$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.mft File: Od1jNTmfErgZIRzpGqfc9i9tgbw.mft (raw, json) Hash identifier: bJKgWMV79U2jUm1lMZnBclafu8xKMHyiQXR+oL7JOyo= Subject key identifier: 44:B8:27:3F:EC:9D:77:2B:8F:3E:8C:DE:1C:2B:7E:13:5A:F4:7F:62 Authority key identifier: 39:DD:63:35:39:9F:12:B8:19:21:1C:E9:1A:A7:DC:F6:2F:6D:81:BC Certificate issuer: /CN=A91EBB2D/serialNumber=39DD6335399F12B819211CE91AA7DCF62F6D81BC Certificate serial: 0347 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Od1jNTmfErgZIRzpGqfc9i9tgbw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.mft Manifest number: 033F Signing time: Thu 17 Apr 2025 00:42:13 +0000 Manifest this update: Thu 17 Apr 2025 00:42:12 +0000 Manifest next update: Thu 24 Apr 2025 00:42:12 +0000 Files and hashes: 1: Od1jNTmfErgZIRzpGqfc9i9tgbw.crl (hash: Ufs/+nCzw4ziSO/EwD26macMv/tXDp57lCPpfzBPD98=) 2: 8FA9D71068D611EEAD2D927FC4F9AE02.roa (hash: KckJvrN2O9+k1z94FA9x81wNFJzF7Y7yD41j1qhB6N4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.crl rsync://rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Od1jNTmfErgZIRzpGqfc9i9tgbw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 00:42:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 839 (0x347) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBB2D, serialNumber=39DD6335399F12B819211CE91AA7DCF62F6D81BC Validity Not Before: Apr 17 00:42:12 2025 GMT Not After : Apr 24 00:42:12 2025 GMT Subject: CN=68004e65-e006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a5:1b:bc:46:0b:2d:21:8f:8b:08:5d:e2:8b: 3c:bd:71:4c:56:cf:cd:72:a6:14:45:a7:2d:22:5d: e7:ce:43:74:7a:71:86:f2:22:9f:53:31:38:cb:5b: 14:dd:4c:a0:0a:ee:4a:76:15:5c:64:59:4b:17:85: ae:b2:58:31:5a:2d:23:3b:94:70:e1:c4:95:77:96: 62:81:0d:14:45:bd:ae:39:f4:b8:73:31:62:02:cf: 9c:29:3a:16:54:9d:ee:e5:34:32:7d:fd:9c:f7:a8: 50:b5:c4:d2:f0:ec:59:86:73:24:f4:4d:ba:df:a8: aa:9c:a0:e1:db:9f:f9:86:89:08:5c:a7:ee:4c:9f: fa:53:34:91:f8:b8:da:8f:95:78:1b:1d:12:29:7e: f3:70:e4:39:ac:31:91:a1:b5:0e:9e:8b:66:fd:23: aa:11:5f:3c:01:ed:5e:3e:85:fe:bd:03:a5:7e:72: ab:88:2c:8e:cf:36:66:91:09:03:85:b5:f5:e0:fb: ba:15:6f:b4:eb:f5:b5:d2:0a:2d:ac:79:b5:5d:b8: b2:10:32:fc:a6:60:2a:3e:ef:30:3d:0a:e8:ba:45: 3b:77:b9:39:2c:b1:30:88:0e:42:51:39:e7:20:49: 99:f1:8e:3a:c0:ef:d6:47:96:e5:f1:f6:d3:c2:06: 08:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:B8:27:3F:EC:9D:77:2B:8F:3E:8C:DE:1C:2B:7E:13:5A:F4:7F:62 X509v3 Authority Key Identifier: keyid:39:DD:63:35:39:9F:12:B8:19:21:1C:E9:1A:A7:DC:F6:2F:6D:81:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Od1jNTmfErgZIRzpGqfc9i9tgbw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:ea:3b:f6:14:6b:29:d6:93:a0:09:a1:8a:e0:b1:68:32:9a: 0b:3b:62:0e:be:86:08:b4:9d:cc:ae:96:10:55:e5:22:f1:79: fd:3a:6e:e6:18:8d:10:88:25:dc:7f:40:9b:92:60:4a:36:02: 23:65:4d:54:49:a7:ea:8f:77:fb:f2:fd:7a:a1:5c:bd:5a:ff: f1:df:c1:6d:0a:d1:75:31:3a:a4:72:16:88:c1:b6:44:0b:67: 1a:19:02:5c:33:33:c2:29:d6:d2:f8:66:c0:01:cd:47:37:79: 6f:dc:77:1f:3f:bb:69:15:33:2e:ae:01:6c:91:51:79:4c:6b: 4b:07:21:50:13:80:a0:4b:58:ba:69:68:dd:51:2e:06:a7:ca: f9:67:4d:03:48:f0:99:90:29:a0:91:65:9d:9e:11:29:62:d0: 4e:3e:67:f2:49:bc:d8:de:ad:6b:6e:d6:07:fb:27:e5:cd:0d: a0:29:3b:0f:75:ee:3a:a8:97:3f:40:50:29:eb:af:8c:cf:26: 92:06:df:ea:2d:43:83:93:b5:ec:42:d5:a1:34:31:a6:0f:60: 56:a4:69:02:32:0e:03:2c:bb:34:3d:69:ce:ca:b9:49:32:00: a1:76:eb:87:ee:34:57:83:a9:cc:67:5a:c2:a0:91:44:0c:d1: 63:d5:17:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJCMkQxMTAvBgNVBAUTKDM5REQ2MzM1Mzk5RjEyQjgxOTIxMUNFOTFBQTdEQ0Y2 MkY2RDgxQkMwHhcNMjUwNDE3MDA0MjEyWhcNMjUwNDI0MDA0MjEyWjAYMRYwFAYD VQQDEw02ODAwNGU2NS1lMDA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3qUbvEYLLSGPiwhd4os8vXFMVs/NcqYURactIl3nzkN0enGG8iKfUzE4y1sU 3UygCu5KdhVcZFlLF4WuslgxWi0jO5Rw4cSVd5ZigQ0URb2uOfS4czFiAs+cKToW VJ3u5TQyff2c96hQtcTS8OxZhnMk9E2636iqnKDh25/5hokIXKfuTJ/6UzSR+Lja j5V4Gx0SKX7zcOQ5rDGRobUOnotm/SOqEV88Ae1ePoX+vQOlfnKriCyOzzZmkQkD hbX14Pu6FW+06/W10gotrHm1XbiyEDL8pmAqPu8wPQroukU7d7k5LLEwiA5CUTnn IEmZ8Y46wO/WR5bl8fbTwgYIdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFES4Jz/s nXcrjz6M3hwrfhNa9H9iMB8GA1UdIwQYMBaAFDndYzU5nxK4GSEc6Rqn3PYvbYG8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkIyRC85NjVCRDU3RUI4 OTUxMUVDODI0MkQyN0VDNEY5QUUwMi9PZDFqTlRtZkVyZ1pJUnpwR3FmYzlpOXRn YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09kMWpOVG1mRXJnWklSenBHcWZjOWk5dGdidy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkIyRC85NjVCRDU3RUI4OTUxMUVDODI0MkQyN0VDNEY5QUUwMi9PZDFqTlRtZkVy Z1pJUnpwR3FmYzlpOXRnYncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAD6jv2FGsp1pOgCaGK4LFoMpoLO2IOvoYItJ3MrpYQVeUi8Xn9Om7m GI0QiCXcf0CbkmBKNgIjZU1USafqj3f78v16oVy9Wv/x38FtCtF1MTqkchaIwbZE C2caGQJcMzPCKdbS+GbAAc1HN3lv3HcfP7tpFTMurgFskVF5TGtLByFQE4CgS1i6 aWjdUS4Gp8r5Z00DSPCZkCmgkWWdnhEpYtBOPmfySbzY3q1rbtYH+yflzQ2gKTsP de46qJc/QFAp66+MzyaSBt/qLUODk7XsQtWhNDGmD2BWpGkCMg4DLLs0PWnOyrlJ MgChduuH7jRXg6nMZ1rCoJFEDNFj1RfQ -----END CERTIFICATE-----Generated at Sat Apr 19 01:03:41 2025 by rpki-client