$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft File: OvCdKMpIepMmYxpr6b2b26oY2nU.mft (raw, json) Hash identifier: YLAv/1pLs4c8EooSnAulwd9yL7n4b2zVx6b9/rTan8M= Subject key identifier: 41:54:0A:1B:5B:0E:3D:76:39:CB:88:A1:3E:20:17:72:D4:69:1D:D7 Authority key identifier: 3A:F0:9D:28:CA:48:7A:93:26:63:1A:6B:E9:BD:9B:DB:AA:18:DA:75 Certificate issuer: /CN=A91AB74D/serialNumber=3AF09D28CA487A9326631A6BE9BD9BDBAA18DA75 Certificate serial: 05F4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OvCdKMpIepMmYxpr6b2b26oY2nU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft Manifest number: 05EB Signing time: Fri 04 Apr 2025 23:02:58 +0000 Manifest this update: Fri 04 Apr 2025 23:02:57 +0000 Manifest next update: Fri 11 Apr 2025 23:02:57 +0000 Files and hashes: 1: OvCdKMpIepMmYxpr6b2b26oY2nU.crl (hash: WGEzjPhGoW7Ump1W5xvYsmxdUEtovnBc2hnvlHhKlBE=) 2: 1A704D8CADB511EBB5CFE734C4F9AE02.roa (hash: Pa24EqnhzVLdBNd9p4j/m3vhajKpO1KOBKzuyf2oDyI=) 3: 1B16F1A0ADB511EBB5CFE734C4F9AE02.roa (hash: rRKFhbIBmbzLdYOr5BLZyHQoz/TkKPZba2YaKMN0mo0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.crl rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OvCdKMpIepMmYxpr6b2b26oY2nU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 23:02:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1524 (0x5f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB74D Validity Not Before: Apr 4 23:02:57 2025 GMT Not After : Apr 11 23:02:57 2025 GMT Subject: CN=67f06522-3f60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a2:9b:1e:a1:04:a2:ac:a6:1e:cd:50:36:44: ab:60:c3:36:1c:77:5d:de:6a:36:59:86:76:cf:3f: 2b:e0:70:0f:17:f2:f0:ac:64:21:51:b3:0d:00:36: d7:5d:36:47:04:eb:b3:2a:f1:cb:17:e3:39:61:4d: 84:ba:b9:43:43:05:ec:61:b4:27:06:1a:f6:af:26: f7:e5:31:44:a0:57:6c:5d:10:51:b0:6a:1f:68:07: bb:71:98:bb:3f:cb:f0:16:0d:02:f2:51:10:74:62: 5c:81:44:30:e9:7e:a8:35:9d:39:df:13:27:72:84: 85:8d:d9:23:4d:2f:cb:d8:0e:32:ba:3c:14:fb:f5: 4f:85:58:2a:88:89:ce:99:02:59:50:e1:fd:02:0e: af:93:99:1d:3f:73:14:79:90:bb:e6:1d:8f:54:3a: 64:02:b5:9f:d5:86:95:06:1d:79:d0:6c:39:1d:82: fe:15:c4:67:db:9a:c2:e9:6a:3f:3f:4a:9c:cb:e3: 7f:74:f5:29:39:a8:1d:c3:42:c1:d0:c0:5a:ee:3d: 64:cf:8a:35:c5:3e:b0:ad:67:81:2d:91:00:75:0e: 8a:01:cc:49:5f:91:a5:83:59:94:ea:85:df:0f:09: 1c:5f:ea:72:09:89:87:3b:f9:80:2a:95:27:8d:83: 8b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:54:0A:1B:5B:0E:3D:76:39:CB:88:A1:3E:20:17:72:D4:69:1D:D7 X509v3 Authority Key Identifier: keyid:3A:F0:9D:28:CA:48:7A:93:26:63:1A:6B:E9:BD:9B:DB:AA:18:DA:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OvCdKMpIepMmYxpr6b2b26oY2nU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:8a:6b:d0:cb:e4:38:d3:9a:50:4e:49:6e:e4:6a:0d:ce:38: 25:b3:0c:59:f4:e1:62:f1:34:bd:89:39:d1:32:3e:08:66:38: c9:34:85:2c:ba:bb:66:fb:3e:1c:11:89:01:8e:3c:17:3e:7b: 85:81:ad:7a:cc:a1:f2:aa:42:57:6a:8f:92:10:6b:22:32:2a: f9:20:f1:c8:8b:2c:cc:86:0e:be:2a:3e:e6:11:aa:22:7a:f7: a9:ad:e8:9c:56:aa:7b:22:eb:f1:a5:92:a2:0e:f2:b6:f4:38: b1:d2:cf:ce:0b:e8:8f:e5:5d:a1:c2:ba:70:5b:c3:cc:5d:0e: 31:2d:12:a7:0e:c1:98:5a:51:e9:3e:55:89:08:ae:f9:74:4c: 23:29:c7:75:7f:3b:36:e3:b1:89:73:f2:de:c5:be:bb:09:2a: 84:82:63:b5:88:8d:78:65:fa:5e:44:b8:6f:df:f9:7c:25:cc: 9a:9c:2f:ac:55:b5:3d:fe:b6:de:42:9d:fe:dc:93:02:52:62: 7c:d1:98:0c:b8:9c:fe:6c:c3:d0:21:02:a6:cc:af:3d:67:3d: 63:78:55:a1:fd:89:6d:3c:d2:8b:31:24:fa:b8:13:3f:ec:c8: d7:b8:f3:bc:8a:13:ff:ba:77:ed:be:0d:ee:1e:c9:30:a2:ff: 1c:e9:d3:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI3NEQxMTAvBgNVBAUTKDNBRjA5RDI4Q0E0ODdBOTMyNjYzMUE2QkU5QkQ5QkRC QUExOERBNzUwHhcNMjUwNDA0MjMwMjU3WhcNMjUwNDExMjMwMjU3WjAYMRYwFAYD VQQDEw02N2YwNjUyMi0zZjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzaKbHqEEoqymHs1QNkSrYMM2HHdd3mo2WYZ2zz8r4HAPF/LwrGQhUbMNADbX XTZHBOuzKvHLF+M5YU2EurlDQwXsYbQnBhr2ryb35TFEoFdsXRBRsGofaAe7cZi7 P8vwFg0C8lEQdGJcgUQw6X6oNZ053xMncoSFjdkjTS/L2A4yujwU+/VPhVgqiInO mQJZUOH9Ag6vk5kdP3MUeZC75h2PVDpkArWf1YaVBh150Gw5HYL+FcRn25rC6Wo/ P0qcy+N/dPUpOagdw0LB0MBa7j1kz4o1xT6wrWeBLZEAdQ6KAcxJX5Glg1mU6oXf DwkcX+pyCYmHO/mAKpUnjYOLAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEFUChtb Dj12OcuIoT4gF3LUaR3XMB8GA1UdIwQYMBaAFDrwnSjKSHqTJmMaa+m9m9uqGNp1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjc0RC9EMzU5NTY4Q0E4 REMxMUVCOTc5REE1MEVDNEY5QUUwMi9PdkNkS01wSWVwTW1ZeHByNmIyYjI2b1ky blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL092Q2RLTXBJZXBNbVl4cHI2YjJiMjZvWTJuVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Qjc0RC9EMzU5NTY4Q0E4REMxMUVCOTc5REE1MEVDNEY5QUUwMi9PdkNkS01wSWVw TW1ZeHByNmIyYjI2b1kyblUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVimvQy+Q405pQTklu5GoNzjglswxZ9OFi8TS9iTnRMj4IZjjJNIUs urtm+z4cEYkBjjwXPnuFga16zKHyqkJXao+SEGsiMir5IPHIiyzMhg6+Kj7mEaoi evepreicVqp7IuvxpZKiDvK29Dix0s/OC+iP5V2hwrpwW8PMXQ4xLRKnDsGYWlHp PlWJCK75dEwjKcd1fzs247GJc/Lexb67CSqEgmO1iI14ZfpeRLhv3/l8JcyanC+s VbU9/rbeQp3+3JMCUmJ80ZgMuJz+bMPQIQKmzK89Zz1jeFWh/YltPNKLMST6uBM/ 7MjXuPO8ihP/unftvg3uHskwov8c6dPZ -----END CERTIFICATE-----Generated at Sat Apr 5 13:07:26 2025 by rpki-client