$ rpki-client -vvf rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft File: OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft (raw, json) Hash identifier: h3wIbGezzzCkpjstZdoEMRFjgepqGZHCNhxcBWpBXPM= Subject key identifier: 5E:13:A3:ED:8F:06:BA:B3:F9:84:41:33:24:B3:FE:97:4D:C1:6F:E1 Authority key identifier: 39:58:C7:8E:DB:2C:BD:A4:6B:66:A6:7E:B9:34:AA:7B:D3:C3:86:5E Certificate issuer: /CN=A912EFA6/serialNumber=3958C78EDB2CBDA46B66A67EB934AA7BD3C3865E Certificate serial: 05B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft Manifest number: 05B3 Signing time: Fri 04 Apr 2025 23:14:25 +0000 Manifest this update: Fri 04 Apr 2025 23:14:25 +0000 Manifest next update: Fri 11 Apr 2025 23:14:25 +0000 Files and hashes: 1: OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl (hash: kGfCS5DCi4futvA2a9RP8F0ABFoE7H4no++IpdtHSQU=) 2: 73F5DB88BC9C11EB9AC8E073C4F9AE02.roa (hash: fabeHirzSfMRjgTkSzBs+NINgYgVd5ARAuZRjwIHiWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 23:14:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1464 (0x5b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EFA6 Validity Not Before: Apr 4 23:14:25 2025 GMT Not After : Apr 11 23:14:25 2025 GMT Subject: CN=67f067d1-b669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d2:39:59:ea:cd:e6:61:db:a9:80:fb:fa:b8: 55:30:09:88:c4:db:41:80:04:7d:b9:c5:01:6e:9e: 7c:a0:bf:56:70:ba:ac:2a:dc:1b:1b:33:4c:52:4d: 66:11:0c:36:f8:2b:17:4e:37:be:fe:a5:81:da:23: 2c:9b:8d:79:57:ad:c3:8c:15:cc:92:ed:e8:3b:aa: 06:e0:23:28:ec:e8:4d:c4:95:73:eb:af:ea:c7:d3: 65:cb:e4:d1:4a:35:4d:40:e6:a0:f8:bb:c5:f0:bb: 6c:25:81:57:67:4b:3b:32:e6:cc:cd:aa:ee:2d:46: 54:6a:b0:f7:7f:f6:6d:55:47:0e:69:31:8a:45:f6: 84:ee:eb:6d:e0:38:25:f9:b9:32:94:b5:28:cc:ef: d3:6a:c9:b8:09:94:f7:ce:44:20:05:fb:1a:a2:77: 47:7a:4a:0e:ac:64:29:ca:cd:4e:9e:48:84:e8:80: 99:4f:62:36:81:62:0c:49:65:f7:68:61:cc:60:7e: e3:68:b9:1a:33:70:6c:8d:d8:c3:32:6a:d2:35:8c: 01:f2:9e:32:54:a9:b8:d1:95:53:55:7e:bc:75:7d: 42:cd:32:c3:71:e8:9f:31:a7:f6:1d:26:5e:51:96: 0d:a2:d5:51:0f:59:16:1c:43:7a:bc:f3:8e:7a:e0: f1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:13:A3:ED:8F:06:BA:B3:F9:84:41:33:24:B3:FE:97:4D:C1:6F:E1 X509v3 Authority Key Identifier: keyid:39:58:C7:8E:DB:2C:BD:A4:6B:66:A6:7E:B9:34:AA:7B:D3:C3:86:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:06:df:b0:3f:ec:5c:8d:21:f7:c8:12:b9:43:05:e3:9b:f6: 76:1d:60:78:ea:a5:f7:ac:d5:33:8e:dc:df:00:87:d0:3c:38: e2:fe:f6:20:e0:5c:f4:00:f3:2a:8d:1c:b1:98:a0:a1:db:73: 35:6b:22:d7:21:c2:41:b3:94:89:a3:2d:29:44:25:af:3d:be: 2e:3c:05:16:94:20:a2:4b:c4:16:01:c0:38:cc:d2:a2:1e:d8: c7:48:aa:66:34:8b:26:5d:59:98:9e:22:59:39:63:b9:9d:45: 7d:14:3f:cf:77:13:e2:c3:ba:19:61:e1:24:e7:be:7b:ed:9e: 7c:bd:d9:ff:d3:b9:d5:3d:04:16:32:5e:75:57:f3:40:6e:cb: 19:e4:0c:21:26:36:8c:1f:2a:55:58:30:13:72:34:eb:74:19: 94:dc:79:8a:16:0d:61:e6:ba:50:61:6d:09:c5:4d:49:95:13: 62:22:38:bb:78:e6:dd:f2:f6:3d:15:f5:d4:e2:3a:43:b0:cc: a3:58:ff:af:65:dd:21:8b:c4:5f:db:c7:65:b4:5e:4b:12:69: a7:c8:84:3a:73:a7:14:7f:57:f0:21:1e:31:5a:70:6d:cc:03: 3a:2e:b1:77:01:6a:6e:a4:45:f6:f7:ac:bc:8a:7f:b5:74:1b: ef:11:e2:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkVGQTYxMTAvBgNVBAUTKDM5NThDNzhFREIyQ0JEQTQ2QjY2QTY3RUI5MzRBQTdC RDNDMzg2NUUwHhcNMjUwNDA0MjMxNDI1WhcNMjUwNDExMjMxNDI1WjAYMRYwFAYD VQQDEw02N2YwNjdkMS1iNjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7NI5WerN5mHbqYD7+rhVMAmIxNtBgAR9ucUBbp58oL9WcLqsKtwbGzNMUk1m EQw2+CsXTje+/qWB2iMsm415V63DjBXMku3oO6oG4CMo7OhNxJVz66/qx9Nly+TR SjVNQOag+LvF8LtsJYFXZ0s7MubMzaruLUZUarD3f/ZtVUcOaTGKRfaE7utt4Dgl +bkylLUozO/Tasm4CZT3zkQgBfsaondHekoOrGQpys1OnkiE6ICZT2I2gWIMSWX3 aGHMYH7jaLkaM3BsjdjDMmrSNYwB8p4yVKm40ZVTVX68dX1CzTLDceifMaf2HSZe UZYNotVRD1kWHEN6vPOOeuDxqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF4To+2P Brqz+YRBMySz/pdNwW/hMB8GA1UdIwQYMBaAFDlYx47bLL2ka2amfrk0qnvTw4Ze MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRUZBNi8wNjE2RTg0MkJD OUIxMUVCOTZGMzVGNkJDNEY5QUUwMi9PVmpIanRzc3ZhUnJacVotdVRTcWU5UERo bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09WakhqdHNzdmFSclpxWi11VFNxZTlQRGhsNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RUZBNi8wNjE2RTg0MkJDOUIxMUVCOTZGMzVGNkJDNEY5QUUwMi9PVmpIanRzc3Zh UnJacVotdVRTcWU5UERobDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSBt+wP+xcjSH3yBK5QwXjm/Z2HWB46qX3rNUzjtzfAIfQPDji/vYg 4Fz0APMqjRyxmKCh23M1ayLXIcJBs5SJoy0pRCWvPb4uPAUWlCCiS8QWAcA4zNKi HtjHSKpmNIsmXVmYniJZOWO5nUV9FD/PdxPiw7oZYeEk57577Z58vdn/07nVPQQW Ml51V/NAbssZ5AwhJjaMHypVWDATcjTrdBmU3HmKFg1h5rpQYW0JxU1JlRNiIji7 eObd8vY9FfXU4jpDsMyjWP+vZd0hi8Rf28dltF5LEmmnyIQ6c6cUf1fwIR4xWnBt zAM6LrF3AWpupEX296y8in+1dBvvEeKb -----END CERTIFICATE-----Generated at Sat Apr 5 12:54:26 2025 by rpki-client