$ rpki-client -vvf rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.mft File: oXkseNMOEHMKPERWHH5YIufxwvg.mft (raw, json) Hash identifier: CQiO5jvcFLHXQQT633XMDfZsKYV/yhInVbxOKYLB8go= Subject key identifier: C1:66:BD:A8:D2:F9:EE:6A:49:69:B4:20:22:F0:C1:BE:1F:B1:8D:7D Authority key identifier: A1:79:2C:78:D3:0E:10:73:0A:3C:44:56:1C:7E:58:22:E7:F1:C2:F8 Certificate issuer: /CN=A91A093A/serialNumber=A1792C78D30E10730A3C44561C7E5822E7F1C2F8 Certificate serial: 0839 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXkseNMOEHMKPERWHH5YIufxwvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.mft Manifest number: 082F Signing time: Wed 02 Apr 2025 20:48:51 +0000 Manifest this update: Wed 02 Apr 2025 20:48:51 +0000 Manifest next update: Wed 09 Apr 2025 20:48:51 +0000 Files and hashes: 1: oXkseNMOEHMKPERWHH5YIufxwvg.crl (hash: rSd8xXlMZnD5Q14LZ/oneOUe+MBoEGIyJ34twKP/Ue8=) 2: 153A3AE86A9111EF905C3C37C4F9AE02.roa (hash: kBSFKLz8LnjDZ6O+bwDGlGgZ5ZDFmw7Q4gOGItD96sE=) 3: AA973CB86A8B11EFB0774B61C4F9AE02.roa (hash: Al1m1aAhUy31yN3v1SptiV2uHlPjUIQuuReZVTdaqrk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.crl rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXkseNMOEHMKPERWHH5YIufxwvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 20:48:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2105 (0x839) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A093A Validity Not Before: Apr 2 20:48:51 2025 GMT Not After : Apr 9 20:48:51 2025 GMT Subject: CN=67eda2b3-c6cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:45:79:1c:25:44:27:f7:7e:c0:68:c3:fd:0b: 99:99:40:cc:dc:bf:64:62:2f:84:55:f3:fe:9c:50: 26:92:07:54:9f:89:26:55:24:d4:76:25:d5:ed:f6: 66:6d:74:b2:9d:8f:a0:47:84:ce:4e:c4:20:04:50: c1:64:28:b8:9f:41:a5:de:63:c9:32:e0:eb:48:a5: e4:ab:bd:4e:b7:c5:b7:bb:ff:8a:2d:3b:e0:9a:48: 5a:7b:0c:91:dd:e0:a0:8b:30:9b:29:56:b7:60:e9: d3:ee:85:13:89:41:f5:99:99:30:c1:ae:c7:3c:bb: 49:ba:aa:d1:f7:37:bb:c0:15:4f:fa:57:d6:73:ab: 5c:55:5b:d5:63:7e:ce:9f:2e:5a:1d:88:f7:87:14: 6c:0f:4c:8e:e6:00:d1:04:a8:9e:d5:70:a0:7a:f9: 33:9a:5d:61:55:e2:a9:67:6a:09:1a:45:6b:52:ad: ae:c2:27:ce:9d:6b:c0:5f:8c:6b:2b:19:45:16:7d: 5d:ca:61:00:f0:7e:d6:43:e3:55:33:35:f9:5f:81: 47:7b:9d:41:96:f9:a1:4d:4a:cb:1c:1d:17:9f:55: 7b:b7:bb:80:5f:d3:e0:db:3d:ed:87:ca:f8:d5:0f: 52:17:62:08:f0:e9:08:56:61:55:fc:62:d7:04:c9: eb:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:66:BD:A8:D2:F9:EE:6A:49:69:B4:20:22:F0:C1:BE:1F:B1:8D:7D X509v3 Authority Key Identifier: keyid:A1:79:2C:78:D3:0E:10:73:0A:3C:44:56:1C:7E:58:22:E7:F1:C2:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXkseNMOEHMKPERWHH5YIufxwvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:c5:d4:86:e0:e4:d9:73:8a:f9:d8:2b:71:63:32:6c:b0:44: 76:a4:ca:7e:f0:d7:6b:d1:4f:77:bb:1d:7e:a2:0d:be:3e:e0: aa:3b:bf:99:df:08:19:4d:fe:80:68:98:3e:f2:7f:82:8b:0f: d2:71:2b:d5:49:fa:c0:79:59:8b:a1:44:a3:fd:8a:2e:cc:29: c1:10:7e:cd:c5:d1:be:5e:82:02:59:17:a5:77:e2:c8:7a:fa: 4a:14:f6:93:49:28:df:bc:a0:d8:83:8a:39:0c:f6:50:53:77: 9f:99:5f:57:05:93:d2:e2:70:15:30:7c:b7:a1:bf:e3:5f:08: f0:bd:43:12:49:ec:b2:7e:d0:2f:e3:82:bb:d4:67:7d:6c:c7: 47:9e:5e:c8:c2:9c:9e:3b:b9:69:09:5a:db:e3:c0:34:3c:d8: f9:08:2b:a1:e3:d9:6e:cb:3c:dd:98:2a:2d:ff:d1:3e:f2:4d: 2a:af:1d:30:5f:11:60:96:4f:00:c8:1b:80:8f:87:84:02:cb: 9f:9b:b0:69:17:23:d6:71:b1:1a:3f:31:66:40:2b:48:a9:f8: ae:a4:a7:2e:81:8f:22:c3:18:2a:4f:38:db:df:f8:aa:69:11: 36:5b:80:81:f1:ce:0b:cb:0a:89:55:d8:a8:42:e7:d4:aa:61: 61:1f:03:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA5M0ExMTAvBgNVBAUTKEExNzkyQzc4RDMwRTEwNzMwQTNDNDQ1NjFDN0U1ODIy RTdGMUMyRjgwHhcNMjUwNDAyMjA0ODUxWhcNMjUwNDA5MjA0ODUxWjAYMRYwFAYD VQQDEw02N2VkYTJiMy1jNmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp0V5HCVEJ/d+wGjD/QuZmUDM3L9kYi+EVfP+nFAmkgdUn4kmVSTUdiXV7fZm bXSynY+gR4TOTsQgBFDBZCi4n0Gl3mPJMuDrSKXkq71Ot8W3u/+KLTvgmkhaewyR 3eCgizCbKVa3YOnT7oUTiUH1mZkwwa7HPLtJuqrR9ze7wBVP+lfWc6tcVVvVY37O ny5aHYj3hxRsD0yO5gDRBKie1XCgevkzml1hVeKpZ2oJGkVrUq2uwifOnWvAX4xr KxlFFn1dymEA8H7WQ+NVMzX5X4FHe51BlvmhTUrLHB0Xn1V7t7uAX9Pg2z3th8r4 1Q9SF2II8OkIVmFV/GLXBMnrxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMFmvajS +e5qSWm0ICLwwb4fsY19MB8GA1UdIwQYMBaAFKF5LHjTDhBzCjxEVhx+WCLn8cL4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDkzQS9FQkEzNTMxRUNC RDgxMUVBODY3QUZCNEZDNEY5QUUwMi9vWGtzZU5NT0VITUtQRVJXSEg1WUl1Znh3 dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Ya3NlTk1PRUhNS1BFUldISDVZSXVmeHd2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDkzQS9FQkEzNTMxRUNCRDgxMUVBODY3QUZCNEZDNEY5QUUwMi9vWGtzZU5NT0VI TUtQRVJXSEg1WUl1Znh3dmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkxdSG4OTZc4r52CtxYzJssER2pMp+8Ndr0U93ux1+og2+PuCqO7+Z 3wgZTf6AaJg+8n+Ciw/ScSvVSfrAeVmLoUSj/YouzCnBEH7NxdG+XoICWReld+LI evpKFPaTSSjfvKDYg4o5DPZQU3efmV9XBZPS4nAVMHy3ob/jXwjwvUMSSeyyftAv 44K71Gd9bMdHnl7IwpyeO7lpCVrb48A0PNj5CCuh49luyzzdmCot/9E+8k0qrx0w XxFglk8AyBuAj4eEAsufm7BpFyPWcbEaPzFmQCtIqfiupKcugY8iwxgqTzjb3/iq aRE2W4CB8c4LywqJVdioQufUqmFhHwOw -----END CERTIFICATE-----Generated at Fri Apr 4 22:04:38 2025 by rpki-client