$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft File: oNGf1mnyVeFici98GdiGS7Brc5k.mft (raw, json) Hash identifier: 6i0jSPay//G1G6T5PhqdrBWNghOkpHlND8EHmjVFkrg= Subject key identifier: 4A:25:67:D7:9E:6E:3F:E3:7D:82:2C:EF:94:D6:52:ED:0D:10:F6:AA Authority key identifier: A0:D1:9F:D6:69:F2:55:E1:62:72:2F:7C:19:D8:86:4B:B0:6B:73:99 Certificate issuer: /CN=A91DEC72/serialNumber=A0D19FD669F255E162722F7C19D8864BB06B7399 Certificate serial: 0140 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNGf1mnyVeFici98GdiGS7Brc5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft Manifest number: 013F Signing time: Fri 25 Apr 2025 03:28:08 +0000 Manifest this update: Fri 25 Apr 2025 03:28:07 +0000 Manifest next update: Fri 02 May 2025 03:28:07 +0000 Files and hashes: 1: oNGf1mnyVeFici98GdiGS7Brc5k.crl (hash: pNfe2yVco9/UJrqnQiFFS2uZC/bNexvcYQfVv3q5nvM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.crl rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNGf1mnyVeFici98GdiGS7Brc5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:28:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 320 (0x140) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEC72, serialNumber=A0D19FD669F255E162722F7C19D8864BB06B7399 Validity Not Before: Apr 25 03:28:07 2025 GMT Not After : May 2 03:28:07 2025 GMT Subject: CN=680b0148-fb4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2d:fa:b7:49:5f:71:4d:71:3a:7b:04:97:49: 3a:38:56:8b:50:a2:82:d0:c1:2d:8d:90:05:68:80: 34:4b:97:e7:be:ad:75:a8:33:20:0f:cc:33:77:30: 6c:cf:8f:4f:29:a1:cd:3b:ef:7c:77:b5:29:d2:a3: 21:88:f1:c3:98:cd:ab:04:47:24:ba:0d:e7:27:cb: dd:6d:98:ec:62:68:ce:40:fd:6c:3b:a8:a1:87:fd: 36:90:40:f0:63:e6:d0:ea:32:ab:b9:35:c9:2c:56: 12:be:c6:9c:51:3e:ef:29:9c:91:ee:86:07:05:bd: 83:4f:fa:c0:b8:d6:6f:ad:d0:e5:aa:f2:d8:28:98: 2e:c8:8e:a9:97:01:75:fe:44:58:a3:86:a2:12:48: dc:02:50:c8:dd:dd:cc:74:ae:97:e3:d5:f4:f2:6d: 5d:21:fe:8f:16:33:51:a7:f1:2d:e7:69:07:1e:f1: cf:4a:d1:b0:b0:fa:3e:f5:da:90:ab:10:65:94:0e: 8e:c7:23:c8:de:56:7d:ba:05:2f:2b:06:6d:d3:c5: 48:bf:98:10:b2:1d:d9:be:a5:cf:ab:51:e0:c7:cd: 48:e3:8e:b5:c8:a5:d9:4d:33:68:b6:b0:22:a2:cc: 14:bd:17:67:88:c6:ab:e9:4d:32:6d:47:15:11:1c: 85:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:25:67:D7:9E:6E:3F:E3:7D:82:2C:EF:94:D6:52:ED:0D:10:F6:AA X509v3 Authority Key Identifier: keyid:A0:D1:9F:D6:69:F2:55:E1:62:72:2F:7C:19:D8:86:4B:B0:6B:73:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNGf1mnyVeFici98GdiGS7Brc5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:08:04:98:f7:20:f9:cf:2e:96:dd:79:21:4a:6b:23:73:a4: 7d:e8:b4:9f:32:ba:f5:46:00:32:9a:97:24:12:30:3f:80:b3: cd:be:54:75:d8:90:74:b9:d2:68:bf:92:af:89:29:3a:f9:8e: 9b:ce:06:7d:f2:40:ee:c1:e6:e3:39:1e:88:43:aa:bf:15:51: 42:4a:be:e6:70:1a:4d:cd:a3:0d:e4:de:4b:0d:10:7e:5b:6a: 14:dd:13:01:b0:42:de:eb:ab:7f:92:e8:c9:66:1e:72:5f:ee: 09:3b:67:47:5f:cc:6c:b9:4e:ee:c4:f4:e0:9d:02:2d:ec:b0: 8d:30:3c:63:0a:b3:82:80:14:d6:2c:dd:a9:e7:71:9b:83:9f: 40:ab:f3:b7:ac:a1:3b:17:2e:39:ba:1a:a3:78:81:d2:a1:e6: 2d:e5:8a:ec:33:fb:97:f3:f0:6c:77:00:7e:73:38:97:4f:6b: b6:bd:65:18:55:dc:e5:4d:11:b2:2e:47:4e:b3:89:7d:02:01: 3c:3d:f9:c4:d3:2d:f3:30:0f:31:bd:9e:50:a9:58:75:84:39: 2c:4a:85:3d:b9:5f:7a:9d:e3:f6:ba:3d:f8:1f:b0:de:e3:37: 0f:3c:8a:85:6d:f4:40:aa:de:02:e3:f0:07:93:1b:fb:15:0f: 77:e7:8c:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVDNzIxMTAvBgNVBAUTKEEwRDE5RkQ2NjlGMjU1RTE2MjcyMkY3QzE5RDg4NjRC QjA2QjczOTkwHhcNMjUwNDI1MDMyODA3WhcNMjUwNTAyMDMyODA3WjAYMRYwFAYD VQQDEw02ODBiMDE0OC1mYjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAri36t0lfcU1xOnsEl0k6OFaLUKKC0MEtjZAFaIA0S5fnvq11qDMgD8wzdzBs z49PKaHNO+98d7Up0qMhiPHDmM2rBEckug3nJ8vdbZjsYmjOQP1sO6ihh/02kEDw Y+bQ6jKruTXJLFYSvsacUT7vKZyR7oYHBb2DT/rAuNZvrdDlqvLYKJguyI6plwF1 /kRYo4aiEkjcAlDI3d3MdK6X49X08m1dIf6PFjNRp/Et52kHHvHPStGwsPo+9dqQ qxBllA6OxyPI3lZ9ugUvKwZt08VIv5gQsh3ZvqXPq1Hgx81I4461yKXZTTNotrAi oswUvRdniMar6U0ybUcVERyFRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEolZ9ee bj/jfYIs75TWUu0NEPaqMB8GA1UdIwQYMBaAFKDRn9Zp8lXhYnIvfBnYhkuwa3OZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUM3Mi8zRjcxRkY4ODNC OTExMUVFQUM2MTdFNkFDNEY5QUUwMi9vTkdmMW1ueVZlRmljaTk4R2RpR1M3QnJj NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29OR2YxbW55VmVGaWNpOThHZGlHUzdCcmM1ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUM3Mi8zRjcxRkY4ODNCOTExMUVFQUM2MTdFNkFDNEY5QUUwMi9vTkdmMW1ueVZl RmljaTk4R2RpR1M3QnJjNWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMCASY9yD5zy6W3XkhSmsjc6R96LSfMrr1RgAympckEjA/gLPNvlR1 2JB0udJov5KviSk6+Y6bzgZ98kDuwebjOR6IQ6q/FVFCSr7mcBpNzaMN5N5LDRB+ W2oU3RMBsELe66t/kujJZh5yX+4JO2dHX8xsuU7uxPTgnQIt7LCNMDxjCrOCgBTW LN2p53Gbg59Aq/O3rKE7Fy45uhqjeIHSoeYt5YrsM/uX8/BsdwB+cziXT2u2vWUY VdzlTRGyLkdOs4l9AgE8PfnE0y3zMA8xvZ5QqVh1hDksSoU9uV96neP2uj34H7De 4zcPPIqFbfRAqt4C4/AHkxv7FQ9354wI -----END CERTIFICATE-----Generated at Sat Apr 26 13:38:50 2025 by rpki-client