$ rpki-client -vvf rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft File: OSQdwqlJIur_mC2bQID4vkD3tr0.mft (raw, json) Hash identifier: SUh8RHZMwExWCEzOZQIY3Subl7n6TQCOQG11/F9ozFc= Subject key identifier: AB:D5:F7:ED:8A:8D:1E:F7:85:A4:87:C9:BB:49:85:F8:D3:3A:EF:E9 Authority key identifier: 39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD Certificate issuer: /CN=A91E17F3/serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft Manifest number: 1A Signing time: Fri 25 Apr 2025 06:57:38 +0000 Manifest this update: Fri 25 Apr 2025 06:57:38 +0000 Manifest next update: Fri 02 May 2025 06:57:38 +0000 Files and hashes: 1: OSQdwqlJIur_mC2bQID4vkD3tr0.crl (hash: BA9sqfghsxfcd+Qrdsl48hicd3yHMfsc2ANijhfWYA4=) 2: C565FFE0025011F0ACBE181CC4F9AE02.roa (hash: /AkxNQvclEOTbcMEyripKFhKBkJQiQZpl8ngTKJu9eY=) 3: 7B3E74A6025011F096E34819C4F9AE02.roa (hash: WR0rb26sSd7NNnmbaBSVENCtgD1Go/mwg9p/vOPLcpI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:57:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E17F3, serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD Validity Not Before: Apr 25 06:57:38 2025 GMT Not After : May 2 06:57:38 2025 GMT Subject: CN=680b3262-e6af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:82:d5:85:b6:71:ad:a6:a7:33:61:0b:54:19: c1:65:7b:2f:7b:67:12:1c:3b:cc:16:58:99:6f:b5: c2:49:39:63:0a:55:8a:3d:81:03:f9:ad:5a:e4:4b: 81:24:d7:b7:1a:1f:bb:de:ce:72:e5:41:81:94:68: 99:57:86:c9:8f:c9:64:9e:b4:82:88:b4:c4:52:b7: b5:36:fc:3c:c9:9b:4d:7c:e6:bf:8c:a7:52:c4:78: bc:88:9e:8e:df:82:a5:b6:02:29:ac:95:f7:ab:0c: 7f:4f:5a:7a:fc:ea:5a:1e:62:cb:4a:fc:da:b3:87: 1e:36:02:1c:4c:a5:de:6a:6c:4a:ab:c6:67:0f:d8: 07:ec:56:03:f9:05:f0:56:af:11:de:3d:2c:56:05: 9b:4b:b1:84:f6:f7:b9:e7:9c:77:30:73:6b:ff:d0: 49:f7:b4:0a:17:e0:90:6c:7e:3f:d4:dd:eb:86:0e: 67:68:0b:b9:c5:49:2e:a1:58:5a:ae:f0:16:d6:d2: 76:41:f7:47:63:19:fa:91:27:cf:ed:ac:1d:47:3a: 0d:11:07:6b:05:f6:98:16:ed:d4:8f:ea:1a:9e:23: 26:cf:f2:44:5b:43:d2:f8:73:91:51:af:67:59:04: 58:1c:48:06:67:2a:81:2f:6a:e3:d8:8f:0b:13:5f: d2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:D5:F7:ED:8A:8D:1E:F7:85:A4:87:C9:BB:49:85:F8:D3:3A:EF:E9 X509v3 Authority Key Identifier: keyid:39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:7f:06:bd:99:6b:51:c1:9b:8b:cd:82:08:35:2e:39:f9:af: 4f:f6:1e:1f:2c:86:b2:3b:ff:42:59:a1:42:24:03:a4:aa:52: 47:0e:2e:d2:53:a7:f6:73:17:52:e4:38:15:2c:2f:6e:9a:28: 49:01:59:18:31:51:c1:e4:e4:c7:c9:f1:66:34:9d:d0:fd:4d: 52:6a:ff:9c:35:ab:a7:ce:e2:45:3d:1a:37:4c:60:ad:e0:4e: ab:28:8f:9b:4c:6c:70:4f:f2:74:5b:9a:e9:c0:58:e6:70:d2: a8:76:0b:41:5e:82:f7:3f:85:d0:56:e4:01:01:86:b6:b4:38: 49:05:df:2e:f7:b5:d7:7d:e3:51:55:1d:c6:25:3d:59:c6:d2: ff:4e:ad:99:3d:50:d1:af:88:11:db:c0:31:52:54:d8:ef:3b: ec:7b:15:91:03:05:51:6d:75:4f:a1:36:a1:3e:ad:59:b8:38: 32:44:9c:89:3f:fc:50:89:42:db:ee:22:be:07:6d:14:57:d8: 88:59:41:28:65:f6:f7:85:dd:84:ad:4d:6e:27:67:8a:3c:1e: 8d:33:3e:76:b2:77:a5:d3:d3:27:0d:2a:ef:ad:ca:6c:0e:68: b3:ae:d8:2e:bc:75:e4:d8:82:7e:db:4c:32:4e:b7:65:45:99: 07:bf:8c:0b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MTdGMzExMC8GA1UEBRMoMzkyNDFEQzJBOTQ5MjJFQUZGOTgyRDlCNDA4MEY4QkU0 MEY3QjZCRDAeFw0yNTA0MjUwNjU3MzhaFw0yNTA1MDIwNjU3MzhaMBgxFjAUBgNV BAMTDTY4MGIzMjYyLWU2YWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD0gtWFtnGtpqczYQtUGcFley97ZxIcO8wWWJlvtcJJOWMKVYo9gQP5rVrkS4Ek 17caH7veznLlQYGUaJlXhsmPyWSetIKItMRSt7U2/DzJm0185r+Mp1LEeLyIno7f gqW2AimslferDH9PWnr86loeYstK/Nqzhx42AhxMpd5qbEqrxmcP2AfsVgP5BfBW rxHePSxWBZtLsYT297nnnHcwc2v/0En3tAoX4JBsfj/U3euGDmdoC7nFSS6hWFqu 8BbW0nZB90djGfqRJ8/trB1HOg0RB2sF9pgW7dSP6hqeIybP8kRbQ9L4c5FRr2dZ BFgcSAZnKoEvauPYjwsTX9LhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUq9X37YqN HveFpIfJu0mF+NM67+kwHwYDVR0jBBgwFoAUOSQdwqlJIur/mC2bQID4vkD3tr0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxN0YzLzlBOUZCOEYyRkZF QzExRUZCRjU1QkI2RkM0RjlBRTAyL09TUWR3cWxKSXVyX21DMmJRSUQ0dmtEM3Ry MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT1NRZHdxbEpJdXJfbUMyYlFJRDR2a0QzdHIwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx N0YzLzlBOUZCOEYyRkZFQzExRUZCRjU1QkI2RkM0RjlBRTAyL09TUWR3cWxKSXVy X21DMmJRSUQ0dmtEM3RyMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGV/Br2Za1HBm4vNggg1Ljn5r0/2Hh8shrI7/0JZoUIkA6SqUkcOLtJT p/ZzF1LkOBUsL26aKEkBWRgxUcHk5MfJ8WY0ndD9TVJq/5w1q6fO4kU9GjdMYK3g Tqsoj5tMbHBP8nRbmunAWOZw0qh2C0Fegvc/hdBW5AEBhra0OEkF3y73tdd941FV HcYlPVnG0v9OrZk9UNGviBHbwDFSVNjvO+x7FZEDBVFtdU+hNqE+rVm4ODJEnIk/ /FCJQtvuIr4HbRRX2IhZQShl9veF3YStTW4nZ4o8Ho0zPnayd6XT0ycNKu+tymwO aLOu2C68deTYgn7bTDJOt2VFmQe/jAs= -----END CERTIFICATE-----Generated at Sat Apr 26 12:23:01 2025 by rpki-client