$ rpki-client -vvf rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft File: OEBSLgVtM3Uf55akOVuNTf3lj4w.mft (raw, json) Hash identifier: X7eWSw5u47UkC9IqwRb2FFcESt9Tz/2eRzQwqw7nU7A= Subject key identifier: 3D:B4:C9:5D:D0:3D:2E:CD:92:62:37:48:E2:9C:8A:45:8D:38:7E:D4 Authority key identifier: 38:40:52:2E:05:6D:33:75:1F:E7:96:A4:39:5B:8D:4D:FD:E5:8F:8C Certificate issuer: /CN=A917FEF3/serialNumber=3840522E056D33751FE796A4395B8D4DFDE58F8C Certificate serial: 0626 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEBSLgVtM3Uf55akOVuNTf3lj4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft Manifest number: 061E Signing time: Thu 24 Apr 2025 22:34:57 +0000 Manifest this update: Thu 24 Apr 2025 22:34:56 +0000 Manifest next update: Thu 01 May 2025 22:34:56 +0000 Files and hashes: 1: OEBSLgVtM3Uf55akOVuNTf3lj4w.crl (hash: FPjLfd3TZx1p7Pr3NgqD49S54BiukDZL7DQs+5l3jjc=) 2: B21979EE9CAF11ECBFF4AF64C4F9AE02.roa (hash: sdbnkMVypf4sBW84IBpLOAa+Rd3ZV2UqRLClbIWsTfg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.crl rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEBSLgVtM3Uf55akOVuNTf3lj4w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:34:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1574 (0x626) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FEF3, serialNumber=3840522E056D33751FE796A4395B8D4DFDE58F8C Validity Not Before: Apr 24 22:34:56 2025 GMT Not After : May 1 22:34:56 2025 GMT Subject: CN=680abc91-5534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3e:ad:b5:13:e7:34:1f:c4:c2:c6:fb:c3:35: 13:25:de:31:0b:78:92:01:0d:6b:8a:dd:91:1f:07: 92:2c:3c:cf:e7:95:ea:20:58:6c:7c:5d:8e:e9:1f: d8:4b:50:7d:cc:5b:78:fc:06:d0:c0:9a:04:22:f4: 64:d2:bf:c5:b0:77:e5:10:c6:f9:75:58:7f:51:23: 72:3e:97:48:9c:3c:12:c7:25:05:1d:00:30:83:90: b5:fd:79:3b:a9:a5:23:9d:bf:90:d6:0f:f1:99:0c: 8d:dd:fe:51:ee:f3:0c:0b:a2:dd:bd:89:1c:dd:9e: 2e:86:c1:96:f0:78:27:8c:83:55:08:e8:3b:c1:b5: fa:8f:9a:3c:7f:2b:9c:b0:5b:ba:33:73:40:2a:56: 39:30:d4:47:52:a8:8f:18:8c:bc:1d:1e:47:a1:97: 8c:80:10:db:8d:9a:d3:d3:9b:3d:e3:15:94:ed:50: 9b:73:81:05:1e:cc:c0:1c:b4:ee:aa:ad:0e:0a:d9: 37:9e:e0:25:60:61:d7:89:55:e8:d6:4d:80:7d:a2: 22:77:2c:2c:89:52:be:bf:01:98:ee:34:0d:ab:87: fc:48:07:c3:b5:2a:6e:51:7c:70:a7:16:e0:e2:76: 0e:4b:4c:76:7d:40:22:c0:bd:e8:ce:ba:71:83:6b: a5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:B4:C9:5D:D0:3D:2E:CD:92:62:37:48:E2:9C:8A:45:8D:38:7E:D4 X509v3 Authority Key Identifier: keyid:38:40:52:2E:05:6D:33:75:1F:E7:96:A4:39:5B:8D:4D:FD:E5:8F:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEBSLgVtM3Uf55akOVuNTf3lj4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:c8:72:f4:c2:de:b8:26:ce:d6:c6:b3:82:be:9d:1b:2c:33: 48:38:d6:fc:d9:55:2b:c5:31:42:90:c4:a6:27:7d:f1:4e:63: 0a:6d:26:bd:28:67:39:42:84:fa:51:f9:78:98:66:6d:29:fb: 3b:0d:68:0b:bd:8b:6f:77:da:ba:d0:b5:8d:79:a1:ff:f3:a5: 29:8b:8d:b8:3b:4e:d7:8b:1e:97:da:e0:41:c4:29:91:64:6e: bd:ba:27:e7:d4:e2:24:67:12:10:d6:a9:da:02:4e:d7:16:5a: b2:71:4b:f8:71:03:99:57:1a:06:c2:a0:8c:08:03:59:c4:ef: c2:97:c3:b1:33:8a:ef:18:b7:5e:15:5a:a4:76:de:8a:0c:4a: 15:98:59:6e:95:35:61:51:a0:aa:3f:5d:17:83:c3:02:9a:17: 3a:d0:ac:4b:bb:12:d1:94:9f:38:bc:fd:3c:e0:26:3f:dd:55: a3:84:40:31:a4:d3:0b:4a:78:4f:e0:7b:9e:ef:c3:9f:cb:9c: df:f9:c6:51:1e:5f:0a:46:68:da:92:a3:26:5e:5c:46:6c:66: 88:04:fb:c2:e1:b6:0b:d2:6f:0f:e3:5c:7c:07:76:0f:33:05: f6:f3:0d:82:ca:ba:31:99:47:f3:a7:cf:49:24:87:a2:9f:c9: c1:a5:d4:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZFRjMxMTAvBgNVBAUTKDM4NDA1MjJFMDU2RDMzNzUxRkU3OTZBNDM5NUI4RDRE RkRFNThGOEMwHhcNMjUwNDI0MjIzNDU2WhcNMjUwNTAxMjIzNDU2WjAYMRYwFAYD VQQDEw02ODBhYmM5MS01NTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmT6ttRPnNB/Ewsb7wzUTJd4xC3iSAQ1rit2RHweSLDzP55XqIFhsfF2O6R/Y S1B9zFt4/AbQwJoEIvRk0r/FsHflEMb5dVh/USNyPpdInDwSxyUFHQAwg5C1/Xk7 qaUjnb+Q1g/xmQyN3f5R7vMMC6LdvYkc3Z4uhsGW8HgnjINVCOg7wbX6j5o8fyuc sFu6M3NAKlY5MNRHUqiPGIy8HR5HoZeMgBDbjZrT05s94xWU7VCbc4EFHszAHLTu qq0OCtk3nuAlYGHXiVXo1k2AfaIidywsiVK+vwGY7jQNq4f8SAfDtSpuUXxwpxbg 4nYOS0x2fUAiwL3ozrpxg2ullQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD20yV3Q PS7NkmI3SOKcikWNOH7UMB8GA1UdIwQYMBaAFDhAUi4FbTN1H+eWpDlbjU395Y+M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkVGMy9ERERDMDFFQzk4 NTQxMUVCQkI0Nzk2NEFDNEY5QUUwMi9PRUJTTGdWdE0zVWY1NWFrT1Z1TlRmM2xq NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09FQlNMZ1Z0TTNVZjU1YWtPVnVOVGYzbGo0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkVGMy9ERERDMDFFQzk4NTQxMUVCQkI0Nzk2NEFDNEY5QUUwMi9PRUJTTGdWdE0z VWY1NWFrT1Z1TlRmM2xqNHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASyHL0wt64Js7WxrOCvp0bLDNIONb82VUrxTFCkMSmJ33xTmMKbSa9 KGc5QoT6Ufl4mGZtKfs7DWgLvYtvd9q60LWNeaH/86Upi424O07Xix6X2uBBxCmR ZG69uifn1OIkZxIQ1qnaAk7XFlqycUv4cQOZVxoGwqCMCANZxO/Cl8OxM4rvGLde FVqkdt6KDEoVmFlulTVhUaCqP10Xg8MCmhc60KxLuxLRlJ84vP084CY/3VWjhEAx pNMLSnhP4Hue78Ofy5zf+cZRHl8KRmjakqMmXlxGbGaIBPvC4bYL0m8P41x8B3YP MwX28w2CyroxmUfzp89JJIein8nBpdTv -----END CERTIFICATE-----Generated at Sat Apr 26 16:46:19 2025 by rpki-client