$ rpki-client -vvf rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.mft File: OM4nbIW20tDq_p0_ilpQjN26uWg.mft (raw, json) Hash identifier: wCRaRBwY7KxQL5h+sKRKqc5/oQy61vdgMfS3Tky+q/w= Subject key identifier: 9B:D0:0E:0A:7B:BD:E7:8D:E3:5F:92:CA:11:C3:82:53:32:D7:2B:2B Authority key identifier: 38:CE:27:6C:85:B6:D2:D0:EA:FE:9D:3F:8A:5A:50:8C:DD:BA:B9:68 Certificate issuer: /CN=A91F053E/serialNumber=38CE276C85B6D2D0EAFE9D3F8A5A508CDDBAB968 Certificate serial: 0688 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OM4nbIW20tDq_p0_ilpQjN26uWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.mft Manifest number: 0681 Signing time: Fri 28 Mar 2025 22:34:22 +0000 Manifest this update: Fri 28 Mar 2025 22:34:21 +0000 Manifest next update: Fri 04 Apr 2025 22:34:21 +0000 Files and hashes: 1: OM4nbIW20tDq_p0_ilpQjN26uWg.crl (hash: ypfKkrvy27Z3eO/2Y02Rb2iDBiKJjsqKTXiYGZcTxFQ=) 2: 6473BE24979811EB97001639C4F9AE02.roa (hash: 2h+gg3bjxIldHS97Lzce3I89lkJGy2giiZHmYtJCKjs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.crl rsync://rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OM4nbIW20tDq_p0_ilpQjN26uWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 22:34:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1672 (0x688) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F053E Validity Not Before: Mar 28 22:34:21 2025 GMT Not After : Apr 4 22:34:21 2025 GMT Subject: CN=67e723ed-0131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c0:e8:dd:94:ce:85:d7:f7:da:a5:91:c8:f9: 83:71:ee:4c:97:3b:40:14:dd:03:3d:97:25:0e:4c: 8c:c8:1e:34:90:21:82:ab:d3:5f:f8:eb:d8:cb:ef: 54:05:43:70:5b:97:4e:b5:11:0e:8f:78:56:7d:29: 61:6d:80:74:4d:ac:d2:14:dc:e5:46:cf:47:2c:34: ce:87:7e:b5:35:b0:85:c2:a2:62:e5:9f:ee:40:d2: 9e:6c:6a:70:5f:03:cb:db:8d:f6:af:03:14:6c:fe: e3:8e:6a:5b:8b:8e:63:66:97:c5:b7:40:08:ed:43: 73:09:58:e7:12:48:4d:1f:b4:4f:b3:da:ba:26:b2: bb:a4:89:7a:25:95:e3:85:c8:33:d3:57:66:74:20: b1:b1:38:3a:6d:4b:bb:18:9c:8f:d9:7a:4a:d3:5b: 55:e5:93:34:96:c7:4a:84:8b:f2:1c:68:ac:2a:fd: ec:8d:86:a2:f7:92:71:61:c9:81:06:28:32:f3:0a: 9c:72:a9:9d:5e:02:50:1b:7e:9e:28:57:47:d9:fa: 13:1b:27:fa:25:68:1b:bb:6e:03:92:4a:de:af:93: 73:d2:1c:c1:ea:ab:62:d4:c7:55:bd:4a:fd:ac:d7: ed:4c:83:51:7e:bd:71:41:fa:c1:1f:24:05:9a:dc: 88:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D0:0E:0A:7B:BD:E7:8D:E3:5F:92:CA:11:C3:82:53:32:D7:2B:2B X509v3 Authority Key Identifier: keyid:38:CE:27:6C:85:B6:D2:D0:EA:FE:9D:3F:8A:5A:50:8C:DD:BA:B9:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OM4nbIW20tDq_p0_ilpQjN26uWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:e4:8f:b0:e6:24:1d:99:57:fd:ad:65:89:27:d1:2e:4a:3e: 20:b2:f6:c2:00:ae:15:ca:fd:ef:1e:80:d4:2b:97:21:93:06: 2c:92:a7:dc:d8:e1:43:ae:aa:b2:d9:bd:52:6d:e5:1c:69:fe: 58:0c:c2:fe:4c:cc:3f:d9:cf:79:7e:d6:2b:52:49:d8:c5:1e: 4b:c8:a5:03:2e:87:e0:5c:24:20:f9:36:c6:d0:f7:4b:29:3c: f5:f7:7b:75:4e:72:61:44:73:a6:0f:27:15:fb:3a:05:0f:7c: 88:a4:e4:f4:8d:5c:6d:8c:bb:16:f3:8d:fc:cf:af:0f:2a:34: b6:a1:51:87:34:6b:80:2f:81:1d:e1:10:bc:52:f6:1c:1d:1b: d8:33:62:49:d6:4d:c2:10:58:79:c7:cf:58:3c:ca:ff:6c:32: 02:6e:fe:35:ac:8e:8e:0a:7b:57:bf:f5:9d:1a:4c:28:9e:c1: ef:7d:e4:a7:cb:d1:11:44:98:f0:de:1b:a6:e2:5b:a8:60:89: 3a:ed:65:d1:94:6b:ce:95:2d:e0:bb:1c:52:da:cf:57:0b:96: 90:e1:3b:d5:f3:0b:c3:c2:6a:7b:56:f5:1b:96:bc:fe:c5:c8: 5b:5c:f1:58:8f:ca:e6:14:ff:2d:d0:d9:89:b5:90:72:55:62: 51:d3:71:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjA1M0UxMTAvBgNVBAUTKDM4Q0UyNzZDODVCNkQyRDBFQUZFOUQzRjhBNUE1MDhD RERCQUI5NjgwHhcNMjUwMzI4MjIzNDIxWhcNMjUwNDA0MjIzNDIxWjAYMRYwFAYD VQQDEw02N2U3MjNlZC0wMTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwMDo3ZTOhdf32qWRyPmDce5MlztAFN0DPZclDkyMyB40kCGCq9Nf+OvYy+9U BUNwW5dOtREOj3hWfSlhbYB0TazSFNzlRs9HLDTOh361NbCFwqJi5Z/uQNKebGpw XwPL2432rwMUbP7jjmpbi45jZpfFt0AI7UNzCVjnEkhNH7RPs9q6JrK7pIl6JZXj hcgz01dmdCCxsTg6bUu7GJyP2XpK01tV5ZM0lsdKhIvyHGisKv3sjYai95JxYcmB Bigy8wqccqmdXgJQG36eKFdH2foTGyf6JWgbu24Dkkrer5Nz0hzB6qti1MdVvUr9 rNftTINRfr1xQfrBHyQFmtyIvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJvQDgp7 veeN41+SyhHDglMy1ysrMB8GA1UdIwQYMBaAFDjOJ2yFttLQ6v6dP4paUIzdurlo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDUzRS80RUVCQzIwODZC NkIxMUVCODUxMjRCMkFDNEY5QUUwMi9PTTRuYklXMjB0RHFfcDBfaWxwUWpOMjZ1 V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09NNG5iSVcyMHREcV9wMF9pbHBRak4yNnVXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDUzRS80RUVCQzIwODZCNkIxMUVCODUxMjRCMkFDNEY5QUUwMi9PTTRuYklXMjB0 RHFfcDBfaWxwUWpOMjZ1V2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAd5I+w5iQdmVf9rWWJJ9EuSj4gsvbCAK4Vyv3vHoDUK5chkwYskqfc 2OFDrqqy2b1SbeUcaf5YDML+TMw/2c95ftYrUknYxR5LyKUDLofgXCQg+TbG0PdL KTz193t1TnJhRHOmDycV+zoFD3yIpOT0jVxtjLsW8438z68PKjS2oVGHNGuAL4Ed 4RC8UvYcHRvYM2JJ1k3CEFh5x89YPMr/bDICbv41rI6OCntXv/WdGkwonsHvfeSn y9ERRJjw3hum4luoYIk67WXRlGvOlS3guxxS2s9XC5aQ4TvV8wvDwmp7VvUblrz+ xchbXPFYj8rmFP8t0NmJtZByVWJR03HC -----END CERTIFICATE-----Generated at Fri Apr 4 22:04:22 2025 by rpki-client