$ rpki-client -vvf rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft File: OTVm9EF4bZWNinkRjo71b8hy5cU.mft (raw, json) Hash identifier: V2qe0enGsoYnKEz4AyBXws10h83MCN47TUNOapegnS0= Subject key identifier: 5B:37:10:FE:3D:EC:16:2E:8A:E1:45:A2:4F:FE:B4:D9:D8:30:DC:1D Authority key identifier: 39:35:66:F4:41:78:6D:95:8D:8A:79:11:8E:8E:F5:6F:C8:72:E5:C5 Certificate issuer: /CN=A91673ED/serialNumber=393566F441786D958D8A79118E8EF56FC872E5C5 Certificate serial: 0660 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OTVm9EF4bZWNinkRjo71b8hy5cU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft Manifest number: 0654 Signing time: Fri 04 Apr 2025 22:34:38 +0000 Manifest this update: Fri 04 Apr 2025 22:34:38 +0000 Manifest next update: Fri 11 Apr 2025 22:34:38 +0000 Files and hashes: 1: OTVm9EF4bZWNinkRjo71b8hy5cU.crl (hash: vPtA7ivA+y9Uva1XgAM+P+JwWHrmVLk/aFz2qLZvjxM=) 2: CD1F0EC07D4D11EBAE81AF83C4F9AE02.roa (hash: 4wWkALarNhzIV0d1ZybqQK8tC375NaVcRuBFdReJXsc=) 3: BDBFFB867D5411EB8CBE5B57C4F9AE02.roa (hash: ST3w5Tj88jMoz75b41w1YKAqx3Mmc8bfoi4qnLujj8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.crl rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OTVm9EF4bZWNinkRjo71b8hy5cU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 22:34:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1632 (0x660) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91673ED Validity Not Before: Apr 4 22:34:38 2025 GMT Not After : Apr 11 22:34:38 2025 GMT Subject: CN=67f05e7e-87d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e4:4e:16:20:df:fb:82:5c:c4:9b:08:5a:a1: fa:ea:7c:5c:c0:71:d9:25:9d:c1:eb:00:24:62:8e: d5:b3:5d:cf:7b:be:4e:1a:06:3f:a1:73:f5:a0:12: 8f:4a:07:e9:3d:67:11:1a:eb:f7:48:6b:7f:98:7f: 5d:f8:f4:d1:1f:da:0b:5e:2d:9d:a0:8d:b0:b3:5e: f3:e5:26:e1:db:13:e2:21:d5:bd:41:fd:f1:62:f2: 78:86:05:fb:0e:53:a9:c7:73:ee:54:1a:69:85:73: 1f:bf:53:75:cf:65:c0:e2:0a:69:ba:a8:42:c7:14: 88:7f:ed:29:1d:93:76:af:d8:9e:e7:c8:aa:5b:f0: c7:7e:7f:6f:26:5e:70:47:b3:ea:81:bb:30:42:e2: d3:ab:ce:8c:a9:ae:fc:fb:fd:2f:4b:56:ad:c4:4f: 15:35:01:b6:ff:31:c5:20:f3:1f:35:06:fa:18:4f: 08:fa:bc:03:8b:24:2b:47:a5:99:98:19:48:c3:be: 24:7b:1a:27:4d:59:37:f2:2a:b8:49:6c:2b:75:38: cc:d2:cc:7f:72:88:f0:1c:d1:55:57:9b:7c:37:b2: 29:57:02:9e:df:48:70:e8:71:89:f5:bf:07:3e:62: ab:eb:a7:e7:aa:f9:a4:26:50:b2:d7:a8:00:a0:4c: 8c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:37:10:FE:3D:EC:16:2E:8A:E1:45:A2:4F:FE:B4:D9:D8:30:DC:1D X509v3 Authority Key Identifier: keyid:39:35:66:F4:41:78:6D:95:8D:8A:79:11:8E:8E:F5:6F:C8:72:E5:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OTVm9EF4bZWNinkRjo71b8hy5cU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:a3:09:60:f4:29:d3:fe:d7:91:a2:72:7c:67:ee:cb:0b:af: e3:1b:54:c6:ab:b2:95:b0:af:74:c2:26:bf:e3:0e:3c:23:61: 84:f7:4b:1f:6f:69:a8:e4:4e:93:82:d2:95:13:b6:b2:cd:08: 84:34:d5:f0:0e:c5:df:90:9a:44:b4:dc:61:89:36:c4:bc:bf: db:1f:7a:04:0a:41:44:79:12:f5:09:66:77:30:9a:63:5a:48: e8:d2:39:6c:9a:ca:6f:a6:cd:11:3d:cf:34:23:2e:3d:74:09: 75:77:cb:a2:3f:fd:1d:fa:ba:6f:ff:d6:d5:eb:f1:ba:37:19: 96:e8:0e:74:46:16:7b:5d:40:82:b2:56:01:be:f4:8f:20:91: ff:4a:7a:71:ef:bf:3c:66:5d:a8:b1:8f:55:23:8c:4c:56:0b: 43:a1:d9:af:1d:f1:7b:18:7b:b6:0e:00:e8:6e:6a:5d:40:87: 06:8b:cf:56:9a:0a:50:ba:22:dc:44:cb:43:8e:71:d0:c2:28: 3b:d8:c8:13:40:4e:39:30:f0:22:80:e0:55:e7:b9:05:76:b9: f7:76:5c:0e:b0:0f:ec:70:1c:e5:a2:ba:c0:10:20:76:42:96: ef:62:ec:1c:f8:38:fa:69:1b:bb:93:21:18:80:c4:cd:c1:33: 3b:1f:5c:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjczRUQxMTAvBgNVBAUTKDM5MzU2NkY0NDE3ODZEOTU4RDhBNzkxMThFOEVGNTZG Qzg3MkU1QzUwHhcNMjUwNDA0MjIzNDM4WhcNMjUwNDExMjIzNDM4WjAYMRYwFAYD VQQDEw02N2YwNWU3ZS04N2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsOROFiDf+4JcxJsIWqH66nxcwHHZJZ3B6wAkYo7Vs13Pe75OGgY/oXP1oBKP SgfpPWcRGuv3SGt/mH9d+PTRH9oLXi2doI2ws17z5Sbh2xPiIdW9Qf3xYvJ4hgX7 DlOpx3PuVBpphXMfv1N1z2XA4gppuqhCxxSIf+0pHZN2r9ie58iqW/DHfn9vJl5w R7PqgbswQuLTq86Mqa78+/0vS1atxE8VNQG2/zHFIPMfNQb6GE8I+rwDiyQrR6WZ mBlIw74kexonTVk38iq4SWwrdTjM0sx/cojwHNFVV5t8N7IpVwKe30hw6HGJ9b8H PmKr66fnqvmkJlCy16gAoEyMVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFs3EP49 7BYuiuFFok/+tNnYMNwdMB8GA1UdIwQYMBaAFDk1ZvRBeG2VjYp5EY6O9W/IcuXF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzNFRC80RDhGQTIwRTdE NDkxMUVCQTE2NTczN0JDNEY5QUUwMi9PVFZtOUVGNGJaV05pbmtSam83MWI4aHk1 Y1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09UVm05RUY0YlpXTmlua1JqbzcxYjhoeTVjVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzNFRC80RDhGQTIwRTdENDkxMUVCQTE2NTczN0JDNEY5QUUwMi9PVFZtOUVGNGJa V05pbmtSam83MWI4aHk1Y1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDNowlg9CnT/teRonJ8Z+7LC6/jG1TGq7KVsK90wia/4w48I2GE90sf b2mo5E6TgtKVE7ayzQiENNXwDsXfkJpEtNxhiTbEvL/bH3oECkFEeRL1CWZ3MJpj Wkjo0jlsmspvps0RPc80Iy49dAl1d8uiP/0d+rpv/9bV6/G6NxmW6A50RhZ7XUCC slYBvvSPIJH/Snpx7788Zl2osY9VI4xMVgtDodmvHfF7GHu2DgDobmpdQIcGi89W mgpQuiLcRMtDjnHQwig72MgTQE45MPAigOBV57kFdrn3dlwOsA/scBzlorrAECB2 QpbvYuwc+Dj6aRu7kyEYgMTNwTM7H1ys -----END CERTIFICATE-----Generated at Sat Apr 5 21:55:34 2025 by rpki-client