$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft File: OYVAYLL1jUyRnGTapLfrHwzfaDA.mft (raw, json) Hash identifier: 9ANC0+pmfoN4D+ewWRhj+8bRcTdAUfhNwCbGKPyfQvY= Subject key identifier: F4:7C:82:74:BD:B4:CF:D5:F1:78:58:76:2E:61:A6:3B:88:C7:9E:24 Authority key identifier: 39:85:40:60:B2:F5:8D:4C:91:9C:64:DA:A4:B7:EB:1F:0C:DF:68:30 Certificate issuer: /CN=A91A1A51/serialNumber=39854060B2F58D4C919C64DAA4B7EB1F0CDF6830 Certificate serial: 032E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYVAYLL1jUyRnGTapLfrHwzfaDA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft Manifest number: 032E Signing time: Sat 05 Apr 2025 01:13:37 +0000 Manifest this update: Sat 05 Apr 2025 01:13:36 +0000 Manifest next update: Sat 12 Apr 2025 01:13:36 +0000 Files and hashes: 1: OYVAYLL1jUyRnGTapLfrHwzfaDA.crl (hash: dViqDmEocKGDRH3+fBkXOeSkdcPGH3fZTW8iWpQD0c0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.crl rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYVAYLL1jUyRnGTapLfrHwzfaDA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 01:13:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 814 (0x32e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1A51 Validity Not Before: Apr 5 01:13:36 2025 GMT Not After : Apr 12 01:13:36 2025 GMT Subject: CN=67f083c0-3cb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c8:61:92:5d:3e:bd:dc:75:fd:19:2e:6e:27: 2b:9a:3f:4d:68:b7:9e:e6:2d:69:00:39:c4:4d:00: 55:63:67:9b:f7:4c:28:90:5e:d1:12:c3:6e:58:15: fe:80:c5:70:27:47:ea:48:ad:3d:19:c5:6b:ca:0e: d5:c2:e3:29:80:bd:70:8e:3e:88:42:84:3f:29:15: 0a:58:e5:80:0c:ea:41:b5:16:04:2c:fa:ab:6a:b4: 27:ca:ee:b9:df:b3:9b:1d:d9:07:ce:42:1e:da:d7: 5c:9d:1b:88:20:0f:46:e0:20:89:fa:e0:a2:da:ed: 56:21:07:99:f0:5d:b0:b7:1f:e9:8f:df:6d:04:c9: e1:20:44:de:3a:8c:43:e2:bf:e4:ac:e7:27:c9:72: 7d:34:d3:7b:ea:6e:9c:c8:43:78:2d:fe:52:b5:ca: 59:f9:e2:9c:16:75:bb:d8:9b:28:9d:b5:a6:42:40: 89:50:70:a7:96:d0:a0:94:37:93:d9:c3:c8:7e:12: c7:a0:99:08:11:6f:c0:d2:e6:86:89:e0:ef:36:dc: 31:9e:b9:02:84:7d:28:c3:7a:ce:8d:cf:58:65:f8: 7b:6d:bf:62:16:dd:3f:63:e3:a7:3a:d7:e7:03:a0: af:88:2f:d3:a9:a4:78:d2:75:a5:72:a6:af:dd:df: 73:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:7C:82:74:BD:B4:CF:D5:F1:78:58:76:2E:61:A6:3B:88:C7:9E:24 X509v3 Authority Key Identifier: keyid:39:85:40:60:B2:F5:8D:4C:91:9C:64:DA:A4:B7:EB:1F:0C:DF:68:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYVAYLL1jUyRnGTapLfrHwzfaDA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:68:9d:2c:f4:2f:a2:34:1b:63:da:a6:84:29:75:d7:75:85: 56:59:98:13:3f:0e:fc:b1:d0:cc:da:99:1f:e7:3c:71:92:dc: a5:20:db:9f:08:0d:69:53:34:05:3c:cd:4a:af:6d:3c:26:bd: 7b:9d:ad:03:c0:79:79:82:03:b5:cf:46:9a:87:99:5a:fa:e0: ea:b5:d1:24:b2:ed:70:74:5d:a9:79:97:0b:32:f2:cb:1e:63: 7a:72:46:08:97:7b:85:85:87:fc:59:13:90:b7:6b:9d:c8:00: 71:27:2c:b4:68:f4:f3:c9:05:56:c3:fb:22:cd:a2:42:16:f3: 12:42:e0:62:82:f4:24:85:09:cd:78:85:e1:44:66:28:62:4e: 59:fe:e5:fe:88:a9:73:a7:b3:75:97:96:19:16:23:f1:05:25: f3:98:d6:92:4a:ea:cd:da:43:e2:7b:bd:af:40:d3:c5:c1:81: cd:fe:14:85:09:9f:c9:59:73:cc:ce:89:aa:18:99:3e:d3:89: 33:31:a2:ee:7b:fd:91:2a:fd:79:f7:b6:d5:06:ec:ee:d5:f2: f1:6e:f1:5d:d2:d3:ec:51:42:91:6d:2d:2a:6e:9e:e5:02:7c: cb:8a:61:7a:09:3a:4e:c7:f7:72:7c:5c:1d:85:f2:cb:1b:95: ee:8d:7d:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAy4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFBNTExMTAvBgNVBAUTKDM5ODU0MDYwQjJGNThENEM5MTlDNjREQUE0QjdFQjFG MENERjY4MzAwHhcNMjUwNDA1MDExMzM2WhcNMjUwNDEyMDExMzM2WjAYMRYwFAYD VQQDEw02N2YwODNjMC0zY2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtchhkl0+vdx1/Rkubicrmj9NaLee5i1pADnETQBVY2eb90wokF7REsNuWBX+ gMVwJ0fqSK09GcVryg7VwuMpgL1wjj6IQoQ/KRUKWOWADOpBtRYELPqrarQnyu65 37ObHdkHzkIe2tdcnRuIIA9G4CCJ+uCi2u1WIQeZ8F2wtx/pj99tBMnhIETeOoxD 4r/krOcnyXJ9NNN76m6cyEN4Lf5StcpZ+eKcFnW72JsonbWmQkCJUHCnltCglDeT 2cPIfhLHoJkIEW/A0uaGieDvNtwxnrkChH0ow3rOjc9YZfh7bb9iFt0/Y+OnOtfn A6CviC/TqaR40nWlcqav3d9zpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPR8gnS9 tM/V8XhYdi5hpjuIx54kMB8GA1UdIwQYMBaAFDmFQGCy9Y1MkZxk2qS36x8M32gw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUE1MS9BRjY5MEY2MEI5 MjAxMUVDOTkxNTY3NEZDNEY5QUUwMi9PWVZBWUxMMWpVeVJuR1RhcExmckh3emZh REEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09ZVkFZTEwxalV5Um5HVGFwTGZySHd6ZmFEQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUE1MS9BRjY5MEY2MEI5MjAxMUVDOTkxNTY3NEZDNEY5QUUwMi9PWVZBWUxMMWpV eVJuR1RhcExmckh3emZhREEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyaJ0s9C+iNBtj2qaEKXXXdYVWWZgTPw78sdDM2pkf5zxxktylINuf CA1pUzQFPM1Kr208Jr17na0DwHl5ggO1z0aah5la+uDqtdEksu1wdF2peZcLMvLL HmN6ckYIl3uFhYf8WROQt2udyABxJyy0aPTzyQVWw/sizaJCFvMSQuBigvQkhQnN eIXhRGYoYk5Z/uX+iKlzp7N1l5YZFiPxBSXzmNaSSurN2kPie72vQNPFwYHN/hSF CZ/JWXPMzomqGJk+04kzMaLue/2RKv1597bVBuzu1fLxbvFd0tPsUUKRbS0qbp7l AnzLimF6CTpOx/dyfFwdhfLLG5XujX2r -----END CERTIFICATE-----Generated at Sat Apr 5 05:32:14 2025 by rpki-client