$ rpki-client -vvf rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.mft File: odoVuis7tmKheOJtlmgVoiouRpk.mft (raw, json) Hash identifier: h22IOyp5xCIU4gP+6Wo2GDRlUZu6sVbgqNGl7ee89SA= Subject key identifier: B6:F5:43:FC:EA:2C:8F:8E:A2:1D:C6:10:FA:DA:DA:07:86:79:EF:03 Authority key identifier: A1:DA:15:BA:2B:3B:B6:62:A1:78:E2:6D:96:68:15:A2:2A:2E:46:99 Certificate issuer: /CN=A911B55C/serialNumber=A1DA15BA2B3BB662A178E26D966815A22A2E4699 Certificate serial: 02AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odoVuis7tmKheOJtlmgVoiouRpk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.mft Manifest number: 029E Signing time: Sat 05 Apr 2025 01:41:47 +0000 Manifest this update: Sat 05 Apr 2025 01:41:47 +0000 Manifest next update: Sat 12 Apr 2025 01:41:47 +0000 Files and hashes: 1: odoVuis7tmKheOJtlmgVoiouRpk.crl (hash: 8dQ7yldOBM+wc8ireO2vlR1UvbADvdPCn+VVeF7lLeY=) 2: 692F8290AF1D11EFA7108387C4F9AE02.roa (hash: WDaHtMQWTwJWQkeIMiJU8NUrdki0tCHjoldLxpeTYvo=) 3: 57BB8E50AF1D11EF9CB35387C4F9AE02.roa (hash: bzAyLuYRUMBSf4vl6Z05UJcWg+7dmLiTXnPYXge8oFY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.crl rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odoVuis7tmKheOJtlmgVoiouRpk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 01:41:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 683 (0x2ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B55C Validity Not Before: Apr 5 01:41:47 2025 GMT Not After : Apr 12 01:41:47 2025 GMT Subject: CN=67f08a5b-ef71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4f:56:25:f3:8c:3f:fc:38:10:06:72:92:f2: b2:8a:c3:68:6a:a3:a1:43:b3:e6:8e:15:2f:79:27: 0c:ab:22:c2:e4:17:56:72:3c:57:3f:6c:a0:49:c3: fa:c5:ab:ed:eb:eb:d7:6d:f4:dd:75:b1:34:6f:54: 15:7e:ac:62:c0:41:26:28:e9:63:6f:e7:4d:87:91: 6a:74:00:ab:4f:f4:e0:e1:ea:18:d4:7b:11:95:08: 67:6f:91:21:4f:0c:a9:9b:d1:3e:fb:de:1d:4d:e7: e7:77:01:80:a3:93:14:c2:92:45:6b:b3:41:a0:2d: cd:ce:70:ec:e0:60:85:64:4d:b1:ba:c9:18:cb:32: ba:2f:11:f1:57:16:dc:27:e2:ba:39:f4:06:71:a8: 4a:d6:d6:50:57:0e:2d:59:0d:34:e8:dc:1b:a9:e2: f5:6b:8e:8e:0e:15:f4:d3:52:66:40:78:e8:f1:91: 2b:5c:0b:c3:6d:a5:69:d3:64:1f:47:76:98:4b:52: e6:21:ad:74:de:72:c7:7a:61:af:8f:e7:7c:63:88: ff:94:11:0b:69:4c:e2:ea:d2:d6:a1:fb:c7:06:92: 56:01:1d:3b:37:82:d1:5f:8a:ab:d6:76:76:b8:2e: 38:ee:65:ab:1a:0a:b9:b3:3f:83:c5:60:db:0d:85: c8:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:F5:43:FC:EA:2C:8F:8E:A2:1D:C6:10:FA:DA:DA:07:86:79:EF:03 X509v3 Authority Key Identifier: keyid:A1:DA:15:BA:2B:3B:B6:62:A1:78:E2:6D:96:68:15:A2:2A:2E:46:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odoVuis7tmKheOJtlmgVoiouRpk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:89:dd:f1:aa:1c:28:58:1b:c1:9d:b6:21:03:b0:70:63:59: 79:37:52:e3:b3:d5:13:63:3a:06:f7:7a:e2:78:36:e8:3e:0f: 9b:2f:20:46:d3:38:ea:fc:2d:2a:ee:43:5d:4b:4f:47:fc:74: f6:88:7c:79:e3:44:28:3c:4e:91:d6:2b:66:15:81:e6:13:98: b7:23:ec:9a:13:ee:f4:1c:66:20:30:d6:73:77:44:a1:7e:fa: 87:80:31:8e:ea:46:79:64:34:83:36:f5:ee:ca:7b:4e:ee:8c: e3:5c:86:43:6b:1c:be:a9:72:be:a8:0b:a0:12:73:5a:05:df: ce:1f:06:5d:b0:6e:f1:b3:37:93:89:4e:d3:72:a8:ee:f0:22: 75:89:81:1b:dc:95:bf:b1:5c:71:7b:4f:15:43:1f:23:32:39: 53:a4:4e:f9:34:22:be:67:2f:a7:91:23:b5:bb:30:1a:88:a7: 68:4d:6d:d6:1b:1d:d6:28:d2:b6:1e:bc:35:09:a2:8a:38:30: af:eb:f6:8d:bb:a8:c1:95:a9:8f:31:9d:03:92:8c:46:cb:57: 5f:0e:f8:eb:a2:d2:2f:d3:a5:f2:95:39:bf:d4:67:5c:d8:85: 16:ce:83:69:c7:8e:cf:8b:d4:c5:10:84:51:a9:8c:fa:de:25: 27:8b:e9:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI1NUMxMTAvBgNVBAUTKEExREExNUJBMkIzQkI2NjJBMTc4RTI2RDk2NjgxNUEy MkEyRTQ2OTkwHhcNMjUwNDA1MDE0MTQ3WhcNMjUwNDEyMDE0MTQ3WjAYMRYwFAYD VQQDEw02N2YwOGE1Yi1lZjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzE9WJfOMP/w4EAZykvKyisNoaqOhQ7PmjhUveScMqyLC5BdWcjxXP2ygScP6 xavt6+vXbfTddbE0b1QVfqxiwEEmKOljb+dNh5FqdACrT/Tg4eoY1HsRlQhnb5Eh Twypm9E++94dTefndwGAo5MUwpJFa7NBoC3NznDs4GCFZE2xuskYyzK6LxHxVxbc J+K6OfQGcahK1tZQVw4tWQ006NwbqeL1a46ODhX001JmQHjo8ZErXAvDbaVp02Qf R3aYS1LmIa103nLHemGvj+d8Y4j/lBELaUzi6tLWofvHBpJWAR07N4LRX4qr1nZ2 uC447mWrGgq5sz+DxWDbDYXI9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLb1Q/zq LI+Ooh3GEPra2geGee8DMB8GA1UdIwQYMBaAFKHaFborO7ZioXjibZZoFaIqLkaZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjU1Qy9FOTE2RDJFRUY4 NUMxMUVDQUI2RTJFNjVDNEY5QUUwMi9vZG9WdWlzN3RtS2hlT0p0bG1nVm9pb3VS cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29kb1Z1aXM3dG1LaGVPSnRsbWdWb2lvdVJway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjU1Qy9FOTE2RDJFRUY4NUMxMUVDQUI2RTJFNjVDNEY5QUUwMi9vZG9WdWlzN3Rt S2hlT0p0bG1nVm9pb3VScGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoid3xqhwoWBvBnbYhA7BwY1l5N1Ljs9UTYzoG93rieDboPg+bLyBG 0zjq/C0q7kNdS09H/HT2iHx540QoPE6R1itmFYHmE5i3I+yaE+70HGYgMNZzd0Sh fvqHgDGO6kZ5ZDSDNvXuyntO7ozjXIZDaxy+qXK+qAugEnNaBd/OHwZdsG7xszeT iU7Tcqju8CJ1iYEb3JW/sVxxe08VQx8jMjlTpE75NCK+Zy+nkSO1uzAaiKdoTW3W Gx3WKNK2Hrw1CaKKODCv6/aNu6jBlamPMZ0DkoxGy1dfDvjrotIv06XylTm/1Gdc 2IUWzoNpx47Pi9TFEIRRqYz63iUni+mz -----END CERTIFICATE-----Generated at Sat Apr 5 11:30:28 2025 by rpki-client