$ rpki-client -vvf rpki.apnic.net/member_repository/A91498A4/ECF30A9E905311EB9CA8721DC4F9AE02/OjOl2tw3NyZBfd1W5GeQ_4S7ztE.mft File: OjOl2tw3NyZBfd1W5GeQ_4S7ztE.mft (raw, json) Hash identifier: JY68k0oOVHRs0rGVA57rjcHL3TqrVK6K7rRw+JRK6yw= Subject key identifier: A6:6A:1D:9C:C9:57:02:5C:08:AA:08:B1:9F:66:93:E3:2C:7F:BA:AD Authority key identifier: 3A:33:A5:DA:DC:37:37:26:41:7D:DD:56:E4:67:90:FF:84:BB:CE:D1 Certificate issuer: /CN=A91498A4/serialNumber=3A33A5DADC373726417DDD56E46790FF84BBCED1 Certificate serial: 0631 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OjOl2tw3NyZBfd1W5GeQ_4S7ztE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91498A4/ECF30A9E905311EB9CA8721DC4F9AE02/OjOl2tw3NyZBfd1W5GeQ_4S7ztE.mft Manifest number: 062C Signing time: Thu 24 Apr 2025 22:28:19 +0000 Manifest this update: Thu 24 Apr 2025 22:28:18 +0000 Manifest next update: Thu 01 May 2025 22:28:18 +0000 Files and hashes: 1: OjOl2tw3NyZBfd1W5GeQ_4S7ztE.crl (hash: ZJpxAzQOQkLLfmpmajtqZwA8rqUHCJX001KpcdW0qtg=) 2: A7A77B96911111EBA69D2641C4F9AE02.roa (hash: GeZswpwVwmpN5JkYUADU3m9LKzzMiHleESILy/kILG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91498A4/ECF30A9E905311EB9CA8721DC4F9AE02/OjOl2tw3NyZBfd1W5GeQ_4S7ztE.crl rsync://rpki.apnic.net/member_repository/A91498A4/ECF30A9E905311EB9CA8721DC4F9AE02/OjOl2tw3NyZBfd1W5GeQ_4S7ztE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OjOl2tw3NyZBfd1W5GeQ_4S7ztE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:28:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1585 (0x631) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91498A4, serialNumber=3A33A5DADC373726417DDD56E46790FF84BBCED1 Validity Not Before: Apr 24 22:28:18 2025 GMT Not After : May 1 22:28:18 2025 GMT Subject: CN=680abb03-20f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3c:b8:f9:4b:cb:af:f5:ff:50:24:19:65:db: 01:7b:5f:ea:80:9e:d7:82:f8:03:e5:a0:c1:79:70: be:9c:46:67:d2:a6:f0:50:04:12:aa:2d:8f:9b:21: c0:82:43:69:b2:18:da:37:26:66:f2:7c:06:ec:4b: 77:f3:fb:36:bb:93:11:45:8f:89:4b:2d:00:1f:cc: f9:91:a2:ea:55:23:cc:45:08:f6:de:17:27:63:1f: f0:fd:cd:7a:b3:46:1a:45:d8:62:f4:5f:91:66:6a: cb:9f:77:7f:34:cc:de:1a:b4:09:73:e8:35:e9:b6: aa:17:1c:e3:d0:93:d3:e4:d8:41:9e:e1:ec:1a:34: a9:54:da:41:93:43:74:4d:01:63:eb:72:a2:26:53: 4d:01:fa:d0:f1:cd:bb:a7:ca:40:b9:06:66:13:a8: e4:ac:fb:67:4e:cd:8e:af:6d:87:37:fe:aa:51:ad: cc:49:a7:b9:1e:ea:f1:15:2c:81:82:dd:8e:37:6c: 84:df:cb:d8:d3:4d:36:87:83:7c:a0:73:23:fa:0e: e7:a5:b9:3e:0a:a0:e6:99:35:32:2d:25:5b:9e:bc: 0a:06:b7:cb:eb:da:36:c9:31:8f:92:d7:80:c6:1d: 6e:19:51:37:48:d4:52:03:5d:e0:9b:82:da:5a:dc: c9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:6A:1D:9C:C9:57:02:5C:08:AA:08:B1:9F:66:93:E3:2C:7F:BA:AD X509v3 Authority Key Identifier: keyid:3A:33:A5:DA:DC:37:37:26:41:7D:DD:56:E4:67:90:FF:84:BB:CE:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91498A4/ECF30A9E905311EB9CA8721DC4F9AE02/OjOl2tw3NyZBfd1W5GeQ_4S7ztE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OjOl2tw3NyZBfd1W5GeQ_4S7ztE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91498A4/ECF30A9E905311EB9CA8721DC4F9AE02/OjOl2tw3NyZBfd1W5GeQ_4S7ztE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:4b:66:54:98:ec:51:a0:1f:7d:6d:06:52:0c:27:8e:75:31: a5:57:7c:27:fb:ee:d9:3f:4b:98:75:5b:57:31:52:7b:77:ee: 5b:5f:ce:32:c9:e6:1c:ac:e8:28:e3:67:34:0d:22:7e:e5:bc: 37:99:25:67:07:11:5c:56:cb:b3:fe:50:57:33:1b:7b:ed:d3: 98:a6:65:e7:21:cc:95:a8:43:d3:79:c2:5b:37:2f:c4:d8:c1: 86:a4:b1:1b:a3:ff:cc:55:8c:8c:75:7e:a3:7d:35:5c:d9:86: dc:e7:5c:00:7a:95:ff:c8:70:0f:7d:00:18:66:c5:65:82:8e: d0:91:b9:d9:56:35:3c:87:ef:50:7f:a3:74:2a:fd:ed:6a:15: 1c:bd:d6:d3:88:10:f8:8e:4f:49:7e:3f:e8:ec:59:5f:ab:ae: cd:3b:5d:14:75:d0:fa:d6:96:4f:7b:ec:b8:c4:f4:f1:f7:45: 1b:11:f3:91:39:cd:de:fe:bc:43:f3:ba:b9:86:9a:93:93:3b: 52:b0:05:8b:26:be:7d:fa:75:10:cc:2b:8f:e1:02:93:ce:7b: 14:8e:7e:06:1d:bb:68:8d:ae:3b:b5:a7:27:03:e3:76:67:0a: 34:61:77:4b:f0:0a:22:74:9c:e3:c0:1f:54:ca:c2:d5:0e:00: 96:ba:18:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk4QTQxMTAvBgNVBAUTKDNBMzNBNURBREMzNzM3MjY0MTdEREQ1NkU0Njc5MEZG ODRCQkNFRDEwHhcNMjUwNDI0MjIyODE4WhcNMjUwNTAxMjIyODE4WjAYMRYwFAYD VQQDEw02ODBhYmIwMy0yMGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAszy4+UvLr/X/UCQZZdsBe1/qgJ7XgvgD5aDBeXC+nEZn0qbwUAQSqi2PmyHA gkNpshjaNyZm8nwG7Et38/s2u5MRRY+JSy0AH8z5kaLqVSPMRQj23hcnYx/w/c16 s0YaRdhi9F+RZmrLn3d/NMzeGrQJc+g16baqFxzj0JPT5NhBnuHsGjSpVNpBk0N0 TQFj63KiJlNNAfrQ8c27p8pAuQZmE6jkrPtnTs2Or22HN/6qUa3MSae5HurxFSyB gt2ON2yE38vY0002h4N8oHMj+g7npbk+CqDmmTUyLSVbnrwKBrfL69o2yTGPkteA xh1uGVE3SNRSA13gm4LaWtzJEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKZqHZzJ VwJcCKoIsZ9mk+Msf7qtMB8GA1UdIwQYMBaAFDozpdrcNzcmQX3dVuRnkP+Eu87R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OThBNC9FQ0YzMEE5RTkw NTMxMUVCOUNBODcyMURDNEY5QUUwMi9Pak9sMnR3M055WkJmZDFXNUdlUV80Uzd6 dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09qT2wydHczTnlaQmZkMVc1R2VRXzRTN3p0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OThBNC9FQ0YzMEE5RTkwNTMxMUVCOUNBODcyMURDNEY5QUUwMi9Pak9sMnR3M055 WkJmZDFXNUdlUV80Uzd6dEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9S2ZUmOxRoB99bQZSDCeOdTGlV3wn++7ZP0uYdVtXMVJ7d+5bX84y yeYcrOgo42c0DSJ+5bw3mSVnBxFcVsuz/lBXMxt77dOYpmXnIcyVqEPTecJbNy/E 2MGGpLEbo//MVYyMdX6jfTVc2Ybc51wAepX/yHAPfQAYZsVlgo7QkbnZVjU8h+9Q f6N0Kv3tahUcvdbTiBD4jk9Jfj/o7Flfq67NO10UddD61pZPe+y4xPTx90UbEfOR Oc3e/rxD87q5hpqTkztSsAWLJr59+nUQzCuP4QKTznsUjn4GHbtoja47tacnA+N2 Zwo0YXdL8AoidJzjwB9UysLVDgCWuhjj -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:56 2025 by rpki-client