$ rpki-client -vvf rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft File: OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft (raw, json) Hash identifier: cXjjc0xJyUFpE7CDoCSDFY6+DXeHVy/AdunNuD0Xyxg= Subject key identifier: 8E:E8:09:F8:3A:B1:88:A8:35:EA:43:19:31:41:63:DE:71:04:A8:BF Authority key identifier: 39:9A:5E:17:D9:CA:43:B6:C3:3A:C3:30:20:6D:CB:DD:93:5E:78:71 Certificate issuer: /CN=A916879A/serialNumber=399A5E17D9CA43B6C33AC330206DCBDD935E7871 Certificate serial: B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft Manifest number: AF Signing time: Sun 27 Apr 2025 04:54:50 +0000 Manifest this update: Sun 27 Apr 2025 04:54:50 +0000 Manifest next update: Sun 04 May 2025 04:54:50 +0000 Files and hashes: 1: OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.crl (hash: 9LK1ONG+BXPkKi0qUeQ+Z4AhX98Y5q2lju3ghUm9KF8=) 2: 74EAEAC41ED211EFA618AB5EC4F9AE02.roa (hash: TR/9w+oCqGCqjfN5wK6VX8rAdbT3DnBKMOm4/b1iJZA=) 3: 36AEBDD61C9C11EF9953E67EC4F9AE02.roa (hash: y9ipesVJF6530t8WVs2qEr0X7RGO4yWHPQGA3YKJeHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.crl rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 179 (0xb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916879A, serialNumber=399A5E17D9CA43B6C33AC330206DCBDD935E7871 Validity Not Before: Apr 27 04:54:50 2025 GMT Not After : May 4 04:54:50 2025 GMT Subject: CN=680db89a-6daf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b2:b3:46:56:1c:70:bc:a0:e8:bf:05:13:4b: 39:99:7d:93:14:af:4c:28:ad:53:8e:99:41:74:8e: 18:e0:1d:26:27:94:b7:4e:90:60:73:d0:42:70:a6: d6:73:ce:1d:b4:74:ee:b3:d5:50:ae:c8:80:ab:7e: 9d:d8:59:6f:34:0a:b3:31:f1:7e:fe:70:f9:4e:6e: ca:7e:04:c5:56:53:55:90:05:0d:83:dd:96:ee:a9: 06:a3:b9:b0:ae:ce:57:75:78:36:94:bf:10:50:3b: 73:51:23:a8:01:8d:0d:e7:14:90:13:b6:a7:59:5e: be:ba:05:ca:44:9d:fc:9c:80:21:74:a3:28:ea:f7: 31:2b:08:21:fc:63:cb:8b:94:45:a5:5f:30:af:5e: 54:fb:b5:54:46:cb:87:39:46:c6:b8:06:be:c5:0d: 4f:d2:ba:dd:4b:85:85:dd:41:ed:29:86:ec:e2:94: 68:9d:ab:c3:89:eb:75:23:9a:9c:f6:80:ee:7c:19: 17:ca:30:5d:d4:c1:5f:c4:d9:84:89:51:24:06:26: 13:b7:15:5d:90:4c:52:86:65:84:b8:d1:51:0c:be: 4e:00:65:b2:e3:a3:79:eb:70:23:c9:f0:45:1a:8c: 55:bf:d1:de:2b:e2:70:32:2d:8f:f5:8d:2a:83:e9: 40:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:E8:09:F8:3A:B1:88:A8:35:EA:43:19:31:41:63:DE:71:04:A8:BF X509v3 Authority Key Identifier: keyid:39:9A:5E:17:D9:CA:43:B6:C3:3A:C3:30:20:6D:CB:DD:93:5E:78:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:2e:c2:5b:0b:6f:9e:1a:2c:d8:2b:86:c8:cd:b5:ef:4f:9a: 65:f9:4f:fb:6e:4f:9e:f2:93:20:0b:60:b7:17:cc:a8:07:e4: 7e:68:78:2e:44:86:bd:b0:7c:f8:86:16:6d:1a:7e:6b:d3:40: e1:9f:68:66:fd:98:f1:1a:dc:44:ad:92:3b:68:c2:fd:15:1b: 53:87:41:be:5d:2d:dd:5a:cb:1a:b4:41:f4:b8:31:d2:a1:57: 01:7a:fb:28:a0:d1:4a:18:ab:a3:d8:06:64:6a:33:b3:10:e5: 82:c7:6a:bd:77:7e:eb:d5:ce:82:00:25:04:41:e1:ac:53:01: 10:74:4f:65:bf:1d:9c:99:95:58:b2:3b:44:a5:4b:ce:65:1b: bb:d2:4b:25:3c:db:85:08:b5:a6:85:5e:9d:7a:6c:9a:55:0e: a0:13:ce:5c:07:48:7d:3f:9a:00:11:e2:5f:d4:ee:41:1f:00: 57:ee:6f:0d:aa:ac:d3:23:74:03:e9:8b:2e:aa:73:82:7a:14: bd:66:dd:da:ff:0c:9c:79:a7:0a:cb:29:58:d6:77:bf:5e:31: 59:44:6d:55:27:ff:03:ee:65:f2:70:d7:38:aa:70:6d:f6:89: c2:41:64:e1:1e:e2:87:12:d5:78:38:81:8d:a3:20:b0:b9:75: fe:b7:96:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg3OUExMTAvBgNVBAUTKDM5OUE1RTE3RDlDQTQzQjZDMzNBQzMzMDIwNkRDQkRE OTM1RTc4NzEwHhcNMjUwNDI3MDQ1NDUwWhcNMjUwNTA0MDQ1NDUwWjAYMRYwFAYD VQQDEw02ODBkYjg5YS02ZGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApbKzRlYccLyg6L8FE0s5mX2TFK9MKK1TjplBdI4Y4B0mJ5S3TpBgc9BCcKbW c84dtHTus9VQrsiAq36d2FlvNAqzMfF+/nD5Tm7KfgTFVlNVkAUNg92W7qkGo7mw rs5XdXg2lL8QUDtzUSOoAY0N5xSQE7anWV6+ugXKRJ38nIAhdKMo6vcxKwgh/GPL i5RFpV8wr15U+7VURsuHOUbGuAa+xQ1P0rrdS4WF3UHtKYbs4pRonavDiet1I5qc 9oDufBkXyjBd1MFfxNmEiVEkBiYTtxVdkExShmWEuNFRDL5OAGWy46N563AjyfBF GoxVv9HeK+JwMi2P9Y0qg+lAZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI7oCfg6 sYioNepDGTFBY95xBKi/MB8GA1UdIwQYMBaAFDmaXhfZykO2wzrDMCBty92TXnhx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODc5QS9CNjcwMTczQzFD OUIxMUVGOEY0NUNDN0RDNEY5QUUwMi9PWnBlRjluS1E3YkRPc013SUczTDNaTmVl SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09acGVGOW5LUTdiRE9zTXdJRzNMM1pOZWVIRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODc5QS9CNjcwMTczQzFDOUIxMUVGOEY0NUNDN0RDNEY5QUUwMi9PWnBlRjluS1E3 YkRPc013SUczTDNaTmVlSEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBLsJbC2+eGizYK4bIzbXvT5pl+U/7bk+e8pMgC2C3F8yoB+R+aHgu RIa9sHz4hhZtGn5r00Dhn2hm/ZjxGtxErZI7aML9FRtTh0G+XS3dWssatEH0uDHS oVcBevsooNFKGKuj2AZkajOzEOWCx2q9d37r1c6CACUEQeGsUwEQdE9lvx2cmZVY sjtEpUvOZRu70kslPNuFCLWmhV6demyaVQ6gE85cB0h9P5oAEeJf1O5BHwBX7m8N qqzTI3QD6YsuqnOCehS9Zt3a/wyceacKyylY1ne/XjFZRG1VJ/8D7mXycNc4qnBt 9onCQWThHuKHEtV4OIGNoyCwuXX+t5af -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:48 2025 by rpki-client on console.sobornost.net