$ rpki-client -vvf rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft File: oxVOxxr_DOw2jHltJXw6nAWJo_8.mft (raw, json) Hash identifier: tgvqkBqDAP9CMF15QFCuSCDYs/j/bI/WB2/pg+gHhr0= Subject key identifier: 7B:FD:3E:03:45:39:E0:5E:C0:73:BD:1F:79:05:E2:18:BE:EE:84:8B Authority key identifier: A3:15:4E:C7:1A:FF:0C:EC:36:8C:79:6D:25:7C:3A:9C:05:89:A3:FF Certificate issuer: /CN=A914A2C1/serialNumber=A3154EC71AFF0CEC368C796D257C3A9C0589A3FF Certificate serial: E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxVOxxr_DOw2jHltJXw6nAWJo_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft Manifest number: E7 Signing time: Fri 25 Apr 2025 04:28:17 +0000 Manifest this update: Fri 25 Apr 2025 04:28:17 +0000 Manifest next update: Fri 02 May 2025 04:28:17 +0000 Files and hashes: 1: oxVOxxr_DOw2jHltJXw6nAWJo_8.crl (hash: TCJKBiDqI+8rFpT7MEeLdg6A6IUGSUXmNH+TImqd+iY=) 2: 4A30B41CC09F11EEB2E48256C4F9AE02.roa (hash: IQwoPmbNS6EWj4SfGYbMHUkyg+0iQUeFh2X1891ay/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.crl rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxVOxxr_DOw2jHltJXw6nAWJo_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A2C1, serialNumber=A3154EC71AFF0CEC368C796D257C3A9C0589A3FF Validity Not Before: Apr 25 04:28:17 2025 GMT Not After : May 2 04:28:17 2025 GMT Subject: CN=680b0f61-c4d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b5:03:17:7e:64:22:29:0c:2f:c0:a7:21:18: 0d:39:5e:ed:ac:88:f4:f7:d0:d1:50:01:79:6b:5a: 93:ae:26:e3:da:4a:85:68:9c:6d:67:d1:d8:8b:c8: 6a:c8:e0:f4:60:cf:00:7e:58:2e:c5:7f:f1:62:07: c8:1c:eb:13:a4:f1:d4:04:71:77:b3:83:cd:92:c1: 99:09:0c:c5:bf:4e:6c:fb:d7:58:ed:c0:67:e6:a8: 72:7e:ff:a9:f9:34:8a:61:2c:3a:92:c2:9e:89:d1: 45:0f:b6:6d:40:64:20:78:6d:08:2b:14:40:c5:7c: 91:ac:ad:16:43:71:88:03:ca:d2:40:7b:09:62:3a: 2f:b1:f5:a4:f3:71:ea:97:ee:b8:ef:5e:db:36:e7: d1:26:50:71:d2:0a:c4:07:91:a0:fc:61:54:d5:33: a7:22:cd:d9:7d:f3:a1:89:35:4e:18:87:90:46:00: 3b:e7:7b:6b:f2:76:28:18:6e:a5:e5:7c:46:ed:a3: 43:9f:11:ad:5e:8d:a8:33:1d:10:0b:b1:69:3d:27: 47:dd:d3:17:db:43:51:56:69:5b:e0:67:a8:66:3e: 43:de:b6:43:33:aa:83:b0:e3:1f:79:a4:6b:4b:f1: 73:b0:e1:f7:b6:b6:a8:75:61:fa:47:64:5a:8d:34: 5c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:FD:3E:03:45:39:E0:5E:C0:73:BD:1F:79:05:E2:18:BE:EE:84:8B X509v3 Authority Key Identifier: keyid:A3:15:4E:C7:1A:FF:0C:EC:36:8C:79:6D:25:7C:3A:9C:05:89:A3:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxVOxxr_DOw2jHltJXw6nAWJo_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:8b:ba:3a:09:fc:5d:7f:16:cd:ae:22:7c:01:16:64:ce:bd: 75:05:99:78:9c:d1:74:7b:6b:93:77:ed:73:78:08:b5:d6:3e: a3:6f:7b:9d:80:9b:49:19:55:2c:0d:c3:73:8e:54:04:32:7c: a3:53:3c:7e:a5:77:ed:40:db:a0:a1:b0:64:3e:55:de:cd:3e: 6f:10:29:89:6d:41:98:65:32:4d:8b:c2:ce:b1:f9:ff:42:e6: b0:fd:72:e8:94:9c:24:40:88:2e:ce:8c:4c:5c:8d:df:bd:55: 6f:3b:75:3c:09:3b:0c:54:b7:84:47:d9:6d:9a:cc:fa:06:2b: 52:b7:dc:1e:e6:6a:b6:b8:b7:69:00:c3:5c:ef:3d:4d:48:5a: 53:43:dd:6d:34:cf:af:eb:5d:ac:c4:3f:c8:bd:12:a6:5c:8b: 55:39:02:71:85:52:50:33:3a:8a:06:68:9b:12:a3:b3:48:f1: 98:0e:4c:63:c2:04:8f:0a:92:49:52:47:c1:6c:8f:c4:95:e4: 2a:7b:05:88:12:47:d6:07:7a:c2:8a:91:9b:f1:ed:b0:51:00: c2:af:77:0e:03:5f:14:2f:81:f4:72:fc:4d:c6:e7:87:8e:c2: 2a:4e:60:f0:c0:43:ce:39:23:79:3d:ff:6f:b5:59:6c:ab:47: a5:50:6c:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEEyQzExMTAvBgNVBAUTKEEzMTU0RUM3MUFGRjBDRUMzNjhDNzk2RDI1N0MzQTlD MDU4OUEzRkYwHhcNMjUwNDI1MDQyODE3WhcNMjUwNTAyMDQyODE3WjAYMRYwFAYD VQQDEw02ODBiMGY2MS1jNGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA37UDF35kIikML8CnIRgNOV7trIj099DRUAF5a1qTribj2kqFaJxtZ9HYi8hq yOD0YM8AflguxX/xYgfIHOsTpPHUBHF3s4PNksGZCQzFv05s+9dY7cBn5qhyfv+p +TSKYSw6ksKeidFFD7ZtQGQgeG0IKxRAxXyRrK0WQ3GIA8rSQHsJYjovsfWk83Hq l+64717bNufRJlBx0grEB5Gg/GFU1TOnIs3ZffOhiTVOGIeQRgA753tr8nYoGG6l 5XxG7aNDnxGtXo2oMx0QC7FpPSdH3dMX20NRVmlb4GeoZj5D3rZDM6qDsOMfeaRr S/FzsOH3traodWH6R2RajTRcVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHv9PgNF OeBewHO9H3kF4hi+7oSLMB8GA1UdIwQYMBaAFKMVTsca/wzsNox5bSV8OpwFiaP/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTJDMS83RkZERkI2NEMw OUUxMUVFQUQzQjg1NTRDNEY5QUUwMi9veFZPeHhyX0RPdzJqSGx0Slh3Nm5BV0pv XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL294Vk94eHJfRE93MmpIbHRKWHc2bkFXSm9fOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTJDMS83RkZERkI2NEMwOUUxMUVFQUQzQjg1NTRDNEY5QUUwMi9veFZPeHhyX0RP dzJqSGx0Slh3Nm5BV0pvXzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFi7o6CfxdfxbNriJ8ARZkzr11BZl4nNF0e2uTd+1zeAi11j6jb3ud gJtJGVUsDcNzjlQEMnyjUzx+pXftQNugobBkPlXezT5vECmJbUGYZTJNi8LOsfn/ Quaw/XLolJwkQIguzoxMXI3fvVVvO3U8CTsMVLeER9ltmsz6BitSt9we5mq2uLdp AMNc7z1NSFpTQ91tNM+v612sxD/IvRKmXItVOQJxhVJQMzqKBmibEqOzSPGYDkxj wgSPCpJJUkfBbI/EleQqewWIEkfWB3rCipGb8e2wUQDCr3cOA18UL4H0cvxNxueH jsIqTmDwwEPOOSN5Pf9vtVlsq0elUGzn -----END CERTIFICATE-----Generated at Sat Apr 26 16:50:52 2025 by rpki-client