6b:eb:19:12:92:8f:c0:5c:07:21:eb:77:a3:38:ef:41:29:50: dd:32:b4:eb:52:d4:45:d1:80:cb:59:6e:af:96:48:f5:ab:79: 87:ba:14:c4:a8:28:df:29:98:69:3c:d9:87:e7:b8:b6:1a:98: e6:4f:d8:4b:7a:64:d0:7c:80:ac:b6:b3:87:f4:bc:45:8f:a5: 05:9c:6d:86:0f:d0:37:1b:47:a7:3b:0a:5f:bc:3d:04:80:fb: 34:97:e0:0d:2a:d4:e3:20:16:95:aa:d1:0d:79:4b:ec:a1:73: c0:de:6a:6f:5d:87:bd:c0:74:02:6a:54:9c:8e:09:37:e5:81: 35:14:41:e5:bc:9b:1e:af:4f:d6:0d:47:dc:a0:3a:1b:44:64: 45:1b:56:46:da:d1:4a:77:1b:cb:ac:22:29:fa:80:79:44:bc: 04:b6:62:c6:e6:9a:00:9a:4f:83:34:46:9d:79:70:54:3f:08: fa:d8:61:52:1f:b8:c3:16:8e:e8:44:f5:e6:b5:9e:95:c7:f7: 81:d6:54:bc:52:7f:05:83:1a:b4:6b:51:e9:b9:fe:45:30:e3: 9e:3b:bd:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBp8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjA1M0UxMTAvBgNVBAUTKDM4Q0UyNzZDODVCNkQyRDBFQUZFOUQzRjhBNUE1MDhD RERCQUI5NjgwHhcNMjUwNTEyMjIwMDMwWhcNMjUwNTE5MjIwMDMwWjAYMRYwFAYD VQQDEw02ODIyNmY3ZS1iZTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu3SYldNeFJ5eaOzEyKtw+7BqoJhaUNCxe2gAVXannCEikVQJdowwZLTNgXOU 8EI0z87knh1+MqyTOzFbqTnxKIi5wt1tqu4t8iHB/ak2LvhT2i81arJnxeUIJXnK W6OdCiw8OQtFCv6faXbydj5ekfI/H7OZtzxjEqsRO8aidjJKbqqWp95Bu53baVJW WP8ZWNgeNASCjIFoi6zUhySWL+d/+30LZ5jVu1CdWGNSPTdjIF2N99EukURQlQwa cjQzMCJt0GuE4KTwrcPrOVjeo4KGXLHu0MSAfOJlccWZfm4bJZ7wi0JmizvqaE7U QuGZNv4KbmPM7TaAi5krrqpH1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG8c0ybK yIj/sLnSKCd1oXE5hlZHMB8GA1UdIwQYMBaAFDjOJ2yFttLQ6v6dP4paUIzdurlo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDUzRS80RUVCQzIwODZC NkIxMUVCODUxMjRCMkFDNEY5QUUwMi9PTTRuYklXMjB0RHFfcDBfaWxwUWpOMjZ1 V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09NNG5iSVcyMHREcV9wMF9pbHBRak4yNnVXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDUzRS80RUVCQzIwODZCNkIxMUVCODUxMjRCMkFDNEY5QUUwMi9PTTRuYklXMjB0 RHFfcDBfaWxwUWpOMjZ1V2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCqnLZg/17q5w+ynz0Ocm1k9d3WcR3XqblzIon0jbwmGDUqKtr6xkS ko/AXAch63ejOO9BKVDdMrTrUtRF0YDLWW6vlkj1q3mHuhTEqCjfKZhpPNmH57i2 GpjmT9hLemTQfICstrOH9LxFj6UFnG2GD9A3G0enOwpfvD0EgPs0l+ANKtTjIBaV qtENeUvsoXPA3mpvXYe9wHQCalScjgk35YE1FEHlvJser0/WDUfcoDobRGRFG1ZG 2tFKdxvLrCIp+oB5RLwEtmLG5poAmk+DNEadeXBUPwj62GFSH7jDFo7oRPXmtZ6V x/eB1lS8Un8Fgxq0a1Hpuf5FMOOeO731 -----END CERTIFICATE-----Generated at Tue May 13 21:59:24 2025 by rpki-client