$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft File: oNGf1mnyVeFici98GdiGS7Brc5k.mft (raw, json) Hash identifier: QrZsVPvrTBBhqAThff+rG2+v3obIg8v0GGP8oe+HazQ= Subject key identifier: D2:CA:9A:0A:2C:92:DE:67:EF:55:6F:38:ED:7E:DF:1E:8A:76:55:BE Authority key identifier: A0:D1:9F:D6:69:F2:55:E1:62:72:2F:7C:19:D8:86:4B:B0:6B:73:99 Certificate issuer: /CN=A91DEC72/serialNumber=A0D19FD669F255E162722F7C19D8864BB06B7399 Certificate serial: 0135 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNGf1mnyVeFici98GdiGS7Brc5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft Manifest number: 0134 Signing time: Thu 03 Apr 2025 03:44:16 +0000 Manifest this update: Thu 03 Apr 2025 03:44:16 +0000 Manifest next update: Thu 10 Apr 2025 03:44:16 +0000 Files and hashes: 1: oNGf1mnyVeFici98GdiGS7Brc5k.crl (hash: FMP6BZU98yZRipYvBW3r65uXgrrvzPJlXZg0gmCKjcg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.crl rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNGf1mnyVeFici98GdiGS7Brc5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 03:44:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 309 (0x135) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEC72 Validity Not Before: Apr 3 03:44:16 2025 GMT Not After : Apr 10 03:44:16 2025 GMT Subject: CN=67ee0410-5c70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2b:25:fb:d6:ff:0b:df:e6:9c:ac:8a:f7:39: 4f:43:7c:71:2a:b1:10:2a:bc:9d:5e:ef:fb:7c:37: 0e:4c:c7:4e:2d:7b:52:ba:e3:6f:ba:b8:f8:12:dc: 23:6b:f5:15:0b:b3:97:54:96:cf:c9:58:66:20:e4: 04:f4:c0:a7:04:ad:ef:ef:90:51:51:0f:04:e6:10: fc:13:e1:43:48:f8:0b:b0:68:6c:14:42:9c:d9:d9: 83:0c:73:3e:c8:80:cc:c8:34:8f:1f:ca:b1:36:e7: ab:25:13:96:a9:d9:74:8d:f6:65:ef:78:e4:01:84: be:bd:ed:6c:01:d4:4e:b9:a5:ef:24:23:c6:57:26: ba:3d:de:94:ff:ec:9d:54:fb:c5:91:de:b9:fb:9e: 85:9b:c8:ae:b4:0b:d7:07:fa:58:d6:83:44:9f:50: 48:13:c9:4b:bf:9b:a7:c6:4a:5a:68:33:90:b5:c9: 3c:7c:05:00:48:cb:32:0b:81:d4:df:a9:f4:8d:45: ad:fd:ed:00:63:33:1f:eb:c2:03:60:b6:b0:5c:24: 30:8d:1c:a8:59:b3:3e:3e:87:dd:22:59:b1:9e:01: 57:ff:19:79:95:f6:bb:d5:46:90:7c:d3:d0:80:86: 91:33:bc:19:b3:2d:f4:0d:31:70:20:44:32:55:a1: 88:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:CA:9A:0A:2C:92:DE:67:EF:55:6F:38:ED:7E:DF:1E:8A:76:55:BE X509v3 Authority Key Identifier: keyid:A0:D1:9F:D6:69:F2:55:E1:62:72:2F:7C:19:D8:86:4B:B0:6B:73:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNGf1mnyVeFici98GdiGS7Brc5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:6e:12:90:6d:fb:ea:31:c7:d7:61:52:2d:69:ff:c7:45:4e: c6:36:b4:e9:38:4e:72:6b:ec:22:54:4a:6f:92:fc:23:15:c8: 22:1d:a9:c3:00:aa:65:32:4c:bb:76:14:d7:1c:6a:d2:1d:8b: e7:12:2a:a1:20:5c:62:fd:25:94:fb:60:71:16:7e:c3:2a:22: 47:e3:d4:2a:d7:02:33:e4:5c:6d:d6:9e:ce:0d:7e:05:18:e6: 8a:de:d5:b7:ad:91:93:fb:d5:60:6c:e1:5f:b0:20:f3:5a:7e: fd:df:81:18:e0:a1:ae:f5:d6:fc:78:8a:54:27:2d:e1:18:30: 93:32:ff:cb:0a:e3:3b:2e:16:85:67:74:95:97:14:a1:e8:1f: 29:8e:13:83:e9:5e:da:b7:fb:5d:22:bb:11:0b:62:3a:4e:e8: 80:df:36:d1:11:9f:49:55:75:09:42:91:62:35:09:1e:ba:62: e2:b2:cf:06:bc:17:ce:c4:f8:57:8d:92:8a:d2:a0:5f:c2:2d: f8:2d:e7:14:f0:6a:40:6e:5f:9e:6e:53:ad:75:9c:9c:c8:53: d6:19:01:7f:d6:de:8a:13:e0:ff:e0:b3:e3:a9:20:79:3e:a2: 1d:46:80:48:0f:79:34:90:be:7d:95:4d:bb:18:ac:54:de:b0: 41:4a:11:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVDNzIxMTAvBgNVBAUTKEEwRDE5RkQ2NjlGMjU1RTE2MjcyMkY3QzE5RDg4NjRC QjA2QjczOTkwHhcNMjUwNDAzMDM0NDE2WhcNMjUwNDEwMDM0NDE2WjAYMRYwFAYD VQQDEw02N2VlMDQxMC01YzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsisl+9b/C9/mnKyK9zlPQ3xxKrEQKrydXu/7fDcOTMdOLXtSuuNvurj4Etwj a/UVC7OXVJbPyVhmIOQE9MCnBK3v75BRUQ8E5hD8E+FDSPgLsGhsFEKc2dmDDHM+ yIDMyDSPH8qxNuerJROWqdl0jfZl73jkAYS+ve1sAdROuaXvJCPGVya6Pd6U/+yd VPvFkd65+56Fm8iutAvXB/pY1oNEn1BIE8lLv5unxkpaaDOQtck8fAUASMsyC4HU 36n0jUWt/e0AYzMf68IDYLawXCQwjRyoWbM+PofdIlmxngFX/xl5lfa71UaQfNPQ gIaRM7wZsy30DTFwIEQyVaGIJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNLKmgos kt5n71VvOO1+3x6KdlW+MB8GA1UdIwQYMBaAFKDRn9Zp8lXhYnIvfBnYhkuwa3OZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUM3Mi8zRjcxRkY4ODNC OTExMUVFQUM2MTdFNkFDNEY5QUUwMi9vTkdmMW1ueVZlRmljaTk4R2RpR1M3QnJj NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29OR2YxbW55VmVGaWNpOThHZGlHUzdCcmM1ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUM3Mi8zRjcxRkY4ODNCOTExMUVFQUM2MTdFNkFDNEY5QUUwMi9vTkdmMW1ueVZl RmljaTk4R2RpR1M3QnJjNWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsbhKQbfvqMcfXYVItaf/HRU7GNrTpOE5ya+wiVEpvkvwjFcgiHanD AKplMky7dhTXHGrSHYvnEiqhIFxi/SWU+2BxFn7DKiJH49Qq1wIz5Fxt1p7ODX4F GOaK3tW3rZGT+9VgbOFfsCDzWn7934EY4KGu9db8eIpUJy3hGDCTMv/LCuM7LhaF Z3SVlxSh6B8pjhOD6V7at/tdIrsRC2I6TuiA3zbREZ9JVXUJQpFiNQkeumLiss8G vBfOxPhXjZKK0qBfwi34LecU8GpAbl+eblOtdZycyFPWGQF/1t6KE+D/4LPjqSB5 PqIdRoBID3k0kL59lU27GKxU3rBBShFq -----END CERTIFICATE-----Generated at Fri Apr 4 22:00:51 2025 by rpki-client