$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft File: OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft (raw, json) Hash identifier: 0NMGNCtwX3fU52E3LGwWAdKnR6fehmuRo8YyjXC+P3g= Subject key identifier: 80:6A:CA:07:D6:F1:6D:D7:78:CA:96:B8:4A:22:3A:BB:F7:5A:12:4E Authority key identifier: 38:1E:53:48:50:46:CB:30:27:91:C9:09:F2:DB:D6:7D:AF:8D:78:1A Certificate issuer: /CN=A91DB0C2/serialNumber=381E53485046CB302791C909F2DBD67DAF8D781A Certificate serial: 0A71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OB5TSFBGyzAnkckJ8tvWfa-NeBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft Manifest number: 0A6A Signing time: Sat 10 May 2025 19:23:02 +0000 Manifest this update: Sat 10 May 2025 19:23:02 +0000 Manifest next update: Sat 17 May 2025 19:23:02 +0000 Files and hashes: 1: OB5TSFBGyzAnkckJ8tvWfa-NeBo.crl (hash: iWI35+E0nh2gGCczi4tq3sare0f8n2Dj4bS6f2mB2nE=) 2: E8DA2D1C5F5211EABFCF4128C4F9AE02.roa (hash: RsV1HG0sblH5nYeZVkL9f/OZ/ev49KnYKTaHyjLrK0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.crl rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OB5TSFBGyzAnkckJ8tvWfa-NeBo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 19:23:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2673 (0xa71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB0C2, serialNumber=381E53485046CB302791C909F2DBD67DAF8D781A Validity Not Before: May 10 19:23:02 2025 GMT Not After : May 17 19:23:02 2025 GMT Subject: CN=681fa796-a166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4a:1b:ff:80:b8:c3:26:6c:b1:89:d9:bf:11: 2b:34:b3:0d:b9:06:31:40:0d:ee:b0:8b:ee:47:f2: c6:45:10:0d:63:9f:49:dd:98:f6:29:52:09:c9:67: fe:7f:cb:35:a4:a9:bb:f0:1c:b6:50:4f:7b:51:1a: ee:ea:ad:a2:e8:a5:8a:2b:33:1e:10:f9:d2:5a:57: e9:1f:3b:03:f6:f2:f5:07:2a:6a:48:61:1f:6c:23: 5b:6d:f9:d1:81:12:17:fe:7d:bc:2c:14:06:a8:64: 81:6d:97:9a:3d:bf:be:ca:b1:83:3a:ec:63:56:1f: 8e:2d:ed:73:23:00:a4:db:f2:8a:e9:f4:77:b5:97: 21:87:62:23:8f:ce:b2:64:31:43:11:25:b3:02:c0: 86:90:ff:cb:66:66:c1:22:68:3a:fd:34:ae:07:eb: 59:87:14:ad:41:c4:a8:b6:b7:2c:dc:c7:9b:2d:57: cb:23:13:ce:b5:e8:05:5a:1e:15:19:1c:89:17:34: b8:19:82:0b:bd:3f:f2:d5:a7:20:67:82:f0:c1:ad: b6:43:78:0a:3b:07:37:87:b4:ca:01:be:9c:4b:39: ca:4d:6d:56:8d:8c:cf:c7:20:cd:e1:e0:43:23:fa: b7:50:4b:e0:d3:85:b0:93:0b:18:45:eb:f6:0d:51: e8:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:6A:CA:07:D6:F1:6D:D7:78:CA:96:B8:4A:22:3A:BB:F7:5A:12:4E X509v3 Authority Key Identifier: keyid:38:1E:53:48:50:46:CB:30:27:91:C9:09:F2:DB:D6:7D:AF:8D:78:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OB5TSFBGyzAnkckJ8tvWfa-NeBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:18:97:ae:a3:b1:81:d0:12:ff:12:4d:d1:9b:11:73:1d:df: c7:31:7b:e6:84:22:ab:71:66:56:bd:56:ef:17:51:f0:f3:36: 2b:da:c4:e1:9a:44:62:d9:84:9e:94:44:03:5e:48:8b:7d:0a: 2f:8a:ca:5e:39:7c:84:d7:fb:b6:4b:62:a4:ce:6c:67:3f:d0: 75:63:10:29:42:52:94:10:fe:68:2c:a5:7a:e5:12:c6:5b:a6: 82:04:a8:2a:78:51:2b:3b:fe:c7:f7:70:2c:1d:db:d1:36:09: 54:e8:06:57:d9:9d:1f:0b:57:0d:60:55:76:40:b1:50:8c:cb: 86:01:de:21:a4:5a:5d:aa:e0:fd:92:2f:75:bf:88:45:67:3d: cb:83:81:b5:95:8e:81:87:ce:8d:f5:77:ab:e2:a1:d2:07:41: 58:47:c4:18:06:db:2e:25:2a:81:58:9e:6d:e7:de:98:ad:72: 6d:a9:4e:64:c7:33:ca:b3:36:75:57:2a:02:d7:d3:24:45:30: eb:6b:60:36:87:e6:05:ab:8b:50:89:26:a1:8b:6f:5d:44:fb: 36:95:b9:b4:2d:f5:1d:67:13:7a:57:02:48:db:79:23:f7:3a: 72:f8:dc:aa:20:e1:3b:e0:c1:81:45:9c:19:7f:4f:59:21:5e: 03:55:29:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIwQzIxMTAvBgNVBAUTKDM4MUU1MzQ4NTA0NkNCMzAyNzkxQzkwOUYyREJENjdE QUY4RDc4MUEwHhcNMjUwNTEwMTkyMzAyWhcNMjUwNTE3MTkyMzAyWjAYMRYwFAYD VQQDEw02ODFmYTc5Ni1hMTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Uob/4C4wyZssYnZvxErNLMNuQYxQA3usIvuR/LGRRANY59J3Zj2KVIJyWf+ f8s1pKm78By2UE97URru6q2i6KWKKzMeEPnSWlfpHzsD9vL1BypqSGEfbCNbbfnR gRIX/n28LBQGqGSBbZeaPb++yrGDOuxjVh+OLe1zIwCk2/KK6fR3tZchh2Ijj86y ZDFDESWzAsCGkP/LZmbBImg6/TSuB+tZhxStQcSotrcs3MebLVfLIxPOtegFWh4V GRyJFzS4GYILvT/y1acgZ4Lwwa22Q3gKOwc3h7TKAb6cSznKTW1WjYzPxyDN4eBD I/q3UEvg04WwkwsYRev2DVHoTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIBqygfW 8W3XeMqWuEoiOrv3WhJOMB8GA1UdIwQYMBaAFDgeU0hQRsswJ5HJCfLb1n2vjXga MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjBDMi9GRDg4MzgyMjVG NTExMUVBODk5OTNEMjdDNEY5QUUwMi9PQjVUU0ZCR3l6QW5rY2tKOHR2V2ZhLU5l Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09CNVRTRkJHeXpBbmtja0o4dHZXZmEtTmVCby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjBDMi9GRDg4MzgyMjVGNTExMUVBODk5OTNEMjdDNEY5QUUwMi9PQjVUU0ZCR3l6 QW5rY2tKOHR2V2ZhLU5lQm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3GJeuo7GB0BL/Ek3RmxFzHd/HMXvmhCKrcWZWvVbvF1Hw8zYr2sTh mkRi2YSelEQDXkiLfQovispeOXyE1/u2S2KkzmxnP9B1YxApQlKUEP5oLKV65RLG W6aCBKgqeFErO/7H93AsHdvRNglU6AZX2Z0fC1cNYFV2QLFQjMuGAd4hpFpdquD9 ki91v4hFZz3Lg4G1lY6Bh86N9Xer4qHSB0FYR8QYBtsuJSqBWJ5t596YrXJtqU5k xzPKszZ1VyoC19MkRTDra2A2h+YFq4tQiSahi29dRPs2lbm0LfUdZxN6VwJI23kj 9zpy+NyqIOE74MGBRZwZf09ZIV4DVSlU -----END CERTIFICATE-----Generated at Mon May 12 19:25:05 2025 by rpki-client