$ rpki-client -vvf rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.mft File: OochbBWSc79Rk0f8H-5wYZXMKuY.mft (raw, json) Hash identifier: 1agFMsLoXn5rtXfYEKFMgIYmQW02XAtOlkdFRIcltXo= Subject key identifier: AC:C1:0E:85:4C:1E:28:2C:40:D1:E4:69:F4:3B:5F:6C:EE:2E:E0:9F Authority key identifier: 3A:87:21:6C:15:92:73:BF:51:93:47:FC:1F:EE:70:61:95:CC:2A:E6 Certificate issuer: /CN=A91C661C/serialNumber=3A87216C159273BF519347FC1FEE706195CC2AE6 Certificate serial: 0689 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OochbBWSc79Rk0f8H-5wYZXMKuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.mft Manifest number: 067E Signing time: Thu 24 Apr 2025 22:06:34 +0000 Manifest this update: Thu 24 Apr 2025 22:06:34 +0000 Manifest next update: Thu 01 May 2025 22:06:34 +0000 Files and hashes: 1: OochbBWSc79Rk0f8H-5wYZXMKuY.crl (hash: bH6GAEoDzD236+vFeX3mhhXLHM0n3k8yNgKIPDkEBWE=) 2: AABC79100EC411EF858B5255C4F9AE02.roa (hash: xd+kZGDM6lidBL503M6KRPrbZpmB555muvLLsOdJRog=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.crl rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OochbBWSc79Rk0f8H-5wYZXMKuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:06:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1673 (0x689) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C661C, serialNumber=3A87216C159273BF519347FC1FEE706195CC2AE6 Validity Not Before: Apr 24 22:06:34 2025 GMT Not After : May 1 22:06:34 2025 GMT Subject: CN=680ab5ea-40b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:97:00:7f:07:41:31:4c:9c:1b:7b:58:cd:51: ff:67:e7:d5:78:27:b4:25:24:fd:f4:51:06:87:51: 49:72:82:e1:99:9f:d1:41:20:4f:f9:f0:89:b6:33: 79:7b:21:64:2b:5e:36:64:b9:d3:e4:6a:d7:2a:cb: 87:10:15:32:cc:7d:94:ec:4f:df:43:2c:1e:0a:3e: 6d:b5:2e:b1:14:87:17:12:c0:d6:8d:c7:74:05:4e: a6:34:8c:bf:71:1a:20:6c:3a:77:e8:c0:8a:98:f9: 09:2b:8d:db:5f:57:49:e3:ef:bf:99:11:f8:fe:78: fb:44:32:91:d1:18:46:79:ad:84:f6:5f:8a:d9:9b: a3:75:86:0e:93:b3:dd:0c:6f:08:71:95:29:4d:85: 2c:d9:c2:dd:e9:a1:92:06:77:32:ce:4c:61:73:be: f0:6c:de:79:49:fd:00:64:60:69:29:ba:0c:96:b0: e9:b3:76:7a:0b:50:e4:2b:d7:b4:4c:30:f0:85:e3: 45:05:1e:d0:4e:11:d1:75:24:98:87:89:48:03:8d: 49:16:76:10:72:e4:68:99:4d:60:92:1b:5d:d5:90: ac:85:54:74:f5:89:10:9d:94:c7:a5:df:6e:c6:21: 16:58:84:61:13:ad:44:dd:df:4b:43:c0:a9:b4:87: 9b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:C1:0E:85:4C:1E:28:2C:40:D1:E4:69:F4:3B:5F:6C:EE:2E:E0:9F X509v3 Authority Key Identifier: keyid:3A:87:21:6C:15:92:73:BF:51:93:47:FC:1F:EE:70:61:95:CC:2A:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OochbBWSc79Rk0f8H-5wYZXMKuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:d1:cd:96:ef:13:05:e7:a2:82:79:33:f0:7d:b8:8b:6d:b7: fb:dc:5c:fc:18:1c:b2:0b:fc:74:23:a7:67:59:94:32:8e:fa: b6:3c:c6:0b:d5:80:47:7e:5c:ab:8e:49:a6:be:37:78:2f:66: ca:0d:99:26:92:f7:5f:5e:3f:bf:ad:fc:76:8b:03:66:4b:a8: e2:53:a5:78:e0:d4:c0:a2:e0:38:31:4b:6a:cc:e5:4d:01:cd: e3:86:8a:2d:60:3b:37:0d:96:c2:79:5e:28:d9:d8:9d:fb:d7: 3c:f6:37:47:a4:71:de:4e:62:8b:0b:a7:b7:f1:8a:12:6d:40: aa:9a:90:3d:86:c1:26:ec:f2:1e:18:36:01:30:39:40:07:b4: 31:ab:26:37:e3:73:71:26:ce:5a:da:70:d0:dd:5e:4d:9a:eb: 65:c5:d5:cb:08:b7:66:5c:38:c8:16:9c:c5:9c:53:5c:49:90: 2d:fa:df:26:5f:a1:e1:ed:e8:d8:a5:de:69:0d:77:cb:19:56: 53:3a:2f:26:60:eb:2a:3a:44:85:f1:cd:cf:ff:51:87:16:c8: 80:59:04:7c:61:b3:4d:5f:2a:61:a2:1a:38:a7:4d:d2:09:25: ff:2f:b6:3a:76:8e:cf:71:b3:10:bd:56:8d:d2:27:cc:f6:1e: 25:d7:ed:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY2MUMxMTAvBgNVBAUTKDNBODcyMTZDMTU5MjczQkY1MTkzNDdGQzFGRUU3MDYx OTVDQzJBRTYwHhcNMjUwNDI0MjIwNjM0WhcNMjUwNTAxMjIwNjM0WjAYMRYwFAYD VQQDEw02ODBhYjVlYS00MGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6ZcAfwdBMUycG3tYzVH/Z+fVeCe0JST99FEGh1FJcoLhmZ/RQSBP+fCJtjN5 eyFkK142ZLnT5GrXKsuHEBUyzH2U7E/fQyweCj5ttS6xFIcXEsDWjcd0BU6mNIy/ cRogbDp36MCKmPkJK43bX1dJ4++/mRH4/nj7RDKR0RhGea2E9l+K2ZujdYYOk7Pd DG8IcZUpTYUs2cLd6aGSBncyzkxhc77wbN55Sf0AZGBpKboMlrDps3Z6C1DkK9e0 TDDwheNFBR7QThHRdSSYh4lIA41JFnYQcuRomU1gkhtd1ZCshVR09YkQnZTHpd9u xiEWWIRhE61E3d9LQ8CptIebCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKzBDoVM HigsQNHkafQ7X2zuLuCfMB8GA1UdIwQYMBaAFDqHIWwVknO/UZNH/B/ucGGVzCrm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjYxQy9GNDU5Mjk5Mjcz NzIxMUVCOTQ3NUNBNURDNEY5QUUwMi9Pb2NoYkJXU2M3OVJrMGY4SC01d1laWE1L dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09vY2hiQldTYzc5UmswZjhILTV3WVpYTUt1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjYxQy9GNDU5Mjk5MjczNzIxMUVCOTQ3NUNBNURDNEY5QUUwMi9Pb2NoYkJXU2M3 OVJrMGY4SC01d1laWE1LdVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCl0c2W7xMF56KCeTPwfbiLbbf73Fz8GByyC/x0I6dnWZQyjvq2PMYL 1YBHflyrjkmmvjd4L2bKDZkmkvdfXj+/rfx2iwNmS6jiU6V44NTAouA4MUtqzOVN Ac3jhootYDs3DZbCeV4o2did+9c89jdHpHHeTmKLC6e38YoSbUCqmpA9hsEm7PIe GDYBMDlAB7QxqyY343NxJs5a2nDQ3V5NmutlxdXLCLdmXDjIFpzFnFNcSZAt+t8m X6Hh7ejYpd5pDXfLGVZTOi8mYOsqOkSF8c3P/1GHFsiAWQR8YbNNXyphoho4p03S CSX/L7Y6do7PcbMQvVaN0ifM9h4l1+1b -----END CERTIFICATE-----Generated at Sat Apr 26 04:27:08 2025 by rpki-client