$ rpki-client -vvf rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft File: oVZKa9a5Cg-he_V9i-rJ4pJZves.mft (raw, json) Hash identifier: T95GbSK9eVfgFD7aCbGWpg1OvWfNQ37vQks2sxErP8E= Subject key identifier: 01:14:25:D5:5E:14:99:F1:DE:C5:4C:66:3D:68:93:AF:15:AD:36:57 Authority key identifier: A1:56:4A:6B:D6:B9:0A:0F:A1:7B:F5:7D:8B:EA:C9:E2:92:59:BD:EB Certificate issuer: /CN=A91F61DA/serialNumber=A1564A6BD6B90A0FA17BF57D8BEAC9E29259BDEB Certificate serial: 0C8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oVZKa9a5Cg-he_V9i-rJ4pJZves.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft Manifest number: 0C81 Signing time: Fri 04 Apr 2025 18:19:33 +0000 Manifest this update: Fri 04 Apr 2025 18:19:31 +0000 Manifest next update: Fri 11 Apr 2025 18:19:31 +0000 Files and hashes: 1: oVZKa9a5Cg-he_V9i-rJ4pJZves.crl (hash: kbJ5EichBFSarJrSqb4X3NHVDuC6j1DgKkRfGtAxf00=) 2: EA18D5547D8F11EC8E894A1DC4F9AE02.roa (hash: Anh2GximFPk7REReNBXULcTH3P6lLG5IbasX9kKM4Fs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.crl rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oVZKa9a5Cg-he_V9i-rJ4pJZves.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:19:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3210 (0xc8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F61DA Validity Not Before: Apr 4 18:19:31 2025 GMT Not After : Apr 11 18:19:31 2025 GMT Subject: CN=67f022b4-923a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6c:4d:f4:02:1e:51:29:7c:e2:7b:51:3e:ba: c1:82:09:b9:ab:be:69:53:3e:b4:de:dc:e0:0f:2a: c9:54:4d:30:1f:c6:e6:c3:d2:ae:73:b9:05:58:6a: 3e:02:cc:07:d4:92:f8:ea:12:7c:02:0d:2e:43:84: 49:a7:9a:2b:65:72:09:dc:ba:fc:36:ed:08:20:8d: a0:5d:b8:c6:23:9a:36:c6:5d:48:94:0f:1b:e8:f3: a9:5b:05:d2:6a:84:d5:32:db:9c:90:bc:b1:32:ad: 08:43:b1:1b:f1:c1:05:6a:e4:66:ce:bd:cc:e1:c2: aa:1b:09:31:e6:04:b8:66:c9:cc:c0:d4:20:35:71: c5:86:74:e5:e8:98:91:f3:69:db:9a:0f:be:fc:84: 96:55:42:6b:7c:cd:29:a0:d3:5b:69:0b:13:95:be: 28:61:b5:92:94:d3:aa:95:fd:23:44:ec:c7:11:c8: 21:e3:03:5b:ef:41:cb:d0:7a:c5:01:e2:d8:d4:66: e8:1b:c6:d4:6c:d4:e3:74:41:32:5d:94:60:20:2d: ec:64:13:a3:7e:2e:db:ae:c6:c4:3c:c9:62:b9:b6: 25:1d:95:b9:ae:f4:cd:87:72:c6:83:09:09:a7:3a: af:52:e9:19:3c:85:7b:1e:65:d9:75:e7:f0:93:b0: e5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:14:25:D5:5E:14:99:F1:DE:C5:4C:66:3D:68:93:AF:15:AD:36:57 X509v3 Authority Key Identifier: keyid:A1:56:4A:6B:D6:B9:0A:0F:A1:7B:F5:7D:8B:EA:C9:E2:92:59:BD:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oVZKa9a5Cg-he_V9i-rJ4pJZves.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:ff:f4:cb:39:c1:f1:94:e6:88:37:ef:3a:e0:80:8c:e4:08: 9e:19:b5:49:a1:19:df:c5:4c:1a:1b:21:c2:a7:c9:2e:98:cf: 2b:60:82:26:51:be:b5:1d:59:f8:ec:17:49:33:1b:99:f3:55: b4:3c:a6:d3:4e:dc:00:ee:70:1d:c2:60:c9:1e:93:1f:e6:2f: 85:75:17:0f:c8:d1:83:d5:2b:d6:2e:9f:7b:48:a2:b6:86:26: 1a:1f:87:90:a5:85:ca:07:36:82:b5:a9:26:c9:9f:99:36:04: 58:d9:f1:a9:25:d2:b3:58:07:b6:03:cb:5f:20:cb:e5:06:ca: 1d:29:18:0e:4d:ea:15:87:08:86:cf:31:c6:a4:c8:90:11:54: 79:48:69:f5:6b:eb:05:18:0b:34:9b:7f:ca:e7:fe:81:1c:d3: a1:b3:8c:38:f4:01:e5:18:38:81:95:8d:2c:32:90:a1:a4:42: 43:1f:79:4d:8a:4d:ab:11:7c:0f:be:8a:90:35:c0:fd:ac:68: be:ba:3f:bc:dd:29:51:9d:99:93:b0:cd:6c:28:e1:38:78:a4: 60:09:7d:ad:c8:ab:91:85:5d:26:c9:5b:f9:72:c5:df:8e:da: 1b:a2:1e:40:72:3e:c3:81:69:f7:69:8e:b6:32:48:a1:a3:49: d8:51:2f:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjYxREExMTAvBgNVBAUTKEExNTY0QTZCRDZCOTBBMEZBMTdCRjU3RDhCRUFDOUUy OTI1OUJERUIwHhcNMjUwNDA0MTgxOTMxWhcNMjUwNDExMTgxOTMxWjAYMRYwFAYD VQQDEw02N2YwMjJiNC05MjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv2xN9AIeUSl84ntRPrrBggm5q75pUz603tzgDyrJVE0wH8bmw9Kuc7kFWGo+ AswH1JL46hJ8Ag0uQ4RJp5orZXIJ3Lr8Nu0III2gXbjGI5o2xl1IlA8b6POpWwXS aoTVMtuckLyxMq0IQ7Eb8cEFauRmzr3M4cKqGwkx5gS4ZsnMwNQgNXHFhnTl6JiR 82nbmg++/ISWVUJrfM0poNNbaQsTlb4oYbWSlNOqlf0jROzHEcgh4wNb70HL0HrF AeLY1GboG8bUbNTjdEEyXZRgIC3sZBOjfi7brsbEPMliubYlHZW5rvTNh3LGgwkJ pzqvUukZPIV7HmXZdefwk7DlLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAEUJdVe FJnx3sVMZj1ok68VrTZXMB8GA1UdIwQYMBaAFKFWSmvWuQoPoXv1fYvqyeKSWb3r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjFEQS8xN0M4MUZEMEY0 MUUxMUU5QTgzNDNBNzRDNEY5QUUwMi9vVlpLYTlhNUNnLWhlX1Y5aS1ySjRwSlp2 ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29WWkthOWE1Q2ctaGVfVjlpLXJKNHBKWnZlcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjFEQS8xN0M4MUZEMEY0MUUxMUU5QTgzNDNBNzRDNEY5QUUwMi9vVlpLYTlhNUNn LWhlX1Y5aS1ySjRwSlp2ZXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAW//TLOcHxlOaIN+864ICM5AieGbVJoRnfxUwaGyHCp8kumM8rYIIm Ub61HVn47BdJMxuZ81W0PKbTTtwA7nAdwmDJHpMf5i+FdRcPyNGD1SvWLp97SKK2 hiYaH4eQpYXKBzaCtakmyZ+ZNgRY2fGpJdKzWAe2A8tfIMvlBsodKRgOTeoVhwiG zzHGpMiQEVR5SGn1a+sFGAs0m3/K5/6BHNOhs4w49AHlGDiBlY0sMpChpEJDH3lN ik2rEXwPvoqQNcD9rGi+uj+83SlRnZmTsM1sKOE4eKRgCX2tyKuRhV0myVv5csXf jtoboh5Acj7DgWn3aY62Mkiho0nYUS+0 -----END CERTIFICATE-----Generated at Fri Apr 4 21:55:53 2025 by rpki-client