$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft File: oNGf1mnyVeFici98GdiGS7Brc5k.mft (raw, json) Hash identifier: bqZ4prCAK8c2jQOZgwmlyRifC/dz1h/m7f8rcPK2EYo= Subject key identifier: 21:DA:0F:71:E8:0E:2F:8B:D6:97:F8:00:00:D4:C0:77:38:DF:56:8C Authority key identifier: A0:D1:9F:D6:69:F2:55:E1:62:72:2F:7C:19:D8:86:4B:B0:6B:73:99 Certificate issuer: /CN=A91DEC72/serialNumber=A0D19FD669F255E162722F7C19D8864BB06B7399 Certificate serial: 0148 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNGf1mnyVeFici98GdiGS7Brc5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft Manifest number: 0147 Signing time: Sun 11 May 2025 03:09:33 +0000 Manifest this update: Sun 11 May 2025 03:09:32 +0000 Manifest next update: Sun 18 May 2025 03:09:32 +0000 Files and hashes: 1: oNGf1mnyVeFici98GdiGS7Brc5k.crl (hash: d4jr0AswPOLAIBhAoTFuvZgwiFrJm3v1kNLxf1QIe8c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.crl rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNGf1mnyVeFici98GdiGS7Brc5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 03:09:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 328 (0x148) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEC72, serialNumber=A0D19FD669F255E162722F7C19D8864BB06B7399 Validity Not Before: May 11 03:09:32 2025 GMT Not After : May 18 03:09:32 2025 GMT Subject: CN=682014ec-6b7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:97:dc:f5:32:77:ff:91:a6:1b:cd:17:f5:1b: 2d:97:0a:ee:78:ed:b7:2a:00:36:74:9a:23:50:8a: 61:da:4d:8b:0c:e8:b3:b6:e2:b4:1e:00:61:07:63: 51:57:e9:02:a2:01:48:af:e6:d9:ce:f2:a0:e4:4d: be:2a:b2:6e:09:c7:d8:28:b5:2a:6d:48:f8:36:94: ff:34:85:3c:ed:07:9b:1b:d2:7b:c9:d0:78:54:da: 70:46:ac:b7:76:e6:cf:a6:dd:2f:44:21:2f:aa:e9: f5:9f:2b:7b:a2:56:95:7c:3a:3b:49:e7:3b:52:60: 8b:6a:f7:26:d1:c8:2f:74:05:31:38:df:3b:ce:ad: c7:86:be:11:1f:6e:0c:8a:aa:f3:ed:f7:db:e6:92: 81:7a:19:05:c6:e1:a3:1b:57:54:27:c9:e6:59:1d: 3b:04:c6:24:ef:75:0f:75:0a:71:f0:03:3e:44:40: c8:e8:cc:f2:ae:26:ec:d1:4d:46:53:c9:4c:5a:25: 84:75:ff:d3:48:eb:da:13:f2:ea:78:00:2a:56:f2: 9b:c1:e0:bc:0f:c5:2f:32:24:f5:f3:d7:00:42:08: a5:64:36:f4:98:0d:42:07:f1:7e:2c:39:38:b7:48: 29:17:f2:8c:ca:d1:4f:10:de:b2:2c:7c:b5:88:4b: 8f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:DA:0F:71:E8:0E:2F:8B:D6:97:F8:00:00:D4:C0:77:38:DF:56:8C X509v3 Authority Key Identifier: keyid:A0:D1:9F:D6:69:F2:55:E1:62:72:2F:7C:19:D8:86:4B:B0:6B:73:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNGf1mnyVeFici98GdiGS7Brc5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:13:ff:7a:a1:03:0e:7f:a9:8b:69:b2:01:d8:d7:f6:33:2e: b9:b7:d0:5f:f4:eb:4a:84:1c:e8:0f:54:fd:04:8f:92:9c:5d: 54:db:e8:15:fd:35:2c:da:da:5d:dc:60:9c:35:b3:7b:64:85: 4b:4e:c8:e0:fd:fc:f6:90:2e:cf:c8:62:64:18:38:cb:d3:26: 5e:b6:77:ce:5f:9a:6b:7a:f7:a0:6a:ac:41:35:72:34:80:df: 9b:69:0a:44:bb:fb:64:47:f1:4a:8a:f1:5c:33:72:75:4a:e7: b8:88:c2:eb:a8:ea:c2:b1:e8:e5:2a:17:e1:af:77:3e:02:1a: d6:6f:64:6f:b3:c6:8b:77:a6:04:ac:a4:0a:dd:06:0d:b3:13: 4f:08:ee:40:8d:86:92:71:f3:58:20:59:ad:fe:42:39:2f:60: bc:0a:94:82:2f:9a:1b:3c:80:5e:27:db:dd:8c:3a:88:c1:2d: b2:e7:2b:0c:a8:d2:64:65:7c:c3:63:e4:37:75:d5:67:c1:52: db:5e:f1:dd:c6:74:3a:22:09:65:1d:0d:71:d6:a8:5b:c7:58: a1:10:54:6f:25:e0:fc:98:9a:44:27:bd:43:e2:53:a4:91:12: 49:6a:56:41:9a:52:d6:d5:57:68:1a:f0:fc:3f:3a:74:35:a4: 53:87:61:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVDNzIxMTAvBgNVBAUTKEEwRDE5RkQ2NjlGMjU1RTE2MjcyMkY3QzE5RDg4NjRC QjA2QjczOTkwHhcNMjUwNTExMDMwOTMyWhcNMjUwNTE4MDMwOTMyWjAYMRYwFAYD VQQDEw02ODIwMTRlYy02YjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1pfc9TJ3/5GmG80X9RstlwrueO23KgA2dJojUIph2k2LDOiztuK0HgBhB2NR V+kCogFIr+bZzvKg5E2+KrJuCcfYKLUqbUj4NpT/NIU87QebG9J7ydB4VNpwRqy3 dubPpt0vRCEvqun1nyt7olaVfDo7Sec7UmCLavcm0cgvdAUxON87zq3Hhr4RH24M iqrz7ffb5pKBehkFxuGjG1dUJ8nmWR07BMYk73UPdQpx8AM+REDI6Mzyribs0U1G U8lMWiWEdf/TSOvaE/LqeAAqVvKbweC8D8UvMiT189cAQgilZDb0mA1CB/F+LDk4 t0gpF/KMytFPEN6yLHy1iEuP8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCHaD3Ho Di+L1pf4AADUwHc431aMMB8GA1UdIwQYMBaAFKDRn9Zp8lXhYnIvfBnYhkuwa3OZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUM3Mi8zRjcxRkY4ODNC OTExMUVFQUM2MTdFNkFDNEY5QUUwMi9vTkdmMW1ueVZlRmljaTk4R2RpR1M3QnJj NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29OR2YxbW55VmVGaWNpOThHZGlHUzdCcmM1ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUM3Mi8zRjcxRkY4ODNCOTExMUVFQUM2MTdFNkFDNEY5QUUwMi9vTkdmMW1ueVZl RmljaTk4R2RpR1M3QnJjNWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5E/96oQMOf6mLabIB2Nf2My65t9Bf9OtKhBzoD1T9BI+SnF1U2+gV /TUs2tpd3GCcNbN7ZIVLTsjg/fz2kC7PyGJkGDjL0yZetnfOX5prevegaqxBNXI0 gN+baQpEu/tkR/FKivFcM3J1Sue4iMLrqOrCsejlKhfhr3c+AhrWb2Rvs8aLd6YE rKQK3QYNsxNPCO5AjYaScfNYIFmt/kI5L2C8CpSCL5obPIBeJ9vdjDqIwS2y5ysM qNJkZXzDY+Q3ddVnwVLbXvHdxnQ6IgllHQ1x1qhbx1ihEFRvJeD8mJpEJ71D4lOk kRJJalZBmlLW1VdoGvD8Pzp0NaRTh2Ey -----END CERTIFICATE-----Generated at Mon May 12 22:47:31 2025 by rpki-client