$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.mft File: ogavyWamnnC0ibOPEEg9wfpdPiI.mft (raw, json) Hash identifier: ygeOod9IpfRWWt0s3m685IWt59p6jn8h4ux1bciMmyg= Subject key identifier: 26:25:D8:C4:E8:67:AD:65:95:A8:B1:36:AD:B2:FC:6A:0B:A4:DA:98 Authority key identifier: A2:06:AF:C9:66:A6:9E:70:B4:89:B3:8F:10:48:3D:C1:FA:5D:3E:22 Certificate issuer: /CN=A91E4B6A/serialNumber=A206AFC966A69E70B489B38F10483DC1FA5D3E22 Certificate serial: 03C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogavyWamnnC0ibOPEEg9wfpdPiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.mft Manifest number: 03C3 Signing time: Fri 25 Apr 2025 00:25:13 +0000 Manifest this update: Fri 25 Apr 2025 00:25:13 +0000 Manifest next update: Fri 02 May 2025 00:25:13 +0000 Files and hashes: 1: ogavyWamnnC0ibOPEEg9wfpdPiI.crl (hash: QEIOK2iNO63jVmMcctM721okZCd/6QZaNqTcCENHQvo=) 2: F7335D9484D911EC89E5246EC4F9AE02.roa (hash: zIQCvO1cYT9GDGEyMPF0tBOYTt1JAajUXmcBSrFDxrs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.crl rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogavyWamnnC0ibOPEEg9wfpdPiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:25:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 967 (0x3c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4B6A, serialNumber=A206AFC966A69E70B489B38F10483DC1FA5D3E22 Validity Not Before: Apr 25 00:25:13 2025 GMT Not After : May 2 00:25:13 2025 GMT Subject: CN=680ad669-0589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6a:8a:de:c8:bf:58:08:c7:b3:fb:ca:91:3e: c8:c4:05:11:e7:97:2c:8f:39:db:21:42:a7:5a:c1: 91:05:f2:d6:c3:e3:42:04:5b:7c:9c:53:46:aa:52: eb:84:b7:1d:33:20:42:9d:02:f4:e3:d3:cd:78:4a: 10:68:1d:a4:95:40:7d:b8:76:4d:ba:73:b4:76:9b: 81:d2:7d:0e:22:07:0e:f0:d9:36:3b:a9:dc:d5:70: d1:ad:97:cb:07:00:67:24:4d:c1:eb:64:50:01:b6: ff:bb:8d:de:b9:ee:73:62:d9:dd:a3:3f:c4:ba:a9: 9a:1e:79:61:4f:35:a8:3d:7e:4f:ca:84:7d:97:88: c7:12:68:58:34:d8:ff:c1:0c:5e:d9:0a:00:9c:5f: 8b:84:e9:13:7a:11:a5:d2:06:d1:77:0d:8f:ef:95: 73:ed:0f:fe:b9:4f:eb:24:80:af:b2:07:2b:0e:de: fc:04:4a:ba:17:ce:31:fe:ab:72:2b:55:9f:22:5a: 16:3a:7a:24:de:4d:a9:31:50:7d:c0:4b:a6:89:b7: 6f:5a:10:97:6b:9d:b2:b7:54:d4:c3:d7:39:38:5e: be:d4:31:b9:c9:31:bc:24:80:2a:c0:b1:97:5a:79: e9:31:c8:51:1d:11:ac:45:dd:18:ad:e3:9c:3b:8c: 2a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:25:D8:C4:E8:67:AD:65:95:A8:B1:36:AD:B2:FC:6A:0B:A4:DA:98 X509v3 Authority Key Identifier: keyid:A2:06:AF:C9:66:A6:9E:70:B4:89:B3:8F:10:48:3D:C1:FA:5D:3E:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogavyWamnnC0ibOPEEg9wfpdPiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:e1:f8:20:69:2c:49:09:73:8a:8d:9c:e0:3c:aa:e1:50:28: 95:74:24:08:67:fc:21:76:4e:76:be:37:e6:41:10:16:fb:d5: f5:bc:99:84:a9:f1:7b:28:e2:14:e7:3e:b3:fa:28:19:59:8b: 31:ae:5a:53:3c:3f:b7:46:82:28:ce:4c:18:7b:1f:da:15:77: ef:aa:c9:3b:0c:57:b5:12:fe:15:ff:84:ae:59:18:c3:61:c0: 16:88:2f:c9:7f:ed:59:fb:89:09:59:92:29:92:07:bd:2d:d5: bd:00:f8:ff:64:18:a6:cc:1f:cb:af:41:24:a0:15:1f:6a:cf: 1f:8e:f8:2b:7f:83:26:8d:46:43:dd:63:bc:ed:d1:db:97:cc: 5a:91:5c:3b:c2:6c:4a:00:17:ed:ee:6b:19:56:2c:5f:b6:ed: 1e:58:06:f4:4b:8d:13:83:60:0c:98:67:04:4d:24:cc:e3:db: 3e:2b:ac:e7:00:8a:2b:ce:f7:0a:67:46:a2:93:12:09:45:01: 64:a9:ab:c1:62:89:28:74:20:61:28:f7:4f:7e:43:eb:05:33: ad:dd:5e:72:be:ce:90:59:83:46:62:b8:f4:34:dd:a2:26:07: 7d:af:a9:c2:0f:dd:0c:c1:c7:7a:1c:70:51:99:14:94:04:e2: 6c:2e:52:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRCNkExMTAvBgNVBAUTKEEyMDZBRkM5NjZBNjlFNzBCNDg5QjM4RjEwNDgzREMx RkE1RDNFMjIwHhcNMjUwNDI1MDAyNTEzWhcNMjUwNTAyMDAyNTEzWjAYMRYwFAYD VQQDEw02ODBhZDY2OS0wNTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqGqK3si/WAjHs/vKkT7IxAUR55csjznbIUKnWsGRBfLWw+NCBFt8nFNGqlLr hLcdMyBCnQL049PNeEoQaB2klUB9uHZNunO0dpuB0n0OIgcO8Nk2O6nc1XDRrZfL BwBnJE3B62RQAbb/u43eue5zYtndoz/EuqmaHnlhTzWoPX5PyoR9l4jHEmhYNNj/ wQxe2QoAnF+LhOkTehGl0gbRdw2P75Vz7Q/+uU/rJICvsgcrDt78BEq6F84x/qty K1WfIloWOnok3k2pMVB9wEumibdvWhCXa52yt1TUw9c5OF6+1DG5yTG8JIAqwLGX WnnpMchRHRGsRd0YreOcO4wqnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCYl2MTo Z61llaixNq2y/GoLpNqYMB8GA1UdIwQYMBaAFKIGr8lmpp5wtImzjxBIPcH6XT4i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEI2QS9CNDgxMzM0Mjg0 RDcxMUVDOEUwNzQxNkRDNEY5QUUwMi9vZ2F2eVdhbW5uQzBpYk9QRUVnOXdmcGRQ aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29nYXZ5V2Ftbm5DMGliT1BFRWc5d2ZwZFBpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEI2QS9CNDgxMzM0Mjg0RDcxMUVDOEUwNzQxNkRDNEY5QUUwMi9vZ2F2eVdhbW5u QzBpYk9QRUVnOXdmcGRQaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB84fggaSxJCXOKjZzgPKrhUCiVdCQIZ/whdk52vjfmQRAW+9X1vJmE qfF7KOIU5z6z+igZWYsxrlpTPD+3RoIozkwYex/aFXfvqsk7DFe1Ev4V/4SuWRjD YcAWiC/Jf+1Z+4kJWZIpkge9LdW9APj/ZBimzB/Lr0EkoBUfas8fjvgrf4MmjUZD 3WO87dHbl8xakVw7wmxKABft7msZVixftu0eWAb0S40Tg2AMmGcETSTM49s+K6zn AIorzvcKZ0aikxIJRQFkqavBYokodCBhKPdPfkPrBTOt3V5yvs6QWYNGYrj0NN2i Jgd9r6nCD90Mwcd6HHBRmRSUBOJsLlIY -----END CERTIFICATE-----Generated at Sat Apr 26 14:02:05 2025 by rpki-client