$ rpki-client -vvf rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft File: oUygeMheRlNdkgQ4K4SXTxOwyTw.mft (raw, json) Hash identifier: TcM+xYB4VkopFSByYvhJdvtfrWLO3J4iqKGRJzYafsE= Subject key identifier: 70:47:BC:63:D8:98:47:F6:C1:A1:B8:D4:0A:DD:83:68:8C:3A:A2:B0 Authority key identifier: A1:4C:A0:78:C8:5E:46:53:5D:92:04:38:2B:84:97:4F:13:B0:C9:3C Certificate issuer: /CN=A91E83FE/serialNumber=A14CA078C85E46535D9204382B84974F13B0C93C Certificate serial: 04E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft Manifest number: 04D9 Signing time: Mon 12 May 2025 23:35:21 +0000 Manifest this update: Mon 12 May 2025 23:35:20 +0000 Manifest next update: Mon 19 May 2025 23:35:20 +0000 Files and hashes: 1: oUygeMheRlNdkgQ4K4SXTxOwyTw.crl (hash: 62OqO8mJXuRWknh7SjqeR+Gzj4rSc8DMaiGuklse4Jc=) 2: B90B58FCD97211ED8C2F1263C4F9AE02.roa (hash: Uv/DIuVOqvX05vXkqfaNSYJYxyqVmNJFQQZ426t0Ang=) 3: B9D90E00606311EE8844F941C4F9AE02.roa (hash: X2R7fBr7byP7M3KR3cBhw+xawX2t49iSaQy5emSoxD4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.crl rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 23:35:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1252 (0x4e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E83FE, serialNumber=A14CA078C85E46535D9204382B84974F13B0C93C Validity Not Before: May 12 23:35:20 2025 GMT Not After : May 19 23:35:20 2025 GMT Subject: CN=682285b9-f44f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b6:17:7f:2a:77:c8:be:78:a5:19:12:5e:ed: 14:13:ce:60:72:c3:8c:7b:12:a5:d1:c1:7c:5c:86: 2c:16:1c:b8:15:27:0b:c0:5c:e3:26:de:6b:f6:5b: 77:ce:3d:a5:b8:52:38:60:ef:f4:f7:11:b4:29:09: d9:4b:74:cf:3e:e5:54:b5:8c:3d:f9:bc:0b:db:a9: 82:06:6e:60:d9:06:1a:13:2c:61:1f:85:7b:37:3a: 4c:a7:62:84:76:d7:73:95:67:46:6c:9a:26:e2:4b: 12:8b:49:07:74:83:7a:52:ed:6d:7c:db:27:c3:cc: 6b:ea:d2:f0:fb:e5:78:d5:e0:34:59:8e:8b:08:f1: 12:82:fe:66:47:35:fc:2f:64:1c:03:75:97:d4:65: a1:8a:b8:f4:24:c5:ef:a0:55:1d:8e:71:92:ff:e2: ee:7e:eb:1b:0d:d5:f3:29:56:89:b9:1a:ea:69:a8: 19:7a:dd:5a:f0:6f:cb:8c:cd:49:e1:f1:f3:9a:62: 79:ab:67:12:a7:98:a7:d9:27:30:d8:ad:d6:ce:5b: ec:d9:84:53:f7:af:e1:03:b3:37:6c:94:f5:f5:b0: d4:df:fe:ad:a8:a0:c3:9a:31:f4:4f:10:3c:37:0c: 3e:f8:db:6f:26:55:fc:5e:cf:3b:df:75:ce:90:13: 8f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:47:BC:63:D8:98:47:F6:C1:A1:B8:D4:0A:DD:83:68:8C:3A:A2:B0 X509v3 Authority Key Identifier: keyid:A1:4C:A0:78:C8:5E:46:53:5D:92:04:38:2B:84:97:4F:13:B0:C9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:1e:c8:1a:d3:6f:a9:2b:0b:86:e5:98:16:33:33:d9:ca:ce: 82:62:60:59:c3:7d:f8:fb:da:83:d1:2c:6d:2a:ef:8b:3b:b7: 1d:bc:77:f3:14:85:e7:59:eb:f0:f9:57:de:e0:90:bf:06:d0: 5b:35:48:11:af:18:b1:57:25:aa:6e:aa:e5:84:64:e0:fc:9d: a1:b9:32:93:d4:e3:a5:a4:23:c3:76:3a:8a:3e:51:b8:dd:bb: 8b:66:0d:61:25:6d:18:af:24:23:48:8d:28:97:68:ed:6c:4f: fe:44:e5:ce:39:81:67:9c:4f:0b:83:4e:53:ce:c8:3f:ae:30: 49:dd:1b:40:49:42:5e:b1:8c:6e:4f:72:a3:88:7b:ff:7f:09: ed:27:f6:05:77:85:64:f3:1d:30:1d:3d:0a:48:c3:b2:b6:25: 88:5d:02:f6:a8:52:69:f9:5b:31:7a:45:43:7b:fe:3d:cb:c3: 84:7f:4f:ce:59:5e:1c:1c:6d:30:13:3c:4e:d2:f0:ef:5a:df: ea:11:8d:17:fc:3b:d1:93:5e:2c:7e:e0:c7:3c:aa:35:7a:74: 81:1c:39:77:69:df:3c:bd:ce:ad:d1:7f:e7:36:c1:76:31:16: a4:91:bb:6b:a3:7c:bb:c4:bf:03:79:df:15:54:a5:be:b9:96: 80:96:c2:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgzRkUxMTAvBgNVBAUTKEExNENBMDc4Qzg1RTQ2NTM1RDkyMDQzODJCODQ5NzRG MTNCMEM5M0MwHhcNMjUwNTEyMjMzNTIwWhcNMjUwNTE5MjMzNTIwWjAYMRYwFAYD VQQDEw02ODIyODViOS1mNDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0rYXfyp3yL54pRkSXu0UE85gcsOMexKl0cF8XIYsFhy4FScLwFzjJt5r9lt3 zj2luFI4YO/09xG0KQnZS3TPPuVUtYw9+bwL26mCBm5g2QYaEyxhH4V7NzpMp2KE dtdzlWdGbJom4ksSi0kHdIN6Uu1tfNsnw8xr6tLw++V41eA0WY6LCPESgv5mRzX8 L2QcA3WX1GWhirj0JMXvoFUdjnGS/+LufusbDdXzKVaJuRrqaagZet1a8G/LjM1J 4fHzmmJ5q2cSp5in2Scw2K3Wzlvs2YRT96/hA7M3bJT19bDU3/6tqKDDmjH0TxA8 Nww++NtvJlX8Xs8733XOkBOP0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHBHvGPY mEf2waG41Ardg2iMOqKwMB8GA1UdIwQYMBaAFKFMoHjIXkZTXZIEOCuEl08TsMk8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODNGRS8zMjk1RjkwMjFE QjMxMUVDODZFMDg2M0VDNEY5QUUwMi9vVXlnZU1oZVJsTmRrZ1E0SzRTWFR4T3d5 VHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29VeWdlTWhlUmxOZGtnUTRLNFNYVHhPd3lUdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODNGRS8zMjk1RjkwMjFEQjMxMUVDODZFMDg2M0VDNEY5QUUwMi9vVXlnZU1oZVJs TmRrZ1E0SzRTWFR4T3d5VHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAHsga02+pKwuG5ZgWMzPZys6CYmBZw334+9qD0SxtKu+LO7cdvHfz FIXnWevw+Vfe4JC/BtBbNUgRrxixVyWqbqrlhGTg/J2huTKT1OOlpCPDdjqKPlG4 3buLZg1hJW0YryQjSI0ol2jtbE/+ROXOOYFnnE8Lg05Tzsg/rjBJ3RtASUJesYxu T3KjiHv/fwntJ/YFd4Vk8x0wHT0KSMOytiWIXQL2qFJp+VsxekVDe/49y8OEf0/O WV4cHG0wEzxO0vDvWt/qEY0X/DvRk14sfuDHPKo1enSBHDl3ad88vc6t0X/nNsF2 MRakkbtro3y7xL8Ded8VVKW+uZaAlsJA -----END CERTIFICATE-----Generated at Tue May 13 23:09:09 2025 by rpki-client