$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.mft File: OBfP4ApfGsw2O0cvT2nag761ZhM.mft (raw, json) Hash identifier: zxSjOUyhWd5Ermoe15VRp4KAb5b2H0fzDDicYYOLAB8= Subject key identifier: 7D:3C:FC:64:61:CF:26:DC:23:5A:45:C4:E9:29:70:0C:1F:04:C5:53 Authority key identifier: 38:17:CF:E0:0A:5F:1A:CC:36:3B:47:2F:4F:69:DA:83:BE:B5:66:13 Certificate issuer: /CN=A91B9AB9/serialNumber=3817CFE00A5F1ACC363B472F4F69DA83BEB56613 Certificate serial: 70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBfP4ApfGsw2O0cvT2nag761ZhM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.mft Manifest number: 6F Signing time: Fri 11 Apr 2025 06:03:21 +0000 Manifest this update: Fri 11 Apr 2025 06:03:20 +0000 Manifest next update: Fri 18 Apr 2025 06:03:20 +0000 Files and hashes: 1: OBfP4ApfGsw2O0cvT2nag761ZhM.crl (hash: +fVhkRXQaQAykSWo+uO2Pp629w38n5Vba/rKJCJh3Ng=) 2: A06AB21E6E8811EF95434073C4F9AE02.roa (hash: vppFtWXOaW/ZHVpNFmtwJ9lUk75Frb5HKq6ZQsHZOpc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.crl rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBfP4ApfGsw2O0cvT2nag761ZhM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 06:03:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112 (0x70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9AB9, serialNumber=3817CFE00A5F1ACC363B472F4F69DA83BEB56613 Validity Not Before: Apr 11 06:03:20 2025 GMT Not After : Apr 18 06:03:20 2025 GMT Subject: CN=67f8b0a9-2105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:94:f2:10:73:f5:57:d3:f3:ae:f1:f3:07:53: c0:86:3b:da:1e:28:64:60:89:c2:62:f9:17:a5:fb: 05:fe:84:38:0a:6c:48:03:19:51:3a:b6:6e:88:fc: aa:da:bf:ff:bb:b1:78:8f:12:d3:ec:42:b3:7e:8d: fa:1b:9e:52:df:50:f4:4e:29:9e:12:98:d2:00:78: e1:aa:a2:63:95:e4:6a:2b:7d:46:15:6e:a5:ff:fc: 45:88:63:86:73:46:bb:e7:28:68:9c:b9:e6:dc:d3: 6f:d3:db:34:db:d6:f7:66:db:ec:76:56:df:24:da: b1:e6:88:f5:a3:3c:0c:4a:68:14:14:a3:76:d0:a1: 95:e1:56:90:86:d6:6f:83:35:85:46:52:a5:44:d1: d7:e9:73:f6:60:f0:27:fb:fd:f5:1b:e6:d9:0b:7c: ac:5c:9e:cd:86:17:c5:51:de:66:2d:b7:3d:5d:56: bb:31:f4:92:49:ef:bb:ea:10:49:53:e2:71:db:8d: 8b:c9:27:fa:8a:25:20:14:33:15:7a:40:a0:9e:25: 34:90:92:f7:24:dc:75:2b:62:6b:e9:52:a4:f9:83: 86:92:59:f0:0c:45:07:f2:9d:f0:d4:88:b8:d5:c7: 6b:b6:0e:77:7f:32:2c:a8:4a:cb:1a:3a:15:63:e6: 33:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:3C:FC:64:61:CF:26:DC:23:5A:45:C4:E9:29:70:0C:1F:04:C5:53 X509v3 Authority Key Identifier: keyid:38:17:CF:E0:0A:5F:1A:CC:36:3B:47:2F:4F:69:DA:83:BE:B5:66:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBfP4ApfGsw2O0cvT2nag761ZhM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:26:84:81:00:53:8b:1d:03:a7:e0:3f:45:b4:aa:2d:d3:6a: fe:50:be:ff:63:b4:2a:ce:f2:cf:ef:2b:f4:40:b9:c9:e1:d9: 98:57:96:fd:be:7a:54:4c:27:e9:5b:aa:5d:78:62:bb:46:05: 6c:e4:9f:b3:23:8b:0f:26:ea:81:fc:aa:bc:53:3c:c7:69:ea: e9:53:30:d4:89:b3:97:dd:84:cb:5a:fe:54:9b:11:99:03:61: 86:d6:b0:81:e9:d4:80:a2:e4:11:55:58:bb:d2:92:e9:4d:06: 08:42:64:39:bf:99:19:07:0e:da:31:ff:c3:17:c9:ca:a5:e5: 1c:d7:47:27:ec:ad:b2:32:3d:8f:e9:b9:7d:4a:ca:db:69:53: 0e:04:a8:2e:13:b1:5b:93:d6:29:99:44:5f:ff:d0:cb:66:87: 34:f2:e0:4a:91:36:75:ff:6a:bb:1f:15:14:10:9d:3d:2e:08: 07:39:20:28:16:35:68:06:a1:95:f6:e0:b4:a7:70:45:45:a6: 7f:2a:aa:11:c8:db:ef:6a:ec:54:d2:59:24:dc:78:2d:8b:39: 33:8f:5e:a6:ee:9a:5f:86:13:3f:f5:a1:f7:0f:f4:a0:1c:59: c5:a3:61:1f:f5:53:8e:bf:04:5e:ca:18:5a:cd:ad:7d:ab:6c: 6f:65:c0:2f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC OUFCOTExMC8GA1UEBRMoMzgxN0NGRTAwQTVGMUFDQzM2M0I0NzJGNEY2OURBODNC RUI1NjYxMzAeFw0yNTA0MTEwNjAzMjBaFw0yNTA0MTgwNjAzMjBaMBgxFjAUBgNV BAMTDTY3ZjhiMGE5LTIxMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8lPIQc/VX0/Ou8fMHU8CGO9oeKGRgicJi+Rel+wX+hDgKbEgDGVE6tm6I/Kra v/+7sXiPEtPsQrN+jfobnlLfUPROKZ4SmNIAeOGqomOV5GorfUYVbqX//EWIY4Zz RrvnKGicuebc02/T2zTb1vdm2+x2Vt8k2rHmiPWjPAxKaBQUo3bQoZXhVpCG1m+D NYVGUqVE0dfpc/Zg8Cf7/fUb5tkLfKxcns2GF8VR3mYttz1dVrsx9JJJ77vqEElT 4nHbjYvJJ/qKJSAUMxV6QKCeJTSQkvck3HUrYmvpUqT5g4aSWfAMRQfynfDUiLjV x2u2Dnd/MiyoSssaOhVj5jN/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfTz8ZGHP JtwjWkXE6SlwDB8ExVMwHwYDVR0jBBgwFoAUOBfP4ApfGsw2O0cvT2nag761ZhMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI5QUI5L0QxMThDMEJDNkU4 NDExRUZBM0NEOTgzRkM0RjlBRTAyL09CZlA0QXBmR3N3Mk8wY3ZUMm5hZzc2MVpo TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT0JmUDRBcGZHc3cyTzBjdlQybmFnNzYxWmhNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI5 QUI5L0QxMThDMEJDNkU4NDExRUZBM0NEOTgzRkM0RjlBRTAyL09CZlA0QXBmR3N3 Mk8wY3ZUMm5hZzc2MVpoTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGUmhIEAU4sdA6fgP0W0qi3Tav5Qvv9jtCrO8s/vK/RAucnh2ZhXlv2+ elRMJ+lbql14YrtGBWzkn7Mjiw8m6oH8qrxTPMdp6ulTMNSJs5fdhMta/lSbEZkD YYbWsIHp1ICi5BFVWLvSkulNBghCZDm/mRkHDtox/8MXycql5RzXRyfsrbIyPY/p uX1KyttpUw4EqC4TsVuT1imZRF//0MtmhzTy4EqRNnX/arsfFRQQnT0uCAc5ICgW NWgGoZX24LSncEVFpn8qqhHI2+9q7FTSWSTceC2LOTOPXqbuml+GEz/1ofcP9KAc WcWjYR/1U46/BF7KGFrNrX2rbG9lwC8= -----END CERTIFICATE-----Generated at Sun Apr 13 03:13:05 2025 by rpki-client