$ rpki-client -vvf rpki.apnic.net/member_repository/A918377D/9F7C8152B4B111EEB0ADE352C4F9AE02/ofrVQukeAX0lfVGxT_XDW4lCnvU.mft File: ofrVQukeAX0lfVGxT_XDW4lCnvU.mft (raw, json) Hash identifier: K+3uEzqDrQL7F7/eMYPp7/iTVeNHVXJ+YtnDmmD8VxY= Subject key identifier: 88:E7:17:19:B7:71:66:75:D2:9D:2B:28:64:BB:69:31:22:38:FE:88 Authority key identifier: A1:FA:D5:42:E9:1E:01:7D:25:7D:51:B1:4F:F5:C3:5B:89:42:9E:F5 Certificate issuer: /CN=A918377D/serialNumber=A1FAD542E91E017D257D51B14FF5C35B89429EF5 Certificate serial: EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ofrVQukeAX0lfVGxT_XDW4lCnvU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918377D/9F7C8152B4B111EEB0ADE352C4F9AE02/ofrVQukeAX0lfVGxT_XDW4lCnvU.mft Manifest number: EE Signing time: Fri 25 Apr 2025 04:20:59 +0000 Manifest this update: Fri 25 Apr 2025 04:20:59 +0000 Manifest next update: Fri 02 May 2025 04:20:59 +0000 Files and hashes: 1: ofrVQukeAX0lfVGxT_XDW4lCnvU.crl (hash: XgKVQ++r0Oi0cX/T4QbQxwkyOfEtSG7a/0eWS+ZIRRg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918377D/9F7C8152B4B111EEB0ADE352C4F9AE02/ofrVQukeAX0lfVGxT_XDW4lCnvU.crl rsync://rpki.apnic.net/member_repository/A918377D/9F7C8152B4B111EEB0ADE352C4F9AE02/ofrVQukeAX0lfVGxT_XDW4lCnvU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ofrVQukeAX0lfVGxT_XDW4lCnvU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:20:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 238 (0xee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918377D, serialNumber=A1FAD542E91E017D257D51B14FF5C35B89429EF5 Validity Not Before: Apr 25 04:20:59 2025 GMT Not After : May 2 04:20:59 2025 GMT Subject: CN=680b0dab-806f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c9:89:f1:09:ef:54:eb:67:bd:96:f0:5f:be: 96:a5:f1:cc:9a:38:bb:c6:20:4c:75:f5:e8:28:dc: 2e:7a:e0:2e:d3:e5:af:8d:d2:5b:da:e5:c1:42:43: 9a:41:d6:c5:53:1e:4f:39:00:39:73:42:58:8e:08: b3:e0:47:3a:04:20:b0:a7:51:c1:8e:c8:72:25:83: 88:54:99:02:df:a1:a4:e6:52:e1:79:7f:67:9a:fe: a1:05:23:08:fb:43:25:a0:a8:6d:31:cf:9c:ed:67: 27:6a:e2:73:9c:f9:fe:f5:37:5c:5a:46:2b:ea:52: 4f:48:3b:15:fe:95:57:ca:90:a1:08:94:5d:be:a4: f9:eb:2f:54:70:1f:f0:68:f2:ee:e8:34:9e:d1:25: 0a:73:87:9b:72:4f:cf:28:46:9c:c7:18:71:19:49: 9b:8f:f0:a3:eb:a6:bf:1c:07:26:4c:7c:17:ae:3d: 5e:52:45:b3:9f:96:ad:21:5a:8a:e5:e4:d2:09:d9: e7:21:5a:29:20:9b:21:e9:53:e1:e5:bf:ad:eb:5f: b6:7d:ac:88:56:96:03:05:cb:d5:01:28:49:ae:dc: 6c:be:eb:cb:43:ef:a5:6d:98:1c:45:06:da:b8:4d: 52:2e:2b:c9:44:0a:0f:b7:3f:4e:2c:2c:da:96:c3: 0a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:E7:17:19:B7:71:66:75:D2:9D:2B:28:64:BB:69:31:22:38:FE:88 X509v3 Authority Key Identifier: keyid:A1:FA:D5:42:E9:1E:01:7D:25:7D:51:B1:4F:F5:C3:5B:89:42:9E:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918377D/9F7C8152B4B111EEB0ADE352C4F9AE02/ofrVQukeAX0lfVGxT_XDW4lCnvU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ofrVQukeAX0lfVGxT_XDW4lCnvU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918377D/9F7C8152B4B111EEB0ADE352C4F9AE02/ofrVQukeAX0lfVGxT_XDW4lCnvU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:45:f2:43:b3:af:81:a9:e3:ad:63:97:86:d6:0f:da:b5:60: b2:e9:c6:7e:5c:c1:f8:34:80:d9:ad:be:f9:17:09:bc:f8:5d: f5:fc:57:d3:77:7f:b5:d5:c9:03:a2:f8:a3:6a:c6:35:8d:6a: 21:c0:d2:76:df:8a:ff:d0:1f:35:ce:9c:92:39:2f:82:e9:17: 54:53:da:b8:e1:dc:1b:63:fc:d1:fd:a4:27:ef:32:af:31:7d: a8:79:f3:f4:b1:be:9e:e2:fa:df:fe:3d:55:14:52:bb:01:7b: 9b:11:32:06:34:b4:78:35:e1:c5:aa:ba:6e:95:52:70:75:45: 25:f1:f7:b5:5f:34:a3:16:d9:87:d2:91:7c:e7:db:c1:36:64: 6b:78:04:85:c7:dc:10:ef:3f:a3:87:f9:ee:ed:e0:8d:ae:4c: 18:f8:45:18:bc:ce:05:40:16:be:78:05:29:65:08:88:17:61: 5b:b1:e0:42:c9:a7:fc:5f:a9:b9:c8:72:43:37:39:a9:14:bc: fe:25:ff:8c:ae:93:5f:69:45:16:c8:10:ad:45:53:30:c0:9f: 80:0f:18:cd:a5:bf:f7:3f:01:77:c8:c3:af:70:69:97:b0:79: 81:b7:b4:bf:83:20:33:24:6d:9d:2c:0a:89:86:96:83:c1:58: e2:ee:56:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM3N0QxMTAvBgNVBAUTKEExRkFENTQyRTkxRTAxN0QyNTdENTFCMTRGRjVDMzVC ODk0MjlFRjUwHhcNMjUwNDI1MDQyMDU5WhcNMjUwNTAyMDQyMDU5WjAYMRYwFAYD VQQDEw02ODBiMGRhYi04MDZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApMmJ8QnvVOtnvZbwX76WpfHMmji7xiBMdfXoKNwueuAu0+WvjdJb2uXBQkOa QdbFUx5POQA5c0JYjgiz4Ec6BCCwp1HBjshyJYOIVJkC36Gk5lLheX9nmv6hBSMI +0MloKhtMc+c7WcnauJznPn+9TdcWkYr6lJPSDsV/pVXypChCJRdvqT56y9UcB/w aPLu6DSe0SUKc4ebck/PKEacxxhxGUmbj/Cj66a/HAcmTHwXrj1eUkWzn5atIVqK 5eTSCdnnIVopIJsh6VPh5b+t61+2fayIVpYDBcvVAShJrtxsvuvLQ++lbZgcRQba uE1SLivJRAoPtz9OLCzalsMKnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIjnFxm3 cWZ10p0rKGS7aTEiOP6IMB8GA1UdIwQYMBaAFKH61ULpHgF9JX1RsU/1w1uJQp71 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mzc3RC85RjdDODE1MkI0 QjExMUVFQjBBREUzNTJDNEY5QUUwMi9vZnJWUXVrZUFYMGxmVkd4VF9YRFc0bENu dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29mclZRdWtlQVgwbGZWR3hUX1hEVzRsQ252VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Mzc3RC85RjdDODE1MkI0QjExMUVFQjBBREUzNTJDNEY5QUUwMi9vZnJWUXVrZUFY MGxmVkd4VF9YRFc0bENudlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkRfJDs6+BqeOtY5eG1g/atWCy6cZ+XMH4NIDZrb75Fwm8+F31/FfT d3+11ckDovijasY1jWohwNJ234r/0B81zpySOS+C6RdUU9q44dwbY/zR/aQn7zKv MX2oefP0sb6e4vrf/j1VFFK7AXubETIGNLR4NeHFqrpulVJwdUUl8fe1XzSjFtmH 0pF859vBNmRreASFx9wQ7z+jh/nu7eCNrkwY+EUYvM4FQBa+eAUpZQiIF2FbseBC yaf8X6m5yHJDNzmpFLz+Jf+MrpNfaUUWyBCtRVMwwJ+ADxjNpb/3PwF3yMOvcGmX sHmBt7S/gyAzJG2dLAqJhpaDwVji7lYd -----END CERTIFICATE-----Generated at Sat Apr 26 08:28:06 2025 by rpki-client