$ rpki-client -vvf rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft File: OOHW4K0CW7AuZUgYPvKoIABQo2U.mft (raw, json) Hash identifier: dyVYRJNgQ3eC3neCO+ECDezgKAHgzFUegkuM9CBuXLc= Subject key identifier: 1C:66:16:1D:FB:DC:CC:10:0A:8E:F8:BE:AA:B6:7C:FA:3B:DD:AD:93 Authority key identifier: 38:E1:D6:E0:AD:02:5B:B0:2E:65:48:18:3E:F2:A8:20:00:50:A3:65 Certificate issuer: /CN=A9135EC4/serialNumber=38E1D6E0AD025BB02E6548183EF2A8200050A365 Certificate serial: 347E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOHW4K0CW7AuZUgYPvKoIABQo2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft Manifest number: 347A Signing time: Thu 24 Apr 2025 14:31:14 +0000 Manifest this update: Thu 24 Apr 2025 14:31:13 +0000 Manifest next update: Thu 01 May 2025 14:31:13 +0000 Files and hashes: 1: OOHW4K0CW7AuZUgYPvKoIABQo2U.crl (hash: DomW4UELw1pPkLkPx9/XM6rVYF6QuyNLaSIkE5PzLBk=) 2: E89AA63C3A3411EDA5928760C4F9AE02.roa (hash: 05APYQJe4DJPEEjidbXlOzb6+S6p4c1Z55iGoGM7Isg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.crl rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOHW4K0CW7AuZUgYPvKoIABQo2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:31:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13438 (0x347e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135EC4, serialNumber=38E1D6E0AD025BB02E6548183EF2A8200050A365 Validity Not Before: Apr 24 14:31:13 2025 GMT Not After : May 1 14:31:13 2025 GMT Subject: CN=680a4b32-fa22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1c:07:25:4a:b0:a2:77:4f:be:4d:91:71:a3: bd:c4:1b:5c:fc:84:7b:05:58:9d:98:3a:a3:6c:d8: 41:bf:f4:38:5d:7a:2e:6f:dc:02:e6:da:a9:92:cd: 24:53:03:1c:5b:42:03:b3:81:75:f9:51:d7:91:01: f8:05:e9:20:24:10:30:3c:5b:f9:12:40:8c:dc:ad: cc:ad:f8:4d:fc:41:69:86:de:e2:10:2b:fc:25:b5: 19:ac:98:6a:eb:fe:8a:af:14:2d:88:36:c5:37:87: 19:a0:07:c7:f1:dc:2f:83:b3:b5:5b:fd:b3:f6:7b: a5:04:f6:fa:de:5f:94:bf:db:ab:58:bf:c0:b4:1b: cf:64:25:85:6b:29:9e:de:8e:dc:f7:25:e3:59:84: 03:a1:13:f5:ee:f9:9a:15:8f:9a:3a:0e:d8:af:25: 7f:99:75:85:fe:f9:53:88:08:49:6e:71:c9:0a:62: 64:aa:23:93:99:0e:5b:ae:47:b5:01:22:c0:d9:54: f4:95:e8:12:43:72:cb:63:23:2b:d8:1d:af:e9:f9: 49:10:25:0d:d2:b2:1e:c1:ff:0e:2c:f1:f1:0c:fd: 2b:d8:49:e9:6e:41:6b:56:e9:7c:69:ee:6f:a2:3e: 86:37:88:0d:06:1b:49:02:47:bb:36:9e:f0:42:02: 2a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:66:16:1D:FB:DC:CC:10:0A:8E:F8:BE:AA:B6:7C:FA:3B:DD:AD:93 X509v3 Authority Key Identifier: keyid:38:E1:D6:E0:AD:02:5B:B0:2E:65:48:18:3E:F2:A8:20:00:50:A3:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOHW4K0CW7AuZUgYPvKoIABQo2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:ff:5b:3f:5a:06:b3:f0:7f:74:c6:94:f7:63:9f:f3:05:e8: f8:3d:9f:ba:8b:19:8e:66:00:aa:2b:ae:3f:49:c2:40:84:09: f5:f9:24:c2:d4:ef:16:97:5f:c5:fb:32:fb:c3:68:7f:4c:5f: 7f:39:85:57:64:46:ab:da:b9:94:a7:d0:4d:98:72:c1:d0:8f: c6:fd:e5:90:8f:e7:c9:56:15:06:ce:d1:f4:66:1f:d2:71:19: b6:96:15:6a:ca:d9:9d:61:b0:7e:82:e8:2b:28:16:e5:33:c7: fb:37:21:a4:2d:8c:dc:17:06:75:0e:82:20:0c:78:21:5b:ce: 7c:cc:66:0f:68:0a:2f:05:54:c1:86:9c:26:ef:4c:e1:b9:3e: b7:a0:71:34:d5:27:e8:39:a9:1f:ab:88:82:99:ad:b6:2a:c7: ea:03:d8:ee:04:43:36:cf:71:e7:32:6e:42:80:fe:da:c1:37: 1d:8b:5c:90:25:46:6d:9f:e9:12:0e:de:04:3e:b3:1f:5f:ce: 39:28:54:6c:a0:2a:fd:ef:55:d5:4e:9d:b4:b9:1e:fb:99:d3: 9b:a2:14:ba:27:54:db:5b:65:9a:36:75:55:d2:dd:25:f8:15: 54:37:24:14:9a:95:b7:ca:aa:7a:35:b5:67:72:6f:d0:2b:2f: 8a:b6:f3:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVFQzQxMTAvBgNVBAUTKDM4RTFENkUwQUQwMjVCQjAyRTY1NDgxODNFRjJBODIw MDA1MEEzNjUwHhcNMjUwNDI0MTQzMTEzWhcNMjUwNTAxMTQzMTEzWjAYMRYwFAYD VQQDEw02ODBhNGIzMi1mYTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsBwHJUqwondPvk2RcaO9xBtc/IR7BVidmDqjbNhBv/Q4XXoub9wC5tqpks0k UwMcW0IDs4F1+VHXkQH4BekgJBAwPFv5EkCM3K3MrfhN/EFpht7iECv8JbUZrJhq 6/6KrxQtiDbFN4cZoAfH8dwvg7O1W/2z9nulBPb63l+Uv9urWL/AtBvPZCWFayme 3o7c9yXjWYQDoRP17vmaFY+aOg7YryV/mXWF/vlTiAhJbnHJCmJkqiOTmQ5brke1 ASLA2VT0legSQ3LLYyMr2B2v6flJECUN0rIewf8OLPHxDP0r2EnpbkFrVul8ae5v oj6GN4gNBhtJAke7Np7wQgIqkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBxmFh37 3MwQCo74vqq2fPo73a2TMB8GA1UdIwQYMBaAFDjh1uCtAluwLmVIGD7yqCAAUKNl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUVDNC84QTlBODM2ODFE ODkxMUUyOUNFNUVDRTIwOEIwMkNEMi9PT0hXNEswQ1c3QXVaVWdZUHZLb0lBQlFv MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09PSFc0SzBDVzdBdVpVZ1lQdktvSUFCUW8yVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUVDNC84QTlBODM2ODFEODkxMUUyOUNFNUVDRTIwOEIwMkNEMi9PT0hXNEswQ1c3 QXVaVWdZUHZLb0lBQlFvMlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBD/1s/Wgaz8H90xpT3Y5/zBej4PZ+6ixmOZgCqK64/ScJAhAn1+STC 1O8Wl1/F+zL7w2h/TF9/OYVXZEar2rmUp9BNmHLB0I/G/eWQj+fJVhUGztH0Zh/S cRm2lhVqytmdYbB+gugrKBblM8f7NyGkLYzcFwZ1DoIgDHghW858zGYPaAovBVTB hpwm70zhuT63oHE01SfoOakfq4iCma22KsfqA9juBEM2z3HnMm5CgP7awTcdi1yQ JUZtn+kSDt4EPrMfX845KFRsoCr971XVTp20uR77mdObohS6J1TbW2WaNnVV0t0l +BVUNyQUmpW3yqp6NbVncm/QKy+KtvM3 -----END CERTIFICATE-----Generated at Sat Apr 26 12:50:10 2025 by rpki-client