$ rpki-client -vvf rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft File: oVZKa9a5Cg-he_V9i-rJ4pJZves.mft (raw, json) Hash identifier: ZuogghnGRrZpm91gSvBPZNxiRvEB4uIwouzwEhuahGQ= Subject key identifier: 89:A5:20:FA:D4:6C:B2:A6:89:CD:FF:FB:73:9D:7B:BE:E0:08:F3:B1 Authority key identifier: A1:56:4A:6B:D6:B9:0A:0F:A1:7B:F5:7D:8B:EA:C9:E2:92:59:BD:EB Certificate issuer: /CN=A91F61DA/serialNumber=A1564A6BD6B90A0FA17BF57D8BEAC9E29259BDEB Certificate serial: 0C9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oVZKa9a5Cg-he_V9i-rJ4pJZves.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft Manifest number: 0C93 Signing time: Sat 10 May 2025 18:01:28 +0000 Manifest this update: Sat 10 May 2025 18:01:28 +0000 Manifest next update: Sat 17 May 2025 18:01:28 +0000 Files and hashes: 1: oVZKa9a5Cg-he_V9i-rJ4pJZves.crl (hash: zSVnCMQp+51EBtppByyiBrHrhaFvMPv9ckmkEsBTS1M=) 2: EA18D5547D8F11EC8E894A1DC4F9AE02.roa (hash: Anh2GximFPk7REReNBXULcTH3P6lLG5IbasX9kKM4Fs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.crl rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oVZKa9a5Cg-he_V9i-rJ4pJZves.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3228 (0xc9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F61DA, serialNumber=A1564A6BD6B90A0FA17BF57D8BEAC9E29259BDEB Validity Not Before: May 10 18:01:28 2025 GMT Not After : May 17 18:01:28 2025 GMT Subject: CN=681f9478-7d8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:92:61:0e:01:18:0e:56:93:27:1b:68:44:ff: 0a:d4:c1:6a:9c:74:b5:73:4a:2e:ef:9e:ef:01:e0: bd:23:4a:a7:be:3b:ac:80:a5:e4:af:56:15:93:04: 00:2a:8c:fc:96:6d:33:1a:d2:be:d4:5a:61:d0:8c: c9:c9:97:da:67:73:2f:83:d2:f9:ef:cd:d8:07:4c: 82:d2:a7:a4:88:04:74:c3:6b:de:f9:03:c1:f3:0e: 14:bd:cc:4e:10:75:36:b5:ef:5b:73:85:9a:80:24: 98:da:4c:25:e7:71:20:af:f8:34:d9:f2:6c:27:09: 8a:36:9a:92:1b:41:19:d5:e8:cc:a0:30:3d:ab:78: 51:f4:52:75:f1:3f:b8:2f:70:8b:87:35:1b:7b:ac: 12:f1:9c:c9:a0:83:7d:ec:b5:c2:9e:f2:12:13:a8: 7c:17:e6:14:16:52:97:c7:6a:93:3e:5e:e8:34:e0: b1:4c:59:17:68:df:3a:60:90:02:b1:87:7e:89:98: 0f:9c:1d:c8:ce:e8:48:c2:f0:7e:86:8b:6d:e9:b4: bf:66:8a:10:9a:af:5a:58:af:ca:91:47:86:4a:8d: 0d:8a:39:c5:c3:f3:29:0c:7f:10:aa:68:ae:d8:08: 6f:ab:cb:b1:29:eb:0b:90:77:2b:88:5a:9f:57:1d: b3:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A5:20:FA:D4:6C:B2:A6:89:CD:FF:FB:73:9D:7B:BE:E0:08:F3:B1 X509v3 Authority Key Identifier: keyid:A1:56:4A:6B:D6:B9:0A:0F:A1:7B:F5:7D:8B:EA:C9:E2:92:59:BD:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oVZKa9a5Cg-he_V9i-rJ4pJZves.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:d7:ce:a5:70:2b:c7:7b:00:05:9f:2e:90:a4:57:cb:65:e7: 55:21:c2:c5:cd:a4:fb:66:d0:f5:3a:bb:fe:c5:07:a4:35:18: de:af:c4:39:48:c5:d3:9e:13:c5:40:d0:dc:4e:09:25:be:44: e4:a1:fc:1e:64:df:91:0c:2d:33:0c:8f:53:f7:ad:50:ba:5a: 04:51:f2:73:20:18:21:fb:5b:c7:3c:b7:e4:3c:8d:64:c5:24: 99:15:2c:1c:d7:dd:3b:2a:b3:13:53:85:91:fc:43:53:58:b9: 19:c9:42:2f:55:5c:1e:c2:bf:cc:7c:a5:af:9a:2c:ff:e7:87: cc:78:63:2f:00:5c:f6:57:9d:c6:57:08:e5:a2:37:e1:2d:46: 76:d5:97:01:10:a5:9e:df:65:75:a4:8e:71:60:b4:21:dd:d3: 5c:63:2e:11:58:ef:96:08:f3:98:74:9a:8e:fe:d9:d2:bb:27: 1d:0c:77:cf:a9:27:b2:d4:14:70:a1:57:d2:13:4d:6b:ad:7c: bc:d0:49:20:2f:2a:f6:ea:ed:d6:a9:08:94:ae:a4:92:eb:61: fc:6f:95:32:a2:73:2d:4a:7c:cf:4e:30:80:62:ef:64:44:e3: 38:86:3a:38:fc:3d:39:91:c7:e0:8a:f3:ce:9a:91:56:89:55: 6b:08:28:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjYxREExMTAvBgNVBAUTKEExNTY0QTZCRDZCOTBBMEZBMTdCRjU3RDhCRUFDOUUy OTI1OUJERUIwHhcNMjUwNTEwMTgwMTI4WhcNMjUwNTE3MTgwMTI4WjAYMRYwFAYD VQQDEw02ODFmOTQ3OC03ZDhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1JJhDgEYDlaTJxtoRP8K1MFqnHS1c0ou757vAeC9I0qnvjusgKXkr1YVkwQA Koz8lm0zGtK+1Fph0IzJyZfaZ3Mvg9L5783YB0yC0qekiAR0w2ve+QPB8w4UvcxO EHU2te9bc4WagCSY2kwl53Egr/g02fJsJwmKNpqSG0EZ1ejMoDA9q3hR9FJ18T+4 L3CLhzUbe6wS8ZzJoIN97LXCnvISE6h8F+YUFlKXx2qTPl7oNOCxTFkXaN86YJAC sYd+iZgPnB3IzuhIwvB+hott6bS/ZooQmq9aWK/KkUeGSo0NijnFw/MpDH8Qqmiu 2Ahvq8uxKesLkHcriFqfVx2z+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFImlIPrU bLKmic3/+3Ode77gCPOxMB8GA1UdIwQYMBaAFKFWSmvWuQoPoXv1fYvqyeKSWb3r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjFEQS8xN0M4MUZEMEY0 MUUxMUU5QTgzNDNBNzRDNEY5QUUwMi9vVlpLYTlhNUNnLWhlX1Y5aS1ySjRwSlp2 ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29WWkthOWE1Q2ctaGVfVjlpLXJKNHBKWnZlcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjFEQS8xN0M4MUZEMEY0MUUxMUU5QTgzNDNBNzRDNEY5QUUwMi9vVlpLYTlhNUNn LWhlX1Y5aS1ySjRwSlp2ZXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCs186lcCvHewAFny6QpFfLZedVIcLFzaT7ZtD1Orv+xQekNRjer8Q5 SMXTnhPFQNDcTgklvkTkofweZN+RDC0zDI9T961QuloEUfJzIBgh+1vHPLfkPI1k xSSZFSwc1907KrMTU4WR/ENTWLkZyUIvVVwewr/MfKWvmiz/54fMeGMvAFz2V53G VwjlojfhLUZ21ZcBEKWe32V1pI5xYLQh3dNcYy4RWO+WCPOYdJqO/tnSuycdDHfP qSey1BRwoVfSE01rrXy80EkgLyr26u3WqQiUrqSS62H8b5UyonMtSnzPTjCAYu9k ROM4hjo4/D05kcfgivPOmpFWiVVrCChO -----END CERTIFICATE-----Generated at Sun May 11 22:48:09 2025 by rpki-client