$ rpki-client -vvf rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft File: OVr1eRN2M5r53uVtah4TtHq1xGY.mft (raw, json) Hash identifier: jxgFaRQijmuNP2q8c9p5QtqKCrQZMHDfe3KRBDgfY5M= Subject key identifier: 3D:C6:4D:8A:38:AD:31:BF:44:AB:8D:6F:AA:A2:D8:93:8E:1F:4A:FF Authority key identifier: 39:5A:F5:79:13:76:33:9A:F9:DE:E5:6D:6A:1E:13:B4:7A:B5:C4:66 Certificate issuer: /CN=A91316B0/serialNumber=395AF5791376339AF9DEE56D6A1E13B47AB5C466 Certificate serial: B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVr1eRN2M5r53uVtah4TtHq1xGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft Manifest number: 04D7 Signing time: Sat 29 Mar 2025 00:40:36 +0000 Manifest this update: Sat 29 Mar 2025 00:40:36 +0000 Manifest next update: Sat 05 Apr 2025 00:40:36 +0000 Files and hashes: 1: OVr1eRN2M5r53uVtah4TtHq1xGY.crl (hash: S2iAPRQMZYcKMW1KQExAYEqGDeoD2KUXJPyWLED+RwE=) 2: C6EFDF5C0C3311EFB37BD03FC4F9AE02.roa (hash: +baf+FBOvTO91WyGSxfLgP4c75Re+v5ehq0gcaeZq1U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.crl rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVr1eRN2M5r53uVtah4TtHq1xGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 00:40:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91316B0 Validity Not Before: Mar 29 00:40:36 2025 GMT Not After : Apr 5 00:40:36 2025 GMT Subject: CN=67e74184-b81c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b8:e1:ca:8f:89:32:0d:b2:cc:19:ea:b7:99: 3e:5c:c4:47:f3:ce:58:63:30:9c:33:40:88:39:94: a6:29:a4:67:fb:cc:a0:4a:de:b3:9b:21:e7:b7:58: 4f:c6:09:38:0c:a9:ad:ee:6b:42:65:11:95:30:45: 81:b8:2d:22:34:2c:18:ee:ca:27:4d:3b:ff:4e:e1: a0:d4:61:a4:f5:0f:e7:9e:2f:82:6a:0a:3c:5d:fe: 7b:9b:aa:aa:e0:06:0b:be:3c:52:0d:c3:76:ff:15: 76:4b:62:8f:3b:e1:be:4a:50:5e:7b:6f:a5:86:a1: 10:63:c8:10:63:07:1d:40:1c:a6:89:80:d8:fa:e1: b4:2f:d2:02:b8:63:6f:ee:4d:4a:ba:e2:97:39:05: dd:c0:c4:ff:4e:5b:c6:30:2a:9c:fc:30:8b:b2:de: 15:45:f3:a9:20:9a:54:16:2d:30:a0:5b:96:11:09: 59:ae:b5:bf:b3:a6:2a:e4:68:08:50:29:f0:4e:6a: c7:12:49:99:62:78:30:17:1b:74:03:b9:dd:8b:00: ef:c5:94:d5:0e:88:6e:31:9a:d5:54:71:46:d8:ed: c3:a7:cc:e5:d7:e7:3a:11:b6:27:b8:c7:52:d2:9c: af:60:c7:0e:b3:f3:74:0b:85:e6:4d:60:da:fe:08: 30:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:C6:4D:8A:38:AD:31:BF:44:AB:8D:6F:AA:A2:D8:93:8E:1F:4A:FF X509v3 Authority Key Identifier: keyid:39:5A:F5:79:13:76:33:9A:F9:DE:E5:6D:6A:1E:13:B4:7A:B5:C4:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVr1eRN2M5r53uVtah4TtHq1xGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:64:3f:ef:2b:1b:31:cb:83:ab:71:22:c8:27:17:47:42:47: b3:3a:ad:de:4b:24:0d:ad:42:d0:3e:fd:01:f1:c1:6e:85:3c: 96:ee:9d:4e:f1:3c:bb:ef:1b:51:7f:9b:40:57:f7:7b:a6:35: 4e:e6:cc:53:26:cb:66:c9:8b:46:8a:c8:27:4d:31:f5:ba:11: 64:b0:09:8f:9e:60:5c:2b:46:8a:c9:a6:ed:76:44:d2:45:fc: ca:04:eb:9c:77:f9:ff:f7:cc:bb:8d:5d:76:6b:a9:ba:15:4c: 46:26:99:1f:dc:91:2c:41:ba:e9:d3:00:f0:34:4b:15:9f:cd: 73:58:bb:0e:61:8a:59:11:df:b7:d8:73:ed:76:d0:58:11:9d: 22:d5:70:dd:c3:9f:6a:bf:35:59:bb:71:9b:3d:a0:44:71:94: 35:83:d4:81:54:df:24:dd:80:07:84:c3:1a:86:c9:c7:b6:38: e6:97:b2:5f:c6:df:ca:85:55:7c:7e:a2:ff:4f:1e:5e:2a:69: 45:53:12:cc:f0:ec:e0:1a:7b:97:96:a7:b5:18:df:5d:c5:58: 65:04:7c:79:73:75:bf:91:9e:79:bf:ec:ce:58:cf:b9:61:a9: a9:5a:dd:57:13:f0:47:2c:f7:88:9e:ff:5d:3b:41:2f:f5:bc: af:e7:cd:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE2QjAxMTAvBgNVBAUTKDM5NUFGNTc5MTM3NjMzOUFGOURFRTU2RDZBMUUxM0I0 N0FCNUM0NjYwHhcNMjUwMzI5MDA0MDM2WhcNMjUwNDA1MDA0MDM2WjAYMRYwFAYD VQQDEw02N2U3NDE4NC1iODFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1bjhyo+JMg2yzBnqt5k+XMRH885YYzCcM0CIOZSmKaRn+8ygSt6zmyHnt1hP xgk4DKmt7mtCZRGVMEWBuC0iNCwY7sonTTv/TuGg1GGk9Q/nni+Cago8Xf57m6qq 4AYLvjxSDcN2/xV2S2KPO+G+SlBee2+lhqEQY8gQYwcdQBymiYDY+uG0L9ICuGNv 7k1KuuKXOQXdwMT/TlvGMCqc/DCLst4VRfOpIJpUFi0woFuWEQlZrrW/s6Yq5GgI UCnwTmrHEkmZYngwFxt0A7ndiwDvxZTVDohuMZrVVHFG2O3Dp8zl1+c6EbYnuMdS 0pyvYMcOs/N0C4XmTWDa/ggwHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD3GTYo4 rTG/RKuNb6qi2JOOH0r/MB8GA1UdIwQYMBaAFDla9XkTdjOa+d7lbWoeE7R6tcRm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTZCMC8yMzM3RjIzMjVF M0UxMUVDQTFGRkVCNENDNEY5QUUwMi9PVnIxZVJOMk01cjUzdVZ0YWg0VHRIcTF4 R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09WcjFlUk4yTTVyNTN1VnRhaDRUdEhxMXhHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTZCMC8yMzM3RjIzMjVFM0UxMUVDQTFGRkVCNENDNEY5QUUwMi9PVnIxZVJOMk01 cjUzdVZ0YWg0VHRIcTF4R1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/ZD/vKxsxy4OrcSLIJxdHQkezOq3eSyQNrULQPv0B8cFuhTyW7p1O 8Ty77xtRf5tAV/d7pjVO5sxTJstmyYtGisgnTTH1uhFksAmPnmBcK0aKyabtdkTS RfzKBOucd/n/98y7jV12a6m6FUxGJpkf3JEsQbrp0wDwNEsVn81zWLsOYYpZEd+3 2HPtdtBYEZ0i1XDdw59qvzVZu3GbPaBEcZQ1g9SBVN8k3YAHhMMahsnHtjjml7Jf xt/KhVV8fqL/Tx5eKmlFUxLM8OzgGnuXlqe1GN9dxVhlBHx5c3W/kZ55v+zOWM+5 YampWt1XE/BHLPeInv9dO0Ev9byv580z -----END CERTIFICATE-----Generated at Fri Apr 4 22:00:48 2025 by rpki-client