$ rpki-client -vvf rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft File: OXH34h0IySQ6u0A_gDBkv3iy2IA.mft (raw, json) Hash identifier: 8CXjKqd30AO7/cyy4MD8ghgmqcKtGMpFQ2XwZ94QGZs= Subject key identifier: B1:E1:14:CC:81:D9:7E:46:74:64:BF:9F:8A:B2:55:8C:63:5A:60:E8 Authority key identifier: 39:71:F7:E2:1D:08:C9:24:3A:BB:40:3F:80:30:64:BF:78:B2:D8:80 Certificate issuer: /CN=A913D46F/serialNumber=3971F7E21D08C9243ABB403F803064BF78B2D880 Certificate serial: 0CA4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft Manifest number: 0C77 Signing time: Tue 06 May 2025 18:18:22 +0000 Manifest this update: Tue 06 May 2025 18:18:22 +0000 Manifest next update: Tue 13 May 2025 18:18:22 +0000 Files and hashes: 1: OXH34h0IySQ6u0A_gDBkv3iy2IA.crl (hash: sB21lu/mYBRirZkgP/cEkQ+d5L8gQ/3YzJFrjbNv7vM=) 2: 92F8F6D042DA11ED93029A6AC4F9AE02.roa (hash: TeIPGyGqDRDL84HA9NnAzVJOOMFf2EjmrKH/elumev8=) 3: B0B722BEFA4A11EDA47C091DC4F9AE02.roa (hash: lRMtWT21HxefR8cIAkbesXguaIjwdfIuBa6XccIOgBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.crl rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 18:18:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3236 (0xca4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D46F, serialNumber=3971F7E21D08C9243ABB403F803064BF78B2D880 Validity Not Before: May 6 18:18:22 2025 GMT Not After : May 13 18:18:22 2025 GMT Subject: CN=681a526e-f0bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:85:c5:c4:d6:a9:68:a7:46:5e:74:2d:8c:c0: 59:e7:b3:af:32:bf:18:aa:e5:cb:a6:7a:75:11:ae: 7d:ca:1b:a6:c2:41:c1:8c:b7:23:eb:7f:60:db:c3: 6a:de:5e:4a:4c:bd:b8:2e:e5:44:d9:e1:10:d7:d4: 89:6f:77:1f:ab:5e:db:ce:46:a8:63:65:32:ae:48: bd:9d:c9:31:8e:b6:0e:e8:82:4e:ff:05:83:79:58: 09:21:d7:91:15:52:38:ff:a3:a0:e8:66:5c:6d:bc: 07:55:58:e6:63:74:94:05:5f:52:a9:95:a3:f3:a0: 2c:c2:55:0e:09:5c:1d:9d:0c:3d:fd:24:4b:8c:4b: e0:5a:ee:a4:31:6e:8e:c3:a0:09:49:18:1d:44:da: 3e:23:5f:dc:a3:ff:46:bf:7a:39:0c:40:f8:8c:e3: e8:16:bf:1f:5a:e7:66:03:06:17:07:52:8e:3d:e0: 8c:0d:a4:9e:78:6c:71:81:57:e4:e1:e3:ed:90:b5: 46:7a:cb:71:87:98:6e:04:c6:ea:14:1b:3f:a5:e1: 13:2b:5d:40:ff:f3:c9:90:ba:1b:b9:44:9f:d8:f4: c8:0d:d4:0c:30:de:98:ca:9f:58:1c:c0:43:08:98: f5:29:fc:be:fa:aa:64:10:84:3b:7f:63:de:f3:16: 89:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:E1:14:CC:81:D9:7E:46:74:64:BF:9F:8A:B2:55:8C:63:5A:60:E8 X509v3 Authority Key Identifier: keyid:39:71:F7:E2:1D:08:C9:24:3A:BB:40:3F:80:30:64:BF:78:B2:D8:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:3b:6b:c3:37:74:a9:4f:bd:d8:29:23:1b:60:7a:18:cd:23: 96:e3:1f:8b:1b:32:e0:e8:9e:77:f7:8f:fc:5d:6b:01:42:a2: 31:8d:bd:a3:e0:c1:92:16:7e:ce:8c:a9:89:bf:f2:05:2f:6c: 2f:ec:b9:5f:2d:66:38:ef:a2:2a:a7:13:f3:c9:36:f0:52:7d: 26:3e:aa:ab:7a:c4:bc:72:5c:3e:f5:ba:af:a7:ca:0b:92:ee: ec:35:17:1e:06:cc:5c:49:ad:9e:a1:2d:c2:29:fe:77:a8:50: 18:59:2f:ae:51:48:08:a1:5a:18:b9:15:bd:7e:b2:f9:23:93: b4:67:d2:16:2d:aa:8d:a1:5e:42:98:f4:fb:6a:8e:88:2a:c7: 96:95:da:04:7e:ad:9f:f7:73:3d:51:9c:56:dc:aa:68:f6:8d: d3:eb:98:04:5a:2e:f9:55:42:6d:57:bc:90:e9:d1:a0:3c:1b: ee:62:5c:99:47:30:87:81:66:7a:30:2f:b7:e5:d6:69:cc:9a: 5c:30:03:d9:34:80:43:35:28:a0:40:a8:bc:1f:5f:af:73:28: 53:6f:98:b2:2e:46:fb:10:a9:ae:38:3a:41:c0:3c:21:5c:87: 6d:80:f9:65:59:25:7a:dd:fc:3c:cf:16:6c:a2:39:7f:15:19: 2e:1b:2d:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Q0NkYxMTAvBgNVBAUTKDM5NzFGN0UyMUQwOEM5MjQzQUJCNDAzRjgwMzA2NEJG NzhCMkQ4ODAwHhcNMjUwNTA2MTgxODIyWhcNMjUwNTEzMTgxODIyWjAYMRYwFAYD VQQDEw02ODFhNTI2ZS1mMGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoYXFxNapaKdGXnQtjMBZ57OvMr8YquXLpnp1Ea59yhumwkHBjLcj639g28Nq 3l5KTL24LuVE2eEQ19SJb3cfq17bzkaoY2Uyrki9nckxjrYO6IJO/wWDeVgJIdeR FVI4/6Og6GZcbbwHVVjmY3SUBV9SqZWj86AswlUOCVwdnQw9/SRLjEvgWu6kMW6O w6AJSRgdRNo+I1/co/9Gv3o5DED4jOPoFr8fWudmAwYXB1KOPeCMDaSeeGxxgVfk 4ePtkLVGestxh5huBMbqFBs/peETK11A//PJkLobuUSf2PTIDdQMMN6Yyp9YHMBD CJj1Kfy++qpkEIQ7f2Pe8xaJLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLHhFMyB 2X5GdGS/n4qyVYxjWmDoMB8GA1UdIwQYMBaAFDlx9+IdCMkkOrtAP4AwZL94stiA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDQ2Ri83REEyNEM3QTAw NjkxMUVBOEZEQjI4NURDNEY5QUUwMi9PWEgzNGgwSXlTUTZ1MEFfZ0RCa3YzaXky SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09YSDM0aDBJeVNRNnUwQV9nREJrdjNpeTJJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDQ2Ri83REEyNEM3QTAwNjkxMUVBOEZEQjI4NURDNEY5QUUwMi9PWEgzNGgwSXlT UTZ1MEFfZ0RCa3YzaXkySUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeO2vDN3SpT73YKSMbYHoYzSOW4x+LGzLg6J5394/8XWsBQqIxjb2j 4MGSFn7OjKmJv/IFL2wv7LlfLWY476IqpxPzyTbwUn0mPqqresS8clw+9bqvp8oL ku7sNRceBsxcSa2eoS3CKf53qFAYWS+uUUgIoVoYuRW9frL5I5O0Z9IWLaqNoV5C mPT7ao6IKseWldoEfq2f93M9UZxW3Kpo9o3T65gEWi75VUJtV7yQ6dGgPBvuYlyZ RzCHgWZ6MC+35dZpzJpcMAPZNIBDNSigQKi8H1+vcyhTb5iyLkb7EKmuODpBwDwh XIdtgPllWSV63fw8zxZsojl/FRkuGy0T -----END CERTIFICATE-----Generated at Wed May 7 14:33:21 2025 by rpki-client