$ rpki-client -vvf rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.mft File: OOwZ2spYxF2RxlnTX-TybdgkrOQ.mft (raw, json) Hash identifier: rhsohmpsflVn0GNb7HbEDyu4KYntDEb3AC2gWWIx/8Q= Subject key identifier: 9F:AA:98:58:CA:18:30:06:1C:AC:80:4E:5A:91:C8:B5:BA:A8:F5:2F Authority key identifier: 38:EC:19:DA:CA:58:C4:5D:91:C6:59:D3:5F:E4:F2:6D:D8:24:AC:E4 Certificate issuer: /CN=A916600A/serialNumber=38EC19DACA58C45D91C659D35FE4F26DD824ACE4 Certificate serial: 0147 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOwZ2spYxF2RxlnTX-TybdgkrOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.mft Manifest number: 013E Signing time: Sat 29 Mar 2025 03:57:42 +0000 Manifest this update: Sat 29 Mar 2025 03:57:41 +0000 Manifest next update: Sat 05 Apr 2025 03:57:41 +0000 Files and hashes: 1: OOwZ2spYxF2RxlnTX-TybdgkrOQ.crl (hash: Q4aLBJmoRMND25zw7c/gH5u5kUuNfsnJkEA/NS+Mnq8=) 2: FC73357271B811EEAEDED685C4F9AE02.roa (hash: sWStjNphAJOS4ge/ZJtqF5XrPnq1MWPX1eiC04Kwz6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.crl rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOwZ2spYxF2RxlnTX-TybdgkrOQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 03:57:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 327 (0x147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916600A Validity Not Before: Mar 29 03:57:41 2025 GMT Not After : Apr 5 03:57:41 2025 GMT Subject: CN=67e76fb5-bb66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:38:20:e7:3d:62:9c:69:d8:00:dc:f0:55:99: 55:71:e7:c8:47:85:e1:29:2a:87:cd:d6:27:b2:00: 76:ab:cc:3d:31:6a:b8:bc:57:13:50:e9:2a:8f:54: f0:20:be:92:b5:49:1b:69:f1:23:23:98:51:9f:93: 9e:77:b6:42:e2:e2:21:e3:51:eb:06:da:a8:4d:00: 9d:3e:d8:cd:c4:0e:4e:39:23:cb:a4:e3:29:98:42: 43:a7:d5:ff:b5:36:cd:9a:09:d3:6f:7f:95:3f:94: fe:6c:de:da:75:0c:06:da:50:fc:79:9f:fc:42:48: bd:ae:29:44:8b:ec:17:4b:fb:c3:ae:e5:92:6c:07: 6a:2e:c2:6a:d7:ab:a9:a9:db:45:33:df:b3:d1:33: c3:fe:08:eb:9e:3b:83:40:93:49:b3:55:0c:6f:bf: 72:68:3b:83:f2:6b:d4:24:f0:89:f7:79:ec:86:89: 67:52:c1:16:d6:95:fa:72:b5:a7:61:62:1c:af:07: ae:56:51:79:d1:ba:60:8c:b4:28:7b:2b:60:bc:e2: 9b:b6:af:34:bd:64:1e:cb:b2:10:18:ff:51:cd:6a: f1:11:f5:4c:9e:41:76:2b:ff:01:72:a5:c3:86:78: 7e:a2:57:fb:a2:af:ba:b9:50:27:02:06:2b:ac:e0: b3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:AA:98:58:CA:18:30:06:1C:AC:80:4E:5A:91:C8:B5:BA:A8:F5:2F X509v3 Authority Key Identifier: keyid:38:EC:19:DA:CA:58:C4:5D:91:C6:59:D3:5F:E4:F2:6D:D8:24:AC:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOwZ2spYxF2RxlnTX-TybdgkrOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:ba:ac:af:79:0c:86:90:df:8c:55:76:85:f3:bf:a4:52:9f: 29:9c:b4:0e:69:08:1b:68:2d:fd:28:a5:2c:dd:df:0f:9a:c3: 4e:67:8c:45:c6:10:15:2f:b4:1e:3a:ef:1d:2a:77:cc:5b:e6: 7d:65:d0:a4:61:0d:5a:de:d1:0a:dc:45:80:e0:61:57:6f:0a: f6:b3:1b:0b:21:3c:22:be:30:c4:1b:3e:22:bb:31:09:d3:8c: 3e:be:c9:2e:17:9b:28:36:27:45:a3:55:ac:64:a1:6f:99:4e: a5:03:28:61:06:54:d0:fb:9a:f5:f4:57:b4:fe:b6:48:b4:a5: 62:18:c0:26:70:61:57:b0:85:cb:09:41:45:cf:e6:0e:2a:2c: 1e:37:39:50:a3:fa:8b:71:77:90:a5:e0:46:dc:49:5a:08:61: 75:29:b5:28:dd:68:a6:05:11:2b:00:90:81:29:90:f5:ac:aa: af:b7:6d:93:f2:09:ff:e1:45:6b:f6:6a:15:29:54:91:dc:f3: 5b:3c:22:93:2e:b9:ec:75:32:88:2b:7d:3a:73:a5:0b:b2:6d: 36:13:6b:98:83:a7:61:bb:0e:9c:0b:e4:56:0f:c2:1a:f1:4b: ca:52:29:2b:dd:d8:5f:c1:fd:c0:80:fb:04:7f:44:23:96:77: f3:eb:3e:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjYwMEExMTAvBgNVBAUTKDM4RUMxOURBQ0E1OEM0NUQ5MUM2NTlEMzVGRTRGMjZE RDgyNEFDRTQwHhcNMjUwMzI5MDM1NzQxWhcNMjUwNDA1MDM1NzQxWjAYMRYwFAYD VQQDEw02N2U3NmZiNS1iYjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0jgg5z1inGnYANzwVZlVcefIR4XhKSqHzdYnsgB2q8w9MWq4vFcTUOkqj1Tw IL6StUkbafEjI5hRn5Oed7ZC4uIh41HrBtqoTQCdPtjNxA5OOSPLpOMpmEJDp9X/ tTbNmgnTb3+VP5T+bN7adQwG2lD8eZ/8Qki9rilEi+wXS/vDruWSbAdqLsJq16up qdtFM9+z0TPD/gjrnjuDQJNJs1UMb79yaDuD8mvUJPCJ93nsholnUsEW1pX6crWn YWIcrweuVlF50bpgjLQoeytgvOKbtq80vWQey7IQGP9RzWrxEfVMnkF2K/8BcqXD hnh+olf7oq+6uVAnAgYrrOCzfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ+qmFjK GDAGHKyATlqRyLW6qPUvMB8GA1UdIwQYMBaAFDjsGdrKWMRdkcZZ01/k8m3YJKzk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjAwQS85RUEyQkI3RTND RDAxMUVFQUU1NTRFNzNDNEY5QUUwMi9PT3daMnNwWXhGMlJ4bG5UWC1UeWJkZ2ty T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09Pd1oyc3BZeEYyUnhsblRYLVR5YmRna3JPUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NjAwQS85RUEyQkI3RTNDRDAxMUVFQUU1NTRFNzNDNEY5QUUwMi9PT3daMnNwWXhG MlJ4bG5UWC1UeWJkZ2tyT1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALuqyveQyGkN+MVXaF87+kUp8pnLQOaQgbaC39KKUs3d8PmsNOZ4xF xhAVL7QeOu8dKnfMW+Z9ZdCkYQ1a3tEK3EWA4GFXbwr2sxsLITwivjDEGz4iuzEJ 04w+vskuF5soNidFo1WsZKFvmU6lAyhhBlTQ+5r19Fe0/rZItKViGMAmcGFXsIXL CUFFz+YOKiweNzlQo/qLcXeQpeBG3ElaCGF1KbUo3WimBRErAJCBKZD1rKqvt22T 8gn/4UVr9moVKVSR3PNbPCKTLrnsdTKIK306c6ULsm02E2uYg6dhuw6cC+RWD8Ia 8UvKUikr3dhfwf3AgPsEf0Qjlnfz6z4C -----END CERTIFICATE-----Generated at Fri Apr 4 21:58:24 2025 by rpki-client