$ rpki-client -vvf rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.mft File: owBvXZI9TJzDuBs4ocpnEnR9RAY.mft (raw, json) Hash identifier: 51C2mYMkkBibxrQCvLc/jEnm7uQoxzM/D19npcQIxHo= Subject key identifier: C4:12:CF:BB:F5:F4:56:3D:CD:AF:22:37:D2:AA:EE:F0:72:1B:3A:3F Authority key identifier: A3:00:6F:5D:92:3D:4C:9C:C3:B8:1B:38:A1:CA:67:12:74:7D:44:06 Certificate issuer: /CN=A91185B8/serialNumber=A3006F5D923D4C9CC3B81B38A1CA6712747D4406 Certificate serial: 019A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owBvXZI9TJzDuBs4ocpnEnR9RAY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.mft Manifest number: 0199 Signing time: Tue 13 May 2025 02:39:40 +0000 Manifest this update: Tue 13 May 2025 02:39:39 +0000 Manifest next update: Tue 20 May 2025 02:39:39 +0000 Files and hashes: 1: owBvXZI9TJzDuBs4ocpnEnR9RAY.crl (hash: 2B4WKht9w6V41trQU+bN+gjvebLNnFXSrwSPU94lV/4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.crl rsync://rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owBvXZI9TJzDuBs4ocpnEnR9RAY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:39:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 410 (0x19a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91185B8, serialNumber=A3006F5D923D4C9CC3B81B38A1CA6712747D4406 Validity Not Before: May 13 02:39:39 2025 GMT Not After : May 20 02:39:39 2025 GMT Subject: CN=6822b0ec-d766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:24:39:84:fc:6b:98:90:97:84:d8:95:a6:f6: 8d:2d:ec:95:e2:b2:a2:cb:ef:a9:60:b6:0d:b7:54: cd:a0:c9:6c:bf:6f:00:17:2e:9f:3d:76:98:52:15: f5:a8:6c:6e:d6:2c:63:52:97:f7:a1:b9:94:d6:55: 9b:18:b9:21:8f:67:1e:eb:3b:21:ce:1c:11:60:14: e3:66:91:29:a5:6d:56:50:2a:dc:0b:cb:74:f0:c4: 54:f1:4c:18:8a:30:7d:33:23:d9:f9:28:a6:92:ab: 46:59:4a:ac:9f:32:57:60:38:c3:85:67:a4:8f:b3: e6:15:bd:ab:08:f5:f5:69:83:b9:03:f9:95:66:18: 55:e4:62:cf:b5:3a:af:33:cb:a0:cb:73:37:c9:3e: 54:d0:ed:25:da:bb:0c:e4:4c:f4:06:72:2a:e4:06: ae:eb:a0:4a:67:5a:4b:76:bd:23:97:81:39:e6:99: 16:a4:b1:ba:65:ca:7d:dd:3f:59:36:6d:c4:5f:c4: 9a:5a:b3:44:e4:d7:34:ce:db:1e:af:72:69:05:0b: f6:8d:56:f3:96:9e:2e:b6:dd:e7:82:62:9b:d9:0f: 81:ca:30:95:1a:73:da:40:d6:a9:f7:70:8d:a1:85: cc:aa:fe:dc:3e:17:00:3f:7a:1d:92:ae:3b:1e:ee: 7a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:12:CF:BB:F5:F4:56:3D:CD:AF:22:37:D2:AA:EE:F0:72:1B:3A:3F X509v3 Authority Key Identifier: keyid:A3:00:6F:5D:92:3D:4C:9C:C3:B8:1B:38:A1:CA:67:12:74:7D:44:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owBvXZI9TJzDuBs4ocpnEnR9RAY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:c9:30:02:45:d4:d5:ca:ce:ea:fa:dc:9c:92:ba:32:9a:de: 75:ee:db:90:bd:cf:6f:0c:7d:f6:c5:f9:a4:d4:5d:65:10:61: a2:b8:1b:50:be:da:e9:d2:7f:30:90:bc:34:8b:ac:2e:b7:64: 04:29:cb:5b:85:05:d0:1e:ba:49:33:35:5d:49:a6:aa:da:dc: da:55:f6:d7:64:4e:f9:0c:48:df:6a:5c:76:fc:c3:e8:43:1d: 40:35:ff:a7:4b:8f:c3:04:b2:db:05:ca:1d:27:6f:7a:ea:10: 3e:12:68:6b:78:f2:1a:2e:01:51:2a:a5:e3:ba:72:9d:40:bb: 2d:70:45:e0:49:28:06:6e:68:14:59:92:79:2a:e8:d8:0c:f5: 8c:a4:23:e3:87:6a:1b:2d:83:35:d7:5a:94:7b:9f:f4:7a:08: ff:85:cc:83:35:a6:c1:8e:08:8c:65:5f:c1:e2:58:c1:6f:66: ca:f9:1c:24:09:d7:b1:a9:75:e8:2d:d3:99:77:c3:06:49:84: d5:89:7d:a3:54:35:3a:4d:9f:c1:96:24:cc:52:fe:e6:4e:c3: 68:07:e3:7e:e2:88:ac:08:5c:b2:d8:12:2c:36:9d:d5:c0:76: 2b:90:c0:10:93:6f:92:f7:04:59:67:f0:50:80:e6:d0:ec:c6: c6:e4:8d:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg1QjgxMTAvBgNVBAUTKEEzMDA2RjVEOTIzRDRDOUNDM0I4MUIzOEExQ0E2NzEy NzQ3RDQ0MDYwHhcNMjUwNTEzMDIzOTM5WhcNMjUwNTIwMDIzOTM5WjAYMRYwFAYD VQQDEw02ODIyYjBlYy1kNzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuyQ5hPxrmJCXhNiVpvaNLeyV4rKiy++pYLYNt1TNoMlsv28AFy6fPXaYUhX1 qGxu1ixjUpf3obmU1lWbGLkhj2ce6zshzhwRYBTjZpEppW1WUCrcC8t08MRU8UwY ijB9MyPZ+SimkqtGWUqsnzJXYDjDhWekj7PmFb2rCPX1aYO5A/mVZhhV5GLPtTqv M8ugy3M3yT5U0O0l2rsM5Ez0BnIq5Aau66BKZ1pLdr0jl4E55pkWpLG6Zcp93T9Z Nm3EX8SaWrNE5Nc0ztser3JpBQv2jVbzlp4utt3ngmKb2Q+ByjCVGnPaQNap93CN oYXMqv7cPhcAP3odkq47Hu56YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMQSz7v1 9FY9za8iN9Kq7vByGzo/MB8GA1UdIwQYMBaAFKMAb12SPUycw7gbOKHKZxJ0fUQG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODVCOC9EOUJGNDM5NEJF MzExMUVEQjRGRjdEMzRDNEY5QUUwMi9vd0J2WFpJOVRKekR1QnM0b2NwbkVuUjlS QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL293QnZYWkk5VEp6RHVCczRvY3BuRW5SOVJBWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODVCOC9EOUJGNDM5NEJFMzExMUVEQjRGRjdEMzRDNEY5QUUwMi9vd0J2WFpJOVRK ekR1QnM0b2NwbkVuUjlSQVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlyTACRdTVys7q+tyckroymt517tuQvc9vDH32xfmk1F1lEGGiuBtQ vtrp0n8wkLw0i6wut2QEKctbhQXQHrpJMzVdSaaq2tzaVfbXZE75DEjfalx2/MPo Qx1ANf+nS4/DBLLbBcodJ2966hA+EmhrePIaLgFRKqXjunKdQLstcEXgSSgGbmgU WZJ5KujYDPWMpCPjh2obLYM111qUe5/0egj/hcyDNabBjgiMZV/B4ljBb2bK+Rwk CdexqXXoLdOZd8MGSYTViX2jVDU6TZ/BliTMUv7mTsNoB+N+4oisCFyy2BIsNp3V wHYrkMAQk2+S9wRZZ/BQgObQ7MbG5I1a -----END CERTIFICATE-----Generated at Tue May 13 05:46:49 2025 by rpki-client