$ rpki-client -vvf rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft File: P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft (raw, json) Hash identifier: i4h8QRGYYfGKJ4GlpuSqRXBJMHfqXiLgfs1Vg34a3uI= Subject key identifier: C9:97:9F:11:89:C3:FF:1A:CF:9A:B1:1D:E4:AE:3F:3D:93:F9:0A:C1 Authority key identifier: 3F:E3:AE:35:5A:92:77:B9:1D:73:E2:AC:52:F5:38:7F:09:5F:18:9A Certificate issuer: /CN=A91C37DD/serialNumber=3FE3AE355A9277B91D73E2AC52F5387F095F189A Certificate serial: C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-OuNVqSd7kdc-KsUvU4fwlfGJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft Manifest number: BE Signing time: Fri 25 Apr 2025 04:58:32 +0000 Manifest this update: Fri 25 Apr 2025 04:58:32 +0000 Manifest next update: Fri 02 May 2025 04:58:32 +0000 Files and hashes: 1: P-OuNVqSd7kdc-KsUvU4fwlfGJo.crl (hash: wOWF0JfmYaEP5lEbvq9IdjhOcScWmzzu3PzHKpKLPWo=) 2: 8670D60E096611EF99F30750C4F9AE02.roa (hash: 9x3A7j08LRpC1gpJOubZns71PbS9EeGE42Z1Nuk8UHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.crl rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-OuNVqSd7kdc-KsUvU4fwlfGJo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:58:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C37DD, serialNumber=3FE3AE355A9277B91D73E2AC52F5387F095F189A Validity Not Before: Apr 25 04:58:32 2025 GMT Not After : May 2 04:58:32 2025 GMT Subject: CN=680b1678-1067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:5b:19:7a:4d:08:e2:a8:a0:fe:ba:b6:ad:95: 6e:d6:fe:aa:d0:b0:2a:3e:26:48:9d:94:b1:17:3a: 36:0b:d4:4d:6c:d5:c2:ab:93:4a:e6:18:12:08:a5: 5a:6e:14:7e:18:61:9f:7f:cc:f6:bc:be:ca:71:87: 65:c8:55:e3:fd:a5:33:38:f2:f4:54:ab:1a:62:b0: b4:12:56:9a:4b:e6:27:03:34:1c:bc:2e:2a:c9:98: 55:b0:ba:78:a4:a5:03:f4:6a:f5:ab:e3:c4:ef:57: 6a:8b:b7:76:e3:c3:5b:cb:92:ac:a2:a9:7f:27:41: c1:04:17:bc:59:a6:0d:90:22:cd:e9:3a:3a:f9:de: 78:8f:01:ae:c0:65:fd:3a:5b:18:80:e1:e6:bc:4c: d8:d3:68:a3:c8:ba:39:af:0c:7c:fd:b4:93:96:29: 55:23:fc:e9:4d:ee:21:41:56:78:94:76:0f:24:7e: 64:62:d8:30:10:03:b8:f4:b6:8d:f8:c8:35:8c:dd: 13:a7:7a:5e:2e:38:52:55:f6:39:33:22:d8:9f:cf: a6:a1:b4:20:07:21:36:6d:0d:68:b2:7f:c9:3c:0c: 65:4f:b0:1b:3f:91:3a:ae:cd:c9:79:12:c0:cc:aa: 2f:67:af:1b:e1:ab:2a:eb:42:26:38:fc:04:4b:11: d5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:97:9F:11:89:C3:FF:1A:CF:9A:B1:1D:E4:AE:3F:3D:93:F9:0A:C1 X509v3 Authority Key Identifier: keyid:3F:E3:AE:35:5A:92:77:B9:1D:73:E2:AC:52:F5:38:7F:09:5F:18:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-OuNVqSd7kdc-KsUvU4fwlfGJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:53:f7:99:0d:c5:0b:a2:91:e5:ae:ef:8f:9e:e9:36:db:cb: bf:15:f5:23:13:7e:3d:46:d3:71:ef:89:31:8f:48:3e:82:c4: 12:e4:8a:df:f1:4a:d1:d4:7d:40:e5:ff:46:99:8b:62:48:e7: 42:9e:89:81:0b:e0:03:b5:09:8d:03:e2:d3:22:2c:74:97:4f: af:89:ba:86:78:ec:f8:f1:04:60:ed:5e:8f:5a:0a:cc:8d:93: b2:ed:a6:67:5a:28:f8:12:8a:58:ab:05:b9:f0:c5:67:56:22: 2b:98:63:9a:9e:26:30:a3:60:c2:e5:3c:5b:9f:c1:51:8d:2c: 8b:2e:74:14:08:44:08:bd:d9:59:03:c9:bb:8f:09:db:a6:cd: 20:dc:66:49:36:a8:7d:1c:75:8e:47:a0:21:d1:a9:f0:6f:a6: e1:ee:b8:7c:cb:79:fb:30:a3:05:a0:e0:d4:5a:0e:d7:f2:94: 64:03:99:27:ec:9c:dc:03:27:4a:cd:09:37:79:67:1e:e2:5c: 97:73:0b:08:95:13:0e:00:2a:b8:6a:05:f3:a9:ee:08:0b:e6: 27:ba:d4:f0:2e:50:f8:ff:2d:ff:13:87:7c:9b:b5:eb:58:3e: f3:50:e1:53:cc:b9:09:ec:68:67:4b:39:74:37:25:5a:94:d3: d0:a2:66:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM3REQxMTAvBgNVBAUTKDNGRTNBRTM1NUE5Mjc3QjkxRDczRTJBQzUyRjUzODdG MDk1RjE4OUEwHhcNMjUwNDI1MDQ1ODMyWhcNMjUwNTAyMDQ1ODMyWjAYMRYwFAYD VQQDEw02ODBiMTY3OC0xMDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5lsZek0I4qig/rq2rZVu1v6q0LAqPiZInZSxFzo2C9RNbNXCq5NK5hgSCKVa bhR+GGGff8z2vL7KcYdlyFXj/aUzOPL0VKsaYrC0ElaaS+YnAzQcvC4qyZhVsLp4 pKUD9Gr1q+PE71dqi7d248Nby5Ksoql/J0HBBBe8WaYNkCLN6To6+d54jwGuwGX9 OlsYgOHmvEzY02ijyLo5rwx8/bSTlilVI/zpTe4hQVZ4lHYPJH5kYtgwEAO49LaN +Mg1jN0Tp3peLjhSVfY5MyLYn8+mobQgByE2bQ1osn/JPAxlT7AbP5E6rs3JeRLA zKovZ68b4asq60ImOPwESxHVVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMmXnxGJ w/8az5qxHeSuPz2T+QrBMB8GA1UdIwQYMBaAFD/jrjVakne5HXPirFL1OH8JXxia MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzdERC8yNDg1NUQ4MDA5 NjUxMUVGQTRCQ0U4N0FDNEY5QUUwMi9QLU91TlZxU2Q3a2RjLUtzVXZVNGZ3bGZH Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AtT3VOVnFTZDdrZGMtS3NVdlU0ZndsZkdKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzdERC8yNDg1NUQ4MDA5NjUxMUVGQTRCQ0U4N0FDNEY5QUUwMi9QLU91TlZxU2Q3 a2RjLUtzVXZVNGZ3bGZHSm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuU/eZDcULopHlru+Pnuk228u/FfUjE349RtNx74kxj0g+gsQS5Irf 8UrR1H1A5f9GmYtiSOdCnomBC+ADtQmNA+LTIix0l0+vibqGeOz48QRg7V6PWgrM jZOy7aZnWij4EopYqwW58MVnViIrmGOaniYwo2DC5Txbn8FRjSyLLnQUCEQIvdlZ A8m7jwnbps0g3GZJNqh9HHWOR6Ah0anwb6bh7rh8y3n7MKMFoODUWg7X8pRkA5kn 7JzcAydKzQk3eWce4lyXcwsIlRMOACq4agXzqe4IC+YnutTwLlD4/y3/E4d8m7Xr WD7zUOFTzLkJ7GhnSzl0NyValNPQomZw -----END CERTIFICATE-----Generated at Sat Apr 26 04:35:00 2025 by rpki-client