$ rpki-client -vvf rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft File: OVr1eRN2M5r53uVtah4TtHq1xGY.mft (raw, json) Hash identifier: uJ3WUQaBYJWhITe8Ti5LCX6jGjg4zWTdxmkKl/Ju72M= Subject key identifier: 0A:D6:5F:2F:06:FD:16:8C:7E:FD:09:C8:70:1A:9C:09:FC:0B:AA:75 Authority key identifier: 39:5A:F5:79:13:76:33:9A:F9:DE:E5:6D:6A:1E:13:B4:7A:B5:C4:66 Certificate issuer: /CN=A91316B0/serialNumber=395AF5791376339AF9DEE56D6A1E13B47AB5C466 Certificate serial: C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVr1eRN2M5r53uVtah4TtHq1xGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft Manifest number: 04F3 Signing time: Fri 25 Apr 2025 00:08:53 +0000 Manifest this update: Fri 25 Apr 2025 00:08:52 +0000 Manifest next update: Fri 02 May 2025 00:08:52 +0000 Files and hashes: 1: OVr1eRN2M5r53uVtah4TtHq1xGY.crl (hash: dP+Oww9trRUjb0CpsBoon3m/yJ3DcZ1dpCrQKPDnQMs=) 2: C6EFDF5C0C3311EFB37BD03FC4F9AE02.roa (hash: +baf+FBOvTO91WyGSxfLgP4c75Re+v5ehq0gcaeZq1U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.crl rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVr1eRN2M5r53uVtah4TtHq1xGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:08:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 192 (0xc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91316B0, serialNumber=395AF5791376339AF9DEE56D6A1E13B47AB5C466 Validity Not Before: Apr 25 00:08:52 2025 GMT Not After : May 2 00:08:52 2025 GMT Subject: CN=680ad294-39e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:00:23:44:16:71:86:2d:dd:8e:54:03:29:e3: f2:93:d9:ee:1a:7a:c2:d0:bb:a7:dc:c7:ab:51:ed: 53:b1:04:52:ea:b5:97:88:c7:e3:98:84:f9:c4:ac: dd:50:e9:e0:d3:2f:42:70:6f:cb:b1:e2:d3:be:02: a6:2f:f6:16:73:d7:57:78:46:f8:ff:fe:38:18:80: 0b:8f:d9:db:1b:4b:96:e7:5f:63:12:24:04:23:ff: 81:b4:ec:4a:8d:01:5c:cd:b1:30:15:96:e7:0c:84: b5:69:8f:3e:86:cc:b4:f6:46:ad:4a:9d:4a:c7:24: 22:a4:9b:a6:06:40:d8:f8:80:e8:fd:1b:c2:24:29: b4:28:92:02:39:c3:c0:ae:d1:09:94:da:50:cf:9a: e2:ac:bd:d6:54:72:d6:2f:c6:bd:f1:ac:2f:6b:bd: 12:8e:3c:cf:06:db:65:77:46:0a:47:58:1b:a5:16: 9e:16:4a:62:a4:d1:6e:0b:3a:b6:84:60:ab:20:cd: 29:51:ae:99:64:fe:52:dd:65:6e:f4:ef:7b:f8:ce: 9b:9e:28:a7:49:6f:25:ae:6e:a3:51:c4:91:10:96: 9e:e3:52:d6:ea:fa:3a:cd:32:a2:dd:3b:66:5b:08: 26:1c:ef:63:2c:b4:95:4b:dd:c1:eb:15:8e:84:c6: 35:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:D6:5F:2F:06:FD:16:8C:7E:FD:09:C8:70:1A:9C:09:FC:0B:AA:75 X509v3 Authority Key Identifier: keyid:39:5A:F5:79:13:76:33:9A:F9:DE:E5:6D:6A:1E:13:B4:7A:B5:C4:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVr1eRN2M5r53uVtah4TtHq1xGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:f7:ff:f9:b1:d5:38:fb:67:c8:f4:73:70:fb:0d:36:f0:3b: c5:3d:a8:78:3a:1e:43:ec:65:d6:d7:18:04:47:be:7f:23:8d: 80:6a:04:95:16:51:1d:db:2a:a1:a9:5a:82:05:73:df:6e:9e: 49:c3:23:d4:5f:a2:68:6a:76:da:7d:56:71:ec:ab:01:ca:f6: b9:fa:4f:a2:87:e0:5f:0e:58:f4:0e:1c:2d:8b:a3:27:d1:62: d9:f6:9b:47:56:f3:59:34:c2:e5:cd:07:8c:38:0a:d5:1d:74: 4d:2e:39:a3:f0:54:96:27:8c:29:2a:c6:9c:89:9e:ca:58:9c: 86:c5:ae:fa:f7:10:69:a7:55:d3:16:7e:62:59:b7:3c:31:d0: 19:12:cd:28:39:09:bb:71:5a:5f:7b:6f:45:d1:ae:0e:0b:a0: 1d:f8:29:5b:38:60:18:97:11:30:3b:db:06:14:8f:86:85:c3: 12:93:7b:11:e8:0e:4e:d0:36:29:74:30:8d:b4:d2:d7:1c:a8: 81:f1:73:0e:52:1f:fe:5d:a5:65:7e:a8:ff:17:47:d5:93:e0: f9:84:71:42:15:c4:bf:a8:bd:7e:22:bd:2f:98:0b:49:4d:5d: bc:23:58:87:7e:87:a7:f4:5d:75:75:57:87:9f:0c:92:97:54: a2:23:90:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE2QjAxMTAvBgNVBAUTKDM5NUFGNTc5MTM3NjMzOUFGOURFRTU2RDZBMUUxM0I0 N0FCNUM0NjYwHhcNMjUwNDI1MDAwODUyWhcNMjUwNTAyMDAwODUyWjAYMRYwFAYD VQQDEw02ODBhZDI5NC0zOWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4AAjRBZxhi3djlQDKePyk9nuGnrC0Lun3MerUe1TsQRS6rWXiMfjmIT5xKzd UOng0y9CcG/LseLTvgKmL/YWc9dXeEb4//44GIALj9nbG0uW519jEiQEI/+BtOxK jQFczbEwFZbnDIS1aY8+hsy09katSp1KxyQipJumBkDY+IDo/RvCJCm0KJICOcPA rtEJlNpQz5rirL3WVHLWL8a98awva70SjjzPBttld0YKR1gbpRaeFkpipNFuCzq2 hGCrIM0pUa6ZZP5S3WVu9O97+M6bniinSW8lrm6jUcSREJae41LW6vo6zTKi3Ttm WwgmHO9jLLSVS93B6xWOhMY11QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFArWXy8G /RaMfv0JyHAanAn8C6p1MB8GA1UdIwQYMBaAFDla9XkTdjOa+d7lbWoeE7R6tcRm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTZCMC8yMzM3RjIzMjVF M0UxMUVDQTFGRkVCNENDNEY5QUUwMi9PVnIxZVJOMk01cjUzdVZ0YWg0VHRIcTF4 R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09WcjFlUk4yTTVyNTN1VnRhaDRUdEhxMXhHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTZCMC8yMzM3RjIzMjVFM0UxMUVDQTFGRkVCNENDNEY5QUUwMi9PVnIxZVJOMk01 cjUzdVZ0YWg0VHRIcTF4R1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAA9//5sdU4+2fI9HNw+w028DvFPah4Oh5D7GXW1xgER75/I42AagSV FlEd2yqhqVqCBXPfbp5JwyPUX6JoanbafVZx7KsByva5+k+ih+BfDlj0Dhwti6Mn 0WLZ9ptHVvNZNMLlzQeMOArVHXRNLjmj8FSWJ4wpKsaciZ7KWJyGxa769xBpp1XT Fn5iWbc8MdAZEs0oOQm7cVpfe29F0a4OC6Ad+ClbOGAYlxEwO9sGFI+GhcMSk3sR 6A5O0DYpdDCNtNLXHKiB8XMOUh/+XaVlfqj/F0fVk+D5hHFCFcS/qL1+Ir0vmAtJ TV28I1iHfoen9F11dVeHnwySl1SiI5D8 -----END CERTIFICATE-----Generated at Sat Apr 26 07:42:50 2025 by rpki-client