$ rpki-client -vvf rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft File: OXH34h0IySQ6u0A_gDBkv3iy2IA.mft (raw, json) Hash identifier: ZreQtIAzwhPRq0J3WhDOv/1qCRGfI7PDnAJkwhb0Krs= Subject key identifier: AE:5E:3B:47:24:FA:94:DE:F5:17:C3:E1:9D:53:37:91:73:9E:EF:4E Authority key identifier: 39:71:F7:E2:1D:08:C9:24:3A:BB:40:3F:80:30:64:BF:78:B2:D8:80 Certificate issuer: /CN=A913D46F/serialNumber=3971F7E21D08C9243ABB403F803064BF78B2D880 Certificate serial: 0C9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft Manifest number: 0C71 Signing time: Thu 24 Apr 2025 18:17:35 +0000 Manifest this update: Thu 24 Apr 2025 18:17:34 +0000 Manifest next update: Thu 01 May 2025 18:17:34 +0000 Files and hashes: 1: OXH34h0IySQ6u0A_gDBkv3iy2IA.crl (hash: n0o/V/GUoEtZt0FEfsRWowekcf5GEDLZkY/T6Gr5vIc=) 2: 92F8F6D042DA11ED93029A6AC4F9AE02.roa (hash: TeIPGyGqDRDL84HA9NnAzVJOOMFf2EjmrKH/elumev8=) 3: B0B722BEFA4A11EDA47C091DC4F9AE02.roa (hash: lRMtWT21HxefR8cIAkbesXguaIjwdfIuBa6XccIOgBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.crl rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:17:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3230 (0xc9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D46F, serialNumber=3971F7E21D08C9243ABB403F803064BF78B2D880 Validity Not Before: Apr 24 18:17:34 2025 GMT Not After : May 1 18:17:34 2025 GMT Subject: CN=680a803f-2793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:44:49:28:b2:19:09:07:1a:b0:e8:7f:c2:18: eb:9e:96:cf:dc:69:d2:88:82:e4:61:63:ae:80:b5: f0:cc:2d:53:9c:81:22:eb:bc:86:33:a2:be:64:66: b4:3b:e8:a6:15:b9:bb:00:4f:7e:4b:98:c8:ec:60: b0:ee:6d:02:d8:cf:4e:77:bb:f3:57:db:e5:a9:82: 63:fc:3b:9b:0e:a7:8f:de:6e:eb:f3:bd:fd:b1:05: 7d:53:3a:b2:0c:61:b9:ae:bd:4b:e5:40:05:9f:6e: 2e:12:18:7a:e7:d8:ea:bb:10:ed:22:a7:b9:ee:30: 2e:33:6f:07:51:fa:20:25:93:7e:e3:9d:43:df:29: 94:b6:fb:f0:45:48:62:ca:c5:f6:18:95:04:ad:75: 6a:e3:30:7d:83:e3:27:15:e0:e9:d1:f4:72:58:b2: 1d:85:5e:0f:c4:c0:1d:00:4c:d0:90:18:ec:44:f8: a3:3a:d8:87:d5:ba:68:59:be:9f:88:f4:11:e0:03: 6e:f6:99:96:de:69:c6:8d:a5:2a:b0:1f:b6:e2:30: 58:0b:58:2c:01:eb:f5:98:62:6d:48:2e:6d:0b:c1: 3e:4a:4b:db:59:c3:53:6b:aa:01:29:7c:85:59:49: 40:67:9f:da:c5:5b:aa:8f:d3:98:1c:67:e0:e3:20: cb:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:5E:3B:47:24:FA:94:DE:F5:17:C3:E1:9D:53:37:91:73:9E:EF:4E X509v3 Authority Key Identifier: keyid:39:71:F7:E2:1D:08:C9:24:3A:BB:40:3F:80:30:64:BF:78:B2:D8:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:c0:0b:1d:72:e5:a8:fe:f3:c6:2b:da:65:76:bc:6f:52:02: d1:0c:ca:30:b5:ee:ec:e4:e8:94:11:8b:f4:74:8c:de:4b:42: 67:c4:67:c1:23:17:57:0d:67:0e:5c:76:50:4e:a5:10:d4:62: 8a:26:9f:b1:1a:89:5c:f4:95:02:ee:32:9a:d3:d9:7f:37:31: 80:e2:06:3b:d8:60:39:4b:a3:65:8a:ae:6f:06:b7:d9:c7:78: 45:c2:ba:89:ce:ee:dd:1b:39:74:80:59:48:98:e7:6b:37:c7: 3b:5c:17:16:e2:19:b2:a0:88:fd:2c:88:0f:f0:e4:9e:08:99: fd:ec:9e:16:64:4d:8c:a9:e1:ea:52:00:b3:12:8e:e6:fd:39: d1:de:3e:fe:db:62:31:7f:b1:73:0c:0e:0d:4c:99:79:88:e0: d4:9b:d3:b2:62:87:d4:58:fa:1e:2b:59:26:1f:ad:ac:22:01: 61:7c:0c:74:63:b5:9f:53:f4:b3:a3:b6:1c:2b:b2:96:2a:47: 54:65:1f:12:5b:28:01:00:1e:55:4d:eb:29:06:42:bd:8d:c7: 86:b2:04:3a:4a:32:53:28:08:d4:c6:72:0e:67:1f:e9:17:bb: 90:8f:b0:3c:93:f0:49:9b:1e:83:08:fc:2b:26:2c:17:b4:7a: ea:6e:75:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Q0NkYxMTAvBgNVBAUTKDM5NzFGN0UyMUQwOEM5MjQzQUJCNDAzRjgwMzA2NEJG NzhCMkQ4ODAwHhcNMjUwNDI0MTgxNzM0WhcNMjUwNTAxMTgxNzM0WjAYMRYwFAYD VQQDEw02ODBhODAzZi0yNzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx0RJKLIZCQcasOh/whjrnpbP3GnSiILkYWOugLXwzC1TnIEi67yGM6K+ZGa0 O+imFbm7AE9+S5jI7GCw7m0C2M9Od7vzV9vlqYJj/DubDqeP3m7r8739sQV9Uzqy DGG5rr1L5UAFn24uEhh659jquxDtIqe57jAuM28HUfogJZN+451D3ymUtvvwRUhi ysX2GJUErXVq4zB9g+MnFeDp0fRyWLIdhV4PxMAdAEzQkBjsRPijOtiH1bpoWb6f iPQR4ANu9pmW3mnGjaUqsB+24jBYC1gsAev1mGJtSC5tC8E+SkvbWcNTa6oBKXyF WUlAZ5/axVuqj9OYHGfg4yDLVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK5eO0ck +pTe9RfD4Z1TN5Fznu9OMB8GA1UdIwQYMBaAFDlx9+IdCMkkOrtAP4AwZL94stiA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDQ2Ri83REEyNEM3QTAw NjkxMUVBOEZEQjI4NURDNEY5QUUwMi9PWEgzNGgwSXlTUTZ1MEFfZ0RCa3YzaXky SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09YSDM0aDBJeVNRNnUwQV9nREJrdjNpeTJJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDQ2Ri83REEyNEM3QTAwNjkxMUVBOEZEQjI4NURDNEY5QUUwMi9PWEgzNGgwSXlT UTZ1MEFfZ0RCa3YzaXkySUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7wAsdcuWo/vPGK9pldrxvUgLRDMowte7s5OiUEYv0dIzeS0JnxGfB IxdXDWcOXHZQTqUQ1GKKJp+xGolc9JUC7jKa09l/NzGA4gY72GA5S6Nliq5vBrfZ x3hFwrqJzu7dGzl0gFlImOdrN8c7XBcW4hmyoIj9LIgP8OSeCJn97J4WZE2MqeHq UgCzEo7m/TnR3j7+22Ixf7FzDA4NTJl5iODUm9OyYofUWPoeK1kmH62sIgFhfAx0 Y7WfU/Szo7YcK7KWKkdUZR8SWygBAB5VTespBkK9jceGsgQ6SjJTKAjUxnIOZx/p F7uQj7A8k/BJmx6DCPwrJiwXtHrqbnW5 -----END CERTIFICATE-----Generated at Sat Apr 26 19:11:17 2025 by rpki-client