$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft File: OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft (raw, json) Hash identifier: m++UXNCVSuLPj4LbAAvQOjCE5XbS1ReKomAghVzl4wA= Subject key identifier: 29:D8:AE:BE:C4:AD:2B:51:9E:8F:23:20:54:D7:C5:7C:19:CE:2F:0D Authority key identifier: 3A:14:94:25:BE:32:85:D6:11:4B:01:F6:C2:FC:88:A1:7A:FF:4B:EC Certificate issuer: /CN=A91CAB4E/serialNumber=3A149425BE3285D6114B01F6C2FC88A17AFF4BEC Certificate serial: 1372 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhSUJb4yhdYRSwH2wvyIoXr_S-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft Manifest number: 1369 Signing time: Sat 12 Apr 2025 16:54:57 +0000 Manifest this update: Sat 12 Apr 2025 16:54:56 +0000 Manifest next update: Sat 19 Apr 2025 16:54:56 +0000 Files and hashes: 1: OhSUJb4yhdYRSwH2wvyIoXr_S-w.crl (hash: pLkJsfTQwpV9VzQMKw+dnT4SDDSqvTT+jiQVfmPIDe0=) 2: 7F662C72997011E8B0FDEF57C4F9AE02.roa (hash: c+PuAbIml2jBjPavn1IEZDbXlxGsrH9yX4XnYZy8fpU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.crl rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhSUJb4yhdYRSwH2wvyIoXr_S-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 16:54:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4978 (0x1372) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAB4E, serialNumber=3A149425BE3285D6114B01F6C2FC88A17AFF4BEC Validity Not Before: Apr 12 16:54:56 2025 GMT Not After : Apr 19 16:54:56 2025 GMT Subject: CN=67fa9ae0-a224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e8:02:62:a5:2a:29:12:fa:79:cb:f4:c7:84: 51:48:2f:eb:81:fb:34:fb:6c:6c:a0:60:b6:ed:e5: 23:a9:04:cb:b9:4c:57:d6:a3:c4:bb:db:12:38:74: 21:70:69:21:1c:eb:e2:c7:db:5e:06:4b:d2:f5:e3: 9c:16:ad:d7:4e:55:b9:86:20:2e:05:64:8b:56:8c: a7:9a:ef:9a:e8:31:6a:89:b4:7d:2a:60:13:49:02: 94:c6:af:0f:da:62:50:bb:38:17:9d:29:0e:e9:99: c5:e7:35:79:65:17:64:bd:54:c3:f0:db:f0:38:e6: 7c:e3:3d:65:5d:ff:37:53:1f:72:a6:10:ec:9f:23: ae:71:c5:ef:e7:c1:75:ee:89:d0:4a:cf:de:c6:1d: 61:27:87:a8:c2:30:50:01:f4:f3:1f:83:d4:52:ec: 9c:07:48:ff:5b:ac:95:76:4a:05:4e:a4:9b:84:75: 90:be:0b:23:a7:13:97:f9:63:94:90:be:b3:98:e8: 42:01:99:8d:7e:87:d6:5a:f8:21:af:8e:11:53:9f: 89:79:d3:92:a3:26:b3:ff:91:4e:97:1d:34:fc:89: 3e:d0:b5:d1:79:64:db:b9:31:5f:cc:45:1d:c1:a1: 6d:4b:ac:56:86:c6:7a:82:9d:34:d2:7d:5c:7c:c2: 87:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:D8:AE:BE:C4:AD:2B:51:9E:8F:23:20:54:D7:C5:7C:19:CE:2F:0D X509v3 Authority Key Identifier: keyid:3A:14:94:25:BE:32:85:D6:11:4B:01:F6:C2:FC:88:A1:7A:FF:4B:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhSUJb4yhdYRSwH2wvyIoXr_S-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:0a:4b:3e:0a:2a:a5:61:5e:15:44:73:15:c9:95:16:c2:aa: ad:3e:96:4e:56:54:bd:85:5c:5c:f8:d4:45:d5:c6:16:2a:ba: 36:e7:72:3f:c5:70:51:28:06:85:81:05:73:7b:31:cd:cf:79: 1f:cd:d9:9f:41:23:66:06:fd:39:6f:98:06:8a:ef:ab:69:f8: d3:45:b2:3a:57:97:6e:32:0d:2c:d5:23:90:a0:e8:6c:f4:b4: 6b:50:61:ee:94:56:7a:6a:ef:ac:04:fe:43:fb:5e:d8:4e:49: 12:e3:a1:ed:bf:cb:97:76:9c:a5:ce:c3:e0:7a:f1:be:da:73: e1:de:29:86:ec:7c:a5:20:8c:74:cb:a1:a4:06:d6:23:76:f4: 22:34:41:14:cd:e6:b2:76:ef:a0:60:83:48:b2:ce:17:72:77: e2:1b:f8:b9:a2:1e:2f:37:e2:b7:14:16:31:d7:65:5a:55:56: be:c5:44:2c:89:18:82:3c:eb:db:d5:15:3b:a7:a3:af:43:5f: 26:5d:ad:a2:db:f3:ff:09:10:23:4f:8b:12:98:17:e6:b1:dd: 17:f3:25:c9:24:00:b4:f6:56:57:22:ef:2e:a0:5a:1a:ac:b3: 30:bd:d1:0e:b3:70:b3:9c:c2:95:16:eb:81:ff:65:97:a4:df: bd:23:89:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE3IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FCNEUxMTAvBgNVBAUTKDNBMTQ5NDI1QkUzMjg1RDYxMTRCMDFGNkMyRkM4OEEx N0FGRjRCRUMwHhcNMjUwNDEyMTY1NDU2WhcNMjUwNDE5MTY1NDU2WjAYMRYwFAYD VQQDEw02N2ZhOWFlMC1hMjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAregCYqUqKRL6ecv0x4RRSC/rgfs0+2xsoGC27eUjqQTLuUxX1qPEu9sSOHQh cGkhHOvix9teBkvS9eOcFq3XTlW5hiAuBWSLVoynmu+a6DFqibR9KmATSQKUxq8P 2mJQuzgXnSkO6ZnF5zV5ZRdkvVTD8NvwOOZ84z1lXf83Ux9yphDsnyOuccXv58F1 7onQSs/exh1hJ4eowjBQAfTzH4PUUuycB0j/W6yVdkoFTqSbhHWQvgsjpxOX+WOU kL6zmOhCAZmNfofWWvghr44RU5+JedOSoyaz/5FOlx00/Ik+0LXReWTbuTFfzEUd waFtS6xWhsZ6gp000n1cfMKHKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCnYrr7E rStRno8jIFTXxXwZzi8NMB8GA1UdIwQYMBaAFDoUlCW+MoXWEUsB9sL8iKF6/0vs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUI0RS8yQ0E0NzA2Njk5 NzAxMUU4ODYxREQwNTdDNEY5QUUwMi9PaFNVSmI0eWhkWVJTd0gyd3Z5SW9Ycl9T LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09oU1VKYjR5aGRZUlN3SDJ3dnlJb1hyX1Mtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUI0RS8yQ0E0NzA2Njk5NzAxMUU4ODYxREQwNTdDNEY5QUUwMi9PaFNVSmI0eWhk WVJTd0gyd3Z5SW9Ycl9TLXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuCks+CiqlYV4VRHMVyZUWwqqtPpZOVlS9hVxc+NRF1cYWKro253I/ xXBRKAaFgQVzezHNz3kfzdmfQSNmBv05b5gGiu+rafjTRbI6V5duMg0s1SOQoOhs 9LRrUGHulFZ6au+sBP5D+17YTkkS46Htv8uXdpylzsPgevG+2nPh3imG7HylIIx0 y6GkBtYjdvQiNEEUzeaydu+gYINIss4XcnfiG/i5oh4vN+K3FBYx12VaVVa+xUQs iRiCPOvb1RU7p6OvQ18mXa2i2/P/CRAjT4sSmBfmsd0X8yXJJAC09lZXIu8uoFoa rLMwvdEOs3CznMKVFuuB/2WXpN+9I4mV -----END CERTIFICATE-----Generated at Sun Apr 13 00:17:07 2025 by rpki-client