$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft File: Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft (raw, json) Hash identifier: gHP0CZfvX78ASyt541iUsWvlgJHLkfPq5HhxmHx/gZk= Subject key identifier: E0:6D:27:6A:F2:F8:C3:DF:0F:19:E4:71:01:B7:B5:01:13:13:B3:1D Authority key identifier: 3A:46:FB:0F:40:F6:9D:5E:1D:B7:5D:28:51:F0:40:C1:9F:66:F2:2C Certificate issuer: /CN=A91ACD4D/serialNumber=3A46FB0F40F69D5E1DB75D2851F040C19F66F22C Certificate serial: 1620 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Okb7D0D2nV4dt10oUfBAwZ9m8iw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft Manifest number: 1610 Signing time: Thu 24 Apr 2025 16:44:53 +0000 Manifest this update: Thu 24 Apr 2025 16:44:53 +0000 Manifest next update: Thu 01 May 2025 16:44:53 +0000 Files and hashes: 1: Okb7D0D2nV4dt10oUfBAwZ9m8iw.crl (hash: 6ETBM0GR/bKwDmbvCc61xU/HKs67Qfev2wX44elRIJs=) 2: 268ECB3ED5BD11E894FFC250C4F9AE02.roa (hash: w3oachy62b9vS7wqwD6D3HohJubENRLKhLvYOw/CqsQ=) 3: 3DE1DBC4D81011EC892E8A79C4F9AE02.roa (hash: P/jVLVKJm35tcLY3WNaJuQCIeip3WppGMETv/Tz90FE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.crl rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Okb7D0D2nV4dt10oUfBAwZ9m8iw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:44:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5664 (0x1620) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACD4D, serialNumber=3A46FB0F40F69D5E1DB75D2851F040C19F66F22C Validity Not Before: Apr 24 16:44:53 2025 GMT Not After : May 1 16:44:53 2025 GMT Subject: CN=680a6a85-9be5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1b:86:d1:05:97:ee:1d:da:a2:2f:3c:9d:54: f4:e0:c8:cc:d6:28:b3:9d:86:7c:6c:10:ea:8c:5d: 52:96:71:ea:c1:56:ba:9a:be:45:d1:14:42:e5:6f: 71:80:2a:a5:91:41:3c:01:9e:36:d1:6a:1d:f0:90: 11:08:f4:48:bb:b0:5c:9b:9e:66:99:5a:d9:46:ce: 08:55:d2:01:dd:af:18:0a:cc:50:3d:46:46:17:8a: 83:4a:4b:43:cf:85:49:25:4a:9a:52:fe:64:ab:a9: 12:3e:ed:61:cf:e8:4a:d9:82:ce:a0:1a:c3:ab:5f: 11:3b:83:e7:a9:4a:4a:71:4c:5d:ed:0b:98:00:0a: c0:a3:84:11:b6:33:03:ee:d0:c7:09:29:56:ca:fc: f2:c4:6a:a9:46:b8:83:72:b6:80:f2:03:cd:cd:c2: 1c:d5:a1:07:ff:61:15:fc:a9:77:c7:53:c9:10:ac: 1a:e6:5f:34:c6:01:34:af:1d:66:02:93:19:42:86: 33:03:7f:c3:5b:28:54:41:c7:a9:81:c9:91:9c:11: 59:78:b6:32:44:46:51:e8:b4:48:ea:14:c4:59:64: 10:c6:16:28:e4:a8:81:a8:38:14:17:0b:02:18:6a: 18:45:64:74:36:bc:0a:db:f4:09:0d:b8:c3:3e:d9: 08:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:6D:27:6A:F2:F8:C3:DF:0F:19:E4:71:01:B7:B5:01:13:13:B3:1D X509v3 Authority Key Identifier: keyid:3A:46:FB:0F:40:F6:9D:5E:1D:B7:5D:28:51:F0:40:C1:9F:66:F2:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Okb7D0D2nV4dt10oUfBAwZ9m8iw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:97:13:c5:1b:1d:a2:65:cc:e7:98:67:64:f8:45:21:40:2a: a1:fb:c1:fd:f7:3f:3a:42:5e:37:5a:69:8f:88:d1:aa:ea:35: a8:7e:b7:fd:1a:c4:df:4e:a7:22:b7:9e:9b:12:09:8e:d6:0b: 85:2a:b3:02:e3:3a:0e:80:0d:c1:4a:c8:a1:88:25:e4:df:90: 57:fc:0e:cc:6a:88:1e:2e:85:e6:12:82:d2:d3:0d:71:7c:70: 0c:34:18:45:93:52:c9:8d:67:a3:15:1a:74:da:e3:ff:24:4f: e5:a8:fb:c7:eb:b6:cc:64:31:1c:b4:14:31:5e:fe:53:e8:83: 20:7b:cb:ee:a4:6d:6d:a2:b7:e9:db:52:1b:9e:e9:ef:e4:41: 7e:7a:06:a1:bc:e4:99:7c:26:2c:3f:56:61:39:98:30:87:3b: 0b:29:7b:8a:e5:f9:e5:51:35:29:82:36:ac:5a:88:30:11:86: ae:64:f0:f5:5c:30:5f:97:7a:f9:cb:3d:e8:a8:77:c9:c4:36: 44:a9:5f:d2:ad:95:e4:c2:93:bc:ea:9f:fc:e2:a6:0e:aa:a4: 1b:cd:2b:15:6e:de:06:47:a0:8c:7d:78:28:b6:dc:01:09:d6: 7d:b6:a3:78:d8:28:e7:af:58:7b:ea:f4:f4:23:6e:a4:0d:95: 4f:b3:c3:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNENEQxMTAvBgNVBAUTKDNBNDZGQjBGNDBGNjlENUUxREI3NUQyODUxRjA0MEMx OUY2NkYyMkMwHhcNMjUwNDI0MTY0NDUzWhcNMjUwNTAxMTY0NDUzWjAYMRYwFAYD VQQDEw02ODBhNmE4NS05YmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtBuG0QWX7h3aoi88nVT04MjM1iiznYZ8bBDqjF1SlnHqwVa6mr5F0RRC5W9x gCqlkUE8AZ420Wod8JARCPRIu7Bcm55mmVrZRs4IVdIB3a8YCsxQPUZGF4qDSktD z4VJJUqaUv5kq6kSPu1hz+hK2YLOoBrDq18RO4PnqUpKcUxd7QuYAArAo4QRtjMD 7tDHCSlWyvzyxGqpRriDcraA8gPNzcIc1aEH/2EV/Kl3x1PJEKwa5l80xgE0rx1m ApMZQoYzA3/DWyhUQcepgcmRnBFZeLYyREZR6LRI6hTEWWQQxhYo5KiBqDgUFwsC GGoYRWR0NrwK2/QJDbjDPtkI6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOBtJ2ry +MPfDxnkcQG3tQETE7MdMB8GA1UdIwQYMBaAFDpG+w9A9p1eHbddKFHwQMGfZvIs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0Q0RC8xMzdEMDBENDE2 MEUxMUU4ODUyQzQzN0VDNEY5QUUwMi9Pa2I3RDBEMm5WNGR0MTBvVWZCQXdaOW04 aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09rYjdEMEQyblY0ZHQxMG9VZkJBd1o5bThpdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0Q0RC8xMzdEMDBENDE2MEUxMUU4ODUyQzQzN0VDNEY5QUUwMi9Pa2I3RDBEMm5W NGR0MTBvVWZCQXdaOW04aXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASlxPFGx2iZcznmGdk+EUhQCqh+8H99z86Ql43WmmPiNGq6jWofrf9 GsTfTqcit56bEgmO1guFKrMC4zoOgA3BSsihiCXk35BX/A7MaogeLoXmEoLS0w1x fHAMNBhFk1LJjWejFRp02uP/JE/lqPvH67bMZDEctBQxXv5T6IMge8vupG1torfp 21Ibnunv5EF+egahvOSZfCYsP1ZhOZgwhzsLKXuK5fnlUTUpgjasWogwEYauZPD1 XDBfl3r5yz3oqHfJxDZEqV/SrZXkwpO86p/84qYOqqQbzSsVbt4GR6CMfXgottwB CdZ9tqN42Cjnr1h76vT0I26kDZVPs8No -----END CERTIFICATE-----Generated at Sat Apr 26 14:08:21 2025 by rpki-client