$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft File: Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft (raw, json) Hash identifier: xJemzeUHkI0Ic54W0apSuZ0sj2abrmpE+84wz4He9W0= Subject key identifier: 39:AF:8A:37:70:E3:43:15:30:1E:25:2F:DA:A6:80:3A:70:51:18:81 Authority key identifier: 39:CE:15:DB:36:73:9A:22:CA:EE:64:E0:CF:8B:A3:1F:5A:6B:93:48 Certificate issuer: /CN=A91DF863/serialNumber=39CE15DB36739A22CAEE64E0CF8BA31F5A6B9348 Certificate serial: 3300 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft Manifest number: 32AA Signing time: Fri 04 Apr 2025 15:28:43 +0000 Manifest this update: Fri 04 Apr 2025 15:28:42 +0000 Manifest next update: Fri 11 Apr 2025 15:28:42 +0000 Files and hashes: 1: Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl (hash: Vi6JwwFEAipvYyFsg7yYNmVh7CVb0dkHJjFipfRxRQQ=) 2: 844CFD1C5BAA11EFBAF22B7FC4F9AE02.roa (hash: F0EI0pjKdFSXXJaNRIeZAVVcc/1UvTOq8MA6ZbeocbA=) 3: 902F4AAC567011EFA451BD7CC4F9AE02.roa (hash: qmlGrSLmYcGa18yom8d6PeePfMWIiWVkajsGQGVwEAE=) 4: 909AA4DC567011EFA451BD7CC4F9AE02.roa (hash: eNA7hmO0iaDh6B8QriE+uJJoAJhe22m7Y0RORTwFmBQ=) 5: 834D7D565BAA11EFBAF22B7FC4F9AE02.roa (hash: TJYAsaduMNFlCfCtpHImQhHzTtlz3kZi3/4L+kmyEYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:28:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13056 (0x3300) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF863 Validity Not Before: Apr 4 15:28:42 2025 GMT Not After : Apr 11 15:28:42 2025 GMT Subject: CN=67effaaa-018f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:cf:4e:02:20:ce:e4:94:82:98:8d:9c:d7:0d: 50:1b:42:83:18:2b:6c:5c:85:8b:fa:b4:fe:f6:c4: 68:82:64:09:3b:06:b7:2a:79:4a:ce:9d:60:3a:de: e0:24:8d:de:74:16:6c:22:0d:b3:f1:f9:70:a9:5b: 3c:a6:e8:9a:f6:52:16:c2:d1:75:87:78:74:54:8d: 10:e0:1e:e4:0f:bc:79:c4:fc:84:ca:26:02:29:18: 92:42:c7:a6:b4:08:82:99:cd:0e:31:c3:e2:97:2f: fc:13:d9:dd:d6:cc:b6:b2:27:d5:fa:32:05:3b:d1: 79:3d:cc:d7:02:3a:1c:3f:c4:24:e5:10:39:94:a0: b1:55:b0:59:5b:00:fa:27:a4:dd:cb:3f:d4:51:f9: 96:69:e6:75:1e:25:63:36:a5:6d:a5:f6:b7:3e:2e: a4:ce:5b:ef:d1:04:fa:22:47:09:9c:5b:11:a8:eb: 7e:d4:fd:d2:ab:8d:a3:b0:1c:0d:8f:48:f9:76:b8: 9a:13:db:aa:de:24:61:d4:44:ad:64:12:fd:13:84: b0:7c:2c:cf:0e:b5:29:a1:62:a9:8c:53:3e:6d:d1: 33:aa:ec:59:2f:7f:68:47:63:11:57:7b:41:e8:45: 87:74:28:02:9b:b3:8f:ae:c1:08:57:8e:32:f6:f9: 43:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:AF:8A:37:70:E3:43:15:30:1E:25:2F:DA:A6:80:3A:70:51:18:81 X509v3 Authority Key Identifier: keyid:39:CE:15:DB:36:73:9A:22:CA:EE:64:E0:CF:8B:A3:1F:5A:6B:93:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:c4:a0:0e:07:35:73:2e:91:a7:c4:6c:17:f9:6a:db:69:67: 8f:8d:64:da:11:77:d2:a1:c3:8b:15:4d:e2:b9:d1:31:df:d8: 4e:8e:24:e3:ed:3a:d6:09:9e:85:38:30:7f:f3:62:21:66:6e: bc:08:bf:c6:c7:d6:64:51:d7:47:20:52:0d:5a:46:f3:fb:db: 58:4f:ea:18:ac:bb:a2:3b:ff:3e:91:c9:3c:c8:bf:67:34:d0: 3d:8f:81:ab:a7:9e:91:da:b4:31:a4:b3:7d:ae:52:8e:90:26: 0f:cf:a3:b7:ba:83:ca:e0:d0:c1:f7:d7:e1:fe:9e:39:25:ab: 35:dd:6f:33:e6:de:71:cf:12:73:19:20:92:51:f1:0f:e9:89: 29:2a:b3:bb:4e:0c:59:b0:de:a0:48:57:2f:e2:0b:97:5e:90: 50:a1:c6:2c:c1:ce:05:26:e5:ad:74:11:1c:d1:6a:4b:24:20: d2:c2:5b:5a:bf:9a:52:48:3b:9b:10:7f:43:7b:5f:1a:95:0c: 63:ed:7a:42:d5:01:d2:ac:03:83:8a:b0:e5:89:43:07:e1:a9: c7:67:81:0b:77:0c:89:cf:a9:7a:09:c4:c4:c1:7a:e8:25:59: 21:3f:3f:31:9a:e4:24:a5:2c:2d:60:b3:64:9f:8f:dd:e4:c3: 41:2b:5d:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMwAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY4NjMxMTAvBgNVBAUTKDM5Q0UxNURCMzY3MzlBMjJDQUVFNjRFMENGOEJBMzFG NUE2QjkzNDgwHhcNMjUwNDA0MTUyODQyWhcNMjUwNDExMTUyODQyWjAYMRYwFAYD VQQDEw02N2VmZmFhYS0wMThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5M9OAiDO5JSCmI2c1w1QG0KDGCtsXIWL+rT+9sRogmQJOwa3KnlKzp1gOt7g JI3edBZsIg2z8flwqVs8puia9lIWwtF1h3h0VI0Q4B7kD7x5xPyEyiYCKRiSQsem tAiCmc0OMcPily/8E9nd1sy2sifV+jIFO9F5PczXAjocP8Qk5RA5lKCxVbBZWwD6 J6Tdyz/UUfmWaeZ1HiVjNqVtpfa3Pi6kzlvv0QT6IkcJnFsRqOt+1P3Sq42jsBwN j0j5driaE9uq3iRh1EStZBL9E4SwfCzPDrUpoWKpjFM+bdEzquxZL39oR2MRV3tB 6EWHdCgCm7OPrsEIV44y9vlDywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDmvijdw 40MVMB4lL9qmgDpwURiBMB8GA1UdIwQYMBaAFDnOFds2c5oiyu5k4M+Lox9aa5NI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjg2My9CRkU1NEE2ODgx NUIxMUUyOUI1OEE3M0IzMjkyQjVFOC9PYzRWMnpaem1pTEs3bVRnejR1akgxcHJr MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09jNFYyelp6bWlMSzdtVGd6NHVqSDFwcmswZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Rjg2My9CRkU1NEE2ODgxNUIxMUUyOUI1OEE3M0IzMjkyQjVFOC9PYzRWMnpaem1p TEs3bVRnejR1akgxcHJrMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXxKAOBzVzLpGnxGwX+WrbaWePjWTaEXfSocOLFU3iudEx39hOjiTj 7TrWCZ6FODB/82IhZm68CL/Gx9ZkUddHIFINWkbz+9tYT+oYrLuiO/8+kck8yL9n NNA9j4Grp56R2rQxpLN9rlKOkCYPz6O3uoPK4NDB99fh/p45Jas13W8z5t5xzxJz GSCSUfEP6YkpKrO7TgxZsN6gSFcv4guXXpBQocYswc4FJuWtdBEc0WpLJCDSwlta v5pSSDubEH9De18alQxj7XpC1QHSrAODirDliUMH4anHZ4ELdwyJz6l6CcTEwXro JVkhPz8xmuQkpSwtYLNkn4/d5MNBK12p -----END CERTIFICATE-----Generated at Fri Apr 4 21:49:12 2025 by rpki-client