$ rpki-client -vvf rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft File: OoeHHjuuZe3i8xuxrVxZu3p0q90.mft (raw, json) Hash identifier: MYIpKGxtKdTCSDsYwWeO0tv/QK50msgBOVp5YmWcw8o= Subject key identifier: 37:74:50:7B:E6:BC:E3:A3:BA:58:9B:2E:2A:08:8C:CD:71:FC:82:62 Authority key identifier: 3A:87:87:1E:3B:AE:65:ED:E2:F3:1B:B1:AD:5C:59:BB:7A:74:AB:DD Certificate issuer: /CN=A91B87FC/serialNumber=3A87871E3BAE65EDE2F31BB1AD5C59BB7A74ABDD Certificate serial: 77 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft Manifest number: 74 Signing time: Thu 15 May 2025 06:07:38 +0000 Manifest this update: Thu 15 May 2025 06:07:38 +0000 Manifest next update: Thu 22 May 2025 06:07:38 +0000 Files and hashes: 1: OoeHHjuuZe3i8xuxrVxZu3p0q90.crl (hash: mP+JsZ+PLGkhDzUKZsQhrFQZ9+27oDj436+d6Usdaeo=) 2: 5E85AD042B1B11F0AE3E223BC4F9AE02.roa (hash: ehnqd1f3QowHKupxZCgtiZG9EfVwv3NoZQIQlB2w/i4=) 3: 64517A3886E311EFA2B33527C4F9AE02.roa (hash: a8PUztMZjKwlO5oAsBw+JL1gQU9NMI2G6jad/TSX5I0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.crl rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:07:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B87FC, serialNumber=3A87871E3BAE65EDE2F31BB1AD5C59BB7A74ABDD Validity Not Before: May 15 06:07:38 2025 GMT Not After : May 22 06:07:38 2025 GMT Subject: CN=682584aa-df4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ff:97:8e:4c:3f:a3:82:17:81:9f:b2:10:42: 66:22:a9:70:33:93:83:81:3c:b7:69:4e:41:a7:84: 08:c7:94:4c:3e:a9:b5:ab:7a:1a:40:34:ca:fc:44: 06:f9:ba:cc:ea:76:ee:18:96:7a:7b:a7:8a:71:cc: a1:63:fa:a3:6f:6f:32:80:0e:02:f3:34:f4:a6:57: 49:98:ec:d7:b5:b5:f3:7f:61:f2:ec:52:eb:ea:48: d2:b8:62:a5:32:8c:53:a9:c5:64:e6:1e:c0:7a:41: f0:3f:3d:3b:8c:ce:aa:a2:f2:61:20:b9:0c:27:4f: cf:9e:52:74:ab:d1:cc:7f:c1:81:63:2b:5f:b6:cf: df:1e:e4:60:f3:0c:8e:9d:71:bd:eb:10:9a:82:0e: f3:97:09:2d:bf:cc:c9:4b:56:4e:74:2b:b1:f5:fe: 2a:20:f0:66:ac:fd:3b:85:30:d8:67:aa:68:5a:60: b4:5c:b1:00:ba:9d:98:49:b2:9e:e0:05:53:48:6d: 92:6e:e8:13:0d:7b:ea:04:4b:27:5d:d7:90:5d:7f: 62:39:56:b9:fc:77:f2:5a:88:24:02:44:a6:2f:05: 93:1e:26:f8:28:7c:f6:e4:d5:3a:c0:b9:17:4d:8e: b8:db:00:58:37:89:36:63:cb:01:4b:88:6b:e9:50: 9a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:74:50:7B:E6:BC:E3:A3:BA:58:9B:2E:2A:08:8C:CD:71:FC:82:62 X509v3 Authority Key Identifier: keyid:3A:87:87:1E:3B:AE:65:ED:E2:F3:1B:B1:AD:5C:59:BB:7A:74:AB:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:d5:53:d1:60:9a:50:f1:fe:78:e0:00:cd:70:83:a6:39:4c: 42:2b:c8:f4:a6:d2:35:0e:7b:11:83:92:34:e3:ca:5b:5b:66: bf:d9:a5:4e:46:07:d6:8a:d6:54:75:6f:7b:6f:ca:9c:4d:3c: aa:1a:9a:db:fa:8a:65:d9:6c:e7:bf:39:a7:17:d4:8b:c4:12: d1:b4:cf:54:37:be:01:c9:04:65:1e:6a:37:6b:75:b4:7d:0c: 60:ee:a7:d1:58:8e:fb:14:bb:37:43:81:dd:14:19:9e:3c:91: 84:f8:89:99:b7:c7:6b:da:b3:1c:d7:f5:e6:e8:7c:af:99:e1: 0d:02:12:5d:42:42:fe:83:bd:39:7d:1a:53:6c:c9:d0:90:20: da:61:9e:38:27:03:9f:5c:10:8f:1c:82:fa:17:20:d6:78:ee: ed:d4:34:c3:8e:6c:56:ee:d2:a9:71:52:33:b4:50:d1:d0:1f: 96:dd:21:de:f4:ef:64:2c:fd:0e:aa:2c:c8:bd:df:fb:fa:a9: 2d:fb:9a:8b:9a:37:35:75:55:83:3a:0a:4a:3c:02:a3:f3:f2: b4:de:c5:62:ee:15:0f:84:b2:d1:c2:8d:f6:96:ef:7a:91:b0: 8d:7f:3d:7d:98:01:8e:fd:4a:6c:b4:5d:cf:39:cd:af:57:02: 13:cf:bf:ba -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC ODdGQzExMC8GA1UEBRMoM0E4Nzg3MUUzQkFFNjVFREUyRjMxQkIxQUQ1QzU5QkI3 QTc0QUJERDAeFw0yNTA1MTUwNjA3MzhaFw0yNTA1MjIwNjA3MzhaMBgxFjAUBgNV BAMTDTY4MjU4NGFhLWRmNGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJ/5eOTD+jgheBn7IQQmYiqXAzk4OBPLdpTkGnhAjHlEw+qbWrehpANMr8RAb5 uszqdu4Ylnp7p4pxzKFj+qNvbzKADgLzNPSmV0mY7Ne1tfN/YfLsUuvqSNK4YqUy jFOpxWTmHsB6QfA/PTuMzqqi8mEguQwnT8+eUnSr0cx/wYFjK1+2z98e5GDzDI6d cb3rEJqCDvOXCS2/zMlLVk50K7H1/iog8Gas/TuFMNhnqmhaYLRcsQC6nZhJsp7g BVNIbZJu6BMNe+oESydd15Bdf2I5Vrn8d/JaiCQCRKYvBZMeJvgofPbk1TrAuRdN jrjbAFg3iTZjywFLiGvpUJrtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUN3RQe+a8 46O6WJsuKgiMzXH8gmIwHwYDVR0jBBgwFoAUOoeHHjuuZe3i8xuxrVxZu3p0q90w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4N0ZDLzM5NzhFMzE2ODZF MTExRUY4Rjc3M0Y4MkM0RjlBRTAyL09vZUhIanV1WmUzaTh4dXhyVnhadTNwMHE5 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvT29lSEhqdXVaZTNpOHh1eHJWeFp1M3AwcTkwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 N0ZDLzM5NzhFMzE2ODZFMTExRUY4Rjc3M0Y4MkM0RjlBRTAyL09vZUhIanV1WmUz aTh4dXhyVnhadTNwMHE5MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADDVU9FgmlDx/njgAM1wg6Y5TEIryPSm0jUOexGDkjTjyltbZr/ZpU5G B9aK1lR1b3tvypxNPKoamtv6imXZbOe/OacX1IvEEtG0z1Q3vgHJBGUeajdrdbR9 DGDup9FYjvsUuzdDgd0UGZ48kYT4iZm3x2vasxzX9ebofK+Z4Q0CEl1CQv6DvTl9 GlNsydCQINphnjgnA59cEI8cgvoXINZ47u3UNMOObFbu0qlxUjO0UNHQH5bdId70 72Qs/Q6qLMi93/v6qS37mouaNzV1VYM6Cko8AqPz8rTexWLuFQ+EstHCjfaW73qR sI1/PX2YAY79Smy0Xc85za9XAhPPv7o= -----END CERTIFICATE-----Generated at Fri May 16 12:59:05 2025 by rpki-client