$ rpki-client -vvf rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft File: OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft (raw, json) Hash identifier: 4329kYkyGzdJXbRsuYeiEldRAGWLbTQOlA+uYPTKjv0= Subject key identifier: 9C:48:33:EA:C2:41:90:0F:00:8A:5C:F6:E3:AA:86:74:1C:A3:48:3B Authority key identifier: 38:45:45:D6:F5:5F:32:B3:1F:E8:64:6F:24:4A:7C:07:BA:69:54:08 Certificate issuer: /CN=A9192D09/serialNumber=384545D6F55F32B31FE8646F244A7C07BA695408 Certificate serial: 01B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEVF1vVfMrMf6GRvJEp8B7ppVAg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft Manifest number: 01B2 Signing time: Sun 11 May 2025 02:08:12 +0000 Manifest this update: Sun 11 May 2025 02:08:12 +0000 Manifest next update: Sun 18 May 2025 02:08:12 +0000 Files and hashes: 1: OEVF1vVfMrMf6GRvJEp8B7ppVAg.crl (hash: knVtLcx+cKEEvdJNU6j/YilT5R5zFR788Ew1La/iRMM=) 2: DD8D4802932211EDBF466F52C4F9AE02.roa (hash: pmbN5fPCbO/oalKNS7ivInU9ETfH9WfdJG7H7rtfmr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.crl rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEVF1vVfMrMf6GRvJEp8B7ppVAg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:08:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 437 (0x1b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192D09, serialNumber=384545D6F55F32B31FE8646F244A7C07BA695408 Validity Not Before: May 11 02:08:12 2025 GMT Not After : May 18 02:08:12 2025 GMT Subject: CN=6820068c-fc27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:23:41:5e:0c:c3:d9:96:8b:04:8d:42:56:0b: e3:3a:b0:80:f1:58:5e:49:d1:30:29:33:91:61:42: 43:25:f0:08:8e:26:3a:91:3a:d1:a9:10:7a:29:bc: 7b:5a:c6:50:36:e9:f3:f0:9e:a2:b9:d4:7b:a8:42: 58:60:7b:22:74:db:29:dd:ad:0b:b2:f4:5a:c9:4b: c2:34:1c:57:de:5a:72:d2:24:9c:9d:bc:cb:65:84: 30:5b:d7:08:51:af:c0:a1:11:bc:7e:8e:73:c1:de: 32:8b:e0:b3:9a:f4:f9:5d:f6:0e:61:37:1c:ba:5e: 10:55:3e:18:9f:c2:ad:86:84:b4:24:55:14:c8:ae: 02:31:f5:4d:40:1d:6b:78:2c:bb:eb:e4:ca:18:18: 77:e2:51:4e:e4:9f:50:64:86:2f:60:e2:9d:47:01: 1a:b2:fe:95:ab:53:f5:ad:7f:d0:8d:d1:47:fd:ec: f3:7b:3b:e6:ad:d9:f7:e8:fa:82:81:b1:70:f3:7d: 4b:cc:2b:64:68:69:7b:90:14:8f:e1:64:7b:69:26: 18:c0:79:36:92:23:69:3a:c9:a6:94:91:d4:ab:3f: 07:bd:41:7f:8d:18:e5:ec:e3:df:08:ff:e1:02:32: 60:9e:4e:0f:09:b8:73:01:59:13:8b:72:83:fa:50: 8f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:48:33:EA:C2:41:90:0F:00:8A:5C:F6:E3:AA:86:74:1C:A3:48:3B X509v3 Authority Key Identifier: keyid:38:45:45:D6:F5:5F:32:B3:1F:E8:64:6F:24:4A:7C:07:BA:69:54:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEVF1vVfMrMf6GRvJEp8B7ppVAg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:cc:18:8d:40:6b:4d:4e:25:ae:ef:7a:6b:60:7b:b4:7b:4c: 8c:d3:29:fa:82:56:3c:18:03:4e:47:ef:88:c1:63:ee:36:a0: cd:fe:62:e8:f3:38:b1:61:21:c5:0b:16:19:5a:09:fe:58:44: 64:4d:cb:93:a0:54:e9:f0:86:ac:2d:89:9f:43:fc:20:39:eb: f3:a0:e2:5f:84:21:6d:d9:ec:7a:51:77:41:28:64:24:b0:3c: 4f:a5:f3:02:34:23:c4:64:32:bf:7e:eb:b8:db:22:bd:9d:d7: 88:68:85:af:13:e3:78:81:00:9a:23:be:ab:99:3a:5d:56:66: 8c:f2:a7:d3:c2:11:7e:61:f3:fb:46:42:c9:e7:c7:1a:6d:cf: c0:b1:da:91:d6:36:72:e7:7f:3f:50:ba:18:5a:80:00:09:c7: 32:63:e2:23:3f:85:49:0a:3e:1d:43:ae:7f:a9:90:95:61:1d: d7:98:88:43:a0:8f:b8:f2:df:1a:ec:5a:cb:42:89:6a:b3:ec: 73:20:c6:7e:55:40:ca:e9:75:14:38:32:e1:de:81:45:2a:02: 58:ff:66:79:08:d4:8b:39:96:23:27:74:9c:d5:31:14:8f:3d: d7:0d:0e:d0:fc:ee:6a:6b:7d:8e:37:a5:bc:d0:46:2b:1b:c8: 78:77:d5:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJEMDkxMTAvBgNVBAUTKDM4NDU0NUQ2RjU1RjMyQjMxRkU4NjQ2RjI0NEE3QzA3 QkE2OTU0MDgwHhcNMjUwNTExMDIwODEyWhcNMjUwNTE4MDIwODEyWjAYMRYwFAYD VQQDEw02ODIwMDY4Yy1mYzI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvSNBXgzD2ZaLBI1CVgvjOrCA8VheSdEwKTORYUJDJfAIjiY6kTrRqRB6Kbx7 WsZQNunz8J6iudR7qEJYYHsidNsp3a0LsvRayUvCNBxX3lpy0iScnbzLZYQwW9cI Ua/AoRG8fo5zwd4yi+CzmvT5XfYOYTccul4QVT4Yn8KthoS0JFUUyK4CMfVNQB1r eCy76+TKGBh34lFO5J9QZIYvYOKdRwEasv6Vq1P1rX/QjdFH/ezzezvmrdn36PqC gbFw831LzCtkaGl7kBSP4WR7aSYYwHk2kiNpOsmmlJHUqz8HvUF/jRjl7OPfCP/h AjJgnk4PCbhzAVkTi3KD+lCPiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJxIM+rC QZAPAIpc9uOqhnQco0g7MB8GA1UdIwQYMBaAFDhFRdb1XzKzH+hkbyRKfAe6aVQI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkQwOS9GMEYyRURCMjkz MUMxMUVEQjlCNzlDNDlDNEY5QUUwMi9PRVZGMXZWZk1yTWY2R1J2SkVwOEI3cHBW QWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09FVkYxdlZmTXJNZjZHUnZKRXA4QjdwcFZBZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkQwOS9GMEYyRURCMjkzMUMxMUVEQjlCNzlDNDlDNEY5QUUwMi9PRVZGMXZWZk1y TWY2R1J2SkVwOEI3cHBWQWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmzBiNQGtNTiWu73prYHu0e0yM0yn6glY8GANOR++IwWPuNqDN/mLo 8zixYSHFCxYZWgn+WERkTcuToFTp8IasLYmfQ/wgOevzoOJfhCFt2ex6UXdBKGQk sDxPpfMCNCPEZDK/fuu42yK9ndeIaIWvE+N4gQCaI76rmTpdVmaM8qfTwhF+YfP7 RkLJ58cabc/AsdqR1jZy538/ULoYWoAACccyY+IjP4VJCj4dQ65/qZCVYR3XmIhD oI+48t8a7FrLQolqs+xzIMZ+VUDK6XUUODLh3oFFKgJY/2Z5CNSLOZYjJ3Sc1TEU jz3XDQ7Q/O5qa32ON6W80EYrG8h4d9Wd -----END CERTIFICATE-----Generated at Sun May 11 10:39:59 2025 by rpki-client