$ rpki-client -vvf rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft File: OOHW4K0CW7AuZUgYPvKoIABQo2U.mft (raw, json) Hash identifier: ZIGYKK9FUZ/Fo4DR+5FK7z+qHq3rnZbopNzkF+TACE4= Subject key identifier: F1:7E:EE:3B:97:1B:26:13:F3:4D:2D:16:23:38:A2:1E:EB:E8:50:72 Authority key identifier: 38:E1:D6:E0:AD:02:5B:B0:2E:65:48:18:3E:F2:A8:20:00:50:A3:65 Certificate issuer: /CN=A9135EC4/serialNumber=38E1D6E0AD025BB02E6548183EF2A8200050A365 Certificate serial: 347A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOHW4K0CW7AuZUgYPvKoIABQo2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft Manifest number: 3476 Signing time: Wed 16 Apr 2025 14:32:45 +0000 Manifest this update: Wed 16 Apr 2025 14:32:44 +0000 Manifest next update: Wed 23 Apr 2025 14:32:44 +0000 Files and hashes: 1: OOHW4K0CW7AuZUgYPvKoIABQo2U.crl (hash: 2AaLrWYwFUbCE9tJMg4RLpGNRXP1mxOgdxLbvmtOkQc=) 2: E89AA63C3A3411EDA5928760C4F9AE02.roa (hash: 05APYQJe4DJPEEjidbXlOzb6+S6p4c1Z55iGoGM7Isg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.crl rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOHW4K0CW7AuZUgYPvKoIABQo2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 14:32:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13434 (0x347a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135EC4, serialNumber=38E1D6E0AD025BB02E6548183EF2A8200050A365 Validity Not Before: Apr 16 14:32:44 2025 GMT Not After : Apr 23 14:32:44 2025 GMT Subject: CN=67ffbf8d-4bf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:01:c3:b3:53:18:d2:80:c3:fb:e1:47:97:b6: ea:d4:44:ba:f7:3c:ec:32:15:a2:7b:b1:a3:ba:7f: 4a:f0:17:57:14:23:dc:1d:d0:9d:ee:86:4f:51:e7: 0b:f9:f1:da:ef:a2:a8:1d:aa:6d:d7:2a:d8:4f:80: 36:af:c2:49:4e:75:26:c9:4c:5a:52:f9:16:2d:60: a8:3e:ed:05:a6:6e:cf:fc:8c:3c:d4:b9:f1:89:52: 0d:4b:2e:e7:5d:b9:6a:c8:d8:47:4d:9b:ea:fe:47: bd:ea:76:f4:50:41:21:3d:06:f6:6f:9b:ad:19:72: b4:18:28:c4:8d:55:d5:a7:be:ba:57:f2:e7:c1:53: a7:c8:78:a1:ad:7b:e8:46:0b:30:9b:32:1b:39:7b: 64:a3:f0:84:d1:28:69:f2:bf:d8:0f:c8:8c:5f:52: 57:a5:e4:7b:32:97:4e:9b:73:c6:b7:f7:15:76:e4: 26:1f:0d:39:77:8c:f8:78:97:dc:fb:bb:9c:5e:c1: 48:e7:e9:e2:fc:24:43:91:ce:b5:cd:1c:ee:37:d5: c1:c6:32:df:91:e4:a1:70:f7:95:39:d5:40:82:83: 1c:8d:88:43:07:64:80:3a:78:b4:a6:2c:0a:63:d4: a7:d8:4f:cd:06:d2:7d:c8:cb:1d:c2:38:31:2c:55: 5a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:7E:EE:3B:97:1B:26:13:F3:4D:2D:16:23:38:A2:1E:EB:E8:50:72 X509v3 Authority Key Identifier: keyid:38:E1:D6:E0:AD:02:5B:B0:2E:65:48:18:3E:F2:A8:20:00:50:A3:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOHW4K0CW7AuZUgYPvKoIABQo2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:d2:ee:54:42:2b:aa:63:17:25:e5:0a:cd:9d:a4:64:a7:3a: 99:6a:d4:87:6f:d4:42:5c:05:54:04:51:92:b4:34:6d:3e:22: 5c:c2:7c:fb:25:2d:d4:52:7e:d5:73:76:91:95:5a:4d:06:1b: d0:7e:a8:4e:8e:5e:8e:a6:ff:3a:df:e7:d8:ea:82:ad:46:27: 6b:bf:99:0f:76:48:40:ea:c1:cd:5f:ac:ff:fb:67:43:80:14: f5:c2:14:bd:c6:1a:ac:80:b6:fa:26:36:db:7d:4e:8e:e2:b9: 47:43:87:ae:08:ee:a5:e1:9b:8c:5c:0f:fc:86:19:55:56:ac: c2:5f:a9:95:87:c9:d8:b9:eb:0a:4b:74:84:90:38:3e:96:5c: 85:f0:25:b1:be:18:e4:36:62:c8:29:6c:15:b8:00:b0:cd:ad: 95:d9:eb:3d:e8:85:0b:0d:28:20:fa:d8:97:ff:68:1c:77:b9: 14:11:4f:99:4d:d0:4d:fc:0c:ca:fa:1e:0f:8f:52:1e:59:f6: 4c:ea:94:c6:30:45:ef:2e:ca:82:c4:a5:02:98:75:fe:11:79: f5:63:4d:fe:77:1e:04:62:bb:14:cb:7d:e8:7c:06:19:56:62: 4d:e1:0a:21:53:29:c2:38:2c:d2:76:23:84:56:98:5d:dc:97: ac:18:90:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVFQzQxMTAvBgNVBAUTKDM4RTFENkUwQUQwMjVCQjAyRTY1NDgxODNFRjJBODIw MDA1MEEzNjUwHhcNMjUwNDE2MTQzMjQ0WhcNMjUwNDIzMTQzMjQ0WjAYMRYwFAYD VQQDEw02N2ZmYmY4ZC00YmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmAHDs1MY0oDD++FHl7bq1ES69zzsMhWie7Gjun9K8BdXFCPcHdCd7oZPUecL +fHa76KoHapt1yrYT4A2r8JJTnUmyUxaUvkWLWCoPu0Fpm7P/Iw81LnxiVINSy7n XblqyNhHTZvq/ke96nb0UEEhPQb2b5utGXK0GCjEjVXVp766V/LnwVOnyHihrXvo RgswmzIbOXtko/CE0Shp8r/YD8iMX1JXpeR7MpdOm3PGt/cVduQmHw05d4z4eJfc +7ucXsFI5+ni/CRDkc61zRzuN9XBxjLfkeShcPeVOdVAgoMcjYhDB2SAOni0piwK Y9Sn2E/NBtJ9yMsdwjgxLFVa4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPF+7juX GyYT800tFiM4oh7r6FByMB8GA1UdIwQYMBaAFDjh1uCtAluwLmVIGD7yqCAAUKNl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUVDNC84QTlBODM2ODFE ODkxMUUyOUNFNUVDRTIwOEIwMkNEMi9PT0hXNEswQ1c3QXVaVWdZUHZLb0lBQlFv MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09PSFc0SzBDVzdBdVpVZ1lQdktvSUFCUW8yVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUVDNC84QTlBODM2ODFEODkxMUUyOUNFNUVDRTIwOEIwMkNEMi9PT0hXNEswQ1c3 QXVaVWdZUHZLb0lBQlFvMlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC60u5UQiuqYxcl5QrNnaRkpzqZatSHb9RCXAVUBFGStDRtPiJcwnz7 JS3UUn7Vc3aRlVpNBhvQfqhOjl6Opv863+fY6oKtRidrv5kPdkhA6sHNX6z/+2dD gBT1whS9xhqsgLb6JjbbfU6O4rlHQ4euCO6l4ZuMXA/8hhlVVqzCX6mVh8nYuesK S3SEkDg+llyF8CWxvhjkNmLIKWwVuACwza2V2es96IULDSgg+tiX/2gcd7kUEU+Z TdBN/AzK+h4Pj1IeWfZM6pTGMEXvLsqCxKUCmHX+EXn1Y03+dx4EYrsUy33ofAYZ VmJN4QohUynCOCzSdiOEVphd3JesGJBc -----END CERTIFICATE-----Generated at Thu Apr 17 11:02:43 2025 by rpki-client