$ rpki-client -vvf rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft File: oUygeMheRlNdkgQ4K4SXTxOwyTw.mft (raw, json) Hash identifier: Pd1r8KphBa4CiIrMa112GvHx7usV6+WMoh8Bx9tmnD0= Subject key identifier: 05:26:F4:24:60:74:BD:64:DA:7F:9D:0E:50:90:20:96:D8:5B:95:19 Authority key identifier: A1:4C:A0:78:C8:5E:46:53:5D:92:04:38:2B:84:97:4F:13:B0:C9:3C Certificate issuer: /CN=A91E83FE/serialNumber=A14CA078C85E46535D9204382B84974F13B0C93C Certificate serial: 04CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft Manifest number: 04C2 Signing time: Sat 29 Mar 2025 00:07:34 +0000 Manifest this update: Sat 29 Mar 2025 00:07:34 +0000 Manifest next update: Sat 05 Apr 2025 00:07:34 +0000 Files and hashes: 1: oUygeMheRlNdkgQ4K4SXTxOwyTw.crl (hash: PAqE8Ba1SFFxPoP4P3JPsMSOfNrLNt419LjBhRZSoZ0=) 2: B90B58FCD97211ED8C2F1263C4F9AE02.roa (hash: Uv/DIuVOqvX05vXkqfaNSYJYxyqVmNJFQQZ426t0Ang=) 3: B9D90E00606311EE8844F941C4F9AE02.roa (hash: X2R7fBr7byP7M3KR3cBhw+xawX2t49iSaQy5emSoxD4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.crl rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 00:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1229 (0x4cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E83FE Validity Not Before: Mar 29 00:07:34 2025 GMT Not After : Apr 5 00:07:34 2025 GMT Subject: CN=67e739c6-a7c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:fa:13:6f:53:54:fc:52:e1:69:fc:7f:17:c9: 01:f5:01:97:c0:f0:0c:06:df:f7:aa:f8:27:0f:36: fb:e5:23:b4:95:07:2e:81:ca:77:e2:07:8f:a7:f8: 0b:a2:87:7b:ad:d2:db:50:cc:c7:d7:ec:f8:a8:07: d7:57:9b:1b:ae:f3:7b:92:d7:25:40:6c:0a:28:4e: 2f:b9:73:0f:fa:c3:8d:57:21:22:19:e3:da:a8:62: 27:4d:b4:e7:8f:5e:87:45:3b:7f:45:31:95:78:7b: 7a:d8:06:ce:26:8c:30:cb:b7:f8:6f:e1:1c:67:11: 80:8d:b8:a8:0d:61:8d:88:a5:53:67:1d:86:72:26: bf:b8:44:78:dd:7b:44:b0:cf:57:af:d4:52:e7:9e: 17:c7:84:58:4c:ba:f1:44:3a:1c:33:5d:1b:5d:39: 8d:7d:13:a1:84:df:a9:da:59:a1:bc:2b:71:0b:75: 34:ab:d4:a3:bc:d7:5b:16:06:1b:59:42:81:14:ba: 7e:3f:94:76:0b:e9:d8:16:d2:0e:1a:63:fb:ec:5a: fa:4e:c2:36:d5:33:c0:a3:f0:17:6b:00:8e:89:c6: 14:4e:50:4f:4f:8a:d5:d9:2b:c5:3c:3c:de:22:c8: cd:3b:c1:2b:c5:fd:a4:76:2d:0a:39:81:b4:01:1a: 07:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:26:F4:24:60:74:BD:64:DA:7F:9D:0E:50:90:20:96:D8:5B:95:19 X509v3 Authority Key Identifier: keyid:A1:4C:A0:78:C8:5E:46:53:5D:92:04:38:2B:84:97:4F:13:B0:C9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:d7:cf:ae:ef:08:b6:d5:82:ba:17:6b:f2:d4:2c:e8:93:ce: 14:4f:d9:92:af:db:a6:8a:c0:7e:76:ed:57:3e:fe:96:a7:18: 83:7a:c0:55:50:5c:56:57:e8:c0:4c:3c:35:9a:15:1b:4c:00: 62:24:d8:b2:a2:eb:80:cc:46:76:aa:0d:13:be:dc:7e:68:ea: 61:40:f9:6b:6a:7d:52:b3:57:27:00:98:dc:d5:e7:87:91:23: 06:66:0d:df:b3:99:d3:2a:62:be:b1:ec:e1:54:80:ea:82:00: 97:93:3b:91:73:8a:bb:82:3b:84:17:ed:38:1e:52:86:3b:5b: 17:c9:fe:e1:df:6c:fe:76:ab:d5:6f:e4:0c:61:ba:28:3b:b2: 72:91:c5:32:75:14:77:24:c1:a1:7b:ec:69:bb:b9:b3:d0:4e: c8:94:60:20:83:4c:85:e5:b9:2b:0a:55:a1:f9:aa:88:83:38: 5e:d1:6b:6f:84:c8:fc:32:26:1d:12:c1:a8:72:e3:aa:39:94: d2:d1:8e:fc:38:a4:00:0b:4b:35:cc:d9:ca:f3:4d:7f:e2:80: e9:6e:34:73:23:fe:8e:2d:10:99:d2:0a:f4:c0:0c:52:b6:51: e8:3f:51:ec:64:8f:94:96:4b:59:4f:e2:7b:61:98:32:34:f9: ec:62:5d:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgzRkUxMTAvBgNVBAUTKEExNENBMDc4Qzg1RTQ2NTM1RDkyMDQzODJCODQ5NzRG MTNCMEM5M0MwHhcNMjUwMzI5MDAwNzM0WhcNMjUwNDA1MDAwNzM0WjAYMRYwFAYD VQQDEw02N2U3MzljNi1hN2M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4foTb1NU/FLhafx/F8kB9QGXwPAMBt/3qvgnDzb75SO0lQcugcp34gePp/gL ood7rdLbUMzH1+z4qAfXV5sbrvN7ktclQGwKKE4vuXMP+sONVyEiGePaqGInTbTn j16HRTt/RTGVeHt62AbOJowwy7f4b+EcZxGAjbioDWGNiKVTZx2Gcia/uER43XtE sM9Xr9RS554Xx4RYTLrxRDocM10bXTmNfROhhN+p2lmhvCtxC3U0q9SjvNdbFgYb WUKBFLp+P5R2C+nYFtIOGmP77Fr6TsI21TPAo/AXawCOicYUTlBPT4rV2SvFPDze IsjNO8Erxf2kdi0KOYG0ARoHBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAUm9CRg dL1k2n+dDlCQIJbYW5UZMB8GA1UdIwQYMBaAFKFMoHjIXkZTXZIEOCuEl08TsMk8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODNGRS8zMjk1RjkwMjFE QjMxMUVDODZFMDg2M0VDNEY5QUUwMi9vVXlnZU1oZVJsTmRrZ1E0SzRTWFR4T3d5 VHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29VeWdlTWhlUmxOZGtnUTRLNFNYVHhPd3lUdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODNGRS8zMjk1RjkwMjFEQjMxMUVDODZFMDg2M0VDNEY5QUUwMi9vVXlnZU1oZVJs TmRrZ1E0SzRTWFR4T3d5VHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAx18+u7wi21YK6F2vy1Czok84UT9mSr9umisB+du1XPv6WpxiDesBV UFxWV+jATDw1mhUbTABiJNiyouuAzEZ2qg0Tvtx+aOphQPlran1Ss1cnAJjc1eeH kSMGZg3fs5nTKmK+sezhVIDqggCXkzuRc4q7gjuEF+04HlKGO1sXyf7h32z+dqvV b+QMYbooO7JykcUydRR3JMGhe+xpu7mz0E7IlGAgg0yF5bkrClWh+aqIgzhe0Wtv hMj8MiYdEsGocuOqOZTS0Y78OKQAC0s1zNnK801/4oDpbjRzI/6OLRCZ0gr0wAxS tlHoP1HsZI+UlktZT+J7YZgyNPnsYl1m -----END CERTIFICATE-----Generated at Fri Apr 4 22:09:31 2025 by rpki-client