$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft File: OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft (raw, json) Hash identifier: sqUmrB1C4eW6XgOFbIvSYsGksOvTf/FJpTn/QgZRtFQ= Subject key identifier: C6:15:89:5F:65:94:00:86:74:E8:16:F0:55:3B:D0:0A:53:4E:68:DE Authority key identifier: 3A:83:0D:43:F3:59:44:FF:B2:86:01:D3:33:30:20:AC:3C:31:92:41 Certificate issuer: /CN=A919F0DA/serialNumber=3A830D43F35944FFB28601D3333020AC3C319241 Certificate serial: 23DD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft Manifest number: 5FE3 Signing time: Thu 08 May 2025 14:15:22 +0000 Manifest this update: Thu 08 May 2025 14:15:21 +0000 Manifest next update: Thu 15 May 2025 14:15:21 +0000 Files and hashes: 1: OoMNQ_NZRP-yhgHTMzAgrDwxkkE.crl (hash: kbzMyClgACyIEq4gTCfZOj9gmYj3Q6vEr43vicA2mdc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.crl rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 14:15:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9181 (0x23dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F0DA, serialNumber=3A830D43F35944FFB28601D3333020AC3C319241 Validity Not Before: May 8 14:15:21 2025 GMT Not After : May 15 14:15:21 2025 GMT Subject: CN=681cbc79-ea16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2e:3e:5f:6c:4d:7e:c2:a8:06:04:fc:71:43: be:73:b5:11:af:4b:2d:15:7b:e6:18:44:41:c5:cb: f3:2b:ec:d7:9f:74:3f:44:83:c5:fe:2e:61:5a:1c: d0:f4:41:e8:f8:9b:e8:47:5a:a7:3e:fd:d0:da:35: 6c:82:64:ad:0f:20:73:70:9e:a7:2f:57:d0:c3:d7: 15:cf:69:e5:f0:e5:3a:07:23:42:65:da:34:d4:47: 39:e0:5f:da:d3:52:c0:15:e1:93:f5:05:01:17:1c: d7:00:69:d5:b6:60:99:02:df:b3:08:d5:f2:d0:8f: b0:40:28:3d:cb:dc:b9:45:c7:cf:54:92:1f:cf:cf: 0b:54:2f:5a:fb:5b:fd:4b:28:9f:9c:19:9d:47:30: 30:23:84:3a:a6:28:39:e3:5f:ed:3d:9d:c3:e0:e6: a5:c0:86:c0:82:47:61:c8:9b:06:44:36:47:4a:b0: 62:8f:96:b0:e6:25:eb:57:d7:ba:23:00:be:22:58: cc:8a:89:b5:c5:65:61:3f:c6:11:29:75:a6:9e:be: 74:a9:9b:1e:4b:31:e0:b1:a7:1e:f9:bb:bc:16:3b: 36:35:dc:cb:8f:a7:a7:f7:c7:67:1e:b8:35:1f:7d: 66:28:d9:40:5b:d9:9f:79:6b:d4:ab:de:54:f6:a3: 41:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:15:89:5F:65:94:00:86:74:E8:16:F0:55:3B:D0:0A:53:4E:68:DE X509v3 Authority Key Identifier: keyid:3A:83:0D:43:F3:59:44:FF:B2:86:01:D3:33:30:20:AC:3C:31:92:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:2e:0c:65:4a:d5:29:64:9a:3b:72:84:d9:ef:71:50:7c:3d: 9d:51:b6:88:aa:51:a5:5b:1d:66:bd:a9:1a:00:e9:67:68:8b: 45:ec:04:9f:48:41:67:e3:7a:22:d9:f5:16:e6:d3:04:f7:a1: fb:30:e2:29:86:f6:e3:08:1e:17:5d:b3:36:da:f6:56:a2:44: 8b:89:a2:34:f0:1d:25:2c:e6:01:8a:2d:c1:f6:ef:f7:6a:11: 96:d2:51:62:e4:62:6b:3b:f4:3d:ff:28:fb:ec:62:e6:64:c0: c8:eb:36:2a:99:74:65:83:c7:ef:c0:1f:44:2d:62:d9:70:a3: db:83:7d:9e:c6:fe:e7:4a:70:4b:77:9a:e6:b9:2f:86:e8:01: b6:18:0a:e2:0a:cd:c3:48:9f:87:95:7f:88:e4:22:3f:aa:3b: 24:1e:c0:d6:13:b5:1b:56:86:78:46:e1:33:68:82:62:3b:28: fb:3b:ea:21:6c:94:9b:20:0f:92:5e:55:1a:ec:1d:2c:ab:20: b2:b2:3f:67:38:9a:96:ff:dc:d1:32:ba:c3:58:9f:96:31:a3: fd:c2:f3:1e:28:7d:e2:5b:98:23:75:82:02:6d:8c:89:d4:b1: ca:d5:98:df:e6:da:0f:f5:85:e8:3b:a7:d8:1a:8c:8f:53:42: bb:04:72:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYwREExMTAvBgNVBAUTKDNBODMwRDQzRjM1OTQ0RkZCMjg2MDFEMzMzMzAyMEFD M0MzMTkyNDEwHhcNMjUwNTA4MTQxNTIxWhcNMjUwNTE1MTQxNTIxWjAYMRYwFAYD VQQDEw02ODFjYmM3OS1lYTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyi4+X2xNfsKoBgT8cUO+c7URr0stFXvmGERBxcvzK+zXn3Q/RIPF/i5hWhzQ 9EHo+JvoR1qnPv3Q2jVsgmStDyBzcJ6nL1fQw9cVz2nl8OU6ByNCZdo01Ec54F/a 01LAFeGT9QUBFxzXAGnVtmCZAt+zCNXy0I+wQCg9y9y5RcfPVJIfz88LVC9a+1v9 SyifnBmdRzAwI4Q6pig541/tPZ3D4OalwIbAgkdhyJsGRDZHSrBij5aw5iXrV9e6 IwC+IljMiom1xWVhP8YRKXWmnr50qZseSzHgsace+bu8Fjs2NdzLj6en98dnHrg1 H31mKNlAW9mfeWvUq95U9qNB9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMYViV9l lACGdOgW8FU70ApTTmjeMB8GA1UdIwQYMBaAFDqDDUPzWUT/soYB0zMwIKw8MZJB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjBEQS9GQzYxRTAwODFE NjcxMUUyOEMxODI4QTQwOEIwMkNEMi9Pb01OUV9OWlJQLXloZ0hUTXpBZ3JEd3hr a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09vTU5RX05aUlAteWhnSFRNekFnckR3eGtrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjBEQS9GQzYxRTAwODFENjcxMUUyOEMxODI4QTQwOEIwMkNEMi9Pb01OUV9OWlJQ LXloZ0hUTXpBZ3JEd3hra0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbLgxlStUpZJo7coTZ73FQfD2dUbaIqlGlWx1mvakaAOlnaItF7ASf SEFn43oi2fUW5tME96H7MOIphvbjCB4XXbM22vZWokSLiaI08B0lLOYBii3B9u/3 ahGW0lFi5GJrO/Q9/yj77GLmZMDI6zYqmXRlg8fvwB9ELWLZcKPbg32exv7nSnBL d5rmuS+G6AG2GAriCs3DSJ+HlX+I5CI/qjskHsDWE7UbVoZ4RuEzaIJiOyj7O+oh bJSbIA+SXlUa7B0sqyCysj9nOJqW/9zRMrrDWJ+WMaP9wvMeKH3iW5gjdYICbYyJ 1LHK1Zjf5toP9YXoO6fYGoyPU0K7BHLb -----END CERTIFICATE-----Generated at Fri May 9 23:52:59 2025 by rpki-client