$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.mft File: ooradhG9_Q-tuB2KgDoRCZAPd4A.mft (raw, json) Hash identifier: RJXa3xLAu5LEfmBtkI+CSVPqW3TiSTes25OrGy92c4M= Subject key identifier: 43:97:20:F7:83:CF:82:AD:17:C4:50:87:34:AD:B1:58:E0:54:8B:6D Authority key identifier: A2:8A:DA:76:11:BD:FD:0F:AD:B8:1D:8A:80:3A:11:09:90:0F:77:80 Certificate issuer: /CN=A91FBFC9/serialNumber=A28ADA7611BDFD0FADB81D8A803A1109900F7780 Certificate serial: 07FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ooradhG9_Q-tuB2KgDoRCZAPd4A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.mft Manifest number: 07EF Signing time: Thu 24 Apr 2025 20:48:05 +0000 Manifest this update: Thu 24 Apr 2025 20:48:04 +0000 Manifest next update: Thu 01 May 2025 20:48:04 +0000 Files and hashes: 1: ooradhG9_Q-tuB2KgDoRCZAPd4A.crl (hash: MppsH1fTzHSek9Fv/iuhCFJs81tmy/G8WiYKk+7JGPQ=) 2: 76A59020E12911EAB8642E19C4F9AE02.roa (hash: 7SJtSkXKrhgxiJ/u+ScdWT/CZ8bW5ltRvm0xbyH8/2Q=) 3: B019C596499E11EBA61D7146C4F9AE02.roa (hash: 9WsPzCvsd/JuejjAiVSpINcZRZVtqlKA7kdOF+8fdUE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.crl rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ooradhG9_Q-tuB2KgDoRCZAPd4A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:48:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2043 (0x7fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBFC9, serialNumber=A28ADA7611BDFD0FADB81D8A803A1109900F7780 Validity Not Before: Apr 24 20:48:04 2025 GMT Not After : May 1 20:48:04 2025 GMT Subject: CN=680aa384-e80f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e6:fe:9d:7d:7e:d2:a9:4d:fc:ca:6e:d4:c1: f4:17:89:0f:86:ae:01:5f:81:f4:ad:c0:dd:df:fb: f0:ce:48:75:68:a8:58:cb:c4:33:d3:52:0a:08:44: 08:57:9f:cd:eb:55:ba:1e:c7:00:0e:3a:f2:6d:64: fd:ef:11:04:3b:21:a9:4e:4f:50:2e:e2:ec:96:74: 7b:cc:c9:16:6f:c7:f6:0c:a3:63:42:12:be:6a:b4: c9:43:0b:0e:c7:27:36:df:f2:85:47:63:d4:2a:b1: aa:18:31:6e:75:a0:32:c1:b4:3f:5c:af:17:a9:c3: ed:b2:e3:d4:1d:21:81:3b:d1:8d:1e:11:42:ef:82: 61:7d:75:06:da:9c:ae:91:99:c6:30:51:60:5c:7c: 95:c7:ff:31:53:ee:37:c3:ba:ad:b3:c5:89:d0:75: bf:2c:fc:1e:b0:c2:2b:12:d9:51:d7:fc:c1:10:de: cb:85:c0:88:6f:c4:e0:87:97:2e:02:14:61:69:73: c6:74:ce:f1:4e:c4:cc:59:41:05:82:0a:64:99:59: 9b:8a:70:a5:20:cb:01:36:e4:05:f9:b0:5c:69:40: 71:74:78:21:37:93:b9:8a:86:9f:df:de:9e:95:95: e1:41:50:ab:12:55:c8:57:94:c4:bc:18:f9:00:ff: 03:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:97:20:F7:83:CF:82:AD:17:C4:50:87:34:AD:B1:58:E0:54:8B:6D X509v3 Authority Key Identifier: keyid:A2:8A:DA:76:11:BD:FD:0F:AD:B8:1D:8A:80:3A:11:09:90:0F:77:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ooradhG9_Q-tuB2KgDoRCZAPd4A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:64:3c:cb:62:3a:bc:ce:32:01:fb:f9:d7:1a:18:18:1e:e8: 61:a7:7f:19:20:b1:ba:90:f7:1b:98:46:14:67:1f:b9:6e:e2: ff:4a:c5:ae:4a:a6:94:5b:3d:f3:20:04:08:e0:3e:ab:c0:af: ff:9e:8a:2c:41:b9:da:82:ba:a2:cd:8e:99:fa:4e:a9:77:ea: 3a:09:6b:01:0c:c2:87:fc:5c:83:17:6d:5c:32:93:17:9f:bd: a3:d8:7b:fd:94:c8:62:8e:e1:a4:3c:42:ed:6d:7a:d1:08:0d: 6d:bd:7d:0d:f6:0d:80:32:7e:7a:60:61:5b:10:c1:fb:27:d4: 65:f1:2f:52:a0:d1:2e:73:eb:44:9c:c3:77:e4:ed:68:ab:ad: 3b:57:5d:21:02:47:33:f9:bf:f3:af:61:53:e3:3d:60:94:d2: dd:0b:bd:6d:e4:2e:14:ee:aa:0e:05:84:5e:91:bd:b9:97:e8: 3c:84:e4:fc:af:b6:15:7f:94:90:63:83:5c:d7:6a:73:6c:0c: df:34:04:ae:09:71:27:2b:09:e6:68:0e:03:90:d9:7c:d5:97: 08:7b:8a:7a:8d:c1:30:36:81:c7:f0:aa:e3:97:f1:64:27:11: 63:5d:9e:22:c7:3e:10:b7:3d:95:9d:8b:db:b9:2e:3f:e4:3a: 94:cd:1e:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJGQzkxMTAvBgNVBAUTKEEyOEFEQTc2MTFCREZEMEZBREI4MUQ4QTgwM0ExMTA5 OTAwRjc3ODAwHhcNMjUwNDI0MjA0ODA0WhcNMjUwNTAxMjA0ODA0WjAYMRYwFAYD VQQDEw02ODBhYTM4NC1lODBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAweb+nX1+0qlN/Mpu1MH0F4kPhq4BX4H0rcDd3/vwzkh1aKhYy8Qz01IKCEQI V5/N61W6HscADjrybWT97xEEOyGpTk9QLuLslnR7zMkWb8f2DKNjQhK+arTJQwsO xyc23/KFR2PUKrGqGDFudaAywbQ/XK8XqcPtsuPUHSGBO9GNHhFC74JhfXUG2pyu kZnGMFFgXHyVx/8xU+43w7qts8WJ0HW/LPwesMIrEtlR1/zBEN7LhcCIb8Tgh5cu AhRhaXPGdM7xTsTMWUEFggpkmVmbinClIMsBNuQF+bBcaUBxdHghN5O5ioaf396e lZXhQVCrElXIV5TEvBj5AP8DKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEOXIPeD z4KtF8RQhzStsVjgVIttMB8GA1UdIwQYMBaAFKKK2nYRvf0PrbgdioA6EQmQD3eA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkZDOS9CMzdGNjUyMkUx MjcxMUVBOEVBQTIxMTZDNEY5QUUwMi9vb3JhZGhHOV9RLXR1QjJLZ0RvUkNaQVBk NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29vcmFkaEc5X1EtdHVCMktnRG9SQ1pBUGQ0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkZDOS9CMzdGNjUyMkUxMjcxMUVBOEVBQTIxMTZDNEY5QUUwMi9vb3JhZGhHOV9R LXR1QjJLZ0RvUkNaQVBkNEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCZDzLYjq8zjIB+/nXGhgYHuhhp38ZILG6kPcbmEYUZx+5buL/SsWu SqaUWz3zIAQI4D6rwK//noosQbnagrqizY6Z+k6pd+o6CWsBDMKH/FyDF21cMpMX n72j2Hv9lMhijuGkPELtbXrRCA1tvX0N9g2AMn56YGFbEMH7J9Rl8S9SoNEuc+tE nMN35O1oq607V10hAkcz+b/zr2FT4z1glNLdC71t5C4U7qoOBYRekb25l+g8hOT8 r7YVf5SQY4Nc12pzbAzfNASuCXEnKwnmaA4DkNl81ZcIe4p6jcEwNoHH8Krjl/Fk JxFjXZ4ixz4Qtz2VnYvbuS4/5DqUzR7G -----END CERTIFICATE-----Generated at Sat Apr 26 04:24:54 2025 by rpki-client