$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.mft File: oUnn_U15BvwaY0EphlXagYXykBQ.mft (raw, json) Hash identifier: srqY9WSLoOWh+VZr12JLlk4cgMfOH5TDGBOI0/P3gX8= Subject key identifier: 24:83:43:3F:E0:92:09:AB:BD:4A:88:C9:62:11:D7:9A:16:B8:10:9C Authority key identifier: A1:49:E7:FD:4D:79:06:FC:1A:63:41:29:86:55:DA:81:85:F2:90:14 Certificate issuer: /CN=A91FF639/serialNumber=A149E7FD4D7906FC1A6341298655DA8185F29014 Certificate serial: 139F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUnn_U15BvwaY0EphlXagYXykBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.mft Manifest number: 1395 Signing time: Thu 24 Apr 2025 16:58:56 +0000 Manifest this update: Thu 24 Apr 2025 16:58:55 +0000 Manifest next update: Thu 01 May 2025 16:58:55 +0000 Files and hashes: 1: oUnn_U15BvwaY0EphlXagYXykBQ.crl (hash: WtrGLbozK/D+2SUsKFxoM3cTOkcH/5qTb8ApD/d8eMg=) 2: 9D1CF15E90EE11E8960E8480C4F9AE02.roa (hash: H7cacnsh0VuhyC5itqeb5pDEzr5EF2LWGOPta4fd7j8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.crl rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUnn_U15BvwaY0EphlXagYXykBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:58:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5023 (0x139f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF639, serialNumber=A149E7FD4D7906FC1A6341298655DA8185F29014 Validity Not Before: Apr 24 16:58:55 2025 GMT Not After : May 1 16:58:55 2025 GMT Subject: CN=680a6dcf-4527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e9:77:18:b7:9e:3f:68:41:e2:54:6c:04:f3: 06:cc:8a:a2:ab:ef:ea:e1:ce:09:08:a7:1e:ff:dd: 75:96:9c:ce:51:0e:91:eb:4e:c4:bb:a5:b4:f3:e0: c7:fa:c6:84:c0:75:1d:cc:85:34:bf:0e:f8:8c:4f: 14:41:87:61:e5:5f:a8:91:39:da:f7:77:55:0e:7b: 42:21:81:ab:70:b4:54:7f:76:a6:e5:89:30:f0:5a: eb:90:ab:66:ca:96:f3:5c:3d:ee:6e:5b:e2:3a:55: e9:da:4a:f5:bc:a9:33:63:ba:8c:5f:24:2e:78:64: 36:1a:9b:e2:4a:32:52:ed:ad:a0:9b:09:0a:87:93: 6a:69:f5:c8:67:ac:9f:38:1f:36:0a:1f:d3:78:dc: 16:94:9c:c5:05:e0:68:71:9a:da:9d:c1:bc:a3:b9: f3:72:96:32:53:78:31:6d:01:4e:9a:fa:f6:f6:50: 43:dc:83:0b:f9:ac:0e:14:ca:4f:3a:3f:aa:49:e1: 09:7f:11:b5:2e:40:32:da:18:38:7a:16:43:5b:1a: e4:df:f1:bc:20:9b:f8:f7:c3:43:89:b0:05:7c:3a: 72:d2:46:0b:18:4d:56:75:8f:96:87:bd:39:f2:60: f9:44:33:ac:3f:5c:6e:40:74:7e:5c:82:85:2c:6a: 1e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:83:43:3F:E0:92:09:AB:BD:4A:88:C9:62:11:D7:9A:16:B8:10:9C X509v3 Authority Key Identifier: keyid:A1:49:E7:FD:4D:79:06:FC:1A:63:41:29:86:55:DA:81:85:F2:90:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUnn_U15BvwaY0EphlXagYXykBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:f7:25:7c:c3:a7:c6:a0:93:8a:a9:5a:27:3a:85:9e:79:5f: 22:e7:bc:75:6b:d5:d7:5f:85:d5:fa:38:cd:2d:50:9f:7b:63: fc:db:98:4c:6e:fa:41:ed:d7:8d:de:37:e1:fd:0b:7a:a7:34: f8:1d:62:65:3c:83:fd:3b:58:6d:b8:64:1e:1c:4a:5b:37:a7: d2:0e:75:c3:2b:00:c9:8d:54:c4:a0:f2:03:6d:45:05:58:d9: ff:b6:92:63:a9:bd:20:83:ce:eb:4b:ad:52:ee:15:e8:29:c9: 83:26:5c:e7:50:71:6b:c3:7b:2c:4e:65:ab:c0:2b:be:65:57: b6:ec:31:d6:1d:ee:4a:51:24:ec:ff:c4:f7:8f:23:4f:4c:92: 6e:65:b1:af:05:bf:f4:c6:cf:69:d5:e2:87:0e:4b:30:69:3a: c9:07:8c:a7:6d:7b:e7:b2:ae:00:93:b9:9c:b9:e1:0a:6a:db: 0f:f7:fc:c5:74:e9:d9:ae:8a:43:57:d1:8f:36:c7:7e:d8:7f: 8a:12:41:32:5f:dd:8b:79:85:0d:8a:c5:9d:e0:3b:1c:a2:4f: 4d:b5:f8:ff:b1:a4:a8:4b:62:00:18:f2:00:e5:12:93:eb:ef: d0:cf:20:4c:1c:a2:b5:fc:d6:20:ba:1d:0d:ee:0e:c3:51:c4: 4c:a0:89:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY2MzkxMTAvBgNVBAUTKEExNDlFN0ZENEQ3OTA2RkMxQTYzNDEyOTg2NTVEQTgx ODVGMjkwMTQwHhcNMjUwNDI0MTY1ODU1WhcNMjUwNTAxMTY1ODU1WjAYMRYwFAYD VQQDEw02ODBhNmRjZi00NTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApOl3GLeeP2hB4lRsBPMGzIqiq+/q4c4JCKce/911lpzOUQ6R607Eu6W08+DH +saEwHUdzIU0vw74jE8UQYdh5V+okTna93dVDntCIYGrcLRUf3am5Ykw8FrrkKtm ypbzXD3ublviOlXp2kr1vKkzY7qMXyQueGQ2GpviSjJS7a2gmwkKh5NqafXIZ6yf OB82Ch/TeNwWlJzFBeBocZrancG8o7nzcpYyU3gxbQFOmvr29lBD3IML+awOFMpP Oj+qSeEJfxG1LkAy2hg4ehZDWxrk3/G8IJv498NDibAFfDpy0kYLGE1WdY+Wh705 8mD5RDOsP1xuQHR+XIKFLGoeTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCSDQz/g kgmrvUqIyWIR15oWuBCcMB8GA1UdIwQYMBaAFKFJ5/1NeQb8GmNBKYZV2oGF8pAU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjYzOS9BRUYwNjhCODkw RUMxMUU4ODNDM0Q0N0JDNEY5QUUwMi9vVW5uX1UxNUJ2d2FZMEVwaGxYYWdZWHlr QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Vbm5fVTE1QnZ3YVkwRXBobFhhZ1lYeWtCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjYzOS9BRUYwNjhCODkwRUMxMUU4ODNDM0Q0N0JDNEY5QUUwMi9vVW5uX1UxNUJ2 d2FZMEVwaGxYYWdZWHlrQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCk9yV8w6fGoJOKqVonOoWeeV8i57x1a9XXX4XV+jjNLVCfe2P825hM bvpB7deN3jfh/Qt6pzT4HWJlPIP9O1htuGQeHEpbN6fSDnXDKwDJjVTEoPIDbUUF WNn/tpJjqb0gg87rS61S7hXoKcmDJlznUHFrw3ssTmWrwCu+ZVe27DHWHe5KUSTs /8T3jyNPTJJuZbGvBb/0xs9p1eKHDkswaTrJB4ynbXvnsq4Ak7mcueEKatsP9/zF dOnZropDV9GPNsd+2H+KEkEyX92LeYUNisWd4Dscok9Ntfj/saSoS2IAGPIA5RKT 6+/QzyBMHKK1/NYguh0N7g7DUcRMoIlW -----END CERTIFICATE-----Generated at Sat Apr 26 14:13:06 2025 by rpki-client