$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft File: OopqLuXcCfyqgv8BjwnBr4S0EZY.mft (raw, json) Hash identifier: N4MHv4Iq2s/BlV4ybEIRq2y2Mhn4KXAh/BEM3aOJ+Tc= Subject key identifier: 56:0C:81:0F:40:B7:52:01:BC:B0:93:3D:19:17:88:82:CC:3B:39:6D Authority key identifier: 3A:8A:6A:2E:E5:DC:09:FC:AA:82:FF:01:8F:09:C1:AF:84:B4:11:96 Certificate issuer: /CN=A91CCCDD/serialNumber=3A8A6A2EE5DC09FCAA82FF018F09C1AF84B41196 Certificate serial: 01BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft Manifest number: 01BA Signing time: Sat 31 May 2025 02:47:31 +0000 Manifest this update: Sat 31 May 2025 02:47:31 +0000 Manifest next update: Sat 07 Jun 2025 02:47:31 +0000 Files and hashes: 1: OopqLuXcCfyqgv8BjwnBr4S0EZY.crl (hash: pRbJbCMZ3xfsBN/PXSHqD0sZee7gyrD3ZVpbRCSfgrM=) 2: F77C1438964111EDAAB8E74AC4F9AE02.roa (hash: VtazFFTqbixljqAtcsaeza2iwr0OPiOznwFcK1HtWtU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.crl rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:47:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 445 (0x1bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCCDD, serialNumber=3A8A6A2EE5DC09FCAA82FF018F09C1AF84B41196 Validity Not Before: May 31 02:47:31 2025 GMT Not After : Jun 7 02:47:31 2025 GMT Subject: CN=683a6dc3-ec79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a3:c9:ac:ca:f9:ab:ba:28:9e:eb:60:1b:b1: c5:53:f5:4b:ef:7c:37:ed:a8:73:97:6a:e3:29:87: 00:19:63:42:8c:69:0d:4a:d2:af:c6:8d:e8:d7:1b: 21:2d:6a:a1:e2:4d:59:8a:ca:d1:45:7c:95:c6:03: d2:f0:30:bd:13:61:b0:dd:e6:b9:2e:09:3f:69:03: e1:c5:10:83:27:d7:cb:95:20:c1:28:00:23:48:ec: 91:35:1e:50:4f:0c:55:c4:fe:4a:b7:90:96:55:15: c8:44:70:14:9c:cf:79:07:85:ba:c1:0d:4c:66:14: e5:f0:eb:23:d7:be:51:14:7b:89:34:3d:31:c5:76: 49:3b:eb:26:45:7b:7c:5d:fe:d0:99:30:25:07:27: e6:d9:57:fa:83:ba:cb:5e:dd:b1:a2:f9:6f:ed:f6: c1:17:67:66:d3:77:0e:ef:90:e1:54:2e:7c:0e:fc: 41:fb:3f:9b:50:72:59:0b:7b:c4:4c:3e:e1:b2:27: 2a:25:c5:38:58:9d:f5:4f:6e:83:aa:35:2e:9c:1a: a0:36:da:f4:33:c9:69:42:7f:59:63:d3:c4:2c:9a: d1:10:fc:fa:aa:4d:46:c8:98:10:d2:c5:12:33:1d: 8c:18:23:16:39:65:aa:44:e8:d6:54:d3:68:7a:04: 18:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:0C:81:0F:40:B7:52:01:BC:B0:93:3D:19:17:88:82:CC:3B:39:6D X509v3 Authority Key Identifier: keyid:3A:8A:6A:2E:E5:DC:09:FC:AA:82:FF:01:8F:09:C1:AF:84:B4:11:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:10:d7:25:52:c3:c9:d7:c3:3b:11:e0:09:f0:8d:bc:23:3e: 00:3c:3b:c3:12:43:57:0d:28:68:11:25:43:3d:1e:0f:9b:b8: 16:d8:a8:d2:b0:82:62:99:19:ac:94:57:c4:3f:ea:f5:9f:bf: 20:1e:b2:04:06:2a:73:a9:62:92:9e:10:86:29:35:28:2a:08: d0:e5:27:ce:aa:8d:cb:60:4b:8a:a3:14:89:82:a7:b1:3c:d7: 31:13:3b:e5:16:8d:89:31:f6:69:e6:af:d9:93:14:f1:fc:c2: 57:da:91:ba:ad:93:8e:ac:bd:39:b7:7a:c9:7c:1e:89:82:f6: 02:52:ac:14:29:63:38:a6:a1:9b:80:a7:44:d2:9a:4e:70:13: 79:c0:87:e2:04:cc:e9:66:6b:40:f1:e2:b6:8d:08:8d:2c:ce: 59:67:6b:4a:1d:d7:ec:74:cc:47:43:71:fc:4c:6f:06:b7:03: 97:11:0a:0b:e1:d0:d6:1f:f6:bc:e5:35:5d:21:20:88:38:d7: 9b:fa:db:36:a8:82:39:27:15:df:ec:9e:6b:5d:54:bf:67:ba: 38:a7:ab:55:73:a5:39:74:f0:79:19:e8:5e:bc:41:d2:1f:78: 18:50:2f:19:40:70:6b:b1:5b:e4:e8:72:9f:13:4d:d1:a2:d2: 34:e4:f3:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NDREQxMTAvBgNVBAUTKDNBOEE2QTJFRTVEQzA5RkNBQTgyRkYwMThGMDlDMUFG ODRCNDExOTYwHhcNMjUwNTMxMDI0NzMxWhcNMjUwNjA3MDI0NzMxWjAYMRYwFAYD VQQDEw02ODNhNmRjMy1lYzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxKPJrMr5q7oonutgG7HFU/VL73w37ahzl2rjKYcAGWNCjGkNStKvxo3o1xsh LWqh4k1ZisrRRXyVxgPS8DC9E2Gw3ea5Lgk/aQPhxRCDJ9fLlSDBKAAjSOyRNR5Q TwxVxP5Kt5CWVRXIRHAUnM95B4W6wQ1MZhTl8Osj175RFHuJND0xxXZJO+smRXt8 Xf7QmTAlByfm2Vf6g7rLXt2xovlv7fbBF2dm03cO75DhVC58DvxB+z+bUHJZC3vE TD7hsicqJcU4WJ31T26DqjUunBqgNtr0M8lpQn9ZY9PELJrREPz6qk1GyJgQ0sUS Mx2MGCMWOWWqROjWVNNoegQYwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFYMgQ9A t1IBvLCTPRkXiILMOzltMB8GA1UdIwQYMBaAFDqKai7l3An8qoL/AY8Jwa+EtBGW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0NERC9GM0JCRTc2RTk2 M0QxMUVEQkUzRkQwMUFDNEY5QUUwMi9Pb3BxTHVYY0NmeXFndjhCanduQnI0UzBF WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09vcHFMdVhjQ2Z5cWd2OEJqd25CcjRTMEVaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0NERC9GM0JCRTc2RTk2M0QxMUVEQkUzRkQwMUFDNEY5QUUwMi9Pb3BxTHVYY0Nm eXFndjhCanduQnI0UzBFWlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2ENclUsPJ18M7EeAJ8I28Iz4APDvDEkNXDShoESVDPR4Pm7gW2KjS sIJimRmslFfEP+r1n78gHrIEBipzqWKSnhCGKTUoKgjQ5SfOqo3LYEuKoxSJgqex PNcxEzvlFo2JMfZp5q/ZkxTx/MJX2pG6rZOOrL05t3rJfB6JgvYCUqwUKWM4pqGb gKdE0ppOcBN5wIfiBMzpZmtA8eK2jQiNLM5ZZ2tKHdfsdMxHQ3H8TG8GtwOXEQoL 4dDWH/a85TVdISCIONeb+ts2qII5JxXf7J5rXVS/Z7o4p6tVc6U5dPB5GehevEHS H3gYUC8ZQHBrsVvk6HKfE03RotI05PM3 -----END CERTIFICATE-----Generated at Sat May 31 17:42:38 2025 by rpki-client