$ rpki-client -vvf rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft File: OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft (raw, json) Hash identifier: fhTYfbYeo0ezo+jIJnV97GYFGoxwU/vAfBKSFRbpsTE= Subject key identifier: 41:53:6C:88:54:E4:35:9D:25:70:DD:B6:12:29:CF:82:8E:5B:A3:1F Authority key identifier: 38:45:45:D6:F5:5F:32:B3:1F:E8:64:6F:24:4A:7C:07:BA:69:54:08 Certificate issuer: /CN=A9192D09/serialNumber=384545D6F55F32B31FE8646F244A7C07BA695408 Certificate serial: 01AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEVF1vVfMrMf6GRvJEp8B7ppVAg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft Manifest number: 01AA Signing time: Fri 25 Apr 2025 02:24:38 +0000 Manifest this update: Fri 25 Apr 2025 02:24:37 +0000 Manifest next update: Fri 02 May 2025 02:24:37 +0000 Files and hashes: 1: OEVF1vVfMrMf6GRvJEp8B7ppVAg.crl (hash: TqB51XzPT4kv0iIOND3vRkdafbGfdfrd35v6Lkg2UxQ=) 2: DD8D4802932211EDBF466F52C4F9AE02.roa (hash: pmbN5fPCbO/oalKNS7ivInU9ETfH9WfdJG7H7rtfmr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.crl rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEVF1vVfMrMf6GRvJEp8B7ppVAg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:24:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 429 (0x1ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192D09, serialNumber=384545D6F55F32B31FE8646F244A7C07BA695408 Validity Not Before: Apr 25 02:24:37 2025 GMT Not After : May 2 02:24:37 2025 GMT Subject: CN=680af266-643a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:09:ff:71:72:2e:c3:d5:91:5b:fe:5a:58:54: a0:ef:84:a8:08:1e:bf:fe:12:8d:3e:d0:c7:2a:38: e8:a4:1f:46:07:8c:86:37:10:52:86:18:b5:47:92: 86:a8:df:72:1e:f9:a8:39:b3:6e:b5:ad:6a:e2:1b: 9c:11:e2:3a:6f:4f:e6:54:80:5f:1e:0d:13:57:40: 89:fa:4d:60:d4:ff:4b:d3:48:0b:02:53:09:58:16: e8:d5:ee:4a:34:21:34:71:74:00:9e:c6:5e:3d:9d: ba:cb:83:6b:93:3c:da:5d:72:a6:16:99:1e:06:12: e2:5e:02:7a:87:1b:cd:21:ae:31:91:38:fc:31:06: 86:62:07:f0:10:75:0d:dc:f2:ba:e2:d5:ed:0c:43: 5e:58:a7:9e:39:37:a5:f3:73:76:4a:06:18:e4:ad: a6:ea:4f:eb:66:c6:59:cb:ae:f3:4a:cd:cf:af:45: 3e:53:09:af:50:61:e2:0e:c5:e6:67:6a:ce:2f:85: f6:56:e4:83:bb:da:65:b6:75:ad:9f:78:cb:e9:f2: 88:9b:35:d7:2c:b0:54:3d:e6:5f:8d:2d:52:b8:07: 10:f2:6f:d3:fc:01:2d:c1:7c:b6:e4:48:5f:98:fb: 18:c9:42:db:cb:83:e2:9e:d7:9e:ee:0c:0d:1e:96: d5:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:53:6C:88:54:E4:35:9D:25:70:DD:B6:12:29:CF:82:8E:5B:A3:1F X509v3 Authority Key Identifier: keyid:38:45:45:D6:F5:5F:32:B3:1F:E8:64:6F:24:4A:7C:07:BA:69:54:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEVF1vVfMrMf6GRvJEp8B7ppVAg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:9b:85:2e:c4:24:7f:92:0c:2b:20:03:c9:6c:f1:a1:47:4d: b2:f2:81:e1:65:c3:bc:1d:fc:fe:74:a4:ad:83:65:d4:32:0a: cc:db:60:1a:b0:d2:a5:7a:bd:55:6b:cc:ce:1b:3e:0a:ac:79: b2:4e:c8:ba:bb:68:a0:4c:e5:08:63:52:a7:51:58:81:cb:c5: 04:d4:49:e8:16:54:42:f7:f3:70:ce:a4:7a:1d:6b:41:74:fb: 49:69:c0:c0:ab:a8:47:fc:e2:75:b1:de:c7:34:31:43:ab:f0: 35:02:1a:1b:8e:4f:24:65:b4:bf:c5:d1:5d:73:3b:bb:3b:ec: 13:58:70:15:39:a9:20:7b:68:0f:8b:28:1a:fe:78:e3:c4:5f: d1:0d:14:8d:1e:a2:3f:41:7f:c1:dc:6d:22:78:2c:d2:05:39: 6a:29:fb:92:42:08:d4:0f:1e:43:d1:fe:82:d8:4f:fe:a9:74: e9:ca:5f:cf:14:a0:de:c7:35:eb:f4:ad:42:dd:80:80:52:a5: 50:fc:d8:7f:f9:53:19:5f:e9:5c:9f:ca:6a:1e:6a:89:09:88: 8a:31:ea:6d:e5:00:b7:44:62:3a:09:0f:c3:f7:0e:95:27:25: 7d:b8:85:0e:ac:07:8d:9a:62:12:2f:93:c0:fc:48:49:02:ff: 4b:45:97:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJEMDkxMTAvBgNVBAUTKDM4NDU0NUQ2RjU1RjMyQjMxRkU4NjQ2RjI0NEE3QzA3 QkE2OTU0MDgwHhcNMjUwNDI1MDIyNDM3WhcNMjUwNTAyMDIyNDM3WjAYMRYwFAYD VQQDEw02ODBhZjI2Ni02NDNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwwn/cXIuw9WRW/5aWFSg74SoCB6//hKNPtDHKjjopB9GB4yGNxBShhi1R5KG qN9yHvmoObNuta1q4hucEeI6b0/mVIBfHg0TV0CJ+k1g1P9L00gLAlMJWBbo1e5K NCE0cXQAnsZePZ26y4NrkzzaXXKmFpkeBhLiXgJ6hxvNIa4xkTj8MQaGYgfwEHUN 3PK64tXtDENeWKeeOTel83N2SgYY5K2m6k/rZsZZy67zSs3Pr0U+UwmvUGHiDsXm Z2rOL4X2VuSDu9pltnWtn3jL6fKImzXXLLBUPeZfjS1SuAcQ8m/T/AEtwXy25Ehf mPsYyULby4Pintee7gwNHpbVzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEFTbIhU 5DWdJXDdthIpz4KOW6MfMB8GA1UdIwQYMBaAFDhFRdb1XzKzH+hkbyRKfAe6aVQI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkQwOS9GMEYyRURCMjkz MUMxMUVEQjlCNzlDNDlDNEY5QUUwMi9PRVZGMXZWZk1yTWY2R1J2SkVwOEI3cHBW QWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09FVkYxdlZmTXJNZjZHUnZKRXA4QjdwcFZBZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkQwOS9GMEYyRURCMjkzMUMxMUVEQjlCNzlDNDlDNEY5QUUwMi9PRVZGMXZWZk1y TWY2R1J2SkVwOEI3cHBWQWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCm4UuxCR/kgwrIAPJbPGhR02y8oHhZcO8Hfz+dKStg2XUMgrM22Aa sNKler1Va8zOGz4KrHmyTsi6u2igTOUIY1KnUViBy8UE1EnoFlRC9/NwzqR6HWtB dPtJacDAq6hH/OJ1sd7HNDFDq/A1Ahobjk8kZbS/xdFdczu7O+wTWHAVOakge2gP iyga/njjxF/RDRSNHqI/QX/B3G0ieCzSBTlqKfuSQgjUDx5D0f6C2E/+qXTpyl/P FKDexzXr9K1C3YCAUqVQ/Nh/+VMZX+lcn8pqHmqJCYiKMept5QC3RGI6CQ/D9w6V JyV9uIUOrAeNmmISL5PA/EhJAv9LRZcs -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:00 2025 by rpki-client