$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft File: OvCdKMpIepMmYxpr6b2b26oY2nU.mft (raw, json) Hash identifier: RFAE8nm265obugKt9A2F0WRiIepdrkHocwX8DO3Y01s= Subject key identifier: A3:17:05:58:18:FB:F2:62:44:16:6E:1F:3F:2E:29:18:08:AC:23:23 Authority key identifier: 3A:F0:9D:28:CA:48:7A:93:26:63:1A:6B:E9:BD:9B:DB:AA:18:DA:75 Certificate issuer: /CN=A91AB74D/serialNumber=3AF09D28CA487A9326631A6BE9BD9BDBAA18DA75 Certificate serial: 05FE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OvCdKMpIepMmYxpr6b2b26oY2nU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft Manifest number: 05F5 Signing time: Thu 24 Apr 2025 22:41:49 +0000 Manifest this update: Thu 24 Apr 2025 22:41:48 +0000 Manifest next update: Thu 01 May 2025 22:41:48 +0000 Files and hashes: 1: OvCdKMpIepMmYxpr6b2b26oY2nU.crl (hash: new4u/6ONXVlTT6+tRvZVTV2ZvmFu5dfWvxPUwuE8g4=) 2: 1A704D8CADB511EBB5CFE734C4F9AE02.roa (hash: Pa24EqnhzVLdBNd9p4j/m3vhajKpO1KOBKzuyf2oDyI=) 3: 1B16F1A0ADB511EBB5CFE734C4F9AE02.roa (hash: rRKFhbIBmbzLdYOr5BLZyHQoz/TkKPZba2YaKMN0mo0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.crl rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OvCdKMpIepMmYxpr6b2b26oY2nU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:41:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1534 (0x5fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB74D, serialNumber=3AF09D28CA487A9326631A6BE9BD9BDBAA18DA75 Validity Not Before: Apr 24 22:41:48 2025 GMT Not After : May 1 22:41:48 2025 GMT Subject: CN=680abe2d-240f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:4d:d0:8a:4d:16:7e:d2:bd:6a:23:e0:46:a7: 47:49:62:c0:ff:ce:fd:0b:34:a6:7f:5a:d4:34:5a: e0:0d:67:7b:b2:f6:0c:b0:8f:26:bb:3e:4b:85:bb: 33:bb:12:98:d3:b9:e8:1d:2e:a7:09:0d:6a:7f:38: ab:c8:02:57:8b:14:e6:43:16:96:af:c7:7b:aa:34: 16:8f:b0:ea:54:55:17:3d:2a:12:b0:71:56:ed:5d: 35:39:36:0d:b2:3d:79:16:a0:8a:8e:56:63:20:fb: 65:da:0b:4f:da:60:81:4b:42:32:a9:87:06:02:57: 2c:56:1a:dd:14:d4:fe:8e:c2:b8:ff:c3:ea:cb:a9: 1f:69:9c:c9:de:22:59:52:3e:d6:07:09:06:37:09: 02:b6:a3:11:e5:b5:e6:58:53:af:3b:60:69:63:c5: 27:02:5b:bb:da:31:60:83:4b:42:1d:b9:ae:f9:dc: 75:8c:2d:0c:a1:07:f9:98:f9:82:2e:b1:a1:b2:7c: 7d:c0:6f:97:14:35:0e:09:64:df:50:c1:8c:cd:04: 1d:19:cf:bb:e4:c6:42:af:09:7e:57:41:c1:7e:fe: 8f:9a:ab:94:96:cc:72:71:00:d9:db:64:70:b3:d3: b9:12:36:9a:84:a9:35:fb:09:ab:fa:d8:37:7b:e0: a6:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:17:05:58:18:FB:F2:62:44:16:6E:1F:3F:2E:29:18:08:AC:23:23 X509v3 Authority Key Identifier: keyid:3A:F0:9D:28:CA:48:7A:93:26:63:1A:6B:E9:BD:9B:DB:AA:18:DA:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OvCdKMpIepMmYxpr6b2b26oY2nU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:02:56:e1:1c:ee:5b:01:b9:4b:33:1a:ee:44:7e:22:c0:49: e2:89:37:d0:52:34:c2:df:17:f7:86:3e:34:5b:38:65:d9:cc: a0:2d:b5:96:62:fd:70:26:19:e0:f8:47:c6:4b:79:ed:97:1e: b4:fa:85:4b:6f:b2:a4:2e:aa:d6:8b:00:27:22:44:78:61:75: a6:98:c5:a5:5b:fc:4e:e9:77:1f:75:83:e6:cf:39:c9:69:be: 97:64:f2:85:e6:56:cc:06:86:af:a1:ea:16:bc:7e:9e:e6:6d: 31:19:b7:e0:e7:16:b7:6f:6b:07:12:8c:bf:86:6f:79:c3:87: fb:89:7c:de:26:d9:ff:77:5a:05:29:d4:c6:49:33:f4:b8:db: 69:da:7e:b8:8a:ef:b4:8f:9f:e3:ca:3d:49:4b:55:9a:af:0a: 98:d4:04:c0:ef:41:4d:08:80:60:1a:f6:f7:6a:ec:fb:2b:b8: ca:10:ca:39:f7:1f:cf:bf:2d:f1:a6:c7:5d:64:15:0d:cf:8e: 27:50:fe:d2:12:24:5f:8d:ef:fa:b5:7c:d0:e5:fa:65:4a:12: bb:8e:eb:62:77:37:e0:2e:5e:9e:4a:a9:19:8f:54:01:1c:ca: 41:f2:41:4d:23:51:6b:44:cb:02:11:c2:c4:e7:27:bb:fd:41: 3c:d1:3a:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI3NEQxMTAvBgNVBAUTKDNBRjA5RDI4Q0E0ODdBOTMyNjYzMUE2QkU5QkQ5QkRC QUExOERBNzUwHhcNMjUwNDI0MjI0MTQ4WhcNMjUwNTAxMjI0MTQ4WjAYMRYwFAYD VQQDEw02ODBhYmUyZC0yNDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5U3Qik0WftK9aiPgRqdHSWLA/879CzSmf1rUNFrgDWd7svYMsI8muz5Lhbsz uxKY07noHS6nCQ1qfziryAJXixTmQxaWr8d7qjQWj7DqVFUXPSoSsHFW7V01OTYN sj15FqCKjlZjIPtl2gtP2mCBS0IyqYcGAlcsVhrdFNT+jsK4/8Pqy6kfaZzJ3iJZ Uj7WBwkGNwkCtqMR5bXmWFOvO2BpY8UnAlu72jFgg0tCHbmu+dx1jC0MoQf5mPmC LrGhsnx9wG+XFDUOCWTfUMGMzQQdGc+75MZCrwl+V0HBfv6PmquUlsxycQDZ22Rw s9O5EjaahKk1+wmr+tg3e+CmZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKMXBVgY +/JiRBZuHz8uKRgIrCMjMB8GA1UdIwQYMBaAFDrwnSjKSHqTJmMaa+m9m9uqGNp1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjc0RC9EMzU5NTY4Q0E4 REMxMUVCOTc5REE1MEVDNEY5QUUwMi9PdkNkS01wSWVwTW1ZeHByNmIyYjI2b1ky blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL092Q2RLTXBJZXBNbVl4cHI2YjJiMjZvWTJuVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Qjc0RC9EMzU5NTY4Q0E4REMxMUVCOTc5REE1MEVDNEY5QUUwMi9PdkNkS01wSWVw TW1ZeHByNmIyYjI2b1kyblUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXAlbhHO5bAblLMxruRH4iwEniiTfQUjTC3xf3hj40Wzhl2cygLbWW Yv1wJhng+EfGS3ntlx60+oVLb7KkLqrWiwAnIkR4YXWmmMWlW/xO6XcfdYPmzznJ ab6XZPKF5lbMBoavoeoWvH6e5m0xGbfg5xa3b2sHEoy/hm95w4f7iXzeJtn/d1oF KdTGSTP0uNtp2n64iu+0j5/jyj1JS1WarwqY1ATA70FNCIBgGvb3auz7K7jKEMo5 9x/Pvy3xpsddZBUNz44nUP7SEiRfje/6tXzQ5fplShK7jutidzfgLl6eSqkZj1QB HMpB8kFNI1FrRMsCEcLE5ye7/UE80Tpx -----END CERTIFICATE-----Generated at Sat Apr 26 12:54:44 2025 by rpki-client