$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA496/FB12A2783C0F11E4B788FF4AC4F9AE02/oDlpuv_Weqt11JODf6HHxp_7Jxc.mft File: oDlpuv_Weqt11JODf6HHxp_7Jxc.mft (raw, json) Hash identifier: rQpVZKE6lKfpHM9TnWf59P/c4g8Es3bSFcrLjDGO4Fk= Subject key identifier: FC:71:5A:48:5A:DE:3D:59:65:23:71:65:82:BE:5C:73:30:89:AB:AC Authority key identifier: A0:39:69:BA:FF:D6:7A:AB:75:D4:93:83:7F:A1:C7:C6:9F:FB:27:17 Certificate issuer: /CN=A91CA496/serialNumber=A03969BAFFD67AAB75D493837FA1C7C69FFB2717 Certificate serial: 2A6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oDlpuv_Weqt11JODf6HHxp_7Jxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA496/FB12A2783C0F11E4B788FF4AC4F9AE02/oDlpuv_Weqt11JODf6HHxp_7Jxc.mft Manifest number: 2A05 Signing time: Fri 04 Apr 2025 15:39:20 +0000 Manifest this update: Fri 04 Apr 2025 15:39:20 +0000 Manifest next update: Fri 11 Apr 2025 15:39:20 +0000 Files and hashes: 1: oDlpuv_Weqt11JODf6HHxp_7Jxc.crl (hash: fPhGknMQjhC1S2+09Du77pbS7bmPvXadXqQw5mycxz0=) 2: EE3DDD2401AA11EDB7DF7B4BC4F9AE02.roa (hash: Jrpra1DN6Qua5gOtuyS7ZwYqohrmR0qUmCq00umz0cc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA496/FB12A2783C0F11E4B788FF4AC4F9AE02/oDlpuv_Weqt11JODf6HHxp_7Jxc.crl rsync://rpki.apnic.net/member_repository/A91CA496/FB12A2783C0F11E4B788FF4AC4F9AE02/oDlpuv_Weqt11JODf6HHxp_7Jxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oDlpuv_Weqt11JODf6HHxp_7Jxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:39:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10862 (0x2a6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA496 Validity Not Before: Apr 4 15:39:20 2025 GMT Not After : Apr 11 15:39:20 2025 GMT Subject: CN=67effd28-cab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:83:36:34:71:15:fe:f6:7b:a7:9b:52:03:95: 4d:f4:5b:ab:42:ac:7b:9e:18:16:d2:71:b2:bc:06: ad:ae:23:4a:93:d9:3b:d4:b6:86:64:99:2c:3d:a3: bf:01:e6:0a:a2:27:aa:0b:7d:c0:19:93:a7:e9:54: bd:b1:5b:93:a3:7c:e8:97:66:f2:43:00:00:00:bc: 0f:61:cd:f5:af:5a:f0:80:f0:18:10:26:66:e0:0b: fc:ff:56:7f:51:5e:5d:68:73:22:53:d9:59:72:f7: 89:53:7d:8a:99:d5:f0:d2:d3:b7:c8:3a:0b:73:4e: de:3d:bf:0e:b9:45:47:3e:b8:17:f8:b5:5c:9a:99: 82:65:bf:90:da:e4:1e:ce:b9:ec:85:96:42:7c:68: 33:71:bf:4d:8b:a6:b2:9e:ab:c6:ce:2e:5c:45:e8: c0:1a:a3:f5:5d:7f:1e:18:4c:77:6d:95:88:da:10: b5:8e:80:c1:f7:7a:0a:9c:9e:23:d7:28:b1:35:38: 29:2d:f3:c6:59:9d:a5:57:41:ea:af:84:c3:37:10: 8f:cd:91:e0:03:50:23:32:e7:46:0d:74:48:c0:2f: f0:a5:19:f9:ac:8e:41:cc:63:ad:63:37:08:00:d2: 8d:43:37:c1:01:1b:40:ff:7a:00:31:8f:25:f6:e2: 49:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:71:5A:48:5A:DE:3D:59:65:23:71:65:82:BE:5C:73:30:89:AB:AC X509v3 Authority Key Identifier: keyid:A0:39:69:BA:FF:D6:7A:AB:75:D4:93:83:7F:A1:C7:C6:9F:FB:27:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA496/FB12A2783C0F11E4B788FF4AC4F9AE02/oDlpuv_Weqt11JODf6HHxp_7Jxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oDlpuv_Weqt11JODf6HHxp_7Jxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA496/FB12A2783C0F11E4B788FF4AC4F9AE02/oDlpuv_Weqt11JODf6HHxp_7Jxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:66:0a:92:31:65:ec:96:6e:37:87:18:a8:9d:db:ce:95:d0: a1:89:c8:82:54:30:c1:83:a9:b4:20:27:91:38:66:be:ec:d0: a4:cd:3d:19:12:72:9f:c0:3d:27:09:47:09:fb:2c:69:47:5a: 14:5c:b0:dc:45:02:8a:1f:1a:91:bd:a4:44:2a:85:f9:d2:24: 53:e9:87:55:e5:b2:1d:b7:40:6e:e4:c8:58:92:5e:a2:40:a9: f6:26:65:6e:3f:d4:39:d4:f5:64:43:fe:aa:6c:e6:c5:fa:53: f3:29:e1:47:f4:7f:f0:26:a7:85:e6:7f:4f:ab:49:84:b1:5d: e6:1e:73:0a:7b:3c:07:ba:72:4c:96:ba:9d:82:7f:81:24:71: 7d:02:57:fa:28:04:44:d9:fb:27:ad:fb:d1:26:0e:ec:ff:d1: 4c:14:8d:d1:22:a9:d0:5d:23:4d:6e:50:10:b3:d4:69:a2:1b: 7f:46:5a:3c:cc:e9:29:bb:8a:fa:7b:7d:b2:e9:99:b5:91:2f: 27:dd:61:0c:87:72:1b:70:43:33:42:c8:81:19:f5:e0:dd:8a: 3e:fe:df:5a:fa:02:e6:b0:35:3f:e1:8b:b0:b2:30:98:3a:fe: 3d:99:e0:9f:5a:50:62:29:43:07:bf:1c:2b:1c:85:fd:23:14: 85:4f:c5:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E0OTYxMTAvBgNVBAUTKEEwMzk2OUJBRkZENjdBQUI3NUQ0OTM4MzdGQTFDN0M2 OUZGQjI3MTcwHhcNMjUwNDA0MTUzOTIwWhcNMjUwNDExMTUzOTIwWjAYMRYwFAYD VQQDEw02N2VmZmQyOC1jYWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA34M2NHEV/vZ7p5tSA5VN9FurQqx7nhgW0nGyvAatriNKk9k71LaGZJksPaO/ AeYKoieqC33AGZOn6VS9sVuTo3zol2byQwAAALwPYc31r1rwgPAYECZm4Av8/1Z/ UV5daHMiU9lZcveJU32KmdXw0tO3yDoLc07ePb8OuUVHPrgX+LVcmpmCZb+Q2uQe zrnshZZCfGgzcb9Ni6aynqvGzi5cRejAGqP1XX8eGEx3bZWI2hC1joDB93oKnJ4j 1yixNTgpLfPGWZ2lV0Hqr4TDNxCPzZHgA1AjMudGDXRIwC/wpRn5rI5BzGOtYzcI ANKNQzfBARtA/3oAMY8l9uJJuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPxxWkha 3j1ZZSNxZYK+XHMwiausMB8GA1UdIwQYMBaAFKA5abr/1nqrddSTg3+hx8af+ycX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTQ5Ni9GQjEyQTI3ODND MEYxMUU0Qjc4OEZGNEFDNEY5QUUwMi9vRGxwdXZfV2VxdDExSk9EZjZISHhwXzdK eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29EbHB1dl9XZXF0MTFKT0RmNkhIeHBfN0p4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTQ5Ni9GQjEyQTI3ODNDMEYxMUU0Qjc4OEZGNEFDNEY5QUUwMi9vRGxwdXZfV2Vx dDExSk9EZjZISHhwXzdKeGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/ZgqSMWXslm43hxiondvOldChiciCVDDBg6m0ICeROGa+7NCkzT0Z EnKfwD0nCUcJ+yxpR1oUXLDcRQKKHxqRvaREKoX50iRT6YdV5bIdt0Bu5MhYkl6i QKn2JmVuP9Q51PVkQ/6qbObF+lPzKeFH9H/wJqeF5n9Pq0mEsV3mHnMKezwHunJM lrqdgn+BJHF9Alf6KARE2fsnrfvRJg7s/9FMFI3RIqnQXSNNblAQs9Rpoht/Rlo8 zOkpu4r6e32y6Zm1kS8n3WEMh3IbcEMzQsiBGfXg3Yo+/t9a+gLmsDU/4YuwsjCY Ov49meCfWlBiKUMHvxwrHIX9IxSFT8V+ -----END CERTIFICATE-----Generated at Fri Apr 4 22:02:05 2025 by rpki-client