$ rpki-client -vvf rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft File: OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft (raw, json) Hash identifier: 8XsvjosvhXwCkbkBKGKifsgQZHxYcSUGiYXf1O10bd0= Subject key identifier: 23:BD:B4:D6:B9:1E:61:27:B5:EF:B8:B4:0B:6E:AC:95:FD:9F:15:68 Authority key identifier: 39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38 Certificate issuer: /CN=A91613AB/serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838 Certificate serial: 01DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft Manifest number: 01CE Signing time: Fri 25 Apr 2025 02:09:49 +0000 Manifest this update: Fri 25 Apr 2025 02:09:48 +0000 Manifest next update: Fri 02 May 2025 02:09:48 +0000 Files and hashes: 1: OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl (hash: Zvv0kHjCn2vDEzxqjmOGrjct8f6MkeOL2EpU+DOPq7M=) 2: 65AFE18C91DB11EFBC4C2A3EC4F9AE02.roa (hash: LqvEH1o9qv1Spv16C52zEqgMsWnx5LeCvM7wNncYwmQ=) 3: A50FD050DA7911EDB0D3866BC4F9AE02.roa (hash: sq3CtUxJWk/lwN1trxwIddBHXPOdGnUuNzRlPvsNflY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:09:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 474 (0x1da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91613AB, serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838 Validity Not Before: Apr 25 02:09:48 2025 GMT Not After : May 2 02:09:48 2025 GMT Subject: CN=680aeeed-17bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e0:df:d0:15:a2:4d:f3:c2:aa:4f:2b:3e:2b: 1c:c8:a3:e5:ad:4a:2b:2d:d4:bd:0a:94:08:db:72: 77:7c:bd:22:e2:dc:ff:0b:e9:89:66:4f:19:a1:02: 0b:06:43:4a:7f:7c:2b:00:20:18:f7:cd:a8:d3:a9: 70:8f:a8:21:f2:cf:ee:60:61:ef:eb:ba:91:b3:c4: f5:f1:10:dd:7a:e3:bf:56:01:bf:75:97:e2:89:03: 6c:f3:41:f4:96:4b:11:ff:67:03:34:e0:23:33:76: 3d:61:bb:08:60:74:4d:8c:b5:81:68:96:04:6d:45: b6:7b:83:95:a5:03:dd:ec:42:f4:66:68:ea:d4:be: f1:bd:c6:b2:65:13:9e:39:f7:e8:d7:8c:fd:a8:b7: 7f:de:8b:f5:ea:3a:d1:2c:04:90:5f:41:73:0a:f5: 38:bd:8c:98:1f:b8:81:52:2a:4b:dd:12:df:fd:f0: 51:d4:e4:f1:85:3a:9b:50:d5:d1:cf:4c:e8:62:ac: ae:b5:b8:2b:65:f1:e0:c2:1b:ed:5a:1f:70:9d:a2: 7a:b2:cb:36:a6:f4:86:20:5c:94:68:15:f6:64:8a: 76:24:c7:86:ac:98:fd:48:3f:6e:12:9e:42:ba:fb: 61:14:b2:92:a0:ef:3b:15:a4:6e:b1:eb:93:3d:c5: e2:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:BD:B4:D6:B9:1E:61:27:B5:EF:B8:B4:0B:6E:AC:95:FD:9F:15:68 X509v3 Authority Key Identifier: keyid:39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:19:82:a3:9b:24:28:ba:e4:2e:e8:32:77:0a:5b:88:d2:fb: 60:96:2c:3b:f3:2a:61:2c:de:87:61:96:b2:3d:63:25:96:cb: c9:43:01:fb:cf:75:b2:3e:ea:d1:b1:be:18:0c:7b:1a:79:ae: 9f:36:30:e8:c1:37:b1:ab:f5:85:f8:53:7f:05:4e:3a:43:7a: 40:2f:9e:fc:a6:60:ef:da:55:ec:e2:eb:f5:38:19:52:a6:d9: 21:40:18:41:52:b0:98:00:d6:3a:84:be:28:32:01:d0:ed:27: 08:fa:47:b1:e4:8a:43:1d:8e:b7:8a:00:2f:2b:8a:98:9a:e7: 56:a0:7d:55:9b:6a:22:95:7b:bb:95:c3:17:8d:31:d0:ef:97: 4b:42:8b:c0:e1:9e:a8:aa:80:5b:80:9d:f1:78:6e:67:82:9f: 4e:bd:85:c1:bd:97:d0:79:4f:8e:04:cc:b2:91:c7:2a:f0:65: d2:5b:32:c6:30:ee:0f:a3:0e:f8:a7:e1:84:96:2b:80:a0:ba: b7:95:14:6a:18:53:78:49:fd:cd:c4:54:92:30:a1:0f:ac:23: 9e:9f:c9:c2:5f:38:2d:91:1d:02:db:bc:89:c9:d8:78:d9:9e: 0d:11:e2:66:44:d5:dd:16:a1:d3:dc:02:d3:9a:17:1f:57:6e: 03:b6:41:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEzQUIxMTAvBgNVBAUTKDM5MDFBRjRBOTNGRUZBQUVCODc5Q0M5RjU5OTRFNEU3 RjAxQUY4MzgwHhcNMjUwNDI1MDIwOTQ4WhcNMjUwNTAyMDIwOTQ4WjAYMRYwFAYD VQQDEw02ODBhZWVlZC0xN2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4eDf0BWiTfPCqk8rPiscyKPlrUorLdS9CpQI23J3fL0i4tz/C+mJZk8ZoQIL BkNKf3wrACAY982o06lwj6gh8s/uYGHv67qRs8T18RDdeuO/VgG/dZfiiQNs80H0 lksR/2cDNOAjM3Y9YbsIYHRNjLWBaJYEbUW2e4OVpQPd7EL0Zmjq1L7xvcayZROe Offo14z9qLd/3ov16jrRLASQX0FzCvU4vYyYH7iBUipL3RLf/fBR1OTxhTqbUNXR z0zoYqyutbgrZfHgwhvtWh9wnaJ6sss2pvSGIFyUaBX2ZIp2JMeGrJj9SD9uEp5C uvthFLKSoO87FaRuseuTPcXi3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCO9tNa5 HmEnte+4tAturJX9nxVoMB8GA1UdIwQYMBaAFDkBr0qT/vquuHnMn1mU5OfwGvg4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTNBQi85Q0Y3RUNEQTZG OEIxMUVEOEZBRTNDMTFDNEY5QUUwMi9PUUd2U3BQLS1xNjRlY3lmV1pUazVfQWEt RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09RR3ZTcFAtLXE2NGVjeWZXWlRrNV9BYS1EZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTNBQi85Q0Y3RUNEQTZGOEIxMUVEOEZBRTNDMTFDNEY5QUUwMi9PUUd2U3BQLS1x NjRlY3lmV1pUazVfQWEtRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuGYKjmyQouuQu6DJ3CluI0vtgliw78yphLN6HYZayPWMllsvJQwH7 z3WyPurRsb4YDHsaea6fNjDowTexq/WF+FN/BU46Q3pAL578pmDv2lXs4uv1OBlS ptkhQBhBUrCYANY6hL4oMgHQ7ScI+kex5IpDHY63igAvK4qYmudWoH1Vm2oilXu7 lcMXjTHQ75dLQovA4Z6oqoBbgJ3xeG5ngp9OvYXBvZfQeU+OBMyykccq8GXSWzLG MO4Pow74p+GEliuAoLq3lRRqGFN4Sf3NxFSSMKEPrCOen8nCXzgtkR0C27yJydh4 2Z4NEeJmRNXdFqHT3ALTmhcfV24DtkG1 -----END CERTIFICATE-----Generated at Sat Apr 26 03:34:08 2025 by rpki-client