$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft File: OYVAYLL1jUyRnGTapLfrHwzfaDA.mft (raw, json) Hash identifier: VHBmVcVVV9tMxWD+VHOtHTjQG+Bp4+WJpJbX5Qcrqbw= Subject key identifier: 81:95:E7:7C:38:E1:64:0C:13:36:9F:1F:77:42:6A:A0:4E:60:E9:6E Authority key identifier: 39:85:40:60:B2:F5:8D:4C:91:9C:64:DA:A4:B7:EB:1F:0C:DF:68:30 Certificate issuer: /CN=A91A1A51/serialNumber=39854060B2F58D4C919C64DAA4B7EB1F0CDF6830 Certificate serial: 0349 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYVAYLL1jUyRnGTapLfrHwzfaDA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft Manifest number: 0349 Signing time: Sat 31 May 2025 01:11:46 +0000 Manifest this update: Sat 31 May 2025 01:11:46 +0000 Manifest next update: Sat 07 Jun 2025 01:11:45 +0000 Files and hashes: 1: OYVAYLL1jUyRnGTapLfrHwzfaDA.crl (hash: zUuVAKF4qkAlfIyFjHptziWSjR3fN+lsCwNxk0oW6Vw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.crl rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYVAYLL1jUyRnGTapLfrHwzfaDA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 841 (0x349) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1A51, serialNumber=39854060B2F58D4C919C64DAA4B7EB1F0CDF6830 Validity Not Before: May 31 01:11:46 2025 GMT Not After : Jun 7 01:11:45 2025 GMT Subject: CN=683a5752-69ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5b:ce:c5:16:67:75:c7:a6:98:19:8d:32:4c: fc:c8:76:4a:e1:57:aa:1b:d9:c5:4d:b3:89:9e:56: 32:1a:ca:f2:94:52:73:93:d6:39:5a:78:9d:64:65: 01:0b:21:1d:f3:e5:a0:b6:34:97:12:84:b8:40:9c: 6c:05:5c:1c:9f:e5:00:33:d4:89:83:b7:1a:51:75: 75:c0:a9:3b:83:c2:a6:a8:a4:5d:51:7d:85:87:fb: 6e:c9:a8:00:9d:0c:6c:75:fa:9e:68:eb:57:b2:51: ad:bd:a7:96:1a:71:25:22:43:cd:ee:d5:06:4a:f3: d3:b1:fe:a7:f4:da:65:c6:ef:96:e9:68:44:51:d4: e5:ba:12:3f:b5:4b:85:bf:75:39:b3:14:80:ce:e6: d2:0b:c4:82:d3:50:98:2a:2f:5b:ed:b8:ff:87:68: cf:67:25:dd:71:47:3f:ff:55:fa:aa:67:6b:42:bc: a1:49:7f:54:d0:cf:a6:59:af:78:bf:7f:3d:8a:fb: 5e:42:45:c3:d6:d1:95:b1:e4:c5:e3:80:7f:dd:c3: 8c:25:48:e5:6e:64:f5:d2:96:4b:6c:ed:c3:d9:2b: e2:a7:40:ea:39:3d:74:42:36:b6:7e:50:c0:5f:d9: b0:6d:eb:34:19:66:cd:1e:71:8f:80:e5:43:7e:d9: a2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:95:E7:7C:38:E1:64:0C:13:36:9F:1F:77:42:6A:A0:4E:60:E9:6E X509v3 Authority Key Identifier: keyid:39:85:40:60:B2:F5:8D:4C:91:9C:64:DA:A4:B7:EB:1F:0C:DF:68:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYVAYLL1jUyRnGTapLfrHwzfaDA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:f7:16:34:04:cd:04:b0:25:ea:55:ee:45:82:fa:f2:d2:f1: cc:97:b5:f7:56:7a:24:a6:3c:23:36:e9:d4:f5:a2:0a:ab:7b: ec:ce:71:4a:07:a9:67:e6:68:97:21:6f:1b:f9:e3:ed:39:6b: e8:5a:4c:13:a2:aa:ca:0d:73:bb:2d:c4:51:82:5a:14:03:2d: 6e:f4:d7:de:dd:44:ec:17:3b:e4:39:b9:f0:3c:cd:d5:b8:7a: 48:48:2b:12:cd:3e:1c:8c:6c:a1:b0:d6:19:f4:a7:7f:a2:7e: 7d:d5:57:1e:c8:0f:85:ac:7f:5f:e8:b4:e4:b6:53:95:f5:db: b3:63:2c:f0:cb:ac:de:94:6e:b0:2c:85:83:7a:33:16:f8:63: e1:73:66:2b:0a:86:40:05:5a:9f:fd:95:a2:e2:3e:a6:3e:74: 60:96:fc:da:79:1c:f7:2d:32:6c:e9:90:86:28:4f:14:5a:8f: 0a:ef:ee:49:ba:c9:46:89:7f:5f:dd:62:f8:22:65:36:db:d0: f5:a2:f7:9b:3e:9d:eb:ea:ce:01:7d:f4:46:18:e1:d9:83:18: 0d:fc:19:f9:e3:99:a4:c3:44:61:bd:8b:64:8a:f8:5b:6e:aa: ed:51:3d:e9:7f:d1:95:20:de:44:62:52:ad:6c:3c:65:00:f1: e5:a3:bf:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFBNTExMTAvBgNVBAUTKDM5ODU0MDYwQjJGNThENEM5MTlDNjREQUE0QjdFQjFG MENERjY4MzAwHhcNMjUwNTMxMDExMTQ2WhcNMjUwNjA3MDExMTQ1WjAYMRYwFAYD VQQDEw02ODNhNTc1Mi02OWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw1vOxRZndcemmBmNMkz8yHZK4VeqG9nFTbOJnlYyGsrylFJzk9Y5WnidZGUB CyEd8+WgtjSXEoS4QJxsBVwcn+UAM9SJg7caUXV1wKk7g8KmqKRdUX2Fh/tuyagA nQxsdfqeaOtXslGtvaeWGnElIkPN7tUGSvPTsf6n9Nplxu+W6WhEUdTluhI/tUuF v3U5sxSAzubSC8SC01CYKi9b7bj/h2jPZyXdcUc//1X6qmdrQryhSX9U0M+mWa94 v389ivteQkXD1tGVseTF44B/3cOMJUjlbmT10pZLbO3D2Svip0DqOT10Qja2flDA X9mwbes0GWbNHnGPgOVDftmiBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIGV53w4 4WQMEzafH3dCaqBOYOluMB8GA1UdIwQYMBaAFDmFQGCy9Y1MkZxk2qS36x8M32gw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUE1MS9BRjY5MEY2MEI5 MjAxMUVDOTkxNTY3NEZDNEY5QUUwMi9PWVZBWUxMMWpVeVJuR1RhcExmckh3emZh REEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09ZVkFZTEwxalV5Um5HVGFwTGZySHd6ZmFEQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUE1MS9BRjY5MEY2MEI5MjAxMUVDOTkxNTY3NEZDNEY5QUUwMi9PWVZBWUxMMWpV eVJuR1RhcExmckh3emZhREEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBs9xY0BM0EsCXqVe5Fgvry0vHMl7X3VnokpjwjNunU9aIKq3vsznFK B6ln5miXIW8b+ePtOWvoWkwToqrKDXO7LcRRgloUAy1u9Nfe3UTsFzvkObnwPM3V uHpISCsSzT4cjGyhsNYZ9Kd/on591VceyA+FrH9f6LTktlOV9duzYyzwy6zelG6w LIWDejMW+GPhc2YrCoZABVqf/ZWi4j6mPnRglvzaeRz3LTJs6ZCGKE8UWo8K7+5J uslGiX9f3WL4ImU229D1ovebPp3r6s4BffRGGOHZgxgN/Bn545mkw0RhvYtkivhb bqrtUT3pf9GVIN5EYlKtbDxlAPHlo79T -----END CERTIFICATE-----Generated at Sat May 31 16:36:56 2025 by rpki-client