$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft File: OG9viqHmbFJU6h5HiIwQP0U2Iio.mft (raw, json) Hash identifier: U2EAsy8cMa31PYnwNiOQjbE1ZGszrgv5Gxtjaa+d8mc= Subject key identifier: CB:5F:F3:43:50:33:7E:F6:D4:57:6E:40:04:1C:FB:83:19:66:89:7B Authority key identifier: 38:6F:6F:8A:A1:E6:6C:52:54:EA:1E:47:88:8C:10:3F:45:36:22:2A Certificate issuer: /CN=A91EB077/serialNumber=386F6F8AA1E66C5254EA1E47888C103F4536222A Certificate serial: 1A72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft Manifest number: 1A3C Signing time: Thu 24 Apr 2025 16:22:01 +0000 Manifest this update: Thu 24 Apr 2025 16:22:00 +0000 Manifest next update: Thu 01 May 2025 16:22:00 +0000 Files and hashes: 1: OG9viqHmbFJU6h5HiIwQP0U2Iio.crl (hash: PWAaOQCvG5qlw9iT4UMtLGlN0H4HBNWzZzfrAqhFm8w=) 2: 6C897E54597B11EDB603273AC4F9AE02.roa (hash: tECuYiObkHM8+lQ9pAL6rPX0WAXD3+sDD+oT9RLjEFY=) 3: 6E44CE88597B11EDB603273AC4F9AE02.roa (hash: uSAHzBc+YHmREVNWY2QOkLWbks+7w1YPJ8vpHREo1FM=) 4: 63B4F05E482611E7ABDEF831C4F9AE02.roa (hash: UvxhutC//RajTrYueD0iUFQneJ/UQC0+drD5TAjJyFQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.crl rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:22:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6770 (0x1a72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB077, serialNumber=386F6F8AA1E66C5254EA1E47888C103F4536222A Validity Not Before: Apr 24 16:22:00 2025 GMT Not After : May 1 16:22:00 2025 GMT Subject: CN=680a6528-330a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8d:11:9e:b5:17:01:0e:9a:32:cc:ee:17:f7: ca:19:b0:f7:1d:71:88:24:d9:a1:1c:04:9a:63:7a: cb:25:e3:cd:8f:b1:8e:60:bc:00:fd:41:1a:a4:6f: ed:5b:20:20:22:1a:b1:46:51:22:95:78:61:ba:ca: f1:08:22:f6:74:18:1b:1b:5f:9b:fc:95:5b:f2:4f: b5:bc:78:7f:00:d7:ec:32:c2:53:0e:2a:10:d0:40: f8:0d:d6:34:25:a6:80:47:25:f4:a0:7b:35:28:6a: 9e:9c:67:97:ce:86:10:ca:c5:0b:e7:61:9b:89:22: ac:83:3b:9e:b0:88:b3:4f:0f:aa:0e:9b:34:1e:31: 21:61:59:7a:1b:ca:4e:15:45:7c:5e:2b:db:4a:44: 5a:98:a2:1b:2c:51:2c:9c:c9:58:87:17:df:cc:45: f3:1e:15:5d:d5:1a:39:65:92:83:4b:9b:f1:e8:f0: 1a:a2:3a:90:fa:85:db:10:ce:64:e5:19:0e:72:58: 46:37:42:b5:58:98:57:0c:42:cb:ca:f1:96:ad:96: 97:cc:36:48:8f:c5:9b:f0:83:38:7f:8a:cb:5c:1e: 19:b2:33:7c:12:fc:0e:83:ee:15:7e:ce:98:c5:65: 22:6d:e1:f0:78:68:9c:df:47:50:6f:33:46:5d:77: 64:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:5F:F3:43:50:33:7E:F6:D4:57:6E:40:04:1C:FB:83:19:66:89:7B X509v3 Authority Key Identifier: keyid:38:6F:6F:8A:A1:E6:6C:52:54:EA:1E:47:88:8C:10:3F:45:36:22:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:13:e9:62:fb:ab:e0:da:b7:eb:d5:70:8e:dd:4a:55:f3:6b: df:aa:06:e7:2b:64:1c:73:a6:56:b4:9f:11:3a:2d:a6:ae:6f: a3:6d:3e:4f:0b:e3:63:e3:e4:b2:ff:40:10:9f:14:3b:33:9b: b9:7f:be:ac:c9:95:c4:f9:2d:b1:04:bc:78:04:ea:28:5d:2c: 13:2b:59:ae:8b:17:6d:17:f1:be:e8:c6:66:4a:86:73:1b:d7: 2d:21:08:96:23:fc:b7:e3:86:df:a6:49:e4:66:1a:46:9f:2b: a1:72:f1:c8:82:ae:fe:9b:29:0c:c3:3e:a3:3e:9b:77:53:4b: a8:6a:45:95:57:4e:24:93:ea:20:7a:3f:76:a0:7e:ac:a1:b5: be:a4:7f:81:80:ef:8e:9a:39:a3:17:0d:bd:5c:33:ec:19:ba: 3a:d0:1a:3d:0f:3e:85:1f:fb:5c:55:32:c9:70:c8:ce:8f:5e: a8:31:0c:98:12:8a:a9:f8:d5:1b:99:98:60:da:97:77:52:93: 7a:ef:e8:33:ae:78:00:87:60:dc:a9:86:3a:b0:6a:48:60:52: 84:b8:d8:c4:48:59:18:82:52:7d:66:75:74:95:f9:d4:be:14: dd:e1:4d:8f:47:cc:65:99:97:da:60:4d:54:7d:2d:37:7e:39: 46:2c:e2:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIwNzcxMTAvBgNVBAUTKDM4NkY2RjhBQTFFNjZDNTI1NEVBMUU0Nzg4OEMxMDNG NDUzNjIyMkEwHhcNMjUwNDI0MTYyMjAwWhcNMjUwNTAxMTYyMjAwWjAYMRYwFAYD VQQDEw02ODBhNjUyOC0zMzBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnY0RnrUXAQ6aMszuF/fKGbD3HXGIJNmhHASaY3rLJePNj7GOYLwA/UEapG/t WyAgIhqxRlEilXhhusrxCCL2dBgbG1+b/JVb8k+1vHh/ANfsMsJTDioQ0ED4DdY0 JaaARyX0oHs1KGqenGeXzoYQysUL52GbiSKsgzuesIizTw+qDps0HjEhYVl6G8pO FUV8XivbSkRamKIbLFEsnMlYhxffzEXzHhVd1Ro5ZZKDS5vx6PAaojqQ+oXbEM5k 5RkOclhGN0K1WJhXDELLyvGWrZaXzDZIj8Wb8IM4f4rLXB4ZsjN8EvwOg+4Vfs6Y xWUibeHweGic30dQbzNGXXdkkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMtf80NQ M3721FduQAQc+4MZZol7MB8GA1UdIwQYMBaAFDhvb4qh5mxSVOoeR4iMED9FNiIq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjA3Ny9EQjdCNzAwNjQ4 MjQxMUU3OTQwNDFEMkRDNEY5QUUwMi9PRzl2aXFIbWJGSlU2aDVIaUl3UVAwVTJJ aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09HOXZpcUhtYkZKVTZoNUhpSXdRUDBVMklpby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjA3Ny9EQjdCNzAwNjQ4MjQxMUU3OTQwNDFEMkRDNEY5QUUwMi9PRzl2aXFIbWJG SlU2aDVIaUl3UVAwVTJJaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrE+li+6vg2rfr1XCO3UpV82vfqgbnK2Qcc6ZWtJ8ROi2mrm+jbT5P C+Nj4+Sy/0AQnxQ7M5u5f76syZXE+S2xBLx4BOooXSwTK1muixdtF/G+6MZmSoZz G9ctIQiWI/y344bfpknkZhpGnyuhcvHIgq7+mykMwz6jPpt3U0uoakWVV04kk+og ej92oH6sobW+pH+BgO+OmjmjFw29XDPsGbo60Bo9Dz6FH/tcVTLJcMjOj16oMQyY Eoqp+NUbmZhg2pd3UpN67+gzrngAh2DcqYY6sGpIYFKEuNjESFkYglJ9ZnV0lfnU vhTd4U2PR8xlmZfaYE1UfS03fjlGLOL6 -----END CERTIFICATE-----Generated at Sat Apr 26 16:33:30 2025 by rpki-client