$ rpki-client -vvf rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft File: opsbaAnOwakkcMWcbDa_pc84cYY.mft (raw, json) Hash identifier: IUcVHwhAYoPv8IUn0w/AVxBKgkVX+bwEkhmLLfM/PJY= Subject key identifier: 42:42:2A:4C:E6:0E:CA:4F:26:F6:8E:29:FB:27:3B:F9:30:E0:A3:47 Authority key identifier: A2:9B:1B:68:09:CE:C1:A9:24:70:C5:9C:6C:36:BF:A5:CF:38:71:86 Certificate issuer: /CN=A9187BAC/serialNumber=A29B1B6809CEC1A92470C59C6C36BFA5CF387186 Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft Manifest number: 3D Signing time: Wed 07 May 2025 06:37:32 +0000 Manifest this update: Wed 07 May 2025 06:37:31 +0000 Manifest next update: Wed 14 May 2025 06:37:31 +0000 Files and hashes: 1: opsbaAnOwakkcMWcbDa_pc84cYY.crl (hash: tAcKyEKse4QM1CO8AmEDOyKG5iuzTY20F2rdAZZWR28=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.crl rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 06:37:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187BAC, serialNumber=A29B1B6809CEC1A92470C59C6C36BFA5CF387186 Validity Not Before: May 7 06:37:31 2025 GMT Not After : May 14 06:37:31 2025 GMT Subject: CN=681affac-8324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4e:0e:b0:41:5f:60:61:87:8e:be:b7:c1:c3: f0:54:da:37:f8:9e:31:ca:6f:03:eb:2c:09:18:8a: df:25:3e:ce:42:d7:bc:3c:95:16:13:16:d7:bd:f8: 40:36:59:81:dd:5d:1c:81:85:fc:af:80:26:aa:6f: 0d:83:5b:8b:7b:d1:10:b3:6c:2c:88:96:c6:49:79: d8:e0:1a:11:52:40:d9:63:1e:e7:7f:71:ac:f1:89: 4c:a9:c1:36:0c:31:de:d7:bb:27:93:48:d1:11:9a: 46:d4:8a:a8:ff:2f:66:df:86:de:af:ba:03:ac:a7: 05:52:da:a1:51:78:2e:8d:9a:35:74:b4:25:f8:80: fb:f4:8a:82:fb:b7:10:b5:18:50:5a:c5:46:62:ea: 88:6d:d1:4d:cb:1e:02:a5:34:a3:45:71:20:f8:48: 0d:7e:86:9c:ba:1b:6b:19:68:2d:a5:f0:92:08:c9: ad:5e:83:74:3a:16:53:4c:ac:a4:be:54:e4:3b:48: b3:f6:4c:9d:81:2a:3d:2a:a1:59:cc:97:85:ea:b3: 7c:65:f0:a2:2b:f0:2f:a8:ab:08:e4:db:19:b2:d4: 51:88:e5:3d:f8:bd:9a:17:62:7f:22:c2:99:63:f2: cd:d2:56:9c:7d:79:ee:aa:9f:07:de:73:d0:b7:22: 45:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:42:2A:4C:E6:0E:CA:4F:26:F6:8E:29:FB:27:3B:F9:30:E0:A3:47 X509v3 Authority Key Identifier: keyid:A2:9B:1B:68:09:CE:C1:A9:24:70:C5:9C:6C:36:BF:A5:CF:38:71:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:6d:67:19:a7:c4:de:71:62:63:1d:10:9a:9a:48:2f:c5:64: 67:c4:35:a2:a3:94:ea:0c:af:e2:55:ae:c3:77:c6:6d:e9:c2: 91:80:80:d3:69:3f:64:77:85:03:c1:a4:e6:68:55:12:b0:2e: 1e:9a:78:9b:21:81:5f:7d:2f:d8:b7:ae:5c:34:a5:bd:34:a9: 69:26:2c:8a:bf:ba:cd:e8:a6:ab:3d:d5:51:6e:fe:43:33:0f: 77:84:e4:51:80:c3:57:bc:b2:54:d6:d5:68:83:e0:cb:d3:a5: dc:b7:2a:0c:84:5e:82:1a:ad:41:a2:90:44:19:82:3a:f1:a8: 64:f4:1f:d1:2b:be:7b:5d:b1:90:9f:35:4b:d2:8c:a9:e4:8c: ca:21:51:0d:fd:1b:87:a7:37:1b:cc:70:d3:0f:bf:46:02:5d: 01:f3:09:02:d6:d4:6d:05:70:f1:03:e3:da:19:28:6e:83:43: b7:a2:0e:f4:31:19:38:8d:2e:2a:b5:ca:be:15:89:27:72:86: 0a:5d:a0:51:e8:0d:ea:69:d7:59:49:87:a5:71:18:1e:a5:d5: d2:2f:37:e3:9f:a7:6b:ce:88:32:28:49:74:e8:8e:d6:72:6e: 05:f4:da:e3:8f:28:f0:12:d9:36:c0:b7:a4:ae:df:bd:c8:03: 2a:85:f3:47 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 N0JBQzExMC8GA1UEBRMoQTI5QjFCNjgwOUNFQzFBOTI0NzBDNTlDNkMzNkJGQTVD RjM4NzE4NjAeFw0yNTA1MDcwNjM3MzFaFw0yNTA1MTQwNjM3MzFaMBgxFjAUBgNV BAMTDTY4MWFmZmFjLTgzMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRTg6wQV9gYYeOvrfBw/BU2jf4njHKbwPrLAkYit8lPs5C17w8lRYTFte9+EA2 WYHdXRyBhfyvgCaqbw2DW4t70RCzbCyIlsZJedjgGhFSQNljHud/cazxiUypwTYM Md7XuyeTSNERmkbUiqj/L2bfht6vugOspwVS2qFReC6NmjV0tCX4gPv0ioL7txC1 GFBaxUZi6oht0U3LHgKlNKNFcSD4SA1+hpy6G2sZaC2l8JIIya1eg3Q6FlNMrKS+ VOQ7SLP2TJ2BKj0qoVnMl4Xqs3xl8KIr8C+oqwjk2xmy1FGI5T34vZoXYn8iwplj 8s3SVpx9ee6qnwfec9C3IkVtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQkIqTOYO yk8m9o4p+yc7+TDgo0cwHwYDVR0jBBgwFoAUopsbaAnOwakkcMWcbDa/pc84cYYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3QkFDL0M2QUQzRTBBRDAy QzExRUZCNTU4NDkxNUM0RjlBRTAyL29wc2JhQW5Pd2Fra2NNV2NiRGFfcGM4NGNZ WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb3BzYmFBbk93YWtrY01XY2JEYV9wYzg0Y1lZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3 QkFDL0M2QUQzRTBBRDAyQzExRUZCNTU4NDkxNUM0RjlBRTAyL29wc2JhQW5Pd2Fr a2NNV2NiRGFfcGM4NGNZWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB1tZxmnxN5xYmMdEJqaSC/FZGfENaKjlOoMr+JVrsN3xm3pwpGAgNNp P2R3hQPBpOZoVRKwLh6aeJshgV99L9i3rlw0pb00qWkmLIq/us3opqs91VFu/kMz D3eE5FGAw1e8slTW1WiD4MvTpdy3KgyEXoIarUGikEQZgjrxqGT0H9ErvntdsZCf NUvSjKnkjMohUQ39G4enNxvMcNMPv0YCXQHzCQLW1G0FcPED49oZKG6DQ7eiDvQx GTiNLiq1yr4ViSdyhgpdoFHoDepp11lJh6VxGB6l1dIvN+Ofp2vOiDIoSXTojtZy bgX02uOPKPAS2TbAt6Su373IAyqF80c= -----END CERTIFICATE-----Generated at Thu May 8 07:22:35 2025 by rpki-client