$ rpki-client -vvf rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.mft File: oLpGLyn4JaQCCWoyzXT3ooy8_uE.mft (raw, json) Hash identifier: HoJ/Q6vASxjfGBM49f4RS9hIRB7RzkvlUsAHYcUKdQc= Subject key identifier: E9:D0:38:0E:57:2C:8A:F7:F8:9F:37:7D:5D:ED:EF:CC:69:95:BA:E7 Authority key identifier: A0:BA:46:2F:29:F8:25:A4:02:09:6A:32:CD:74:F7:A2:8C:BC:FE:E1 Certificate issuer: /CN=A91E43F6/serialNumber=A0BA462F29F825A402096A32CD74F7A28CBCFEE1 Certificate serial: 05C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oLpGLyn4JaQCCWoyzXT3ooy8_uE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.mft Manifest number: 05C3 Signing time: Thu 24 Apr 2025 22:51:20 +0000 Manifest this update: Thu 24 Apr 2025 22:51:19 +0000 Manifest next update: Thu 01 May 2025 22:51:19 +0000 Files and hashes: 1: oLpGLyn4JaQCCWoyzXT3ooy8_uE.crl (hash: 0w7sVOSGtm2U53DGfj9KgC5Vyoo/gvjB/5oLkXvdRjs=) 2: 27560994BA0611EB8B424C22C4F9AE02.roa (hash: pqRxueuRQ9Xk1G5bNOlc+yk8F/47WS7KRa617CuzluU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.crl rsync://rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oLpGLyn4JaQCCWoyzXT3ooy8_uE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:51:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1480 (0x5c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E43F6, serialNumber=A0BA462F29F825A402096A32CD74F7A28CBCFEE1 Validity Not Before: Apr 24 22:51:19 2025 GMT Not After : May 1 22:51:19 2025 GMT Subject: CN=680ac068-e15f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a6:d1:db:36:60:25:e6:6a:29:72:00:2a:3a: c8:ee:a7:4b:e6:3f:a4:a2:b8:df:1f:86:17:6d:67: 03:87:59:c3:c7:99:1a:f0:0c:4f:15:f1:c6:44:fa: fb:29:2e:3a:98:98:54:d1:70:6f:ea:ef:d5:cf:5c: 18:8c:71:aa:e9:68:05:92:3b:f3:80:44:32:72:78: 3a:10:f8:02:36:ef:57:a9:be:54:e7:5e:c9:3f:74: 1b:fd:7f:a9:af:c8:23:74:9a:84:11:f3:80:c2:5c: 52:61:db:92:c5:32:72:f8:66:a6:c3:cb:fa:93:d7: 39:b2:8b:6e:9a:24:16:1f:d1:b0:47:34:37:89:d8: 6b:09:3f:94:59:1d:bd:c9:a5:1a:28:73:a6:2c:b3: c9:8c:32:9f:21:42:97:f3:fe:92:5d:54:37:bc:1a: c0:03:24:e0:e8:e9:d8:a3:9c:64:e1:67:85:d2:cc: 21:67:45:5c:84:93:a6:aa:62:bb:65:0d:c4:fe:35: d3:37:42:df:9c:0c:44:8e:61:d8:5b:a1:b9:c5:4a: 1b:e2:2f:b9:8a:c8:0e:5c:e9:23:0e:c1:3b:c3:71: 5c:84:9a:bd:9c:ab:bd:52:dd:15:77:65:21:ca:6e: d0:a5:4b:87:87:d8:80:ae:6a:73:5a:3e:13:57:ce: ef:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:D0:38:0E:57:2C:8A:F7:F8:9F:37:7D:5D:ED:EF:CC:69:95:BA:E7 X509v3 Authority Key Identifier: keyid:A0:BA:46:2F:29:F8:25:A4:02:09:6A:32:CD:74:F7:A2:8C:BC:FE:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oLpGLyn4JaQCCWoyzXT3ooy8_uE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:b5:ba:4e:9b:af:e9:4f:86:00:a9:68:7b:d1:61:22:0d:80: 20:40:a8:5d:cf:28:0a:40:60:7b:65:2b:22:57:d6:39:8d:f2: f9:37:cf:8a:19:6b:af:72:3a:ce:45:d0:54:bf:66:d2:24:cb: f9:ba:e4:99:85:b4:67:2e:5a:cc:d0:13:8e:66:94:ac:2a:46: 11:c0:9f:c1:49:f8:76:30:45:47:46:7c:b1:ae:c9:6c:e3:46: 0a:4d:db:a7:52:12:87:dd:84:d6:d9:80:e6:54:07:07:2b:9c: 92:f3:62:7a:76:56:f9:88:28:ef:63:d6:5d:7c:2a:90:db:25: a1:62:69:f9:3b:97:96:30:a9:ca:aa:95:35:92:f6:ea:c4:1a: 57:cc:07:d5:9a:b0:57:10:02:4f:18:38:a0:9c:4d:f0:a1:c6: f1:5b:42:f5:5e:0d:dd:1c:6a:e6:c5:3d:94:09:6c:a2:90:b8: b4:00:14:ec:0c:40:fe:b0:8e:aa:5a:97:50:9a:b5:25:8f:57: 01:49:f7:d5:c6:39:0c:df:3f:ee:d9:8b:f9:7b:a0:6a:61:68: 83:28:c3:8e:02:b1:06:03:46:6d:f6:d0:e6:b2:b8:25:f1:9d: 5a:07:2a:ed:e8:62:43:18:0b:a9:c7:f7:f9:23:4d:a3:1a:85: 5b:b5:f7:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQzRjYxMTAvBgNVBAUTKEEwQkE0NjJGMjlGODI1QTQwMjA5NkEzMkNENzRGN0Ey OENCQ0ZFRTEwHhcNMjUwNDI0MjI1MTE5WhcNMjUwNTAxMjI1MTE5WjAYMRYwFAYD VQQDEw02ODBhYzA2OC1lMTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArabR2zZgJeZqKXIAKjrI7qdL5j+korjfH4YXbWcDh1nDx5ka8AxPFfHGRPr7 KS46mJhU0XBv6u/Vz1wYjHGq6WgFkjvzgEQycng6EPgCNu9Xqb5U517JP3Qb/X+p r8gjdJqEEfOAwlxSYduSxTJy+Gamw8v6k9c5sotumiQWH9GwRzQ3idhrCT+UWR29 yaUaKHOmLLPJjDKfIUKX8/6SXVQ3vBrAAyTg6OnYo5xk4WeF0swhZ0VchJOmqmK7 ZQ3E/jXTN0LfnAxEjmHYW6G5xUob4i+5isgOXOkjDsE7w3FchJq9nKu9Ut0Vd2Uh ym7QpUuHh9iArmpzWj4TV87vZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOnQOA5X LIr3+J83fV3t78xplbrnMB8GA1UdIwQYMBaAFKC6Ri8p+CWkAglqMs1096KMvP7h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDNGNi8yRDJGMjE4NkJB MDQxMUVCOTdGNUI0MUZDNEY5QUUwMi9vTHBHTHluNEphUUNDV295elhUM29veThf dUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29McEdMeW40SmFRQ0NXb3l6WFQzb295OF91RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDNGNi8yRDJGMjE4NkJBMDQxMUVCOTdGNUI0MUZDNEY5QUUwMi9vTHBHTHluNEph UUNDV295elhUM29veThfdUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBtbpOm6/pT4YAqWh70WEiDYAgQKhdzygKQGB7ZSsiV9Y5jfL5N8+K GWuvcjrORdBUv2bSJMv5uuSZhbRnLlrM0BOOZpSsKkYRwJ/BSfh2MEVHRnyxrsls 40YKTdunUhKH3YTW2YDmVAcHK5yS82J6dlb5iCjvY9ZdfCqQ2yWhYmn5O5eWMKnK qpU1kvbqxBpXzAfVmrBXEAJPGDignE3wocbxW0L1Xg3dHGrmxT2UCWyikLi0ABTs DED+sI6qWpdQmrUlj1cBSffVxjkM3z/u2Yv5e6BqYWiDKMOOArEGA0Zt9tDmsrgl 8Z1aByrt6GJDGAupx/f5I02jGoVbtfej -----END CERTIFICATE-----Generated at Sat Apr 26 14:54:50 2025 by rpki-client