$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft File: OddGjPgMUFXp0EybT60xF1wU1l8.mft (raw, json) Hash identifier: wTDu4iGCWoexv3DZ/y9HgYoo54/nbHRW4IeaEedBdpU= Subject key identifier: 5E:C4:CA:D6:92:E2:40:41:BE:FC:86:17:78:19:68:30:9B:AF:93:53 Authority key identifier: 39:D7:46:8C:F8:0C:50:55:E9:D0:4C:9B:4F:AD:31:17:5C:14:D6:5F Certificate issuer: /CN=A91AD643/serialNumber=39D7468CF80C5055E9D04C9B4FAD31175C14D65F Certificate serial: 06C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft Manifest number: 06B8 Signing time: Thu 24 Apr 2025 21:56:41 +0000 Manifest this update: Thu 24 Apr 2025 21:56:41 +0000 Manifest next update: Thu 01 May 2025 21:56:41 +0000 Files and hashes: 1: OddGjPgMUFXp0EybT60xF1wU1l8.crl (hash: Sy0wScZ8HnngG3YOD/OSJof/kyYBBv5BLFzj3RG3ObM=) 2: 865F2F80EE8911EBB390AC76C4F9AE02.roa (hash: 0ULrTT5sEmnlV5jXg9GCbo9G2IRIBRTqvgY01zsRTW8=) 3: 81E9653E5B8A11EB857A3F77C4F9AE02.roa (hash: hFkz2Rxz8bjHa9W5ewxpkxAw84TOeg9mnyL9BGUNw+E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.crl rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:56:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1732 (0x6c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD643, serialNumber=39D7468CF80C5055E9D04C9B4FAD31175C14D65F Validity Not Before: Apr 24 21:56:41 2025 GMT Not After : May 1 21:56:41 2025 GMT Subject: CN=680ab399-dc48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:26:22:dc:88:3e:fa:7c:10:dd:6c:b2:f1:6b: f1:aa:7e:ad:45:66:29:e4:98:55:9c:6b:37:d3:17: f2:3e:86:81:8a:ea:bf:bd:60:5a:a5:c0:97:00:05: 81:1d:7f:94:d2:db:73:f0:ad:ea:ac:a4:0a:e2:4d: b7:b9:38:a7:78:98:64:18:a5:d8:61:52:d7:89:07: ec:e3:0d:49:68:d4:f1:7b:d3:ec:8e:7a:7f:a1:a2: 8b:76:64:ca:90:11:ba:f1:c3:62:fb:42:fa:2d:f4: 4c:22:8f:80:79:c1:7b:46:b0:2b:2d:72:d0:e6:fe: 07:3e:63:5e:c4:77:af:83:41:43:05:09:6d:b6:c1: cf:12:46:28:ae:93:47:52:0c:53:fb:4f:15:06:60: e5:e3:99:17:03:f5:61:36:2d:bf:9a:f4:ae:ad:5a: 6f:fc:29:2b:8d:5e:f5:76:c5:ea:04:53:67:a1:8f: 6d:b2:01:86:a1:17:de:74:bb:dd:83:93:f0:70:71: 01:60:31:8c:15:54:62:d7:6f:46:a6:d9:94:6c:66: f8:a7:46:fc:28:6f:44:bb:65:41:d2:b6:ff:38:df: 47:f8:e5:a2:29:2a:0c:df:6b:3c:d9:43:47:b0:fe: c1:5f:1d:10:da:26:ee:3c:33:6c:77:8a:b7:7a:d7: 8b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:C4:CA:D6:92:E2:40:41:BE:FC:86:17:78:19:68:30:9B:AF:93:53 X509v3 Authority Key Identifier: keyid:39:D7:46:8C:F8:0C:50:55:E9:D0:4C:9B:4F:AD:31:17:5C:14:D6:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:fa:ba:4f:58:dd:ed:eb:8f:bc:3f:a8:1b:89:b1:e0:fc:26: 66:6e:fe:bc:41:93:f5:80:19:01:f2:50:ff:39:f3:a8:31:d0: 0f:6f:ce:5d:23:7e:49:79:81:34:66:f3:2f:97:85:35:8b:c3: 7b:84:10:eb:10:56:60:83:d4:b1:d6:b5:e6:48:e6:26:ca:74: 92:bd:82:a0:90:66:2e:f5:cc:fd:06:05:b8:dd:63:a5:1c:30: fd:6c:49:9a:29:5f:be:af:98:a1:56:39:2a:8f:9e:dc:d9:c9: c8:8e:fa:d8:11:50:c6:25:88:3f:3c:b8:fd:06:f4:6d:4b:b4: 67:09:ee:96:06:c4:b7:21:2c:31:69:d9:58:e1:fb:f7:25:a7: ed:3a:67:8f:fb:6e:12:0c:7d:a9:a7:14:c4:a2:c4:69:44:69: 8a:f7:d9:f5:0a:0e:84:88:27:33:42:23:0e:99:78:52:93:b1: bf:fe:87:0c:50:70:04:3a:11:b2:f1:bf:a5:d1:6c:9a:8c:51: b2:a7:99:63:6e:b3:8f:eb:32:77:2f:a7:73:a0:21:ec:51:f7: b8:e4:98:ce:ce:78:02:98:83:6d:98:1e:d8:c5:32:19:dd:91: 05:cb:41:31:90:21:a7:7c:4f:75:b8:d5:78:09:07:01:af:c1: 26:27:6d:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ2NDMxMTAvBgNVBAUTKDM5RDc0NjhDRjgwQzUwNTVFOUQwNEM5QjRGQUQzMTE3 NUMxNEQ2NUYwHhcNMjUwNDI0MjE1NjQxWhcNMjUwNTAxMjE1NjQxWjAYMRYwFAYD VQQDEw02ODBhYjM5OS1kYzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzSYi3Ig++nwQ3Wyy8Wvxqn6tRWYp5JhVnGs30xfyPoaBiuq/vWBapcCXAAWB HX+U0ttz8K3qrKQK4k23uTineJhkGKXYYVLXiQfs4w1JaNTxe9Psjnp/oaKLdmTK kBG68cNi+0L6LfRMIo+AecF7RrArLXLQ5v4HPmNexHevg0FDBQlttsHPEkYorpNH UgxT+08VBmDl45kXA/VhNi2/mvSurVpv/CkrjV71dsXqBFNnoY9tsgGGoRfedLvd g5PwcHEBYDGMFVRi129GptmUbGb4p0b8KG9Eu2VB0rb/ON9H+OWiKSoM32s82UNH sP7BXx0Q2ibuPDNsd4q3eteLxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF7EytaS 4kBBvvyGF3gZaDCbr5NTMB8GA1UdIwQYMBaAFDnXRoz4DFBV6dBMm0+tMRdcFNZf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDY0My9FRkJFNkVCMjVC ODgxMUVCQkQ1RjMwNzZDNEY5QUUwMi9PZGRHalBnTVVGWHAwRXliVDYweEYxd1Ux bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09kZEdqUGdNVUZYcDBFeWJUNjB4RjF3VTFsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDY0My9FRkJFNkVCMjVCODgxMUVCQkQ1RjMwNzZDNEY5QUUwMi9PZGRHalBnTVVG WHAwRXliVDYweEYxd1UxbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBt+rpPWN3t64+8P6gbibHg/CZmbv68QZP1gBkB8lD/OfOoMdAPb85d I35JeYE0ZvMvl4U1i8N7hBDrEFZgg9Sx1rXmSOYmynSSvYKgkGYu9cz9BgW43WOl HDD9bEmaKV++r5ihVjkqj57c2cnIjvrYEVDGJYg/PLj9BvRtS7RnCe6WBsS3ISwx adlY4fv3JaftOmeP+24SDH2ppxTEosRpRGmK99n1Cg6EiCczQiMOmXhSk7G//ocM UHAEOhGy8b+l0WyajFGyp5ljbrOP6zJ3L6dzoCHsUfe45JjOzngCmINtmB7YxTIZ 3ZEFy0ExkCGnfE91uNV4CQcBr8EmJ23f -----END CERTIFICATE-----Generated at Sat Apr 26 17:13:02 2025 by rpki-client