$ rpki-client -vvf rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft File: OSQdwqlJIur_mC2bQID4vkD3tr0.mft (raw, json) Hash identifier: A2jqY33poiqnsXDmAFts+LrCyFXIP1DbUVrWcnDyOcQ= Subject key identifier: 6A:CF:79:FF:B5:46:74:28:AC:9D:D2:0F:0B:E7:9B:11:82:2E:49:DF Authority key identifier: 39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD Certificate issuer: /CN=A91E17F3/serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft Manifest number: 15 Signing time: Tue 15 Apr 2025 06:47:58 +0000 Manifest this update: Tue 15 Apr 2025 06:47:58 +0000 Manifest next update: Tue 22 Apr 2025 06:47:58 +0000 Files and hashes: 1: OSQdwqlJIur_mC2bQID4vkD3tr0.crl (hash: B7au1Wgjg6sS+Z3eNjX3pX9jKJlpH9v9MbUf847+2KI=) 2: C565FFE0025011F0ACBE181CC4F9AE02.roa (hash: /AkxNQvclEOTbcMEyripKFhKBkJQiQZpl8ngTKJu9eY=) 3: 7B3E74A6025011F096E34819C4F9AE02.roa (hash: WR0rb26sSd7NNnmbaBSVENCtgD1Go/mwg9p/vOPLcpI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 06:47:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E17F3, serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD Validity Not Before: Apr 15 06:47:58 2025 GMT Not After : Apr 22 06:47:58 2025 GMT Subject: CN=67fe011e-efc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:26:8f:45:f7:d1:f1:c5:64:e1:45:3f:af:2f: 5b:12:39:c7:2f:18:09:24:42:aa:48:47:84:a3:3d: 02:4c:d7:14:e8:3a:d1:25:15:3d:2b:53:4d:f1:65: 20:63:80:a4:87:95:c4:47:19:1d:08:c7:0a:5d:d0: a8:e8:68:86:60:49:4a:44:45:11:3d:4b:23:b8:b9: a1:52:ad:c4:e8:bd:f3:e0:43:a7:a5:b6:ee:b3:eb: 28:45:26:8a:1d:b1:be:69:90:3c:3a:30:96:1e:2a: bb:47:20:c2:17:65:64:5c:f9:dc:2f:83:a1:11:90: 5e:cf:33:f8:f7:66:28:04:7e:bc:c2:7f:41:9d:58: 43:9e:c8:2f:93:79:59:39:d8:f0:61:10:b4:a7:82: 06:59:45:e5:cc:c0:fd:0e:06:ad:84:05:ef:b9:5e: c7:4c:23:2e:6c:de:2f:bc:e3:bc:c0:1b:34:8c:b4: 2e:bc:b0:bb:46:08:ed:03:8a:bf:c6:ca:fe:99:8e: 5d:c0:61:4b:06:ca:68:d7:64:51:79:18:0b:e7:8a: 38:ed:3f:f8:ff:70:ec:df:c0:d5:46:3d:ca:2f:8c: 9e:35:91:b6:22:af:8d:59:1f:9c:8a:8e:45:6f:25: 94:97:b5:bf:ed:11:af:0a:14:0d:c1:ab:ac:2d:f8: 84:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:CF:79:FF:B5:46:74:28:AC:9D:D2:0F:0B:E7:9B:11:82:2E:49:DF X509v3 Authority Key Identifier: keyid:39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:31:19:10:ae:7e:7e:8b:d7:12:4b:e2:54:67:93:aa:5d:bd: 54:89:9b:51:24:f5:ca:61:fa:dc:c1:6c:3d:0e:90:34:f0:68: 20:ef:2d:5b:d8:49:65:24:2a:ae:9d:04:11:66:89:58:9c:b5: d7:d0:c1:07:27:bf:57:43:04:a6:fd:42:cc:8e:fe:98:42:ba: 07:26:02:31:09:2c:39:11:ca:45:31:67:7a:fc:85:01:c9:5c: e5:cd:12:44:9f:6d:dc:ec:91:8e:f7:ea:3c:09:ef:3a:63:06: 95:e9:ce:18:1e:b9:da:9c:ce:3b:d9:0f:bb:e7:02:6d:63:6a: b3:92:b8:a5:b4:02:21:eb:49:d4:c4:25:be:76:e6:bc:25:aa: 34:76:52:9c:68:8d:57:b8:0f:2e:aa:61:70:44:d4:1f:58:ec: f0:4e:47:cf:4e:97:db:74:82:d8:19:94:ee:93:51:76:ba:18: 5a:b9:bc:39:18:00:14:84:f5:42:ba:8c:67:cb:5c:34:66:71: da:e1:a1:aa:6f:78:8b:25:02:96:03:6b:52:fc:28:0d:5e:aa: f8:9d:f7:8c:e5:c6:75:c8:1c:0b:db:70:e3:be:35:15:98:08: ca:69:b8:22:5c:85:aa:e9:5a:02:ed:67:6a:16:50:f0:34:e1: 73:1b:69:dc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MTdGMzExMC8GA1UEBRMoMzkyNDFEQzJBOTQ5MjJFQUZGOTgyRDlCNDA4MEY4QkU0 MEY3QjZCRDAeFw0yNTA0MTUwNjQ3NThaFw0yNTA0MjIwNjQ3NThaMBgxFjAUBgNV BAMTDTY3ZmUwMTFlLWVmYzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVJo9F99HxxWThRT+vL1sSOccvGAkkQqpIR4SjPQJM1xToOtElFT0rU03xZSBj gKSHlcRHGR0Ixwpd0KjoaIZgSUpERRE9SyO4uaFSrcTovfPgQ6eltu6z6yhFJood sb5pkDw6MJYeKrtHIMIXZWRc+dwvg6ERkF7PM/j3ZigEfrzCf0GdWEOeyC+TeVk5 2PBhELSnggZZReXMwP0OBq2EBe+5XsdMIy5s3i+847zAGzSMtC68sLtGCO0Dir/G yv6Zjl3AYUsGymjXZFF5GAvnijjtP/j/cOzfwNVGPcovjJ41kbYir41ZH5yKjkVv JZSXtb/tEa8KFA3Bq6wt+ISvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUas95/7VG dCisndIPC+ebEYIuSd8wHwYDVR0jBBgwFoAUOSQdwqlJIur/mC2bQID4vkD3tr0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxN0YzLzlBOUZCOEYyRkZF QzExRUZCRjU1QkI2RkM0RjlBRTAyL09TUWR3cWxKSXVyX21DMmJRSUQ0dmtEM3Ry MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT1NRZHdxbEpJdXJfbUMyYlFJRDR2a0QzdHIwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx N0YzLzlBOUZCOEYyRkZFQzExRUZCRjU1QkI2RkM0RjlBRTAyL09TUWR3cWxKSXVy X21DMmJRSUQ0dmtEM3RyMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADkxGRCufn6L1xJL4lRnk6pdvVSJm1Ek9cph+tzBbD0OkDTwaCDvLVvY SWUkKq6dBBFmiVictdfQwQcnv1dDBKb9QsyO/phCugcmAjEJLDkRykUxZ3r8hQHJ XOXNEkSfbdzskY736jwJ7zpjBpXpzhgeudqczjvZD7vnAm1jarOSuKW0AiHrSdTE Jb525rwlqjR2UpxojVe4Dy6qYXBE1B9Y7PBOR89Ol9t0gtgZlO6TUXa6GFq5vDkY ABSE9UK6jGfLXDRmcdrhoapveIslApYDa1L8KA1eqvid94zlxnXIHAvbcOO+NRWY CMppuCJcharpWgLtZ2oWUPA04XMbadw= -----END CERTIFICATE-----Generated at Wed Apr 16 14:21:05 2025 by rpki-client