$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.mft File: oAM_SUNjDclOLd9fKmuI6GZGGuc.mft (raw, json) Hash identifier: 84zh0AC/SXQHibub2pjlJ2mZSSLXqiN+KtfcgnzI74k= Subject key identifier: BD:0B:F7:C6:B5:F8:61:3F:07:ED:D9:1D:54:58:8B:DF:27:75:CC:FD Authority key identifier: A0:03:3F:49:43:63:0D:C9:4E:2D:DF:5F:2A:6B:88:E8:66:46:1A:E7 Certificate issuer: /CN=A91DC0F2/serialNumber=A0033F4943630DC94E2DDF5F2A6B88E866461AE7 Certificate serial: C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oAM_SUNjDclOLd9fKmuI6GZGGuc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.mft Manifest number: C4 Signing time: Sun 27 Apr 2025 04:43:51 +0000 Manifest this update: Sun 27 Apr 2025 04:43:51 +0000 Manifest next update: Sun 04 May 2025 04:43:51 +0000 Files and hashes: 1: oAM_SUNjDclOLd9fKmuI6GZGGuc.crl (hash: qHumkvYD/YspEAoJOzYwv2+4e1Ni3676d6l6vZU5na0=) 2: EE647C1418A411EFBA690F60C4F9AE02.roa (hash: 1sKQhDe4XE+z/iEwFOdjuVVtLfzSNo7ytvziBnxPEOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.crl rsync://rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oAM_SUNjDclOLd9fKmuI6GZGGuc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 04:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC0F2, serialNumber=A0033F4943630DC94E2DDF5F2A6B88E866461AE7 Validity Not Before: Apr 27 04:43:51 2025 GMT Not After : May 4 04:43:51 2025 GMT Subject: CN=680db607-f927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1d:ef:4d:2a:b1:6d:aa:52:6a:51:71:56:e8: 4f:df:8e:66:ab:d0:d9:2b:0a:b9:ff:54:4d:9e:e2: f1:e5:77:54:12:b4:9e:a7:1a:eb:c2:53:65:68:e5: 9b:00:51:96:6c:1b:19:1b:aa:4a:b5:45:ef:a6:78: 2a:db:20:11:52:c7:ef:71:67:af:79:70:ea:69:a3: 12:2b:c2:a0:05:6c:58:4a:47:19:a8:8b:e6:68:2c: 15:43:d2:f2:64:e9:01:9f:3b:7a:25:ec:0e:a1:1d: c5:10:ec:11:e0:a4:fa:ec:e8:a7:72:be:68:cc:4a: 97:50:b2:51:0b:db:5b:93:ca:99:18:61:dc:c8:62: 48:0a:5b:f1:7c:a7:74:18:8f:fb:44:5b:07:d1:ae: 4c:1d:40:18:b1:16:f1:2c:fe:5e:e4:e0:8a:b2:31: 8a:78:e1:b9:cf:c0:9d:c6:41:27:aa:09:c6:c6:89: a2:b1:ad:63:1b:2f:f9:5c:d0:08:7a:91:01:22:e8: f5:ef:2c:93:7f:94:a2:8f:df:e6:0e:ec:e3:b2:b5: 01:12:72:7f:66:f5:9d:93:d5:d7:92:a9:6d:0b:63: 20:35:be:a6:b1:76:50:4c:84:de:2c:99:22:94:5d: 00:79:fc:fd:e8:e6:62:69:33:26:56:ed:56:b6:6c: 55:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:0B:F7:C6:B5:F8:61:3F:07:ED:D9:1D:54:58:8B:DF:27:75:CC:FD X509v3 Authority Key Identifier: keyid:A0:03:3F:49:43:63:0D:C9:4E:2D:DF:5F:2A:6B:88:E8:66:46:1A:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oAM_SUNjDclOLd9fKmuI6GZGGuc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:74:0b:9a:2d:df:ab:ae:84:37:44:02:f1:6f:21:a2:2f:3e: ed:af:5a:f2:8f:a6:d1:6d:24:f0:3b:71:17:36:da:e0:6a:78: b9:87:df:3b:58:d8:59:cf:18:d5:29:59:43:98:6b:61:96:ad: 44:ca:fa:cb:31:c4:7a:8c:2a:de:40:eb:4b:d9:25:b8:6e:98: c0:e6:b8:94:c4:16:ac:86:c8:05:cb:30:e2:95:db:f3:5a:2a: dc:54:c9:4b:b5:46:c4:39:56:9e:e7:43:35:f1:7b:6b:cd:ac: de:03:d9:78:38:c6:2e:97:7e:38:f6:04:32:8b:d3:3a:c1:27: 47:ad:ae:cc:ee:3d:cd:1d:6f:59:56:4b:8b:4c:18:12:a9:54: d2:07:25:64:5c:7d:d8:c0:17:0a:0c:40:cd:79:e8:54:06:ae: 5e:7d:cc:26:b2:de:14:0c:ba:55:c8:72:fe:9b:12:6f:47:70: 5b:b0:8b:ef:2e:76:4e:0c:aa:d2:4e:5e:de:7a:a0:57:03:2f: 29:2c:49:bd:cf:3e:a6:1d:8d:b4:59:6b:c1:9c:7f:c7:33:3c: 10:f3:af:e1:8b:6a:b5:e1:c5:aa:81:c3:12:bc:51:9d:4f:dd: b5:89:71:66:3f:a3:3f:7a:4a:b5:5f:40:71:7d:3f:66:25:ce: 6e:42:bd:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwRjIxMTAvBgNVBAUTKEEwMDMzRjQ5NDM2MzBEQzk0RTJEREY1RjJBNkI4OEU4 NjY0NjFBRTcwHhcNMjUwNDI3MDQ0MzUxWhcNMjUwNTA0MDQ0MzUxWjAYMRYwFAYD VQQDEw02ODBkYjYwNy1mOTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqh3vTSqxbapSalFxVuhP345mq9DZKwq5/1RNnuLx5XdUErSepxrrwlNlaOWb AFGWbBsZG6pKtUXvpngq2yARUsfvcWeveXDqaaMSK8KgBWxYSkcZqIvmaCwVQ9Ly ZOkBnzt6JewOoR3FEOwR4KT67Oincr5ozEqXULJRC9tbk8qZGGHcyGJIClvxfKd0 GI/7RFsH0a5MHUAYsRbxLP5e5OCKsjGKeOG5z8CdxkEnqgnGxomisa1jGy/5XNAI epEBIuj17yyTf5Sij9/mDuzjsrUBEnJ/ZvWdk9XXkqltC2MgNb6msXZQTITeLJki lF0Aefz96OZiaTMmVu1WtmxV4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL0L98a1 +GE/B+3ZHVRYi98ndcz9MB8GA1UdIwQYMBaAFKADP0lDYw3JTi3fXypriOhmRhrn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzBGMi83RjMzRUUyNEZE N0UxMUVFQTFCMzUzNUNDNEY5QUUwMi9vQU1fU1VOakRjbE9MZDlmS211STZHWkdH dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29BTV9TVU5qRGNsT0xkOWZLbXVJNkdaR0d1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzBGMi83RjMzRUUyNEZEN0UxMUVFQTFCMzUzNUNDNEY5QUUwMi9vQU1fU1VOakRj bE9MZDlmS211STZHWkdHdWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCdAuaLd+rroQ3RALxbyGiLz7tr1ryj6bRbSTwO3EXNtrgani5h987 WNhZzxjVKVlDmGthlq1EyvrLMcR6jCreQOtL2SW4bpjA5riUxBashsgFyzDildvz WircVMlLtUbEOVae50M18XtrzazeA9l4OMYul3449gQyi9M6wSdHra7M7j3NHW9Z VkuLTBgSqVTSByVkXH3YwBcKDEDNeehUBq5efcwmst4UDLpVyHL+mxJvR3BbsIvv LnZODKrSTl7eeqBXAy8pLEm9zz6mHY20WWvBnH/HMzwQ86/hi2q14cWqgcMSvFGd T921iXFmP6M/ekq1X0BxfT9mJc5uQr0S -----END CERTIFICATE-----Generated at Sun Apr 27 16:48:32 2025 by rpki-client