$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft File: OddGjPgMUFXp0EybT60xF1wU1l8.mft (raw, json) Hash identifier: 55Ap97DJPkuMvR0QijupW/PNwkhOJUfYpzgcPX6rEWY= Subject key identifier: 0C:A9:CF:65:BC:F8:91:5C:6A:84:29:AF:19:88:01:A3:95:EF:B3:88 Authority key identifier: 39:D7:46:8C:F8:0C:50:55:E9:D0:4C:9B:4F:AD:31:17:5C:14:D6:5F Certificate issuer: /CN=A91AD643/serialNumber=39D7468CF80C5055E9D04C9B4FAD31175C14D65F Certificate serial: 06CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft Manifest number: 06C2 Signing time: Wed 14 May 2025 22:10:27 +0000 Manifest this update: Wed 14 May 2025 22:10:26 +0000 Manifest next update: Wed 21 May 2025 22:10:26 +0000 Files and hashes: 1: OddGjPgMUFXp0EybT60xF1wU1l8.crl (hash: iTjyK2F2v6VgmOW0M96b8zdFUZ5KyZsB14RNg/w+eHk=) 2: 865F2F80EE8911EBB390AC76C4F9AE02.roa (hash: 0ULrTT5sEmnlV5jXg9GCbo9G2IRIBRTqvgY01zsRTW8=) 3: 81E9653E5B8A11EB857A3F77C4F9AE02.roa (hash: hFkz2Rxz8bjHa9W5ewxpkxAw84TOeg9mnyL9BGUNw+E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.crl rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 22:10:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1742 (0x6ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD643, serialNumber=39D7468CF80C5055E9D04C9B4FAD31175C14D65F Validity Not Before: May 14 22:10:26 2025 GMT Not After : May 21 22:10:26 2025 GMT Subject: CN=682514d2-94a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:62:66:78:c6:84:8b:1b:13:e3:26:df:2c:6c: a0:5e:2d:3c:28:ca:36:d3:84:9d:81:28:5b:dc:7a: ed:05:10:d3:bd:3e:0d:f8:ed:dd:89:1f:ec:58:c5: 35:94:23:5b:e9:18:3b:21:92:2a:04:eb:97:fe:04: c5:27:c6:5e:71:64:74:7a:ee:be:4a:b7:17:c6:0e: 45:79:02:ee:54:d3:54:0b:77:2f:8d:0d:45:bb:82: c1:ad:a0:60:cd:fa:b8:67:3d:b1:7a:5f:e4:ad:d7: 26:a8:c3:00:7f:41:27:b9:f8:c3:28:ed:6a:0b:60: 7d:2c:3d:68:a6:54:fa:ea:a0:ef:ce:0c:dc:e4:57: d9:a3:e6:fb:76:40:a4:8e:ea:0e:b8:65:0c:a1:82: 9d:32:f5:fd:1f:6c:ef:92:be:7f:49:cd:0a:f5:42: 0c:93:20:0b:08:71:fd:5b:1c:a3:dc:d7:4c:e2:a4: bd:25:da:80:f8:6a:f8:a9:37:fc:ae:b4:4f:88:6b: e6:47:0e:6f:32:c0:50:d3:f4:f1:f6:44:66:ec:82: 67:ff:8f:73:5f:75:b4:11:c8:bb:e5:bc:ed:2f:c1: 05:2b:09:24:d8:81:c0:65:2f:6e:bd:8d:14:67:78: e9:a5:4d:fe:fe:33:78:cb:1d:d5:f9:a1:7a:3b:ee: 86:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:A9:CF:65:BC:F8:91:5C:6A:84:29:AF:19:88:01:A3:95:EF:B3:88 X509v3 Authority Key Identifier: keyid:39:D7:46:8C:F8:0C:50:55:E9:D0:4C:9B:4F:AD:31:17:5C:14:D6:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:8b:38:8f:1f:85:69:2f:83:a8:30:3b:96:24:69:40:a6:f0: a0:58:19:68:7c:79:58:7f:37:2a:a7:90:b5:93:f6:4e:49:36: 97:16:3c:2b:5a:bf:38:01:83:fb:8c:85:89:27:4b:70:d2:91: 45:a4:45:85:d0:e5:4b:40:4e:bd:4f:61:53:0c:b6:06:3e:af: e8:0f:70:24:be:05:03:ef:5a:21:02:72:78:51:99:b7:d2:22: 14:5e:9a:e1:34:21:ca:31:a6:89:03:64:f3:7a:bc:fb:1b:e5: 17:be:6c:1d:04:cd:0a:14:c3:38:4a:47:2c:c8:60:2b:8b:27: 43:96:05:47:80:c9:f2:4c:db:95:b4:1b:f4:69:9c:ad:97:07: 4b:26:71:2a:86:63:f5:86:68:af:7b:5d:f1:91:ff:f4:fb:42: 0a:8c:d6:97:bf:ba:c7:63:58:aa:dd:c7:e7:3c:b1:81:5c:51: 41:e2:37:2a:18:f3:05:53:fe:c9:d3:70:2b:54:65:3c:f1:c8: 01:61:13:73:11:58:13:32:74:ce:66:fd:87:ab:38:94:90:c5: 38:c2:11:69:71:f2:58:2d:65:72:b9:26:36:86:ab:3f:2d:ca: ae:1c:e4:6a:aa:ca:ca:eb:cf:06:1a:b0:c9:99:7c:2d:1d:f8: fd:af:f2:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ2NDMxMTAvBgNVBAUTKDM5RDc0NjhDRjgwQzUwNTVFOUQwNEM5QjRGQUQzMTE3 NUMxNEQ2NUYwHhcNMjUwNTE0MjIxMDI2WhcNMjUwNTIxMjIxMDI2WjAYMRYwFAYD VQQDEw02ODI1MTRkMi05NGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqGJmeMaEixsT4ybfLGygXi08KMo204SdgShb3HrtBRDTvT4N+O3diR/sWMU1 lCNb6Rg7IZIqBOuX/gTFJ8ZecWR0eu6+SrcXxg5FeQLuVNNUC3cvjQ1Fu4LBraBg zfq4Zz2xel/krdcmqMMAf0EnufjDKO1qC2B9LD1oplT66qDvzgzc5FfZo+b7dkCk juoOuGUMoYKdMvX9H2zvkr5/Sc0K9UIMkyALCHH9Wxyj3NdM4qS9JdqA+Gr4qTf8 rrRPiGvmRw5vMsBQ0/Tx9kRm7IJn/49zX3W0Eci75bztL8EFKwkk2IHAZS9uvY0U Z3jppU3+/jN4yx3V+aF6O+6GYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAypz2W8 +JFcaoQprxmIAaOV77OIMB8GA1UdIwQYMBaAFDnXRoz4DFBV6dBMm0+tMRdcFNZf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDY0My9FRkJFNkVCMjVC ODgxMUVCQkQ1RjMwNzZDNEY5QUUwMi9PZGRHalBnTVVGWHAwRXliVDYweEYxd1Ux bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09kZEdqUGdNVUZYcDBFeWJUNjB4RjF3VTFsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDY0My9FRkJFNkVCMjVCODgxMUVCQkQ1RjMwNzZDNEY5QUUwMi9PZGRHalBnTVVG WHAwRXliVDYweEYxd1UxbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtiziPH4VpL4OoMDuWJGlApvCgWBlofHlYfzcqp5C1k/ZOSTaXFjwr Wr84AYP7jIWJJ0tw0pFFpEWF0OVLQE69T2FTDLYGPq/oD3AkvgUD71ohAnJ4UZm3 0iIUXprhNCHKMaaJA2Tzerz7G+UXvmwdBM0KFMM4SkcsyGAriydDlgVHgMnyTNuV tBv0aZytlwdLJnEqhmP1hmive13xkf/0+0IKjNaXv7rHY1iq3cfnPLGBXFFB4jcq GPMFU/7J03ArVGU88cgBYRNzEVgTMnTOZv2HqziUkMU4whFpcfJYLWVyuSY2hqs/ LcquHORqqsrK688GGrDJmXwtHfj9r/LU -----END CERTIFICATE-----Generated at Fri May 16 17:49:36 2025 by rpki-client