$ rpki-client -vvf rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft File: OUPUJhV5zeDoKgXKKrVLOHulGTM.mft (raw, json) Hash identifier: hWBPpkNKALMC9pQLjr8WsmR0SirRAzfd0NYFtRNpMgo= Subject key identifier: FA:3D:3B:5B:AE:92:BD:CD:A0:E5:4E:4C:58:C5:8A:AE:56:DB:BB:36 Authority key identifier: 39:43:D4:26:15:79:CD:E0:E8:2A:05:CA:2A:B5:4B:38:7B:A5:19:33 Certificate issuer: /CN=A919D88F/serialNumber=3943D4261579CDE0E82A05CA2AB54B387BA51933 Certificate serial: 63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUPUJhV5zeDoKgXKKrVLOHulGTM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft Manifest number: 62 Signing time: Fri 25 Apr 2025 06:02:45 +0000 Manifest this update: Fri 25 Apr 2025 06:02:44 +0000 Manifest next update: Fri 02 May 2025 06:02:44 +0000 Files and hashes: 1: OUPUJhV5zeDoKgXKKrVLOHulGTM.crl (hash: ByKNz1styacfg9TC3JfbUn920YChmNFZLQV/H6N0th0=) 2: 31C36B64905F11EFAF49EB6BC4F9AE02.roa (hash: L+MQl2N4HWMJyowT/sQLapWMqlpwpjacwTEIlXHA4EM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.crl rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUPUJhV5zeDoKgXKKrVLOHulGTM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D88F, serialNumber=3943D4261579CDE0E82A05CA2AB54B387BA51933 Validity Not Before: Apr 25 06:02:44 2025 GMT Not After : May 2 06:02:44 2025 GMT Subject: CN=680b2584-b59d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:55:61:00:f2:ed:b0:e1:20:11:8b:0b:15:9a: 09:22:e4:58:51:50:d4:71:29:fc:76:37:f9:9e:d0: 6e:4b:b3:e3:c2:2d:11:7b:65:5b:62:c9:d4:d3:01: f1:fa:f6:fa:58:a5:21:4b:5e:f0:8a:f1:6d:5c:20: f9:4d:ac:9b:77:52:58:7d:f2:2f:5d:87:d4:d4:57: c8:d1:36:d7:fc:b3:dc:f0:9f:56:b0:3a:f1:6b:79: 96:5c:44:69:a5:53:03:8c:59:dc:e9:e9:83:95:35: 01:7e:d6:b0:aa:98:31:f8:8d:ee:e3:91:ce:9a:c5: f3:52:8e:61:75:f3:ac:1a:93:69:97:1e:81:44:32: bb:4d:96:49:1c:2f:8e:e9:2f:a3:57:2e:3f:fb:c5: e8:46:46:0e:7e:b5:85:88:54:00:72:bb:35:cb:75: df:ca:86:c4:fe:35:b3:dc:55:b4:36:6e:30:5f:4d: 38:0e:21:1a:46:e4:b1:18:a5:be:e5:bf:a8:4f:48: 50:7d:04:14:a7:2e:44:1f:41:a4:2f:2e:7e:d0:e4: 29:90:38:38:b1:4a:90:48:19:6b:5f:d2:fb:9b:87: 1c:e8:e1:1f:bf:bf:88:f5:ea:b1:03:7d:35:cb:77: c1:b9:22:55:d4:45:4c:f1:60:bf:f4:fb:4f:ec:e9: ef:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:3D:3B:5B:AE:92:BD:CD:A0:E5:4E:4C:58:C5:8A:AE:56:DB:BB:36 X509v3 Authority Key Identifier: keyid:39:43:D4:26:15:79:CD:E0:E8:2A:05:CA:2A:B5:4B:38:7B:A5:19:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUPUJhV5zeDoKgXKKrVLOHulGTM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:88:7d:a5:0f:69:4f:89:70:2a:1a:99:12:76:47:1f:69:83: 1f:3c:05:db:dd:ef:f4:ed:f7:e4:24:36:30:37:4b:2e:51:7e: 94:95:05:72:88:94:28:89:b4:b4:f3:6c:3a:8c:55:be:7b:3f: d7:16:75:fb:17:71:bc:2d:9e:6e:60:6b:38:f2:19:2c:19:34: 80:27:54:80:13:5a:e7:10:1d:e3:2d:3f:57:64:28:b6:96:ab: 54:ba:d7:06:0f:15:8a:06:b3:5c:bb:58:9e:c3:e8:1a:bd:f5: 42:59:ad:d8:79:b5:23:22:ef:c9:98:be:4d:f1:e9:e7:79:20: 1c:3f:7f:5a:98:17:75:53:26:c8:5f:d5:f6:64:35:e2:39:c8: ff:4a:b0:dc:f7:37:b2:3f:fc:37:5e:67:79:3f:89:28:53:ee: 34:1a:a7:1c:bc:94:de:4e:d5:41:0d:63:bc:b1:da:b7:0d:33: 30:2c:8a:ba:4d:c3:bc:2c:97:f2:ba:af:d0:ac:d0:d5:fa:ef: 35:0f:90:83:a1:13:ba:f6:89:a3:27:b2:15:27:1e:97:7b:33: a3:de:dc:ab:b0:4b:55:28:c7:00:3e:6b:fe:ca:6c:9d:91:b5: 4c:ec:5c:3c:97:aa:f4:2b:21:ed:c9:35:9e:9c:3b:83:36:35: ef:09:e9:8e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RDg4RjExMC8GA1UEBRMoMzk0M0Q0MjYxNTc5Q0RFMEU4MkEwNUNBMkFCNTRCMzg3 QkE1MTkzMzAeFw0yNTA0MjUwNjAyNDRaFw0yNTA1MDIwNjAyNDRaMBgxFjAUBgNV BAMTDTY4MGIyNTg0LWI1OWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEVWEA8u2w4SARiwsVmgki5FhRUNRxKfx2N/me0G5Ls+PCLRF7ZVtiydTTAfH6 9vpYpSFLXvCK8W1cIPlNrJt3Ulh98i9dh9TUV8jRNtf8s9zwn1awOvFreZZcRGml UwOMWdzp6YOVNQF+1rCqmDH4je7jkc6axfNSjmF186wak2mXHoFEMrtNlkkcL47p L6NXLj/7xehGRg5+tYWIVAByuzXLdd/KhsT+NbPcVbQ2bjBfTTgOIRpG5LEYpb7l v6hPSFB9BBSnLkQfQaQvLn7Q5CmQODixSpBIGWtf0vubhxzo4R+/v4j16rEDfTXL d8G5IlXURUzxYL/0+0/s6e9/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+j07W66S vc2g5U5MWMWKrlbbuzYwHwYDVR0jBBgwFoAUOUPUJhV5zeDoKgXKKrVLOHulGTMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlEODhGLzg0QTVCQzgwOTA1 RDExRUZBNEYzMUQyRUM0RjlBRTAyL09VUFVKaFY1emVEb0tnWEtLclZMT0h1bEdU TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT1VQVUpoVjV6ZURvS2dYS0tyVkxPSHVsR1RNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlE ODhGLzg0QTVCQzgwOTA1RDExRUZBNEYzMUQyRUM0RjlBRTAyL09VUFVKaFY1emVE b0tnWEtLclZMT0h1bEdUTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAeIfaUPaU+JcCoamRJ2Rx9pgx88Bdvd7/Tt9+QkNjA3Sy5RfpSVBXKI lCiJtLTzbDqMVb57P9cWdfsXcbwtnm5gazjyGSwZNIAnVIATWucQHeMtP1dkKLaW q1S61wYPFYoGs1y7WJ7D6Bq99UJZrdh5tSMi78mYvk3x6ed5IBw/f1qYF3VTJshf 1fZkNeI5yP9KsNz3N7I//DdeZ3k/iShT7jQapxy8lN5O1UENY7yx2rcNMzAsirpN w7wsl/K6r9Cs0NX67zUPkIOhE7r2iaMnshUnHpd7M6Pe3KuwS1UoxwA+a/7KbJ2R tUzsXDyXqvQrIe3JNZ6cO4M2Ne8J6Y4= -----END CERTIFICATE-----Generated at Sat Apr 26 05:57:26 2025 by rpki-client