$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft File: OYVAYLL1jUyRnGTapLfrHwzfaDA.mft (raw, json) Hash identifier: p9emqY5FI2L+P4ccZeGqJWPiehNG7oyGLuByGUxKY3k= Subject key identifier: 09:91:03:E9:7C:7C:06:1A:9B:2A:56:7E:9C:C5:53:9A:A2:AC:D8:00 Authority key identifier: 39:85:40:60:B2:F5:8D:4C:91:9C:64:DA:A4:B7:EB:1F:0C:DF:68:30 Certificate issuer: /CN=A91A1A51/serialNumber=39854060B2F58D4C919C64DAA4B7EB1F0CDF6830 Certificate serial: 0340 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYVAYLL1jUyRnGTapLfrHwzfaDA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft Manifest number: 0340 Signing time: Sun 11 May 2025 00:35:15 +0000 Manifest this update: Sun 11 May 2025 00:35:14 +0000 Manifest next update: Sun 18 May 2025 00:35:14 +0000 Files and hashes: 1: OYVAYLL1jUyRnGTapLfrHwzfaDA.crl (hash: Hia4mQHVWf+CFvYL8AVwzZBCAdneJnzUcSv8FeZ0FOI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.crl rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYVAYLL1jUyRnGTapLfrHwzfaDA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 00:35:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 832 (0x340) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1A51, serialNumber=39854060B2F58D4C919C64DAA4B7EB1F0CDF6830 Validity Not Before: May 11 00:35:14 2025 GMT Not After : May 18 00:35:14 2025 GMT Subject: CN=681ff0c3-9efe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a5:ec:de:40:1a:92:d0:a5:13:ad:f2:59:e2: e1:2e:4f:ad:90:5d:50:af:91:9e:37:84:15:2e:d0: 19:2e:ea:34:05:30:6d:89:0d:fe:59:c7:e4:18:df: f0:90:85:21:9f:d0:a0:c7:c8:1c:ee:02:d2:36:aa: e0:87:16:ad:04:84:e2:b1:2c:63:9e:6e:ce:df:07: 18:da:d2:9d:b2:6a:12:83:74:e4:16:4f:92:e5:f2: 37:cf:b3:9d:10:9f:9c:96:5e:c3:51:f4:42:dc:13: 13:eb:54:0d:95:52:4e:e0:e8:3d:ec:92:a8:e9:5f: b1:65:b4:86:54:68:fa:0b:66:61:a0:d3:fe:48:f5: 9c:2f:25:8f:69:3b:f3:89:82:a5:65:c5:62:23:41: e7:32:8d:7a:59:85:ab:31:9e:71:6f:da:3b:40:e5: b9:c0:3e:69:3b:fa:e0:7f:e4:3c:10:a4:be:ba:14: dc:f0:06:c2:ed:4a:0b:0b:0b:e4:63:6f:af:9b:19: 1e:95:43:8e:e5:bf:da:22:aa:ad:83:bf:10:63:0d: 89:8c:28:62:ba:c5:8c:11:d3:86:e8:db:a8:7e:a5: e8:b7:2f:6e:17:e1:fe:a9:ec:fe:70:62:18:59:f9: b0:ee:e3:48:68:23:84:6a:a4:df:35:77:8d:f7:91: 4c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:91:03:E9:7C:7C:06:1A:9B:2A:56:7E:9C:C5:53:9A:A2:AC:D8:00 X509v3 Authority Key Identifier: keyid:39:85:40:60:B2:F5:8D:4C:91:9C:64:DA:A4:B7:EB:1F:0C:DF:68:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYVAYLL1jUyRnGTapLfrHwzfaDA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:7a:1f:db:eb:ed:45:b9:46:5a:51:d2:87:d1:39:2e:6f:c8: 8a:00:f1:91:87:10:73:a1:0d:3a:b6:aa:35:52:c3:b2:8e:d8: 7b:68:22:51:f0:a0:1c:3d:87:c8:36:a4:c6:5b:b7:c2:2f:9a: f5:b7:70:d9:d1:56:7e:cc:43:82:1a:19:99:27:27:46:3a:98: 39:ab:75:b8:49:97:17:af:44:9d:9c:d4:40:9d:51:15:dc:92: 33:91:03:06:3f:b4:1d:2f:34:00:ad:70:28:c3:cf:49:cd:78: 2b:fb:42:42:20:92:03:9e:9e:be:7c:cb:a2:8a:cc:b0:00:5c: cb:07:59:e7:3a:49:f1:1f:e3:65:ff:17:6e:67:aa:98:5e:d0: 91:dd:d3:ea:f4:05:d2:a3:6f:88:7e:8a:59:bf:cb:00:9a:8c: 23:9c:e8:dc:b7:65:50:5e:04:59:1a:7a:00:ba:50:23:c4:2a: 94:a9:db:e4:17:ab:77:90:93:13:47:61:a3:29:e4:8f:df:4f: f7:28:00:61:dd:0f:3c:36:fa:13:13:45:79:2d:14:51:65:e2: fa:cb:ec:d2:4c:f0:94:e5:9f:a3:76:c7:b9:dc:8d:3b:8d:3e: a5:46:5a:85:a8:f9:d6:a9:20:98:a1:81:6a:8f:4c:a9:ab:6f: 96:c5:1b:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFBNTExMTAvBgNVBAUTKDM5ODU0MDYwQjJGNThENEM5MTlDNjREQUE0QjdFQjFG MENERjY4MzAwHhcNMjUwNTExMDAzNTE0WhcNMjUwNTE4MDAzNTE0WjAYMRYwFAYD VQQDEw02ODFmZjBjMy05ZWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv6Xs3kAaktClE63yWeLhLk+tkF1Qr5GeN4QVLtAZLuo0BTBtiQ3+WcfkGN/w kIUhn9Cgx8gc7gLSNqrghxatBITisSxjnm7O3wcY2tKdsmoSg3TkFk+S5fI3z7Od EJ+cll7DUfRC3BMT61QNlVJO4Og97JKo6V+xZbSGVGj6C2ZhoNP+SPWcLyWPaTvz iYKlZcViI0HnMo16WYWrMZ5xb9o7QOW5wD5pO/rgf+Q8EKS+uhTc8AbC7UoLCwvk Y2+vmxkelUOO5b/aIqqtg78QYw2JjChiusWMEdOG6NuofqXoty9uF+H+qez+cGIY Wfmw7uNIaCOEaqTfNXeN95FMtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAmRA+l8 fAYamypWfpzFU5qirNgAMB8GA1UdIwQYMBaAFDmFQGCy9Y1MkZxk2qS36x8M32gw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUE1MS9BRjY5MEY2MEI5 MjAxMUVDOTkxNTY3NEZDNEY5QUUwMi9PWVZBWUxMMWpVeVJuR1RhcExmckh3emZh REEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09ZVkFZTEwxalV5Um5HVGFwTGZySHd6ZmFEQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUE1MS9BRjY5MEY2MEI5MjAxMUVDOTkxNTY3NEZDNEY5QUUwMi9PWVZBWUxMMWpV eVJuR1RhcExmckh3emZhREEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEeh/b6+1FuUZaUdKH0Tkub8iKAPGRhxBzoQ06tqo1UsOyjth7aCJR 8KAcPYfINqTGW7fCL5r1t3DZ0VZ+zEOCGhmZJydGOpg5q3W4SZcXr0SdnNRAnVEV 3JIzkQMGP7QdLzQArXAow89JzXgr+0JCIJIDnp6+fMuiisywAFzLB1nnOknxH+Nl /xduZ6qYXtCR3dPq9AXSo2+IfopZv8sAmowjnOjct2VQXgRZGnoAulAjxCqUqdvk F6t3kJMTR2GjKeSP30/3KABh3Q88NvoTE0V5LRRRZeL6y+zSTPCU5Z+jdse53I07 jT6lRlqFqPnWqSCYoYFqj0ypq2+WxRsC -----END CERTIFICATE-----Generated at Mon May 12 14:37:41 2025 by rpki-client