$ rpki-client -vvf rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.mft File: OochbBWSc79Rk0f8H-5wYZXMKuY.mft (raw, json) Hash identifier: /Td7mFBJgR2j78UgrpK/qcYeeTosRbmoikbFVBp6UB4= Subject key identifier: 54:18:A9:5A:48:CD:AA:11:E4:67:5C:99:CD:A6:DF:EB:54:36:09:21 Authority key identifier: 3A:87:21:6C:15:92:73:BF:51:93:47:FC:1F:EE:70:61:95:CC:2A:E6 Certificate issuer: /CN=A91C661C/serialNumber=3A87216C159273BF519347FC1FEE706195CC2AE6 Certificate serial: 067F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OochbBWSc79Rk0f8H-5wYZXMKuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.mft Manifest number: 0674 Signing time: Fri 04 Apr 2025 22:28:21 +0000 Manifest this update: Fri 04 Apr 2025 22:28:20 +0000 Manifest next update: Fri 11 Apr 2025 22:28:20 +0000 Files and hashes: 1: OochbBWSc79Rk0f8H-5wYZXMKuY.crl (hash: ZkyX8SA4sNhv3YfcMPzEU7hUwL3VTDz9MKAqolfXmXY=) 2: AABC79100EC411EF858B5255C4F9AE02.roa (hash: xd+kZGDM6lidBL503M6KRPrbZpmB555muvLLsOdJRog=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.crl rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OochbBWSc79Rk0f8H-5wYZXMKuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 22:28:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1663 (0x67f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C661C Validity Not Before: Apr 4 22:28:20 2025 GMT Not After : Apr 11 22:28:20 2025 GMT Subject: CN=67f05d05-633e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:46:40:e5:84:0e:cf:83:0f:48:e8:3e:ea:ba: 6c:e0:19:b7:75:a4:d1:01:93:5c:26:56:9d:5e:68: 44:8f:73:ca:8e:f4:79:68:3a:48:a0:42:f1:16:ef: 55:6f:55:b3:fa:7d:ac:e7:02:61:9c:42:43:ef:88: 6b:96:2b:ff:89:35:e2:e2:c5:9e:d6:f4:aa:c8:ad: 21:b4:8e:b1:6b:c1:03:8f:89:f3:2b:16:ed:d6:3a: cd:0a:1a:88:80:40:8c:ab:7e:20:40:e0:db:60:aa: a8:f3:67:87:8a:11:53:02:de:72:e3:4c:c2:9b:0a: 34:29:2a:3d:86:18:77:01:43:84:47:1f:b9:5a:45: 67:ca:9b:e7:3b:a9:31:48:07:b4:d9:23:39:da:30: 1b:c3:d0:0e:ee:32:f4:2f:1e:00:c1:91:81:b3:84: 06:7a:4e:70:02:21:2e:f3:4f:3f:14:7d:46:66:14: f3:64:34:25:b3:71:3d:c0:4d:37:b0:51:ed:99:9a: 6d:b2:10:cc:0b:ae:98:16:75:9d:3e:df:5e:d1:08: 75:01:a9:1c:01:f7:07:e4:af:23:84:31:c6:f9:4e: 10:99:6f:7d:0b:59:4f:90:2e:73:e0:2f:62:79:e0: 5e:5f:d8:08:4c:e4:d1:11:bd:5c:c3:7e:9a:64:96: 5a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:18:A9:5A:48:CD:AA:11:E4:67:5C:99:CD:A6:DF:EB:54:36:09:21 X509v3 Authority Key Identifier: keyid:3A:87:21:6C:15:92:73:BF:51:93:47:FC:1F:EE:70:61:95:CC:2A:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OochbBWSc79Rk0f8H-5wYZXMKuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:25:48:1b:1a:57:73:21:a0:45:72:a4:4a:50:87:05:e6:c1: 76:71:90:bd:3e:5a:89:a6:30:c3:37:8b:ad:bd:37:a9:cf:02: 4d:1f:70:b2:c4:da:cd:bd:19:8e:a6:0e:91:ea:af:82:9d:85: 07:81:be:a8:c2:c4:06:2b:7a:ba:31:ce:2f:8c:90:74:8a:b4: cd:ef:21:00:be:ff:c9:46:fc:08:45:2e:3d:ac:e1:fa:89:a7: c9:ef:60:43:36:c1:54:b4:a3:5c:9b:4b:fd:55:5b:37:93:e2: f4:c3:33:91:6e:ea:80:f4:89:fd:77:96:41:b4:66:14:da:c6: 9c:1e:94:ff:f3:78:95:86:71:5d:73:fa:9c:5e:58:2a:80:22: 09:6d:c7:6e:24:30:37:89:7a:0b:5d:aa:b1:c3:1a:8e:42:49: 47:df:4d:10:10:06:aa:d5:19:37:1f:d2:68:2e:ec:8f:a0:8e: 1b:60:91:cb:ca:5b:ed:2f:02:04:18:70:c1:9a:34:a5:02:43: 5e:e5:78:c1:b4:de:a7:8b:04:6d:0d:c5:2b:76:a5:31:02:6c: 7c:bd:7b:32:b9:2e:cc:1b:a0:55:a7:1b:6f:68:d3:5f:20:69: 5c:f9:47:40:02:14:00:86:35:5d:8d:2c:0f:d7:f9:c2:14:20: c5:cb:02:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY2MUMxMTAvBgNVBAUTKDNBODcyMTZDMTU5MjczQkY1MTkzNDdGQzFGRUU3MDYx OTVDQzJBRTYwHhcNMjUwNDA0MjIyODIwWhcNMjUwNDExMjIyODIwWjAYMRYwFAYD VQQDEw02N2YwNWQwNS02MzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0UZA5YQOz4MPSOg+6rps4Bm3daTRAZNcJladXmhEj3PKjvR5aDpIoELxFu9V b1Wz+n2s5wJhnEJD74hrliv/iTXi4sWe1vSqyK0htI6xa8EDj4nzKxbt1jrNChqI gECMq34gQODbYKqo82eHihFTAt5y40zCmwo0KSo9hhh3AUOERx+5WkVnypvnO6kx SAe02SM52jAbw9AO7jL0Lx4AwZGBs4QGek5wAiEu808/FH1GZhTzZDQls3E9wE03 sFHtmZptshDMC66YFnWdPt9e0Qh1AakcAfcH5K8jhDHG+U4QmW99C1lPkC5z4C9i eeBeX9gITOTREb1cw36aZJZagwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFQYqVpI zaoR5Gdcmc2m3+tUNgkhMB8GA1UdIwQYMBaAFDqHIWwVknO/UZNH/B/ucGGVzCrm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjYxQy9GNDU5Mjk5Mjcz NzIxMUVCOTQ3NUNBNURDNEY5QUUwMi9Pb2NoYkJXU2M3OVJrMGY4SC01d1laWE1L dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09vY2hiQldTYzc5UmswZjhILTV3WVpYTUt1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjYxQy9GNDU5Mjk5MjczNzIxMUVCOTQ3NUNBNURDNEY5QUUwMi9Pb2NoYkJXU2M3 OVJrMGY4SC01d1laWE1LdVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYJUgbGldzIaBFcqRKUIcF5sF2cZC9PlqJpjDDN4utvTepzwJNH3Cy xNrNvRmOpg6R6q+CnYUHgb6owsQGK3q6Mc4vjJB0irTN7yEAvv/JRvwIRS49rOH6 iafJ72BDNsFUtKNcm0v9VVs3k+L0wzORbuqA9In9d5ZBtGYU2sacHpT/83iVhnFd c/qcXlgqgCIJbcduJDA3iXoLXaqxwxqOQklH300QEAaq1Rk3H9JoLuyPoI4bYJHL ylvtLwIEGHDBmjSlAkNe5XjBtN6niwRtDcUrdqUxAmx8vXsyuS7MG6BVpxtvaNNf IGlc+UdAAhQAhjVdjSwP1/nCFCDFywJ2 -----END CERTIFICATE-----Generated at Sat Apr 5 19:34:19 2025 by rpki-client