$ rpki-client -vvf rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft File: oUygeMheRlNdkgQ4K4SXTxOwyTw.mft (raw, json) Hash identifier: PHiKJ8+1bpTmhjpQZwhVEjMaoonUv1fNwhmRXZf+fmo= Subject key identifier: B8:49:91:7E:A0:BD:73:0D:3A:B7:8F:C0:53:43:F5:BA:0F:F6:CE:8C Authority key identifier: A1:4C:A0:78:C8:5E:46:53:5D:92:04:38:2B:84:97:4F:13:B0:C9:3C Certificate issuer: /CN=A91E83FE/serialNumber=A14CA078C85E46535D9204382B84974F13B0C93C Certificate serial: 04DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft Manifest number: 04D0 Signing time: Thu 24 Apr 2025 23:36:15 +0000 Manifest this update: Thu 24 Apr 2025 23:36:14 +0000 Manifest next update: Thu 01 May 2025 23:36:14 +0000 Files and hashes: 1: oUygeMheRlNdkgQ4K4SXTxOwyTw.crl (hash: wfGGsnjQSJE35XCpEZE2Q71D1QYZG4sXvJNLI7gkqwI=) 2: B90B58FCD97211ED8C2F1263C4F9AE02.roa (hash: Uv/DIuVOqvX05vXkqfaNSYJYxyqVmNJFQQZ426t0Ang=) 3: B9D90E00606311EE8844F941C4F9AE02.roa (hash: X2R7fBr7byP7M3KR3cBhw+xawX2t49iSaQy5emSoxD4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.crl rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:36:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1243 (0x4db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E83FE, serialNumber=A14CA078C85E46535D9204382B84974F13B0C93C Validity Not Before: Apr 24 23:36:14 2025 GMT Not After : May 1 23:36:14 2025 GMT Subject: CN=680acaef-4a77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ab:05:99:db:e1:4e:83:8a:6b:12:94:ab:3f: 21:db:b3:c3:c3:6b:d9:62:bb:77:b6:4b:f2:3f:7e: 35:ec:54:22:2a:d4:77:db:33:a5:4e:b3:dd:75:09: 35:19:a5:59:1e:ae:9a:ed:22:5a:82:97:a4:0b:50: f1:4b:27:7a:f4:06:c2:05:35:45:9c:82:c4:d0:f1: ab:4e:47:7a:30:a8:e3:8d:55:c5:07:34:2a:20:59: 47:32:0c:6f:cb:5c:12:67:a0:16:5b:28:70:d8:b7: 92:cd:9b:14:18:0a:ad:62:3d:85:16:4f:f9:2c:e5: 52:f3:c5:b3:87:65:39:f0:e5:b6:f9:66:34:cd:29: 45:65:0c:cb:0d:e7:73:7a:a3:09:66:c3:fc:44:51: fe:2f:d2:50:bb:51:f3:d3:46:78:62:22:92:82:94: 05:2a:3c:f2:0b:b9:3c:af:cb:25:df:51:e0:ab:66: 0a:b2:26:1e:01:3d:d4:c8:ab:91:cb:25:78:df:a0: 5b:65:a0:56:be:54:47:87:b7:68:0d:04:be:8f:ce: b4:6b:85:67:c0:70:71:65:3c:65:83:ca:00:23:e6: 42:06:9a:2b:6e:bb:c5:49:7f:a8:7a:96:75:bf:bb: 36:74:f5:c8:0d:d6:bc:91:e6:00:9c:74:14:69:e9: 6f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:49:91:7E:A0:BD:73:0D:3A:B7:8F:C0:53:43:F5:BA:0F:F6:CE:8C X509v3 Authority Key Identifier: keyid:A1:4C:A0:78:C8:5E:46:53:5D:92:04:38:2B:84:97:4F:13:B0:C9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:6d:af:12:c3:10:43:99:e6:1a:0b:00:db:b2:73:42:39:8d: c0:d7:74:33:13:74:b7:5c:c5:45:2c:52:6f:82:62:3f:c4:48: 02:21:1a:35:cb:1e:b0:2a:c4:54:5d:6a:83:db:98:9d:bb:40: f4:d8:57:dc:27:b0:54:90:06:ed:70:71:ee:76:af:24:ec:28: cf:67:46:a2:ae:45:e8:03:24:7a:e1:20:dd:1c:40:88:ab:05: 13:de:2c:0b:8b:02:72:12:ea:fd:25:5c:1d:a9:91:d5:05:05: 00:18:8b:bc:8f:f5:09:70:3a:ea:a5:aa:dd:9a:f3:c2:5e:4d: e7:eb:a7:37:0b:c9:fd:f6:9d:20:14:b5:97:a9:0c:17:93:4f: df:e6:ac:fa:e9:c1:65:eb:c1:0f:e0:5d:c9:c8:0b:0d:0d:37: 7c:2b:c2:75:5e:8f:86:e5:84:ba:b1:88:ac:f4:e5:a1:45:61: 48:97:93:c4:2e:9f:c6:eb:ac:89:7d:ff:dd:1e:a9:4b:4e:11: 24:60:90:03:76:b9:05:05:4d:70:35:10:3d:35:29:70:11:5d: 5b:a2:31:42:86:2d:86:c5:39:34:d3:24:76:9f:a1:59:93:04: c7:6a:4a:27:d6:75:c4:b5:23:cb:87:86:f7:23:bb:aa:e7:1a: 1f:63:f1:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgzRkUxMTAvBgNVBAUTKEExNENBMDc4Qzg1RTQ2NTM1RDkyMDQzODJCODQ5NzRG MTNCMEM5M0MwHhcNMjUwNDI0MjMzNjE0WhcNMjUwNTAxMjMzNjE0WjAYMRYwFAYD VQQDEw02ODBhY2FlZi00YTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvasFmdvhToOKaxKUqz8h27PDw2vZYrt3tkvyP3417FQiKtR32zOlTrPddQk1 GaVZHq6a7SJagpekC1DxSyd69AbCBTVFnILE0PGrTkd6MKjjjVXFBzQqIFlHMgxv y1wSZ6AWWyhw2LeSzZsUGAqtYj2FFk/5LOVS88Wzh2U58OW2+WY0zSlFZQzLDedz eqMJZsP8RFH+L9JQu1Hz00Z4YiKSgpQFKjzyC7k8r8sl31Hgq2YKsiYeAT3UyKuR yyV436BbZaBWvlRHh7doDQS+j860a4VnwHBxZTxlg8oAI+ZCBporbrvFSX+oepZ1 v7s2dPXIDda8keYAnHQUaelv6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLhJkX6g vXMNOrePwFND9boP9s6MMB8GA1UdIwQYMBaAFKFMoHjIXkZTXZIEOCuEl08TsMk8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODNGRS8zMjk1RjkwMjFE QjMxMUVDODZFMDg2M0VDNEY5QUUwMi9vVXlnZU1oZVJsTmRrZ1E0SzRTWFR4T3d5 VHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29VeWdlTWhlUmxOZGtnUTRLNFNYVHhPd3lUdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODNGRS8zMjk1RjkwMjFEQjMxMUVDODZFMDg2M0VDNEY5QUUwMi9vVXlnZU1oZVJs TmRrZ1E0SzRTWFR4T3d5VHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXba8SwxBDmeYaCwDbsnNCOY3A13QzE3S3XMVFLFJvgmI/xEgCIRo1 yx6wKsRUXWqD25idu0D02FfcJ7BUkAbtcHHudq8k7CjPZ0airkXoAyR64SDdHECI qwUT3iwLiwJyEur9JVwdqZHVBQUAGIu8j/UJcDrqpardmvPCXk3n66c3C8n99p0g FLWXqQwXk0/f5qz66cFl68EP4F3JyAsNDTd8K8J1Xo+G5YS6sYis9OWhRWFIl5PE Lp/G66yJff/dHqlLThEkYJADdrkFBU1wNRA9NSlwEV1bojFChi2GxTk00yR2n6FZ kwTHakon1nXEtSPLh4b3I7uq5xofY/Ev -----END CERTIFICATE-----Generated at Sat Apr 26 14:05:47 2025 by rpki-client