$ rpki-client -vvf rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft File: OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft (raw, json) Hash identifier: E0W9e1hmkX5WjambVWZO02jG1Adf7TstNr/0AYWG5Es= Subject key identifier: 75:14:2A:A9:CF:57:71:89:48:34:DD:E4:09:9D:26:25:66:F4:2A:BA Authority key identifier: 38:45:45:D6:F5:5F:32:B3:1F:E8:64:6F:24:4A:7C:07:BA:69:54:08 Certificate issuer: /CN=A9192D09/serialNumber=384545D6F55F32B31FE8646F244A7C07BA695408 Certificate serial: 01A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEVF1vVfMrMf6GRvJEp8B7ppVAg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft Manifest number: 01A6 Signing time: Thu 17 Apr 2025 02:18:14 +0000 Manifest this update: Thu 17 Apr 2025 02:18:14 +0000 Manifest next update: Thu 24 Apr 2025 02:18:14 +0000 Files and hashes: 1: OEVF1vVfMrMf6GRvJEp8B7ppVAg.crl (hash: j6H41cw9qsv1TZ2PX4k5rJiRTvPw1BA52vjGAujwbEE=) 2: DD8D4802932211EDBF466F52C4F9AE02.roa (hash: pmbN5fPCbO/oalKNS7ivInU9ETfH9WfdJG7H7rtfmr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.crl rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEVF1vVfMrMf6GRvJEp8B7ppVAg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 02:18:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 425 (0x1a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192D09, serialNumber=384545D6F55F32B31FE8646F244A7C07BA695408 Validity Not Before: Apr 17 02:18:14 2025 GMT Not After : Apr 24 02:18:14 2025 GMT Subject: CN=680064e6-db53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2e:97:d1:6e:59:da:83:af:ad:82:84:61:3f: ac:5b:29:f6:00:cc:e2:0f:26:81:0a:2c:35:5f:e1: a0:82:51:c9:3f:90:d6:27:d6:fe:2c:d1:b8:25:d2: 03:f8:f3:7e:34:5d:e8:82:0c:5e:fb:91:ad:1d:65: e9:fb:84:86:45:1c:46:3b:b6:0e:7c:2b:34:4a:60: 0f:ab:8c:ae:ac:f7:b8:e4:65:e3:a3:cd:ed:b1:cb: ec:90:1d:e4:b9:2b:0e:ca:4d:82:3d:ba:d8:17:d6: 0f:9d:c0:95:43:98:84:9f:dd:10:71:2c:5d:8f:d6: 01:ae:bc:8b:01:f2:1c:ec:b1:60:80:bd:fe:ee:f1: 0b:ed:46:d6:c7:1b:6a:37:11:6e:7c:0e:20:13:d3: a3:be:6d:23:4c:73:26:9e:20:5b:39:30:89:39:e2: 61:d4:35:1b:15:9e:34:ef:d9:51:7c:e5:06:d3:ac: 91:6b:96:b6:5b:ab:5c:bc:6d:17:ba:8e:e5:1c:bf: f4:c5:45:64:92:d9:26:dd:4a:5c:a4:de:c2:a9:73: 13:fb:eb:b5:e1:db:db:ba:bf:e4:08:44:99:78:e1: 26:be:82:3f:65:6a:a6:51:d0:40:4a:fb:bc:8f:0d: e3:2b:24:50:cc:e9:9d:55:30:01:e1:e1:0a:ef:a2: fc:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:14:2A:A9:CF:57:71:89:48:34:DD:E4:09:9D:26:25:66:F4:2A:BA X509v3 Authority Key Identifier: keyid:38:45:45:D6:F5:5F:32:B3:1F:E8:64:6F:24:4A:7C:07:BA:69:54:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEVF1vVfMrMf6GRvJEp8B7ppVAg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:4c:82:89:43:ab:01:c4:a2:45:c7:9f:19:59:89:7e:35:bf: 19:01:d2:b7:5a:62:73:75:f2:fb:1d:97:67:6b:bf:eb:d4:6c: b8:93:ce:96:a2:c3:2f:29:8d:d0:2e:ac:92:89:f8:ec:23:d2: 4b:ae:eb:cf:60:50:d0:77:e3:a9:21:74:a8:d1:41:07:25:90: a0:58:0d:e6:bd:ff:11:e7:a8:b9:9a:47:3a:db:fa:68:04:1d: 04:9d:19:81:79:b0:10:1f:01:38:fe:a8:d1:d7:b7:25:68:55: e0:b7:03:09:b2:9b:9f:da:e7:1c:29:d3:f8:0f:8b:55:65:48: d5:6c:ac:0e:73:43:55:26:c0:63:4a:cc:5a:b2:8e:b2:4e:8e: d4:c2:fa:ee:6b:d5:fb:90:fe:91:aa:5a:d1:a3:24:6b:b3:10: dc:6b:d2:25:d0:31:8e:5e:fd:d4:5d:e1:c1:0b:a1:10:15:51: eb:2c:cd:80:77:4b:9b:56:73:21:a1:7b:5d:d3:e4:e4:5f:40: 82:c2:8e:65:23:15:69:f6:bb:75:f7:35:ee:9b:c3:06:6a:3e: 93:eb:ae:8c:81:e0:38:26:f9:0f:c4:d1:63:cf:66:97:8b:0f: d3:aa:30:f7:d9:26:a4:2f:d2:33:a2:ab:64:42:2c:44:ee:a7: 20:37:89:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJEMDkxMTAvBgNVBAUTKDM4NDU0NUQ2RjU1RjMyQjMxRkU4NjQ2RjI0NEE3QzA3 QkE2OTU0MDgwHhcNMjUwNDE3MDIxODE0WhcNMjUwNDI0MDIxODE0WjAYMRYwFAYD VQQDEw02ODAwNjRlNi1kYjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqS6X0W5Z2oOvrYKEYT+sWyn2AMziDyaBCiw1X+GgglHJP5DWJ9b+LNG4JdID +PN+NF3oggxe+5GtHWXp+4SGRRxGO7YOfCs0SmAPq4yurPe45GXjo83tscvskB3k uSsOyk2CPbrYF9YPncCVQ5iEn90QcSxdj9YBrryLAfIc7LFggL3+7vEL7UbWxxtq NxFufA4gE9Ojvm0jTHMmniBbOTCJOeJh1DUbFZ4079lRfOUG06yRa5a2W6tcvG0X uo7lHL/0xUVkktkm3UpcpN7CqXMT++u14dvbur/kCESZeOEmvoI/ZWqmUdBASvu8 jw3jKyRQzOmdVTAB4eEK76L89QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHUUKqnP V3GJSDTd5AmdJiVm9Cq6MB8GA1UdIwQYMBaAFDhFRdb1XzKzH+hkbyRKfAe6aVQI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkQwOS9GMEYyRURCMjkz MUMxMUVEQjlCNzlDNDlDNEY5QUUwMi9PRVZGMXZWZk1yTWY2R1J2SkVwOEI3cHBW QWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09FVkYxdlZmTXJNZjZHUnZKRXA4QjdwcFZBZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkQwOS9GMEYyRURCMjkzMUMxMUVEQjlCNzlDNDlDNEY5QUUwMi9PRVZGMXZWZk1y TWY2R1J2SkVwOEI3cHBWQWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbTIKJQ6sBxKJFx58ZWYl+Nb8ZAdK3WmJzdfL7HZdna7/r1Gy4k86W osMvKY3QLqySifjsI9JLruvPYFDQd+OpIXSo0UEHJZCgWA3mvf8R56i5mkc62/po BB0EnRmBebAQHwE4/qjR17claFXgtwMJspuf2uccKdP4D4tVZUjVbKwOc0NVJsBj Ssxaso6yTo7Uwvrua9X7kP6RqlrRoyRrsxDca9Il0DGOXv3UXeHBC6EQFVHrLM2A d0ubVnMhoXtd0+TkX0CCwo5lIxVp9rt19zXum8MGaj6T666MgeA4JvkPxNFjz2aX iw/TqjD32SakL9IzoqtkQixE7qcgN4k1 -----END CERTIFICATE-----Generated at Sat Apr 19 02:02:42 2025 by rpki-client