$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft File: OopqLuXcCfyqgv8BjwnBr4S0EZY.mft (raw, json) Hash identifier: K4KCZRg5rbVpiqaYS2eGcWj7m+l+zZtEjEmbLgGkzN4= Subject key identifier: 71:87:B4:4F:8C:3E:03:AB:74:68:F4:6C:68:EC:DE:43:28:3A:AE:27 Authority key identifier: 3A:8A:6A:2E:E5:DC:09:FC:AA:82:FF:01:8F:09:C1:AF:84:B4:11:96 Certificate issuer: /CN=A91CCCDD/serialNumber=3A8A6A2EE5DC09FCAA82FF018F09C1AF84B41196 Certificate serial: 01AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft Manifest number: 01A9 Signing time: Fri 25 Apr 2025 02:25:08 +0000 Manifest this update: Fri 25 Apr 2025 02:25:08 +0000 Manifest next update: Fri 02 May 2025 02:25:08 +0000 Files and hashes: 1: OopqLuXcCfyqgv8BjwnBr4S0EZY.crl (hash: IhUgGECKOU/PWzV89m2fDpqcj6b9YJ9tyDOWAL8VMWY=) 2: F77C1438964111EDAAB8E74AC4F9AE02.roa (hash: VtazFFTqbixljqAtcsaeza2iwr0OPiOznwFcK1HtWtU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.crl rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:25:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCCDD, serialNumber=3A8A6A2EE5DC09FCAA82FF018F09C1AF84B41196 Validity Not Before: Apr 25 02:25:08 2025 GMT Not After : May 2 02:25:08 2025 GMT Subject: CN=680af284-b1b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b6:71:6e:82:7b:4b:aa:6d:3d:61:12:cf:4b: b5:5a:91:a9:88:c1:3c:0c:d4:97:7d:62:b8:67:b9: 00:c9:c8:39:fb:77:bf:bf:e8:c5:a2:8d:5f:87:e1: 9e:1b:9b:fc:35:f6:24:26:04:d5:0f:3e:c5:d9:9c: b2:09:12:aa:e9:97:f6:47:d7:41:51:80:a8:94:9d: 26:20:58:62:05:75:84:05:c7:5d:dc:f5:30:66:5f: 3e:82:bb:2b:86:c4:7d:d3:c0:d7:48:43:32:e9:a0: 26:4c:e3:6b:93:ec:a2:89:11:4a:60:1b:ae:8d:a8: fa:1a:2e:af:e3:1a:50:db:b5:58:2e:6c:c6:f3:c5: 2b:a7:ae:3c:52:d8:c1:b2:8f:93:ca:66:45:38:73: 8a:53:35:1c:a2:c0:dc:3f:a2:2f:68:86:21:92:8c: ff:b4:3e:9d:b5:60:c6:00:47:dd:85:52:fa:70:62: 74:7d:8a:2e:28:07:7b:06:df:c4:65:a0:d8:a6:14: 93:f6:c4:9f:f8:d3:38:b2:36:86:54:44:b2:df:32: f1:82:30:0e:d1:65:12:81:a5:ea:36:e5:6e:5e:0c: 7c:84:00:5a:aa:9b:c1:f9:f6:b7:55:f8:de:40:43: 20:05:90:25:50:a7:13:de:9c:e3:a0:9e:93:6c:d0: de:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:87:B4:4F:8C:3E:03:AB:74:68:F4:6C:68:EC:DE:43:28:3A:AE:27 X509v3 Authority Key Identifier: keyid:3A:8A:6A:2E:E5:DC:09:FC:AA:82:FF:01:8F:09:C1:AF:84:B4:11:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:f9:0d:d9:e1:5e:7a:b9:9e:c7:ef:f6:0c:00:5d:0c:87:01: de:cd:5a:a7:2d:d4:40:f3:91:a8:71:92:24:7a:48:4c:42:f7: 48:75:a8:0c:b3:28:9e:3b:7e:7d:85:cf:cd:2b:01:4b:c5:ba: 5a:bc:72:6a:cf:ea:9e:ff:11:97:f3:4e:3e:55:28:ee:d6:73: 26:be:ae:0d:6a:53:97:cf:f9:1e:26:e7:c1:6d:36:ad:b3:c7: 46:fa:85:56:7b:97:b8:cd:25:6d:a5:4c:03:d7:30:42:c0:4a: 7b:52:5a:93:49:e2:80:d5:c4:2f:f8:ec:d7:38:c9:f1:13:80: fb:3b:55:d7:e6:cf:e5:46:ea:dd:34:6a:ab:d0:c2:4c:28:93: 49:cc:43:fd:67:5a:1e:4d:c7:16:70:d4:b1:ee:d7:66:04:b8: 9a:4a:50:ce:82:67:2f:b9:fb:02:5e:ae:d7:e9:1d:70:a6:52: 40:b2:16:db:4b:1d:78:b5:cc:5a:f7:58:23:5d:f8:a1:a4:82: 1b:ab:73:7c:8a:5b:f6:05:16:13:3f:ab:6e:3a:ca:f3:65:b2: 94:c3:31:b9:ad:fc:7a:77:aa:84:4f:47:ae:ff:4c:2f:6f:04: 49:47:03:43:6d:45:20:22:4c:89:01:1b:4d:9e:c0:f9:72:9c: 4a:50:fa:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NDREQxMTAvBgNVBAUTKDNBOEE2QTJFRTVEQzA5RkNBQTgyRkYwMThGMDlDMUFG ODRCNDExOTYwHhcNMjUwNDI1MDIyNTA4WhcNMjUwNTAyMDIyNTA4WjAYMRYwFAYD VQQDEw02ODBhZjI4NC1iMWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy7ZxboJ7S6ptPWESz0u1WpGpiME8DNSXfWK4Z7kAycg5+3e/v+jFoo1fh+Ge G5v8NfYkJgTVDz7F2ZyyCRKq6Zf2R9dBUYColJ0mIFhiBXWEBcdd3PUwZl8+grsr hsR908DXSEMy6aAmTONrk+yiiRFKYBuujaj6Gi6v4xpQ27VYLmzG88Urp648UtjB so+TymZFOHOKUzUcosDcP6IvaIYhkoz/tD6dtWDGAEfdhVL6cGJ0fYouKAd7Bt/E ZaDYphST9sSf+NM4sjaGVESy3zLxgjAO0WUSgaXqNuVuXgx8hABaqpvB+fa3Vfje QEMgBZAlUKcT3pzjoJ6TbNDepQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHGHtE+M PgOrdGj0bGjs3kMoOq4nMB8GA1UdIwQYMBaAFDqKai7l3An8qoL/AY8Jwa+EtBGW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0NERC9GM0JCRTc2RTk2 M0QxMUVEQkUzRkQwMUFDNEY5QUUwMi9Pb3BxTHVYY0NmeXFndjhCanduQnI0UzBF WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09vcHFMdVhjQ2Z5cWd2OEJqd25CcjRTMEVaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0NERC9GM0JCRTc2RTk2M0QxMUVEQkUzRkQwMUFDNEY5QUUwMi9Pb3BxTHVYY0Nm eXFndjhCanduQnI0UzBFWlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAg+Q3Z4V56uZ7H7/YMAF0MhwHezVqnLdRA85GocZIkekhMQvdIdagM syieO359hc/NKwFLxbpavHJqz+qe/xGX804+VSju1nMmvq4NalOXz/keJufBbTat s8dG+oVWe5e4zSVtpUwD1zBCwEp7UlqTSeKA1cQv+OzXOMnxE4D7O1XX5s/lRurd NGqr0MJMKJNJzEP9Z1oeTccWcNSx7tdmBLiaSlDOgmcvufsCXq7X6R1wplJAshbb Sx14tcxa91gjXfihpIIbq3N8ilv2BRYTP6tuOsrzZbKUwzG5rfx6d6qET0eu/0wv bwRJRwNDbUUgIkyJARtNnsD5cpxKUPpl -----END CERTIFICATE-----Generated at Sat Apr 26 12:37:49 2025 by rpki-client