$ rpki-client -vvf rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft File: oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft (raw, json) Hash identifier: 37rYa3rhIg++Hee8gjQvynH9vcq85vZsN9+uzbRLh70= Subject key identifier: D7:BD:9E:6A:07:25:30:83:9C:74:8D:7E:23:B9:62:75:0A:22:B6:56 Authority key identifier: A0:7A:F0:CC:B2:98:35:CC:76:42:97:4B:AC:9E:15:02:B9:CF:82:D0 Certificate issuer: /CN=A91E29CB/serialNumber=A07AF0CCB29835CC7642974BAC9E1502B9CF82D0 Certificate serial: 0286 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHrwzLKYNcx2QpdLrJ4VArnPgtA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft Manifest number: 027A Signing time: Thu 03 Apr 2025 01:41:00 +0000 Manifest this update: Thu 03 Apr 2025 01:41:00 +0000 Manifest next update: Thu 10 Apr 2025 01:41:00 +0000 Files and hashes: 1: oHrwzLKYNcx2QpdLrJ4VArnPgtA.crl (hash: fMjfQjk0W5TRNNqAETEY1vqKlac6nYC6BvzYAhPhNyw=) 2: C08A3ED6E03C11EF991E147AC4F9AE02.roa (hash: Jn6Bcmff+jZyhjqGcyii8YjSmtOYYAInHon2VXcIz3U=) 3: C258B0D0E03C11EF991E147AC4F9AE02.roa (hash: EWbZQVxhL2vlkm+GzLLUuL3B+QzSpuEn2YQAxnXCEkI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.crl rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHrwzLKYNcx2QpdLrJ4VArnPgtA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 01:40:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 646 (0x286) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E29CB Validity Not Before: Apr 3 01:41:00 2025 GMT Not After : Apr 10 01:41:00 2025 GMT Subject: CN=67ede72c-00bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ba:d6:92:ae:27:bb:da:cb:7d:e5:4c:e6:18: 36:57:fd:61:06:12:b6:75:ca:90:6c:6e:18:bd:d1: c8:7c:ac:ac:b7:f8:50:e9:39:50:f8:c9:f2:e7:ea: f3:22:70:6b:b4:c9:5c:dd:21:5b:4c:05:16:9c:b9: 74:9a:69:c5:72:4c:78:51:01:cd:b3:85:c9:46:c1: 6c:43:42:d7:3a:97:74:c6:31:19:16:f5:95:cf:2b: f3:c9:2e:21:df:29:ac:10:0c:d9:65:42:77:0a:e1: fd:01:0f:a4:7a:1c:88:58:d3:d1:18:99:4a:6d:7c: ed:78:2d:42:32:04:ca:6f:b6:4e:27:be:30:f2:93: c2:55:31:bb:97:68:a3:1e:91:04:d7:fd:18:45:97: b9:56:6f:69:9d:97:e9:1d:3c:97:e0:b5:44:f3:2d: 97:eb:5e:5c:14:75:d6:24:ef:4b:19:3c:85:2f:6d: 32:12:f7:78:5d:26:39:0e:b3:1b:05:a0:f9:10:ad: d3:98:c9:8c:02:e8:4b:88:77:fe:27:b8:be:ed:08: 96:30:14:b0:95:95:8f:1e:ee:ff:da:5d:15:1f:13: 0e:17:43:78:76:cb:34:71:5b:ef:a8:14:ee:9e:88: 41:23:c2:2a:cd:53:98:34:4e:d5:13:f5:00:1a:ba: ed:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:BD:9E:6A:07:25:30:83:9C:74:8D:7E:23:B9:62:75:0A:22:B6:56 X509v3 Authority Key Identifier: keyid:A0:7A:F0:CC:B2:98:35:CC:76:42:97:4B:AC:9E:15:02:B9:CF:82:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHrwzLKYNcx2QpdLrJ4VArnPgtA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:4c:cd:3e:17:71:d1:16:c4:1f:34:c4:57:a2:ec:8c:f7:4e: 8a:29:93:ab:ec:24:6b:0c:27:af:3d:40:b6:f3:93:e6:f2:22: 75:ac:57:07:9e:8a:1c:63:50:9a:45:54:c9:ea:7c:b1:1f:18: 40:34:e3:f2:27:ae:fe:ee:65:02:4f:c4:0a:16:4e:21:53:b5: ca:73:9e:8a:e5:26:31:8d:19:29:ed:cc:d0:73:27:5b:d5:ac: d2:69:99:32:54:42:ed:56:61:40:6f:61:2a:21:be:6a:ab:38: 15:bc:c2:72:b9:e0:e8:c0:6d:b3:39:19:0d:c7:22:ef:94:5c: b5:e8:3d:93:c2:ca:84:e5:9e:b8:59:ec:0a:ae:d7:6e:6c:e7: f2:23:96:02:2b:c3:4d:73:8c:ab:ff:41:22:ec:93:90:e4:81: d4:34:ab:ae:0d:a7:72:b8:e0:9d:f1:34:49:ed:21:4e:6a:e3: ca:b2:d9:78:7a:eb:30:86:32:5b:0d:c1:ca:0e:5e:45:e4:c8: 38:2b:1e:6e:a9:7c:2b:66:fd:f1:c1:0a:fa:9e:54:0a:5c:ff: 49:78:ab:97:9a:c9:97:c4:fa:be:e5:0a:37:ef:c2:83:b6:50: 53:4f:53:e2:10:85:fd:2e:23:4a:11:b8:29:de:a7:44:9a:ae: 07:e7:ce:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI5Q0IxMTAvBgNVBAUTKEEwN0FGMENDQjI5ODM1Q0M3NjQyOTc0QkFDOUUxNTAy QjlDRjgyRDAwHhcNMjUwNDAzMDE0MTAwWhcNMjUwNDEwMDE0MTAwWjAYMRYwFAYD VQQDEw02N2VkZTcyYy0wMGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7rWkq4nu9rLfeVM5hg2V/1hBhK2dcqQbG4YvdHIfKyst/hQ6TlQ+Mny5+rz InBrtMlc3SFbTAUWnLl0mmnFckx4UQHNs4XJRsFsQ0LXOpd0xjEZFvWVzyvzyS4h 3ymsEAzZZUJ3CuH9AQ+kehyIWNPRGJlKbXzteC1CMgTKb7ZOJ74w8pPCVTG7l2ij HpEE1/0YRZe5Vm9pnZfpHTyX4LVE8y2X615cFHXWJO9LGTyFL20yEvd4XSY5DrMb BaD5EK3TmMmMAuhLiHf+J7i+7QiWMBSwlZWPHu7/2l0VHxMOF0N4dss0cVvvqBTu nohBI8IqzVOYNE7VE/UAGrrtcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNe9nmoH JTCDnHSNfiO5YnUKIrZWMB8GA1UdIwQYMBaAFKB68MyymDXMdkKXS6yeFQK5z4LQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjlDQi8xRjkwMkIwRTA1 QUYxMUVEQTcxNzY0MkJDNEY5QUUwMi9vSHJ3ekxLWU5jeDJRcGRMcko0VkFyblBn dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Icnd6TEtZTmN4MlFwZExySjRWQXJuUGd0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjlDQi8xRjkwMkIwRTA1QUYxMUVEQTcxNzY0MkJDNEY5QUUwMi9vSHJ3ekxLWU5j eDJRcGRMcko0VkFyblBndEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWTM0+F3HRFsQfNMRXouyM906KKZOr7CRrDCevPUC285Pm8iJ1rFcH noocY1CaRVTJ6nyxHxhANOPyJ67+7mUCT8QKFk4hU7XKc56K5SYxjRkp7czQcydb 1azSaZkyVELtVmFAb2EqIb5qqzgVvMJyueDowG2zORkNxyLvlFy16D2TwsqE5Z64 WewKrtdubOfyI5YCK8NNc4yr/0Ei7JOQ5IHUNKuuDadyuOCd8TRJ7SFOauPKstl4 euswhjJbDcHKDl5F5Mg4Kx5uqXwrZv3xwQr6nlQKXP9JeKuXmsmXxPq+5Qo378KD tlBTT1PiEIX9LiNKEbgp3qdEmq4H585I -----END CERTIFICATE-----Generated at Fri Apr 4 22:15:00 2025 by rpki-client