$ rpki-client -vvf rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft File: OoXUR-GGdf7VrgXJKTee761by8A.mft (raw, json) Hash identifier: 2FCPptptonLJ2wyOtmkKw0V/TMjqwEmIKqUzVEBGQxI= Subject key identifier: A9:5D:67:25:E3:FE:15:63:89:21:53:06:8B:1F:A0:AB:36:4E:50:BE Authority key identifier: 3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0 Certificate issuer: /CN=A91E838F/serialNumber=3A85D447E18675FED5AE05C929379EEFAD5BCBC0 Certificate serial: 07A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft Manifest number: 0789 Signing time: Wed 02 Apr 2025 21:21:37 +0000 Manifest this update: Wed 02 Apr 2025 21:21:36 +0000 Manifest next update: Wed 09 Apr 2025 21:21:36 +0000 Files and hashes: 1: OoXUR-GGdf7VrgXJKTee761by8A.crl (hash: WOm9kKl9sPs95VBRNmC+S22uePhQ4mhg5YUMB8iQwAk=) 2: 3A80616C853811EFA2F05E2FC4F9AE02.roa (hash: VacwFfXxfWfasplgXF9A1AX11wCHDuK5XANfDyd18Pc=) 3: 9E393ADA657011EB96AF8F49C4F9AE02.roa (hash: nh4OlofqMh099kYvPNfjQ05/jiIH5vP8fVdEV6he48g=) 4: DACBD9F638F911EBB13C034CC4F9AE02.roa (hash: KuZID6pq906VPDfvmGsN77h7hBvEwQX/7r+oBn+hpC0=) 5: EC8B7E82450E11EB887ECF6FC4F9AE02.roa (hash: MChKj8CysBVpKBL1Yc5KnUgJyLD5UeDlW+DQqjWmTk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.crl rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 21:21:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1953 (0x7a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E838F Validity Not Before: Apr 2 21:21:36 2025 GMT Not After : Apr 9 21:21:36 2025 GMT Subject: CN=67edaa60-6755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:c0:fb:ce:86:ba:94:e4:e6:a1:3c:79:f7:fe: 3b:a6:54:1f:70:2f:a3:97:85:13:c7:97:ab:3c:56: 72:b6:75:54:bd:45:86:0e:76:fa:27:24:d4:1f:11: 7a:ef:b4:4c:d2:f5:d5:2b:9b:bb:b4:28:07:a7:29: 31:7d:8d:2c:c1:e2:62:8c:ee:97:da:32:09:a7:84: 6b:c7:4e:1b:dc:25:cd:a8:9c:2e:4a:b3:11:29:ef: 15:c0:af:c4:87:db:59:f0:b1:76:34:21:48:1f:85: a0:70:23:d0:86:ef:c5:fc:9e:a0:be:8c:df:7c:1f: e9:7d:f0:68:fc:c6:33:03:e9:33:10:e2:29:7f:75: 75:17:c3:f4:02:18:de:f3:d0:e5:cf:3c:3c:e9:14: 15:14:05:7e:eb:4b:dd:3c:6e:dc:f3:54:ba:e7:8a: 47:93:93:49:a4:e8:a9:81:44:79:1c:2d:41:67:0c: fd:63:2e:c0:0d:6a:59:46:3f:e4:ec:7b:e6:f3:6a: d9:37:55:68:cb:92:d5:62:2c:9a:51:e6:94:b2:9a: 53:f9:eb:47:d7:95:92:51:ee:25:d5:65:b8:91:4e: af:8c:1f:3f:0b:c7:17:02:33:0c:f4:db:7f:f2:e6: bf:fd:39:04:42:53:df:d6:a9:12:6e:a8:4f:f9:55: a3:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:5D:67:25:E3:FE:15:63:89:21:53:06:8B:1F:A0:AB:36:4E:50:BE X509v3 Authority Key Identifier: keyid:3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:fe:84:d1:8d:0c:e9:0d:01:3b:7d:d3:b2:9c:46:98:f4:77: 39:65:fb:bb:26:89:4b:57:f9:83:57:74:ab:19:be:d3:e0:da: b0:1d:f7:c1:77:b4:60:b3:d2:c0:df:ea:3d:62:25:be:06:77: 49:a8:22:ae:b2:dd:b0:c5:21:02:ef:fd:a6:5f:5a:0c:97:e0: ff:b9:58:be:8e:db:bf:94:f7:b8:49:79:e1:b7:6a:a3:d9:48: 2c:ae:18:59:dc:c7:e3:79:5c:aa:98:ea:74:10:8a:b1:3d:d8: d7:05:ae:78:2c:eb:e3:b3:16:7a:98:8a:bd:38:cb:fc:c9:ad: 8c:17:5a:8a:cb:77:16:ff:2f:d7:16:cd:fb:83:51:d9:d6:20: fd:3a:c0:f2:15:8b:17:94:8c:0f:e7:d7:db:f9:cd:16:3f:63: 33:b9:85:b9:ac:98:87:89:a1:94:79:fc:e6:b6:34:68:8b:51: b3:ba:0e:38:fc:0f:70:62:85:ac:a7:65:8c:89:95:d7:ef:d5: 17:63:d8:ba:58:70:45:46:bd:32:10:89:1e:7f:c7:a0:c6:0a: 78:b6:06:92:58:52:c3:04:8d:77:fb:a3:7e:91:22:a4:ba:06: 09:bc:24:5e:5b:08:2f:d7:47:ca:01:de:25:47:c3:07:b5:a3: f1:52:2c:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgzOEYxMTAvBgNVBAUTKDNBODVENDQ3RTE4Njc1RkVENUFFMDVDOTI5Mzc5RUVG QUQ1QkNCQzAwHhcNMjUwNDAyMjEyMTM2WhcNMjUwNDA5MjEyMTM2WjAYMRYwFAYD VQQDEw02N2VkYWE2MC02NzU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA98D7zoa6lOTmoTx59/47plQfcC+jl4UTx5erPFZytnVUvUWGDnb6JyTUHxF6 77RM0vXVK5u7tCgHpykxfY0sweJijO6X2jIJp4Rrx04b3CXNqJwuSrMRKe8VwK/E h9tZ8LF2NCFIH4WgcCPQhu/F/J6gvozffB/pffBo/MYzA+kzEOIpf3V1F8P0Ahje 89Dlzzw86RQVFAV+60vdPG7c81S654pHk5NJpOipgUR5HC1BZwz9Yy7ADWpZRj/k 7Hvm82rZN1Voy5LVYiyaUeaUsppT+etH15WSUe4l1WW4kU6vjB8/C8cXAjMM9Nt/ 8ua//TkEQlPf1qkSbqhP+VWjYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKldZyXj /hVjiSFTBosfoKs2TlC+MB8GA1UdIwQYMBaAFDqF1EfhhnX+1a4FySk3nu+tW8vA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODM4Ri9BOUY3NzM5ODA2 RTExMUVCOUIzMzVDNkRDNEY5QUUwMi9Pb1hVUi1HR2RmN1ZyZ1hKS1RlZTc2MWJ5 OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09vWFVSLUdHZGY3VnJnWEpLVGVlNzYxYnk4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODM4Ri9BOUY3NzM5ODA2RTExMUVCOUIzMzVDNkRDNEY5QUUwMi9Pb1hVUi1HR2Rm N1ZyZ1hKS1RlZTc2MWJ5OEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBK/oTRjQzpDQE7fdOynEaY9Hc5Zfu7JolLV/mDV3SrGb7T4NqwHffB d7Rgs9LA3+o9YiW+BndJqCKust2wxSEC7/2mX1oMl+D/uVi+jtu/lPe4SXnht2qj 2UgsrhhZ3MfjeVyqmOp0EIqxPdjXBa54LOvjsxZ6mIq9OMv8ya2MF1qKy3cW/y/X Fs37g1HZ1iD9OsDyFYsXlIwP59fb+c0WP2MzuYW5rJiHiaGUefzmtjRoi1Gzug44 /A9wYoWsp2WMiZXX79UXY9i6WHBFRr0yEIkef8egxgp4tgaSWFLDBI13+6N+kSKk ugYJvCReWwgv10fKAd4lR8MHtaPxUixD -----END CERTIFICATE-----Generated at Fri Apr 4 18:28:54 2025 by rpki-client