$ rpki-client -vvf rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft File: OTVm9EF4bZWNinkRjo71b8hy5cU.mft (raw, json) Hash identifier: NIz6GOdk/4jBRNAyqPdWJOyrauaUIllHtCu2IhcJABU= Subject key identifier: 70:93:7B:3F:AA:1D:F8:F4:33:A0:10:0C:96:58:6C:50:F6:44:4C:FB Authority key identifier: 39:35:66:F4:41:78:6D:95:8D:8A:79:11:8E:8E:F5:6F:C8:72:E5:C5 Certificate issuer: /CN=A91673ED/serialNumber=393566F441786D958D8A79118E8EF56FC872E5C5 Certificate serial: 066A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OTVm9EF4bZWNinkRjo71b8hy5cU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft Manifest number: 065E Signing time: Thu 24 Apr 2025 22:12:46 +0000 Manifest this update: Thu 24 Apr 2025 22:12:46 +0000 Manifest next update: Thu 01 May 2025 22:12:46 +0000 Files and hashes: 1: OTVm9EF4bZWNinkRjo71b8hy5cU.crl (hash: r3rH35BfzAN5iEQlHMkL2CoU+dceDCpR4hfS4YBfD4A=) 2: CD1F0EC07D4D11EBAE81AF83C4F9AE02.roa (hash: 4wWkALarNhzIV0d1ZybqQK8tC375NaVcRuBFdReJXsc=) 3: BDBFFB867D5411EB8CBE5B57C4F9AE02.roa (hash: ST3w5Tj88jMoz75b41w1YKAqx3Mmc8bfoi4qnLujj8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.crl rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OTVm9EF4bZWNinkRjo71b8hy5cU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:12:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1642 (0x66a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91673ED, serialNumber=393566F441786D958D8A79118E8EF56FC872E5C5 Validity Not Before: Apr 24 22:12:46 2025 GMT Not After : May 1 22:12:46 2025 GMT Subject: CN=680ab75e-edaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:26:b8:48:0c:d0:26:ba:eb:f4:da:30:0b:c4: 14:f1:25:7a:6b:7a:99:9b:23:87:07:18:55:3e:04: 80:88:9c:97:a4:e6:43:49:a2:f9:a5:69:14:b8:f4: de:3c:4b:48:3f:a9:59:81:42:04:9e:8f:a9:e8:aa: 8d:87:15:34:06:7a:da:3c:84:57:99:e3:8e:fb:dd: 78:e1:53:0b:a2:21:75:26:52:6e:ce:67:43:12:26: aa:98:b2:6e:b1:7c:80:34:c3:1e:0f:c5:4e:a9:05: 44:03:29:fe:78:08:a9:b8:2b:07:14:98:2e:57:50: ca:57:0c:02:a7:c3:67:3a:35:01:5f:94:6b:0f:46: ef:c9:37:4d:ce:5a:d9:b5:5c:35:6b:15:72:07:0b: b5:85:72:fb:8e:6c:cd:b0:61:de:92:77:ac:92:fd: 86:3c:04:c3:3b:ff:0a:3c:a4:5b:ed:fc:ce:69:1d: dc:13:c6:4c:4d:94:49:91:6f:b1:c7:de:43:a8:a9: 20:14:ef:75:c2:76:bb:1d:48:71:bc:2d:41:eb:32: be:a6:28:16:e5:54:b4:dc:00:11:d0:c5:1d:12:a0: f7:d0:fa:81:39:4e:63:95:5d:12:c6:5c:3e:22:77: 20:9f:22:c2:19:1a:cc:c0:79:f1:78:9c:30:aa:17: fc:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:93:7B:3F:AA:1D:F8:F4:33:A0:10:0C:96:58:6C:50:F6:44:4C:FB X509v3 Authority Key Identifier: keyid:39:35:66:F4:41:78:6D:95:8D:8A:79:11:8E:8E:F5:6F:C8:72:E5:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OTVm9EF4bZWNinkRjo71b8hy5cU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:30:52:c7:15:57:81:ae:87:16:a0:c0:0d:fa:64:27:99:f0: 93:15:38:ee:bc:b6:48:4b:7f:bb:a0:e9:24:01:8a:33:8e:c2: 47:ca:5b:cf:1f:88:25:6e:d5:8d:ed:4e:d2:21:30:c7:ba:cc: 21:ef:5c:ab:d5:7a:78:21:45:14:fc:2a:af:2f:54:73:d7:fa: ec:82:4a:04:59:bd:fd:c4:d8:25:58:ac:29:da:31:59:46:1c: 4b:5d:7f:e9:fb:8b:a9:ab:58:f4:6b:f3:29:b0:5e:33:28:32: f5:e6:6e:cf:23:d1:e7:25:bc:79:ef:c1:33:5d:b1:9e:44:ae: 16:d2:52:97:27:b0:1d:7c:29:87:89:e6:06:b2:31:e4:25:9b: e7:23:65:5c:77:7c:44:45:f6:78:08:d6:b9:2e:42:ee:45:9f: 5b:94:ea:0d:36:45:20:7e:01:44:e1:88:78:09:0a:de:21:6b: 4b:c3:e3:93:57:97:2d:ef:0f:80:da:fd:9c:71:09:c9:31:ef: 30:f8:0d:05:28:f7:ad:60:07:be:6d:59:62:a4:8d:13:98:3c: 20:10:02:77:c5:16:aa:91:71:82:d7:d3:e0:26:26:73:82:22: ca:92:76:b3:a3:2e:29:55:1d:57:cd:ed:53:d0:ff:27:5b:29: 1f:be:b8:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjczRUQxMTAvBgNVBAUTKDM5MzU2NkY0NDE3ODZEOTU4RDhBNzkxMThFOEVGNTZG Qzg3MkU1QzUwHhcNMjUwNDI0MjIxMjQ2WhcNMjUwNTAxMjIxMjQ2WjAYMRYwFAYD VQQDEw02ODBhYjc1ZS1lZGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtSa4SAzQJrrr9NowC8QU8SV6a3qZmyOHBxhVPgSAiJyXpOZDSaL5pWkUuPTe PEtIP6lZgUIEno+p6KqNhxU0BnraPIRXmeOO+9144VMLoiF1JlJuzmdDEiaqmLJu sXyANMMeD8VOqQVEAyn+eAipuCsHFJguV1DKVwwCp8NnOjUBX5RrD0bvyTdNzlrZ tVw1axVyBwu1hXL7jmzNsGHekneskv2GPATDO/8KPKRb7fzOaR3cE8ZMTZRJkW+x x95DqKkgFO91wna7HUhxvC1B6zK+pigW5VS03AAR0MUdEqD30PqBOU5jlV0Sxlw+ IncgnyLCGRrMwHnxeJwwqhf83QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHCTez+q Hfj0M6AQDJZYbFD2REz7MB8GA1UdIwQYMBaAFDk1ZvRBeG2VjYp5EY6O9W/IcuXF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzNFRC80RDhGQTIwRTdE NDkxMUVCQTE2NTczN0JDNEY5QUUwMi9PVFZtOUVGNGJaV05pbmtSam83MWI4aHk1 Y1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09UVm05RUY0YlpXTmlua1JqbzcxYjhoeTVjVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzNFRC80RDhGQTIwRTdENDkxMUVCQTE2NTczN0JDNEY5QUUwMi9PVFZtOUVGNGJa V05pbmtSam83MWI4aHk1Y1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOMFLHFVeBrocWoMAN+mQnmfCTFTjuvLZIS3+7oOkkAYozjsJHylvP H4glbtWN7U7SITDHuswh71yr1Xp4IUUU/CqvL1Rz1/rsgkoEWb39xNglWKwp2jFZ RhxLXX/p+4upq1j0a/MpsF4zKDL15m7PI9HnJbx578EzXbGeRK4W0lKXJ7AdfCmH ieYGsjHkJZvnI2Vcd3xERfZ4CNa5LkLuRZ9blOoNNkUgfgFE4Yh4CQreIWtLw+OT V5ct7w+A2v2ccQnJMe8w+A0FKPetYAe+bVlipI0TmDwgEAJ3xRaqkXGC19PgJiZz giLKknazoy4pVR1Xze1T0P8nWykfvrh2 -----END CERTIFICATE-----Generated at Sat Apr 26 16:39:44 2025 by rpki-client