$ rpki-client -vvf rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.mft File: oxnfTQtEZSzooFXCNSUBGLSUBYU.mft (raw, json) Hash identifier: qJbwvQ2BTBn2n8NKiILf0S8EWA/4wTsIx9YBfoNffh8= Subject key identifier: 93:F1:DD:47:21:55:88:51:19:05:CF:8E:7A:5F:AF:53:5A:2E:3D:FB Authority key identifier: A3:19:DF:4D:0B:44:65:2C:E8:A0:55:C2:35:25:01:18:B4:94:05:85 Certificate issuer: /CN=A913E881/serialNumber=A319DF4D0B44652CE8A055C235250118B4940585 Certificate serial: 0759 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxnfTQtEZSzooFXCNSUBGLSUBYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.mft Manifest number: 0750 Signing time: Thu 24 Apr 2025 21:28:10 +0000 Manifest this update: Thu 24 Apr 2025 21:28:10 +0000 Manifest next update: Thu 01 May 2025 21:28:10 +0000 Files and hashes: 1: oxnfTQtEZSzooFXCNSUBGLSUBYU.crl (hash: RoeH3gQsLkUX/1x0RE5k5xok3GTCC7pnqlXvP6Z2sTc=) 2: 29F6C42C1FD311EBA5D83A1EC4F9AE02.roa (hash: epre9gPrGweKOSwkMZsEVYJd5/RVczknOfwPtxQUKwY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.crl rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxnfTQtEZSzooFXCNSUBGLSUBYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:28:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1881 (0x759) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E881, serialNumber=A319DF4D0B44652CE8A055C235250118B4940585 Validity Not Before: Apr 24 21:28:10 2025 GMT Not After : May 1 21:28:10 2025 GMT Subject: CN=680aacea-e209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1c:d5:21:c4:5a:c4:17:48:e2:73:92:88:9b: 1d:05:87:25:48:63:87:6c:7d:8e:e1:78:dc:3d:32: da:07:7f:65:61:13:b5:be:8b:0e:24:11:90:c2:f4: d6:32:50:d0:bc:a8:e1:ad:00:ad:a3:07:56:98:c5: 09:7b:47:58:a4:84:1f:5f:10:e3:ba:e0:3c:d2:88: 85:b8:15:28:1a:30:89:22:60:1c:7a:da:a6:72:3b: ec:23:ed:82:70:97:23:d6:25:e3:dd:76:9d:b6:db: 32:3f:ed:cd:f0:75:9f:9c:81:b2:8d:af:93:19:5d: 86:ea:fd:47:b7:cf:a6:a8:1e:a0:23:f1:55:ea:8a: e2:34:25:5d:66:b5:16:cb:ea:8c:84:c9:e7:c7:c5: c0:4e:a5:22:59:e2:19:bc:d7:25:eb:be:4d:17:93: 97:07:f4:73:3b:36:ed:7e:b9:4f:ac:6a:9f:aa:ac: d4:84:d4:85:47:4a:90:e3:a4:a0:59:10:f1:82:6a: 69:45:65:63:24:8a:d3:7a:c4:08:55:3d:b7:13:56: bf:53:8c:12:02:57:38:00:59:8d:ae:88:e1:22:d1: 15:89:5f:c6:0c:02:24:78:bf:2b:1e:bb:ea:59:e0: 2f:4a:ad:51:44:3c:29:72:0d:11:32:c8:91:22:8c: ad:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:F1:DD:47:21:55:88:51:19:05:CF:8E:7A:5F:AF:53:5A:2E:3D:FB X509v3 Authority Key Identifier: keyid:A3:19:DF:4D:0B:44:65:2C:E8:A0:55:C2:35:25:01:18:B4:94:05:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxnfTQtEZSzooFXCNSUBGLSUBYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:76:ba:1d:44:23:18:29:6e:2d:55:8e:4c:dd:da:83:13:23: b2:33:88:4f:c3:3a:16:a1:bc:7c:89:99:2b:65:13:36:48:f5: 1f:65:60:33:70:74:01:17:0a:21:92:60:84:59:f0:f4:00:0f: e1:63:68:98:9e:77:a1:ec:09:d0:61:67:50:7e:c9:e9:6f:f4: 15:f3:98:3c:6b:8e:79:b6:a7:8b:41:e3:75:e4:d2:e4:ad:03: fc:f3:57:4a:d9:ea:42:8f:91:b9:7c:2e:3e:35:ad:c6:d5:95: 34:5b:ea:55:51:c7:20:20:c1:8e:cc:fa:82:ad:97:92:ac:25: 5c:69:62:76:0b:5f:ba:0a:f2:71:99:dc:e0:3c:56:e0:2a:92: dd:e8:8d:b3:c7:63:26:a1:a0:4c:b0:ce:f1:a6:7f:d0:20:46: a9:fd:02:04:cc:f3:72:c5:e2:60:1c:65:9a:8f:21:c9:d8:ed: 74:36:4a:c9:5b:d8:c4:e2:03:db:52:bc:f2:ff:98:b2:06:30: 01:f9:47:2b:4d:50:87:d8:01:e3:01:35:b8:67:43:b8:50:7b: 0d:6a:7d:78:f5:ff:e3:fc:b2:a0:b5:b4:e8:a8:9b:4e:bc:6a: a0:b5:a7:c8:9d:a3:16:ba:01:0b:5f:c7:b5:c4:61:f9:51:4c: 4d:1c:3e:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U4ODExMTAvBgNVBAUTKEEzMTlERjREMEI0NDY1MkNFOEEwNTVDMjM1MjUwMTE4 QjQ5NDA1ODUwHhcNMjUwNDI0MjEyODEwWhcNMjUwNTAxMjEyODEwWjAYMRYwFAYD VQQDEw02ODBhYWNlYS1lMjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArBzVIcRaxBdI4nOSiJsdBYclSGOHbH2O4XjcPTLaB39lYRO1vosOJBGQwvTW MlDQvKjhrQCtowdWmMUJe0dYpIQfXxDjuuA80oiFuBUoGjCJImAcetqmcjvsI+2C cJcj1iXj3XadttsyP+3N8HWfnIGyja+TGV2G6v1Ht8+mqB6gI/FV6oriNCVdZrUW y+qMhMnnx8XATqUiWeIZvNcl675NF5OXB/RzOzbtfrlPrGqfqqzUhNSFR0qQ46Sg WRDxgmppRWVjJIrTesQIVT23E1a/U4wSAlc4AFmNrojhItEViV/GDAIkeL8rHrvq WeAvSq1RRDwpcg0RMsiRIoytgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJPx3Uch VYhRGQXPjnpfr1NaLj37MB8GA1UdIwQYMBaAFKMZ300LRGUs6KBVwjUlARi0lAWF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTg4MS8xRTY0MkVFNDFG RDExMUVCQTU3RTc0MUNDNEY5QUUwMi9veG5mVFF0RVpTem9vRlhDTlNVQkdMU1VC WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL294bmZUUXRFWlN6b29GWENOU1VCR0xTVUJZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTg4MS8xRTY0MkVFNDFGRDExMUVCQTU3RTc0MUNDNEY5QUUwMi9veG5mVFF0RVpT em9vRlhDTlNVQkdMU1VCWVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsdrodRCMYKW4tVY5M3dqDEyOyM4hPwzoWobx8iZkrZRM2SPUfZWAz cHQBFwohkmCEWfD0AA/hY2iYnneh7AnQYWdQfsnpb/QV85g8a455tqeLQeN15NLk rQP881dK2epCj5G5fC4+Na3G1ZU0W+pVUccgIMGOzPqCrZeSrCVcaWJ2C1+6CvJx mdzgPFbgKpLd6I2zx2MmoaBMsM7xpn/QIEap/QIEzPNyxeJgHGWajyHJ2O10NkrJ W9jE4gPbUrzy/5iyBjAB+UcrTVCH2AHjATW4Z0O4UHsNan149f/j/LKgtbToqJtO vGqgtafInaMWugELX8e1xGH5UUxNHD5c -----END CERTIFICATE-----Generated at Sat Apr 26 04:19:00 2025 by rpki-client