$ rpki-client -vvf rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft File: opsbaAnOwakkcMWcbDa_pc84cYY.mft (raw, json) Hash identifier: 51S4H/5A3eXNrrnk07cZ7FHvIDw/MRlhFjVX5J6DJUU= Subject key identifier: 02:28:D5:59:AC:08:9E:2E:D5:BC:54:AD:36:71:D5:4B:06:4A:C8:0E Authority key identifier: A2:9B:1B:68:09:CE:C1:A9:24:70:C5:9C:6C:36:BF:A5:CF:38:71:86 Certificate issuer: /CN=A9187BAC/serialNumber=A29B1B6809CEC1A92470C59C6C36BFA5CF387186 Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft Manifest number: 37 Signing time: Fri 25 Apr 2025 06:33:33 +0000 Manifest this update: Fri 25 Apr 2025 06:33:32 +0000 Manifest next update: Fri 02 May 2025 06:33:32 +0000 Files and hashes: 1: opsbaAnOwakkcMWcbDa_pc84cYY.crl (hash: Y791Gd266osyBQlrW1GwULS6HFeoMddTeOFr+6IDKnk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.crl rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:33:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187BAC, serialNumber=A29B1B6809CEC1A92470C59C6C36BFA5CF387186 Validity Not Before: Apr 25 06:33:32 2025 GMT Not After : May 2 06:33:32 2025 GMT Subject: CN=680b2cbc-700d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cc:3d:9c:47:71:dd:fa:b9:cc:cb:62:4d:f5: b3:dd:0c:f6:30:68:9c:90:0a:34:b1:fd:06:23:20: 81:34:1c:14:4a:84:ea:4e:5c:8e:24:cf:6e:94:38: 59:eb:e2:da:50:a6:eb:df:82:59:2f:9a:eb:cb:3f: f1:24:32:3c:4b:bb:ab:4c:a6:76:ed:0c:59:57:0c: 0a:20:7b:33:fe:92:6d:b5:d7:41:bd:b7:6c:4f:90: 9c:f9:1b:20:5a:db:e9:3c:38:91:09:84:28:82:7d: b6:fd:39:f5:75:d4:87:89:8d:79:53:b3:80:24:1d: e1:ab:7d:bb:a9:7e:a0:43:70:a6:21:c4:f9:3f:19: fc:be:0d:7a:a8:38:72:5f:9e:91:39:08:82:28:d7: e5:0b:d1:f9:4e:66:92:12:a7:ea:32:c9:8e:71:31: 97:51:0c:6a:64:a0:5e:c7:d2:25:1e:9e:52:ea:ba: 0f:80:03:e6:d6:ab:6d:f7:eb:27:ef:22:a3:0b:c0: 07:1d:0f:d9:97:1a:42:d4:06:71:50:4d:2c:2e:84: e1:70:87:2f:9f:06:b4:96:68:0c:39:4f:34:58:b4: a0:73:1d:aa:3e:43:43:5a:a7:b1:2d:19:7d:48:66: 61:73:d1:05:3e:c2:10:e1:ee:82:83:e0:c2:03:91: b8:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:28:D5:59:AC:08:9E:2E:D5:BC:54:AD:36:71:D5:4B:06:4A:C8:0E X509v3 Authority Key Identifier: keyid:A2:9B:1B:68:09:CE:C1:A9:24:70:C5:9C:6C:36:BF:A5:CF:38:71:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:8f:3a:eb:14:56:a0:62:9e:91:36:22:15:97:7b:4d:33:c4: 4d:41:7d:35:4c:78:21:eb:92:f5:f2:22:19:90:b8:39:3c:28: d4:33:af:38:43:08:6f:9f:36:50:4e:fc:af:0a:57:ae:9c:a8: 9b:0b:32:b9:51:a7:53:2a:21:b2:65:28:f7:a5:90:18:8c:28: 9a:d8:e8:fb:06:a7:a5:85:09:4b:ff:32:ea:7a:3d:c8:81:86: 83:7d:d0:6b:dd:b6:35:78:c7:4f:4c:fb:d1:ec:e1:0b:c5:3c: c5:ad:06:c5:a3:3f:2f:5a:8e:47:56:1c:9e:b0:8d:25:6a:54: fe:cc:41:c0:d1:9f:5f:81:25:c5:5e:3b:d8:bf:92:0c:91:0c: 28:6b:93:b5:2c:c3:54:ab:a2:e3:ce:04:ef:65:87:b8:8e:76: 62:d0:5f:34:ca:02:fe:12:69:cd:47:1e:32:f2:52:cc:30:ca: 2b:3e:1f:0b:17:b8:1e:94:9e:56:88:7b:93:c6:49:70:49:01: e3:54:8b:67:49:08:16:15:2c:4e:3d:8b:eb:0e:bc:cd:27:e5: eb:2c:95:93:ae:82:a1:bd:79:27:5a:77:07:19:36:9c:9f:86: d4:65:2f:0f:e7:f7:64:88:e7:ae:20:39:3e:bd:a2:25:78:92: 09:30:32:d0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 N0JBQzExMC8GA1UEBRMoQTI5QjFCNjgwOUNFQzFBOTI0NzBDNTlDNkMzNkJGQTVD RjM4NzE4NjAeFw0yNTA0MjUwNjMzMzJaFw0yNTA1MDIwNjMzMzJaMBgxFjAUBgNV BAMTDTY4MGIyY2JjLTcwMGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0zD2cR3Hd+rnMy2JN9bPdDPYwaJyQCjSx/QYjIIE0HBRKhOpOXI4kz26UOFnr 4tpQpuvfglkvmuvLP/EkMjxLu6tMpnbtDFlXDAogezP+km2110G9t2xPkJz5GyBa 2+k8OJEJhCiCfbb9OfV11IeJjXlTs4AkHeGrfbupfqBDcKYhxPk/Gfy+DXqoOHJf npE5CIIo1+UL0flOZpISp+oyyY5xMZdRDGpkoF7H0iUenlLqug+AA+bWq2336yfv IqMLwAcdD9mXGkLUBnFQTSwuhOFwhy+fBrSWaAw5TzRYtKBzHao+Q0Nap7EtGX1I ZmFz0QU+whDh7oKD4MIDkbiVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAijVWawI ni7VvFStNnHVSwZKyA4wHwYDVR0jBBgwFoAUopsbaAnOwakkcMWcbDa/pc84cYYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3QkFDL0M2QUQzRTBBRDAy QzExRUZCNTU4NDkxNUM0RjlBRTAyL29wc2JhQW5Pd2Fra2NNV2NiRGFfcGM4NGNZ WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb3BzYmFBbk93YWtrY01XY2JEYV9wYzg0Y1lZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3 QkFDL0M2QUQzRTBBRDAyQzExRUZCNTU4NDkxNUM0RjlBRTAyL29wc2JhQW5Pd2Fr a2NNV2NiRGFfcGM4NGNZWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGKPOusUVqBinpE2IhWXe00zxE1BfTVMeCHrkvXyIhmQuDk8KNQzrzhD CG+fNlBO/K8KV66cqJsLMrlRp1MqIbJlKPelkBiMKJrY6PsGp6WFCUv/Mup6PciB hoN90GvdtjV4x09M+9Hs4QvFPMWtBsWjPy9ajkdWHJ6wjSVqVP7MQcDRn1+BJcVe O9i/kgyRDChrk7Usw1SrouPOBO9lh7iOdmLQXzTKAv4Sac1HHjLyUswwyis+HwsX uB6UnlaIe5PGSXBJAeNUi2dJCBYVLE49i+sOvM0n5esslZOugqG9eSdadwcZNpyf htRlLw/n92SI564gOT69oiV4kgkwMtA= -----END CERTIFICATE-----Generated at Sat Apr 26 12:20:21 2025 by rpki-client