$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF94/5029554C8A7911EE85441918C4F9AE02/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.mft File: oeTwnS9HB4Z8-uJ-jxMjafuX0O0.mft (raw, json) Hash identifier: Z1u0ASUECw0khZ6809jYf/O/Z0LCX4yrr9vkS8lOJ2E= Subject key identifier: CB:07:7B:10:E0:7F:83:F6:7F:DB:53:3E:7F:56:34:EF:C4:C0:C5:FE Authority key identifier: A1:E4:F0:9D:2F:47:07:86:7C:FA:E2:7E:8F:13:23:69:FB:97:D0:ED Certificate issuer: /CN=A918EF94/serialNumber=A1E4F09D2F4707867CFAE27E8F132369FB97D0ED Certificate serial: 010D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EF94/5029554C8A7911EE85441918C4F9AE02/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.mft Manifest number: 010D Signing time: Thu 24 Apr 2025 17:47:19 +0000 Manifest this update: Thu 24 Apr 2025 17:47:19 +0000 Manifest next update: Thu 01 May 2025 17:47:19 +0000 Files and hashes: 1: oeTwnS9HB4Z8-uJ-jxMjafuX0O0.crl (hash: pItPLVz92Fs/l6QAAdfSlRabGhg1ItFiTbP2OmSCZyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EF94/5029554C8A7911EE85441918C4F9AE02/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.crl rsync://rpki.apnic.net/member_repository/A918EF94/5029554C8A7911EE85441918C4F9AE02/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:47:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 269 (0x10d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EF94, serialNumber=A1E4F09D2F4707867CFAE27E8F132369FB97D0ED Validity Not Before: Apr 24 17:47:19 2025 GMT Not After : May 1 17:47:19 2025 GMT Subject: CN=680a7927-fc62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:82:c7:3f:e6:31:d6:db:0e:52:7b:a8:d0:e5: 38:38:a9:d9:98:da:41:fe:80:7d:c7:5e:fb:13:70: b7:69:2c:f4:cf:7b:59:7a:2d:9c:64:0f:92:91:08: 85:14:e1:61:e1:d1:79:e1:5c:58:7e:14:20:8e:35: 54:54:55:c1:b7:72:d2:5c:20:4d:87:44:3f:d1:ab: ac:b9:06:92:78:75:a1:a3:18:6a:e3:df:ee:a0:c0: 8d:55:d7:75:c7:63:fc:0c:b9:51:d6:0a:c1:20:b7: 92:2b:64:dc:eb:51:81:0b:d4:d7:d0:5a:0a:80:21: 4f:63:ff:e6:c5:dc:58:87:6f:af:f4:bc:9e:de:f6: 7f:06:58:34:d4:46:44:17:ee:13:db:f1:60:18:d4: 96:aa:5d:ee:d2:14:83:00:44:aa:b2:af:c2:55:35: 60:9c:a9:35:3c:49:b8:a1:9b:5b:72:a6:4d:bd:3a: fa:3b:2c:b7:f1:e1:c4:1e:f6:48:85:51:e3:6a:3a: c3:2c:58:10:54:d4:7d:02:ad:89:a0:dd:72:f2:29: 41:6a:16:c9:41:39:4d:fa:c5:86:a7:f4:1f:3e:e2: fd:8e:21:92:12:cc:aa:e4:a8:02:20:5f:c8:a7:24: fd:6c:90:1c:ba:3a:2f:fb:7a:c6:db:e5:e7:f4:bb: 04:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:07:7B:10:E0:7F:83:F6:7F:DB:53:3E:7F:56:34:EF:C4:C0:C5:FE X509v3 Authority Key Identifier: keyid:A1:E4:F0:9D:2F:47:07:86:7C:FA:E2:7E:8F:13:23:69:FB:97:D0:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EF94/5029554C8A7911EE85441918C4F9AE02/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF94/5029554C8A7911EE85441918C4F9AE02/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:9e:29:09:6a:b4:b4:fb:8d:50:11:63:f5:aa:09:26:b8:fe: 94:0b:40:f7:1e:88:ee:65:b3:07:2c:46:95:82:45:58:81:e0: 77:24:08:1a:97:12:76:7d:dd:13:0e:48:2f:8d:72:3e:f8:f6: 63:0b:4d:ff:88:a1:5d:cf:42:5b:cf:e4:7c:20:25:04:bc:d3: 79:21:58:e9:bc:ee:d3:48:6e:ad:ba:df:43:4b:82:85:0a:e4: 97:ff:a8:50:30:4f:6e:d0:59:0a:fc:34:37:84:46:7f:8b:9a: 08:54:18:dc:7d:34:71:45:7e:7d:26:db:ac:ad:a9:59:33:55: 5d:00:90:87:7a:ce:1f:91:7f:1b:c2:b5:de:d0:70:c1:60:49: 1a:af:6c:7d:60:2b:08:21:93:c0:ba:4f:c9:73:ed:a6:bc:f5: 2a:25:3d:29:97:d6:d2:3c:b9:a1:5c:da:3c:75:ad:db:f8:a6: 00:22:df:6a:c6:7c:cb:6b:27:6b:8a:ba:3c:27:b1:9d:24:e3: 90:ba:98:5d:33:d7:25:84:ab:93:45:b8:69:57:b1:88:fd:bb: 53:88:48:96:5a:ad:f9:6b:cb:3d:84:d2:f8:7d:53:5a:4d:4f: 49:ce:d8:f1:45:40:fe:00:c1:92:7e:3c:94:a5:c5:a7:95:86: b1:a5:07:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVGOTQxMTAvBgNVBAUTKEExRTRGMDlEMkY0NzA3ODY3Q0ZBRTI3RThGMTMyMzY5 RkI5N0QwRUQwHhcNMjUwNDI0MTc0NzE5WhcNMjUwNTAxMTc0NzE5WjAYMRYwFAYD VQQDEw02ODBhNzkyNy1mYzYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs4LHP+Yx1tsOUnuo0OU4OKnZmNpB/oB9x177E3C3aSz0z3tZei2cZA+SkQiF FOFh4dF54VxYfhQgjjVUVFXBt3LSXCBNh0Q/0ausuQaSeHWhoxhq49/uoMCNVdd1 x2P8DLlR1grBILeSK2Tc61GBC9TX0FoKgCFPY//mxdxYh2+v9Lye3vZ/Blg01EZE F+4T2/FgGNSWql3u0hSDAESqsq/CVTVgnKk1PEm4oZtbcqZNvTr6Oyy38eHEHvZI hVHjajrDLFgQVNR9Aq2JoN1y8ilBahbJQTlN+sWGp/QfPuL9jiGSEsyq5KgCIF/I pyT9bJAcujov+3rG2+Xn9LsE7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMsHexDg f4P2f9tTPn9WNO/EwMX+MB8GA1UdIwQYMBaAFKHk8J0vRweGfPrifo8TI2n7l9Dt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUY5NC81MDI5NTU0QzhB NzkxMUVFODU0NDE5MThDNEY5QUUwMi9vZVR3blM5SEI0WjgtdUotanhNamFmdVgw TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL29lVHduUzlIQjRaOC11Si1qeE1qYWZ1WDBPMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUY5NC81MDI5NTU0QzhBNzkxMUVFODU0NDE5MThDNEY5QUUwMi9vZVR3blM5SEI0 WjgtdUotanhNamFmdVgwTzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGnikJarS0+41QEWP1qgkmuP6UC0D3HojuZbMHLEaVgkVYgeB3JAga lxJ2fd0TDkgvjXI++PZjC03/iKFdz0Jbz+R8ICUEvNN5IVjpvO7TSG6tut9DS4KF CuSX/6hQME9u0FkK/DQ3hEZ/i5oIVBjcfTRxRX59JtusralZM1VdAJCHes4fkX8b wrXe0HDBYEkar2x9YCsIIZPAuk/Jc+2mvPUqJT0pl9bSPLmhXNo8da3b+KYAIt9q xnzLaydriro8J7GdJOOQuphdM9clhKuTRbhpV7GI/btTiEiWWq35a8s9hNL4fVNa TU9JztjxRUD+AMGSfjyUpcWnlYaxpQfA -----END CERTIFICATE-----Generated at Sat Apr 26 17:13:11 2025 by rpki-client