$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft File: Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft (raw, json) Hash identifier: hZlpssHwqg8mlv7ejAedUL4XnuibuQXT9Y+UtgyCEas= Subject key identifier: 23:F4:2A:C3:97:B0:32:CA:44:14:F0:E8:B5:C1:96:3E:A0:94:67:2E Authority key identifier: 3A:AF:FB:B7:EA:4A:60:D7:7B:B4:42:84:AC:BF:25:C3:98:BA:9A:6D Certificate issuer: /CN=A91F8E3D/serialNumber=3AAFFBB7EA4A60D77BB44284ACBF25C398BA9A6D Certificate serial: 0460 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq_7t-pKYNd7tEKErL8lw5i6mm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft Manifest number: 044D Signing time: Fri 25 Apr 2025 00:04:56 +0000 Manifest this update: Fri 25 Apr 2025 00:04:55 +0000 Manifest next update: Fri 02 May 2025 00:04:55 +0000 Files and hashes: 1: Oq_7t-pKYNd7tEKErL8lw5i6mm0.crl (hash: ZFbYUKBZx17k2HKUdc+Ga85gKeolMUA65K8fBb5MTvA=) 2: FF9D89B6AB4C11ECB0C94F67C4F9AE02.roa (hash: p5RWbmc3OrbusuGd87uXwNNKECyHXGRqb7DFbO3Zzjc=) 3: 451AF9F2E3DC11ECB9410B43C4F9AE02.roa (hash: PvyXkvk9rsG65qDLSBUO/zxV1I1w1ViEmt67rzLWH3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.crl rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq_7t-pKYNd7tEKErL8lw5i6mm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:04:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1120 (0x460) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8E3D, serialNumber=3AAFFBB7EA4A60D77BB44284ACBF25C398BA9A6D Validity Not Before: Apr 25 00:04:55 2025 GMT Not After : May 2 00:04:55 2025 GMT Subject: CN=680ad1a7-01df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:b2:6c:6a:81:dd:75:40:6a:d4:25:b2:54:30: d1:e3:cd:a0:da:9d:f8:3e:17:9d:97:cf:23:1d:45: 51:01:f6:af:4f:f2:db:72:34:94:6b:f6:2f:7b:bb: 28:13:5e:35:e5:52:48:63:26:30:07:24:14:7a:2a: dc:23:61:0c:cc:94:4a:d9:e8:a8:a4:cd:fb:49:d9: fd:05:f9:c2:70:a0:c9:e9:8b:58:fe:b5:48:22:0b: f9:c3:24:f0:76:f8:d7:09:2d:de:92:86:43:cf:4c: c2:5c:06:db:df:5e:31:05:ef:c4:e0:e6:1e:2c:2e: 5f:6f:0e:97:33:90:db:56:ee:d0:8b:b4:9e:7c:73: 5a:e7:f9:b2:73:12:ef:fa:67:1f:9d:b9:53:c1:61: e9:31:eb:b7:14:61:33:b4:40:7f:bf:75:8f:b2:88: 94:a2:cc:4a:da:16:86:2c:e3:4c:e5:4e:72:07:36: a8:23:43:92:da:42:93:eb:04:b6:ea:87:28:42:2c: ce:88:ba:f8:33:17:45:50:b6:3d:43:bd:d4:1c:33: 27:86:8c:0e:b3:5a:05:81:12:a3:87:a3:03:a3:3b: 51:d4:df:ab:05:f4:53:32:85:7a:00:23:bb:c7:73: 92:08:25:90:f2:a0:7d:c2:9e:84:b8:8a:60:0c:10: cf:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:F4:2A:C3:97:B0:32:CA:44:14:F0:E8:B5:C1:96:3E:A0:94:67:2E X509v3 Authority Key Identifier: keyid:3A:AF:FB:B7:EA:4A:60:D7:7B:B4:42:84:AC:BF:25:C3:98:BA:9A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq_7t-pKYNd7tEKErL8lw5i6mm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:a2:71:8d:ef:7d:e4:18:e6:11:93:10:22:0e:bc:d3:f2:a7: 12:d5:b5:4d:f8:71:3b:e3:e1:5a:f6:95:dd:2d:c5:3d:7c:6a: 7f:0c:15:d7:f1:59:e5:ae:52:65:8f:c9:73:a5:fc:69:9e:5d: 29:3d:77:93:b1:30:99:81:8f:22:d8:40:85:7e:b6:e7:17:05: 70:d3:e6:e5:f6:13:dc:e5:5b:66:c2:4b:3b:6b:57:d3:ec:d8: 07:03:d8:f6:74:55:0e:d9:15:b4:f5:ae:66:e9:4d:51:0f:41: c0:5b:16:86:bc:cd:6f:81:36:c3:c2:ac:27:a6:91:be:b1:33: 43:87:f2:1b:21:b9:3a:d0:6a:78:5d:d8:ad:84:17:9f:52:e1: 7c:79:ff:58:47:9c:5e:e2:e5:89:b5:f7:4f:10:2b:11:2e:5f: 59:d1:5f:1f:f1:04:6f:88:d5:58:b8:88:e7:ee:f3:a4:49:f3: f0:33:b4:7a:e8:91:cf:da:01:bc:16:c4:07:a1:4e:4f:bf:36: 56:dd:e6:e8:7f:f3:e4:f2:dc:e5:65:cf:46:cd:b7:ac:10:b1: 29:63:05:2f:9c:e6:54:ef:67:71:cf:87:fe:e4:07:0d:f2:d7: de:cb:61:ff:b0:1d:ff:b8:be:34:81:68:8b:16:04:cd:32:3c: d0:c9:4f:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhFM0QxMTAvBgNVBAUTKDNBQUZGQkI3RUE0QTYwRDc3QkI0NDI4NEFDQkYyNUMz OThCQTlBNkQwHhcNMjUwNDI1MDAwNDU1WhcNMjUwNTAyMDAwNDU1WjAYMRYwFAYD VQQDEw02ODBhZDFhNy0wMWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5bJsaoHddUBq1CWyVDDR482g2p34Phedl88jHUVRAfavT/LbcjSUa/Yve7so E1415VJIYyYwByQUeircI2EMzJRK2eiopM37Sdn9BfnCcKDJ6YtY/rVIIgv5wyTw dvjXCS3ekoZDz0zCXAbb314xBe/E4OYeLC5fbw6XM5DbVu7Qi7SefHNa5/mycxLv +mcfnblTwWHpMeu3FGEztEB/v3WPsoiUosxK2haGLONM5U5yBzaoI0OS2kKT6wS2 6ocoQizOiLr4MxdFULY9Q73UHDMnhowOs1oFgRKjh6MDoztR1N+rBfRTMoV6ACO7 x3OSCCWQ8qB9wp6EuIpgDBDPSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCP0KsOX sDLKRBTw6LXBlj6glGcuMB8GA1UdIwQYMBaAFDqv+7fqSmDXe7RChKy/JcOYuppt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEUzRC8wQUI0Mzg2QTU4 NEUxMUVDOUZDRjE3NzlDNEY5QUUwMi9PcV83dC1wS1lOZDd0RUtFckw4bHc1aTZt bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09xXzd0LXBLWU5kN3RFS0VyTDhsdzVpNm1tMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEUzRC8wQUI0Mzg2QTU4NEUxMUVDOUZDRjE3NzlDNEY5QUUwMi9PcV83dC1wS1lO ZDd0RUtFckw4bHc1aTZtbTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsonGN733kGOYRkxAiDrzT8qcS1bVN+HE74+Fa9pXdLcU9fGp/DBXX 8VnlrlJlj8lzpfxpnl0pPXeTsTCZgY8i2ECFfrbnFwVw0+bl9hPc5Vtmwks7a1fT 7NgHA9j2dFUO2RW09a5m6U1RD0HAWxaGvM1vgTbDwqwnppG+sTNDh/IbIbk60Gp4 XdithBefUuF8ef9YR5xe4uWJtfdPECsRLl9Z0V8f8QRviNVYuIjn7vOkSfPwM7R6 6JHP2gG8FsQHoU5PvzZW3ebof/Pk8tzlZc9GzbesELEpYwUvnOZU72dxz4f+5AcN 8tfey2H/sB3/uL40gWiLFgTNMjzQyU94 -----END CERTIFICATE-----Generated at Sat Apr 26 15:26:04 2025 by rpki-client