$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft File: OopqLuXcCfyqgv8BjwnBr4S0EZY.mft (raw, json) Hash identifier: UomCyBvhLcddsVQGd5RPeBEKGDf7Blui9ZIh4AOLBuk= Subject key identifier: D4:2C:04:F7:D0:06:53:9A:F1:6F:07:09:B1:E4:F0:03:AC:43:A9:A0 Authority key identifier: 3A:8A:6A:2E:E5:DC:09:FC:AA:82:FF:01:8F:09:C1:AF:84:B4:11:96 Certificate issuer: /CN=A91CCCDD/serialNumber=3A8A6A2EE5DC09FCAA82FF018F09C1AF84B41196 Certificate serial: 01B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft Manifest number: 01B3 Signing time: Thu 15 May 2025 02:36:52 +0000 Manifest this update: Thu 15 May 2025 02:36:51 +0000 Manifest next update: Thu 22 May 2025 02:36:51 +0000 Files and hashes: 1: OopqLuXcCfyqgv8BjwnBr4S0EZY.crl (hash: GZCAuURYqGZVAbNwWRj4rOOs8OEpdCC311yACG1CCVY=) 2: F77C1438964111EDAAB8E74AC4F9AE02.roa (hash: VtazFFTqbixljqAtcsaeza2iwr0OPiOznwFcK1HtWtU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.crl rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 02:36:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 438 (0x1b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCCDD, serialNumber=3A8A6A2EE5DC09FCAA82FF018F09C1AF84B41196 Validity Not Before: May 15 02:36:51 2025 GMT Not After : May 22 02:36:51 2025 GMT Subject: CN=68255343-1ae4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:57:b4:d9:11:30:95:81:ff:72:00:e9:f3:c0: 31:9d:9c:0c:2e:3a:b4:2f:c9:4f:55:6b:92:9d:83: 93:fd:ac:4b:80:eb:50:91:9d:d6:f1:0e:c9:c8:55: 1c:88:ba:3b:de:3d:60:ae:a0:1c:71:63:42:2c:3b: 78:c7:52:0a:4f:64:81:fd:52:02:e3:f0:83:76:24: 0f:0c:63:69:a3:0a:cc:60:b6:eb:c7:5e:c0:39:cd: a7:4a:89:65:37:a2:07:dc:aa:ab:45:ba:0d:aa:71: d9:40:35:a5:15:ad:1f:7f:bb:82:47:72:ec:28:0c: 2b:0b:2b:62:74:a0:99:02:d6:91:86:81:ac:cd:04: 2b:ff:50:f0:e3:21:c1:a0:94:f6:cc:67:a1:ba:e4: 03:52:f3:45:ec:3e:f6:56:3c:be:ee:5c:60:ad:ea: ab:37:d3:d6:71:a5:7a:d8:50:c3:9b:84:4b:d5:5b: fa:de:e5:0e:d2:e7:96:af:ef:0f:f7:f3:d2:31:4d: 98:a8:34:aa:ee:32:5e:d2:21:50:35:e2:8c:5e:81: 90:8d:8e:be:cd:ff:c8:b8:e1:9e:c3:f6:aa:2f:05: 16:44:1e:93:d4:9a:5c:19:12:9f:c1:fb:4a:1c:cf: 90:64:04:54:40:ac:63:29:9b:26:25:69:00:f1:eb: 07:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:2C:04:F7:D0:06:53:9A:F1:6F:07:09:B1:E4:F0:03:AC:43:A9:A0 X509v3 Authority Key Identifier: keyid:3A:8A:6A:2E:E5:DC:09:FC:AA:82:FF:01:8F:09:C1:AF:84:B4:11:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:ed:5a:8a:f5:8a:03:75:97:a5:99:8f:80:c1:ce:52:46:ab: 36:f1:9e:84:14:36:a1:ac:bf:0d:67:e7:4e:0b:6b:98:06:ff: 85:ee:48:f4:4e:7b:f7:73:ab:1a:af:f1:eb:3d:66:c3:14:b4: a3:ac:31:0d:e9:50:05:13:92:9d:8a:73:c0:36:ba:f5:2e:e1: 57:1e:27:fe:db:c9:f3:fd:62:49:02:bc:79:bb:7a:d9:fd:f8: 75:c3:36:d5:07:3f:cc:45:f3:30:8d:fa:28:62:e5:b6:d1:89: 3f:e2:06:ee:b5:9a:93:7e:80:1a:ec:39:2d:f7:2c:d3:90:a0: 2f:db:fa:65:c4:ac:33:9e:b2:6f:fc:1f:06:f3:e6:b1:af:20: 3c:76:f4:c8:c0:b4:d6:15:d6:e4:2a:30:bc:4f:69:ea:5a:97: fc:92:3d:7d:7d:bf:8b:09:0a:ca:d1:6d:90:39:b7:6a:80:ef: e4:7d:e4:9b:96:7e:e4:99:26:92:52:df:2a:03:ad:f9:b1:ac: 35:4a:f9:30:a3:e7:9e:c5:ad:88:8b:21:ba:b5:f7:b0:62:ea: ca:be:9f:9e:54:d7:b4:cb:8c:3f:81:d4:39:f5:32:35:cb:7a: ba:55:f9:5e:2d:e7:a0:7d:af:6c:c0:db:43:df:c6:6b:21:64: 34:aa:49:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NDREQxMTAvBgNVBAUTKDNBOEE2QTJFRTVEQzA5RkNBQTgyRkYwMThGMDlDMUFG ODRCNDExOTYwHhcNMjUwNTE1MDIzNjUxWhcNMjUwNTIyMDIzNjUxWjAYMRYwFAYD VQQDEw02ODI1NTM0My0xYWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Fe02REwlYH/cgDp88AxnZwMLjq0L8lPVWuSnYOT/axLgOtQkZ3W8Q7JyFUc iLo73j1grqAccWNCLDt4x1IKT2SB/VIC4/CDdiQPDGNpowrMYLbrx17AOc2nSoll N6IH3KqrRboNqnHZQDWlFa0ff7uCR3LsKAwrCytidKCZAtaRhoGszQQr/1Dw4yHB oJT2zGehuuQDUvNF7D72Vjy+7lxgreqrN9PWcaV62FDDm4RL1Vv63uUO0ueWr+8P 9/PSMU2YqDSq7jJe0iFQNeKMXoGQjY6+zf/IuOGew/aqLwUWRB6T1JpcGRKfwftK HM+QZARUQKxjKZsmJWkA8esHjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNQsBPfQ BlOa8W8HCbHk8AOsQ6mgMB8GA1UdIwQYMBaAFDqKai7l3An8qoL/AY8Jwa+EtBGW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0NERC9GM0JCRTc2RTk2 M0QxMUVEQkUzRkQwMUFDNEY5QUUwMi9Pb3BxTHVYY0NmeXFndjhCanduQnI0UzBF WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09vcHFMdVhjQ2Z5cWd2OEJqd25CcjRTMEVaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0NERC9GM0JCRTc2RTk2M0QxMUVEQkUzRkQwMUFDNEY5QUUwMi9Pb3BxTHVYY0Nm eXFndjhCanduQnI0UzBFWlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZ7VqK9YoDdZelmY+Awc5SRqs28Z6EFDahrL8NZ+dOC2uYBv+F7kj0 Tnv3c6sar/HrPWbDFLSjrDEN6VAFE5KdinPANrr1LuFXHif+28nz/WJJArx5u3rZ /fh1wzbVBz/MRfMwjfooYuW20Yk/4gbutZqTfoAa7Dkt9yzTkKAv2/plxKwznrJv /B8G8+axryA8dvTIwLTWFdbkKjC8T2nqWpf8kj19fb+LCQrK0W2QObdqgO/kfeSb ln7kmSaSUt8qA635saw1Svkwo+eexa2IiyG6tfewYurKvp+eVNe0y4w/gdQ59TI1 y3q6VfleLeegfa9swNtD38ZrIWQ0qknK -----END CERTIFICATE-----Generated at Fri May 16 14:26:49 2025 by rpki-client