$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft File: oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft (raw, json) Hash identifier: 3jHjXj67U0Xl/FNKxUkd4PNX4mV7dISaWdGB53wI6c4= Subject key identifier: D6:67:CD:B4:E5:7B:40:CA:79:F5:FB:0A:87:31:FB:5D:6F:04:D6:73 Authority key identifier: A0:13:B1:38:8A:39:33:BE:10:6B:EA:ED:DF:E9:F3:B8:34:6D:37:48 Certificate issuer: /CN=A91D5F2D/serialNumber=A013B1388A3933BE106BEAEDDFE9F3B8346D3748 Certificate serial: 03AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft Manifest number: 0394 Signing time: Thu 03 Apr 2025 00:50:19 +0000 Manifest this update: Thu 03 Apr 2025 00:50:19 +0000 Manifest next update: Thu 10 Apr 2025 00:50:19 +0000 Files and hashes: 1: oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl (hash: IJ82OhkXErrf9w4dfMvQoG420aomTc6NOTeKPBuULJA=) 2: 5A76CDC2989511EC821F343DC4F9AE02.roa (hash: PFHGyRpc2XbCpMP3oZwcoRFS7cS4eDGCTFH+DmvXr+c=) 3: 17D3C6A89B2611EC8880303EC4F9AE02.roa (hash: dmwskcX+7K87R4MLVSKhbA64Ib5h40ZpO651aHbL2xA=) 4: 8F5EABBE919F11EDA7387A37C4F9AE02.roa (hash: 8Wa5zRD8JBVDnPrtDrMM10W+ePzBdP7fVD0dPyvthC0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 00:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 938 (0x3aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5F2D Validity Not Before: Apr 3 00:50:19 2025 GMT Not After : Apr 10 00:50:19 2025 GMT Subject: CN=67eddb4b-4cdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7f:5f:5a:bf:61:b8:48:ef:6c:7d:e4:92:a3: 20:25:ed:e3:a1:0a:cc:2f:df:01:e1:18:22:1e:1a: ae:de:16:68:6f:fe:96:f7:26:72:e6:08:17:23:a4: 31:61:44:49:ab:80:5b:0c:ba:fe:73:21:1b:56:6d: b2:a6:00:f4:55:22:55:c6:b8:38:de:a2:11:45:d3: aa:a3:a7:4e:f6:14:82:00:0b:9f:44:ef:e4:f2:59: d8:67:5e:8d:40:3c:12:61:55:16:01:ad:a2:57:ac: 41:d2:c4:39:81:9b:0b:7c:14:90:82:71:88:42:c9: b5:69:de:60:19:1b:9a:78:71:21:0b:01:43:15:92: dc:91:86:5a:c5:7e:42:1a:de:a7:85:c4:2c:33:0d: 82:be:37:a5:1f:d2:37:71:5f:03:34:e0:d6:b1:3e: 9a:fa:af:d8:e9:e4:55:2f:cf:f5:10:fa:eb:3e:78: 9c:4a:ff:e5:0c:80:c1:79:fb:5a:7c:91:da:a8:c2: 0b:66:01:5f:0c:6f:fc:da:ff:10:0c:d3:66:3e:2c: 21:fc:61:13:02:36:68:ab:23:92:99:03:e4:ec:b5: fe:40:ea:37:35:26:20:d8:77:e8:6c:2b:3d:87:de: f5:9b:3b:77:a5:d5:9a:f0:e8:48:e9:5c:55:cf:db: dc:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:67:CD:B4:E5:7B:40:CA:79:F5:FB:0A:87:31:FB:5D:6F:04:D6:73 X509v3 Authority Key Identifier: keyid:A0:13:B1:38:8A:39:33:BE:10:6B:EA:ED:DF:E9:F3:B8:34:6D:37:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:a2:a9:c2:27:20:46:2d:e4:9d:6b:84:8f:cc:49:41:51:9f: 6d:2a:48:ee:d9:ce:19:35:97:2a:b3:83:c7:8a:8d:0b:36:45: df:57:81:9e:21:38:1e:75:ef:06:20:27:69:a4:4b:63:73:2d: de:69:ff:bf:5f:b4:38:27:56:8f:d3:d7:6f:6f:b6:99:fa:63: 77:9d:8e:73:26:46:b4:7f:8d:b5:eb:18:99:2b:e1:f4:f1:8f: 7d:fe:7a:c4:42:72:a5:6f:aa:b4:d1:e0:d8:d6:d8:95:f1:71: e1:cc:e4:40:8b:41:b1:ec:ff:c6:88:83:0a:4f:85:46:a2:1d: a7:7d:59:55:34:56:b3:18:52:ae:14:09:c6:96:14:04:55:ba: f2:07:a2:89:4e:6e:6e:a2:0e:89:4e:0e:93:27:f1:57:71:4c: 9c:00:df:24:14:7f:63:47:23:95:a0:8f:a8:49:d9:e2:05:b7: 73:e7:ec:9d:77:04:5d:aa:46:9e:52:75:dc:3f:c2:88:80:63: 6b:90:e3:c0:93:24:f3:61:69:be:e3:0e:17:e4:a4:6c:37:8f: ab:82:9b:18:19:8c:2e:fd:f7:30:da:00:cd:2c:ac:03:9e:c7: 01:b1:f3:13:34:df:4e:1b:28:d8:a9:77:cd:b0:9f:2f:48:c2: d5:d0:df:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVGMkQxMTAvBgNVBAUTKEEwMTNCMTM4OEEzOTMzQkUxMDZCRUFFRERGRTlGM0I4 MzQ2RDM3NDgwHhcNMjUwNDAzMDA1MDE5WhcNMjUwNDEwMDA1MDE5WjAYMRYwFAYD VQQDEw02N2VkZGI0Yi00Y2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvX9fWr9huEjvbH3kkqMgJe3joQrML98B4RgiHhqu3hZob/6W9yZy5ggXI6Qx YURJq4BbDLr+cyEbVm2ypgD0VSJVxrg43qIRRdOqo6dO9hSCAAufRO/k8lnYZ16N QDwSYVUWAa2iV6xB0sQ5gZsLfBSQgnGIQsm1ad5gGRuaeHEhCwFDFZLckYZaxX5C Gt6nhcQsMw2CvjelH9I3cV8DNODWsT6a+q/Y6eRVL8/1EPrrPnicSv/lDIDBefta fJHaqMILZgFfDG/82v8QDNNmPiwh/GETAjZoqyOSmQPk7LX+QOo3NSYg2HfobCs9 h971mzt3pdWa8OhI6VxVz9vcrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNZnzbTl e0DKefX7Cocx+11vBNZzMB8GA1UdIwQYMBaAFKATsTiKOTO+EGvq7d/p87g0bTdI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUYyRC9DRDZENkU1Njk4 OTIxMUVDOEY5MzU3M0JDNEY5QUUwMi9vQk94T0lvNU03NFFhLXJ0My1uenVEUnRO MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29CT3hPSW81TTc0UWEtcnQzLW56dURSdE4wZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUYyRC9DRDZENkU1Njk4OTIxMUVDOEY5MzU3M0JDNEY5QUUwMi9vQk94T0lvNU03 NFFhLXJ0My1uenVEUnROMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkoqnCJyBGLeSda4SPzElBUZ9tKkju2c4ZNZcqs4PHio0LNkXfV4Ge ITgede8GICdppEtjcy3eaf+/X7Q4J1aP09dvb7aZ+mN3nY5zJka0f4216xiZK+H0 8Y99/nrEQnKlb6q00eDY1tiV8XHhzORAi0Gx7P/GiIMKT4VGoh2nfVlVNFazGFKu FAnGlhQEVbryB6KJTm5uog6JTg6TJ/FXcUycAN8kFH9jRyOVoI+oSdniBbdz5+yd dwRdqkaeUnXcP8KIgGNrkOPAkyTzYWm+4w4X5KRsN4+rgpsYGYwu/fcw2gDNLKwD nscBsfMTNN9OGyjYqXfNsJ8vSMLV0N/k -----END CERTIFICATE-----Generated at Fri Apr 4 21:25:32 2025 by rpki-client