$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft File: OddGjPgMUFXp0EybT60xF1wU1l8.mft (raw, json) Hash identifier: njL2d3iMO/fvTLMmsGgyJ2HwIuwGD9/Gs5/CG5mdwJs= Subject key identifier: EF:26:C6:38:E0:3A:2A:E8:03:34:F0:C0:FC:D9:97:3C:CC:E5:68:9F Authority key identifier: 39:D7:46:8C:F8:0C:50:55:E9:D0:4C:9B:4F:AD:31:17:5C:14:D6:5F Certificate issuer: /CN=A91AD643/serialNumber=39D7468CF80C5055E9D04C9B4FAD31175C14D65F Certificate serial: 06B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft Manifest number: 06AA Signing time: Fri 28 Mar 2025 22:27:58 +0000 Manifest this update: Fri 28 Mar 2025 22:27:58 +0000 Manifest next update: Fri 04 Apr 2025 22:27:58 +0000 Files and hashes: 1: OddGjPgMUFXp0EybT60xF1wU1l8.crl (hash: 2a/b66+DNGldgPJx7K9A8EkUigUKZpEmCM9oLwXzA1w=) 2: 865F2F80EE8911EBB390AC76C4F9AE02.roa (hash: 0ULrTT5sEmnlV5jXg9GCbo9G2IRIBRTqvgY01zsRTW8=) 3: 81E9653E5B8A11EB857A3F77C4F9AE02.roa (hash: hFkz2Rxz8bjHa9W5ewxpkxAw84TOeg9mnyL9BGUNw+E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.crl rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 22:27:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1718 (0x6b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD643 Validity Not Before: Mar 28 22:27:58 2025 GMT Not After : Apr 4 22:27:58 2025 GMT Subject: CN=67e7226e-3f5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:26:ba:fb:4b:ea:ea:a7:d1:ca:83:47:57:0b: ae:35:6e:ca:10:3b:8d:91:42:18:c3:61:06:71:f3: 2d:e3:23:ac:65:09:7f:c3:95:cb:d2:ca:cf:ea:36: ae:92:2e:a8:cd:de:91:6b:ac:b8:51:89:5b:83:6d: 40:9a:47:8c:ec:07:b8:c8:8c:4a:19:8b:b2:0f:64: e3:77:e2:c3:56:72:fc:4a:ed:31:99:c2:89:a6:96: 3d:b6:5a:e7:3f:a5:41:d7:e9:4a:dc:84:73:3a:18: 15:44:57:42:95:b7:8c:44:e7:10:ed:04:80:e9:05: 32:3e:63:3c:2e:39:29:53:66:9e:25:4f:af:ae:9a: 1d:56:eb:91:24:8d:fd:95:4f:10:92:2a:86:20:70: 5a:73:9b:b1:f2:01:9a:b9:ec:91:5b:7e:06:70:e1: 85:c5:d4:94:f8:b3:0a:fc:70:8d:1c:8b:53:37:25: 56:79:09:d9:58:b2:40:38:6f:b9:97:f9:25:02:da: 77:95:6b:01:a3:00:54:9c:51:c3:cd:80:df:c5:b0: 29:cf:a3:3e:2a:0f:ab:ea:57:b2:3a:9c:f1:aa:c4: 63:cc:77:86:94:43:79:35:04:8e:39:77:bf:e9:bb: 6b:6e:e9:47:5a:96:66:3f:8d:ec:af:06:37:d5:a7: 5f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:26:C6:38:E0:3A:2A:E8:03:34:F0:C0:FC:D9:97:3C:CC:E5:68:9F X509v3 Authority Key Identifier: keyid:39:D7:46:8C:F8:0C:50:55:E9:D0:4C:9B:4F:AD:31:17:5C:14:D6:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:60:bc:2a:fc:a9:98:fc:54:18:ff:12:c1:4c:c8:dd:2c:a6: 2f:86:ea:a5:3f:5b:84:17:ed:13:3f:e2:28:6a:57:67:69:05: e9:bd:5a:42:88:2b:fe:f8:eb:6b:54:f9:e0:25:f4:64:7f:1e: 9b:67:38:00:67:10:6c:dd:51:12:94:3a:05:fc:84:5b:ef:f8: fa:07:d8:96:10:45:6e:40:b1:e3:e8:ad:d8:ea:94:22:ea:3a: 99:d9:6a:cb:c3:85:f5:f7:01:a3:f4:96:4f:bf:65:2d:71:e6: 10:ca:1e:10:f8:5e:e1:03:45:96:23:37:bb:02:ef:fb:79:35: 03:dc:01:3b:c3:69:47:c3:e0:7a:8a:ab:f8:f9:65:8d:f2:13: f4:cf:74:09:d1:ae:80:e7:a0:5a:6c:e6:f9:96:20:f7:fa:cd: eb:01:f0:a5:bd:0b:5f:79:57:85:82:a3:69:4e:06:7e:60:b1: 85:18:d4:dd:cc:76:da:97:8b:57:03:e2:da:f7:b9:fb:a9:8d: 90:0c:86:38:fa:f5:8d:a3:ad:12:11:df:14:7c:69:ed:51:92: db:f7:c9:77:03:3f:4d:af:f4:3d:68:fb:92:06:07:a7:82:08: 8f:db:91:87:b0:9e:59:a7:20:4f:38:2d:65:f4:45:eb:5f:77: 21:60:d1:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ2NDMxMTAvBgNVBAUTKDM5RDc0NjhDRjgwQzUwNTVFOUQwNEM5QjRGQUQzMTE3 NUMxNEQ2NUYwHhcNMjUwMzI4MjIyNzU4WhcNMjUwNDA0MjIyNzU4WjAYMRYwFAYD VQQDEw02N2U3MjI2ZS0zZjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6ya6+0vq6qfRyoNHVwuuNW7KEDuNkUIYw2EGcfMt4yOsZQl/w5XL0srP6jau ki6ozd6Ra6y4UYlbg21AmkeM7Ae4yIxKGYuyD2Tjd+LDVnL8Su0xmcKJppY9tlrn P6VB1+lK3IRzOhgVRFdClbeMROcQ7QSA6QUyPmM8LjkpU2aeJU+vrpodVuuRJI39 lU8QkiqGIHBac5ux8gGaueyRW34GcOGFxdSU+LMK/HCNHItTNyVWeQnZWLJAOG+5 l/klAtp3lWsBowBUnFHDzYDfxbApz6M+Kg+r6leyOpzxqsRjzHeGlEN5NQSOOXe/ 6btrbulHWpZmP43srwY31adfZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO8mxjjg OiroAzTwwPzZlzzM5WifMB8GA1UdIwQYMBaAFDnXRoz4DFBV6dBMm0+tMRdcFNZf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDY0My9FRkJFNkVCMjVC ODgxMUVCQkQ1RjMwNzZDNEY5QUUwMi9PZGRHalBnTVVGWHAwRXliVDYweEYxd1Ux bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09kZEdqUGdNVUZYcDBFeWJUNjB4RjF3VTFsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDY0My9FRkJFNkVCMjVCODgxMUVCQkQ1RjMwNzZDNEY5QUUwMi9PZGRHalBnTVVG WHAwRXliVDYweEYxd1UxbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoYLwq/KmY/FQY/xLBTMjdLKYvhuqlP1uEF+0TP+IoaldnaQXpvVpC iCv++OtrVPngJfRkfx6bZzgAZxBs3VESlDoF/IRb7/j6B9iWEEVuQLHj6K3Y6pQi 6jqZ2WrLw4X19wGj9JZPv2UtceYQyh4Q+F7hA0WWIze7Au/7eTUD3AE7w2lHw+B6 iqv4+WWN8hP0z3QJ0a6A56BabOb5liD3+s3rAfClvQtfeVeFgqNpTgZ+YLGFGNTd zHbal4tXA+La97n7qY2QDIY4+vWNo60SEd8UfGntUZLb98l3Az9Nr/Q9aPuSBgen ggiP25GHsJ5ZpyBPOC1l9EXrX3chYNE5 -----END CERTIFICATE-----Generated at Fri Apr 4 18:34:01 2025 by rpki-client