$ rpki-client -vvf rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.mft File: OochbBWSc79Rk0f8H-5wYZXMKuY.mft (raw, json) Hash identifier: CsxmylttMxacKVxhSiD+1XtBp3xhaYcyslAQpD5ElSE= Subject key identifier: 85:18:ED:C7:3E:70:14:A9:E6:84:C3:F0:24:95:0F:EC:6F:88:13:9D Authority key identifier: 3A:87:21:6C:15:92:73:BF:51:93:47:FC:1F:EE:70:61:95:CC:2A:E6 Certificate issuer: /CN=A91C661C/serialNumber=3A87216C159273BF519347FC1FEE706195CC2AE6 Certificate serial: 069B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OochbBWSc79Rk0f8H-5wYZXMKuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.mft Manifest number: 0690 Signing time: Fri 30 May 2025 22:28:15 +0000 Manifest this update: Fri 30 May 2025 22:28:14 +0000 Manifest next update: Fri 06 Jun 2025 22:28:14 +0000 Files and hashes: 1: OochbBWSc79Rk0f8H-5wYZXMKuY.crl (hash: fNS4dJf2r6nEwMvVzZvJY+KyYYJBmq44lsLhn27n0ts=) 2: AABC79100EC411EF858B5255C4F9AE02.roa (hash: xd+kZGDM6lidBL503M6KRPrbZpmB555muvLLsOdJRog=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.crl rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OochbBWSc79Rk0f8H-5wYZXMKuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1691 (0x69b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C661C, serialNumber=3A87216C159273BF519347FC1FEE706195CC2AE6 Validity Not Before: May 30 22:28:14 2025 GMT Not After : Jun 6 22:28:14 2025 GMT Subject: CN=683a30fe-3cd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:36:10:49:34:20:11:d5:d6:af:63:65:d0:17: 79:6e:05:72:56:e0:c8:7e:8f:30:92:72:a7:12:a2: d9:91:00:d7:ff:8c:aa:e0:8d:21:7b:e0:e2:dc:c9: 49:8c:af:eb:da:fb:4a:0f:a8:68:4d:37:1a:27:c3: 4c:81:73:6f:fc:67:b9:88:28:0b:52:12:ee:66:66: 29:6a:89:04:eb:1a:54:72:30:58:54:8a:69:db:6f: b8:0a:e9:0b:5c:96:b5:f7:da:dd:f7:8b:16:b2:80: a9:f0:f1:a4:d0:ae:56:de:57:97:2c:45:3f:b1:9b: c6:86:4e:30:34:f1:23:0c:ac:57:d1:99:28:eb:47: ae:8e:7a:b3:4f:d6:4f:1f:25:a0:26:67:db:9f:1e: 99:d6:24:97:2c:fb:82:54:da:cf:82:c9:37:db:94: 3e:30:9b:78:95:4b:ac:3b:1a:d5:57:dd:1c:38:42: b7:db:01:85:3d:11:50:f1:41:e4:24:da:87:fc:af: a9:6b:9d:aa:26:29:81:d8:b9:6e:0f:d9:2e:6c:01: 6a:5b:09:5c:6b:6b:e5:a1:11:fe:1e:e6:66:bb:b6: 67:5f:2a:cb:31:7f:19:f9:46:9b:51:f7:21:d0:ca: d1:bd:81:61:4b:3e:a3:c5:92:76:38:00:b4:29:fa: ff:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:18:ED:C7:3E:70:14:A9:E6:84:C3:F0:24:95:0F:EC:6F:88:13:9D X509v3 Authority Key Identifier: keyid:3A:87:21:6C:15:92:73:BF:51:93:47:FC:1F:EE:70:61:95:CC:2A:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OochbBWSc79Rk0f8H-5wYZXMKuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:2b:3e:08:c1:13:37:b6:4a:35:0f:eb:0a:59:f7:3b:43:76: 6b:92:d2:eb:79:bd:84:d6:ed:23:87:2a:2b:96:22:a2:e0:c9: 24:e2:9a:d7:09:20:f3:2c:96:58:72:56:27:3d:31:4b:5a:5f: 21:4c:f0:7a:69:46:5e:6f:b2:17:46:2d:26:39:d3:3d:7d:52: b8:98:81:51:d0:e9:b7:8c:d6:79:45:12:5b:9c:60:42:b6:3e: 1b:ad:7d:f1:e7:e8:de:d6:2b:26:4a:d9:89:c1:30:e8:6f:a8: e4:92:64:6f:81:8d:cf:a2:a2:f9:06:4e:56:86:07:8f:25:21: 95:e4:e1:55:e5:b0:d5:70:38:ed:8b:57:6e:53:36:9b:49:17: 7d:d1:ff:53:ae:8b:0e:ba:c1:3e:59:65:cd:a2:b1:11:d3:59: d9:cd:46:f6:e4:3f:df:4c:7e:1c:82:f4:5e:1d:6f:60:84:87: d6:80:e9:6b:70:aa:72:3c:8f:5b:85:db:2b:a8:1c:b9:ee:b5: d0:c7:74:2a:41:ac:36:62:0f:3b:9b:46:06:9e:b4:d6:95:cd: 06:08:12:b1:c6:b2:d0:ba:ad:5d:a4:f6:ef:ce:9f:ef:0d:06: 27:a2:1d:bc:bb:5b:b6:f7:71:ac:f3:01:4c:3a:d3:54:5c:9f: cd:c0:4c:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY2MUMxMTAvBgNVBAUTKDNBODcyMTZDMTU5MjczQkY1MTkzNDdGQzFGRUU3MDYx OTVDQzJBRTYwHhcNMjUwNTMwMjIyODE0WhcNMjUwNjA2MjIyODE0WjAYMRYwFAYD VQQDEw02ODNhMzBmZS0zY2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6TYQSTQgEdXWr2Nl0Bd5bgVyVuDIfo8wknKnEqLZkQDX/4yq4I0he+Di3MlJ jK/r2vtKD6hoTTcaJ8NMgXNv/Ge5iCgLUhLuZmYpaokE6xpUcjBYVIpp22+4CukL XJa199rd94sWsoCp8PGk0K5W3leXLEU/sZvGhk4wNPEjDKxX0Zko60eujnqzT9ZP HyWgJmfbnx6Z1iSXLPuCVNrPgsk325Q+MJt4lUusOxrVV90cOEK32wGFPRFQ8UHk JNqH/K+pa52qJimB2LluD9kubAFqWwlca2vloRH+HuZmu7ZnXyrLMX8Z+UabUfch 0MrRvYFhSz6jxZJ2OAC0Kfr/kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIUY7cc+ cBSp5oTD8CSVD+xviBOdMB8GA1UdIwQYMBaAFDqHIWwVknO/UZNH/B/ucGGVzCrm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjYxQy9GNDU5Mjk5Mjcz NzIxMUVCOTQ3NUNBNURDNEY5QUUwMi9Pb2NoYkJXU2M3OVJrMGY4SC01d1laWE1L dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09vY2hiQldTYzc5UmswZjhILTV3WVpYTUt1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjYxQy9GNDU5Mjk5MjczNzIxMUVCOTQ3NUNBNURDNEY5QUUwMi9Pb2NoYkJXU2M3 OVJrMGY4SC01d1laWE1LdVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmKz4IwRM3tko1D+sKWfc7Q3ZrktLreb2E1u0jhyorliKi4Mkk4prX CSDzLJZYclYnPTFLWl8hTPB6aUZeb7IXRi0mOdM9fVK4mIFR0Om3jNZ5RRJbnGBC tj4brX3x5+je1ismStmJwTDob6jkkmRvgY3PoqL5Bk5WhgePJSGV5OFV5bDVcDjt i1duUzabSRd90f9TrosOusE+WWXNorER01nZzUb25D/fTH4cgvReHW9ghIfWgOlr cKpyPI9bhdsrqBy57rXQx3QqQaw2Yg87m0YGnrTWlc0GCBKxxrLQuq1dpPbvzp/v DQYnoh28u1u293Gs8wFMOtNUXJ/NwEyA -----END CERTIFICATE-----Generated at Sat May 31 16:57:45 2025 by rpki-client