$ rpki-client -vvf rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft File: 4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft (raw, json) Hash identifier: mAnx2LQynIy0nAeM9EVQo//FaQxmi0Zz4RuII3zvgEQ= Subject key identifier: DE:15:5F:F6:F7:3B:98:99:73:17:1C:04:4F:72:6C:B4:0B:EB:84:F9 Authority key identifier: E0:E8:08:30:65:95:FE:68:D5:F2:81:A9:62:AF:6D:F5:1E:86:F9:32 Certificate issuer: /CN=A914D0E3/serialNumber=E0E808306595FE68D5F281A962AF6DF51E86F932 Certificate serial: 6F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OgIMGWV_mjV8oGpYq9t9R6G-TI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft Manifest number: 6E Signing time: Thu 15 May 2025 06:11:08 +0000 Manifest this update: Thu 15 May 2025 06:11:07 +0000 Manifest next update: Thu 22 May 2025 06:11:07 +0000 Files and hashes: 1: 4OgIMGWV_mjV8oGpYq9t9R6G-TI.crl (hash: FXlDMBt8X/waK5mRdoui5x4D+Z/wiD/Zn3GtebC0uC0=) 2: 793E79A68D1811EF92E90C51C4F9AE02.roa (hash: zVqTt6tzc+Il4GxP87PklggXFLaDGzjtaeUtoZhSM8Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.crl rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OgIMGWV_mjV8oGpYq9t9R6G-TI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:11:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111 (0x6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D0E3, serialNumber=E0E808306595FE68D5F281A962AF6DF51E86F932 Validity Not Before: May 15 06:11:07 2025 GMT Not After : May 22 06:11:07 2025 GMT Subject: CN=6825857b-9d35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6d:fb:3f:73:0f:15:d1:3e:cf:a1:2e:b8:f2: 21:03:87:87:f2:d4:7f:dc:ba:3e:f2:39:a2:2c:98: 99:be:9f:6d:86:2f:7e:5d:1c:8a:1d:d0:34:5f:15: da:7d:e5:98:cc:cb:11:13:a6:04:8f:0a:3e:1d:c0: dc:7c:6a:aa:4a:c0:d7:40:6a:cd:f8:b8:1c:a6:b4: 07:ce:e4:08:8a:a2:49:1f:11:24:b2:3c:bd:69:47: f3:06:a4:50:ee:a9:99:d3:5c:d4:3e:30:02:ac:96: c4:3f:ba:61:c4:e7:82:12:19:33:1e:00:5e:8a:1a: 4c:49:aa:0f:37:97:e8:fd:f6:02:87:fa:d3:8a:a2: d2:b9:4b:81:00:ab:00:b0:ca:8d:da:c3:39:9d:6f: 24:43:ae:19:f3:c9:65:12:5c:f1:9b:91:b9:38:5e: 3d:5c:d0:1c:1b:cb:7a:f8:bc:da:3b:d4:70:ed:0d: f8:bd:ce:4c:ca:e2:83:e8:9d:9f:b8:d0:86:94:ef: b0:5c:a2:ee:2b:d0:86:b3:31:20:de:c0:95:aa:9a: c3:30:28:06:d0:cd:fd:2d:33:26:7c:a2:6b:14:86: a2:7d:99:e6:ef:88:c2:df:bc:ee:0e:bd:59:8b:cd: b7:7f:60:01:99:9e:f7:2e:bb:bf:83:84:71:26:73: 43:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:15:5F:F6:F7:3B:98:99:73:17:1C:04:4F:72:6C:B4:0B:EB:84:F9 X509v3 Authority Key Identifier: keyid:E0:E8:08:30:65:95:FE:68:D5:F2:81:A9:62:AF:6D:F5:1E:86:F9:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OgIMGWV_mjV8oGpYq9t9R6G-TI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:14:7a:dc:70:83:da:14:ea:b0:4d:5f:85:82:bd:af:55:28: 96:4e:54:c6:c0:2c:8f:d0:26:92:24:7a:65:81:f7:85:8b:8f: a7:bf:06:5a:e1:f5:39:43:72:4f:3b:42:7e:19:52:3e:e1:6e: d6:d7:8b:f1:34:cf:7c:62:cf:d3:df:4d:e7:82:4a:4a:7d:61: 77:0f:e6:53:7c:18:98:cd:43:4b:31:29:73:27:96:af:af:6b: 79:55:6d:fe:b8:25:78:79:49:c8:b0:07:cc:9e:1d:a1:bf:0c: 75:44:1d:24:e8:dc:3c:bc:a2:7f:3f:71:04:40:d4:fb:69:34: af:35:6a:c6:b7:30:66:20:88:43:09:59:f9:76:9e:83:f5:76: 02:c7:7b:0d:81:2e:38:a6:e9:d8:3d:d6:22:7a:e6:4e:be:1d: 5a:76:0b:02:95:ff:c2:7d:41:87:d9:ed:3d:c7:59:d4:5e:bf: 9d:eb:68:7c:c2:77:7a:7d:5e:29:84:ee:c0:3e:67:9c:e3:7a: 76:17:44:95:39:94:08:f8:c8:60:3c:90:84:4a:a6:b1:3a:35: 7f:bb:17:4a:76:f6:2a:36:b9:1c:e3:7d:90:09:ac:78:97:07: 73:17:a8:6f:bd:de:02:46:fa:8b:13:53:32:fd:ba:ce:28:91: 85:3f:39:b9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RDBFMzExMC8GA1UEBRMoRTBFODA4MzA2NTk1RkU2OEQ1RjI4MUE5NjJBRjZERjUx RTg2RjkzMjAeFw0yNTA1MTUwNjExMDdaFw0yNTA1MjIwNjExMDdaMBgxFjAUBgNV BAMTDTY4MjU4NTdiLTlkMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6bfs/cw8V0T7PoS648iEDh4fy1H/cuj7yOaIsmJm+n22GL35dHIod0DRfFdp9 5ZjMyxETpgSPCj4dwNx8aqpKwNdAas34uBymtAfO5AiKokkfESSyPL1pR/MGpFDu qZnTXNQ+MAKslsQ/umHE54ISGTMeAF6KGkxJqg83l+j99gKH+tOKotK5S4EAqwCw yo3awzmdbyRDrhnzyWUSXPGbkbk4Xj1c0Bwby3r4vNo71HDtDfi9zkzK4oPonZ+4 0IaU77Bcou4r0IazMSDewJWqmsMwKAbQzf0tMyZ8omsUhqJ9mebviMLfvO4OvVmL zbd/YAGZnvcuu7+DhHEmc0OtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3hVf9vc7 mJlzFxwET3JstAvrhPkwHwYDVR0jBBgwFoAU4OgIMGWV/mjV8oGpYq9t9R6G+TIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTREMEUzL0FBOTg1OUY4OEM3 RTExRUY4RTkyRTcxQkM0RjlBRTAyLzRPZ0lNR1dWX21qVjhvR3BZcTl0OVI2Ry1U SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNE9nSU1HV1ZfbWpWOG9HcFlxOXQ5UjZHLVRJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRE MEUzL0FBOTg1OUY4OEM3RTExRUY4RTkyRTcxQkM0RjlBRTAyLzRPZ0lNR1dWX21q VjhvR3BZcTl0OVI2Ry1USS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACUUetxwg9oU6rBNX4WCva9VKJZOVMbALI/QJpIkemWB94WLj6e/Blrh 9TlDck87Qn4ZUj7hbtbXi/E0z3xiz9PfTeeCSkp9YXcP5lN8GJjNQ0sxKXMnlq+v a3lVbf64JXh5SciwB8yeHaG/DHVEHSTo3Dy8on8/cQRA1PtpNK81asa3MGYgiEMJ Wfl2noP1dgLHew2BLjim6dg91iJ65k6+HVp2CwKV/8J9QYfZ7T3HWdRev53raHzC d3p9XimE7sA+Z5zjenYXRJU5lAj4yGA8kIRKprE6NX+7F0p29io2uRzjfZAJrHiX B3MXqG+93gJG+osTUzL9us4okYU/Obk= -----END CERTIFICATE-----Generated at Fri May 16 09:24:42 2025 by rpki-client