$ rpki-client -vvf rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft File: 0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft (raw, json) Hash identifier: 5gRfXI0GBe00WTr/Y1B/c+qwD2VRKa9NuOn1ZngG9o4= Subject key identifier: 09:A8:4F:35:2B:42:19:C1:1C:13:79:32:FD:08:85:00:89:41:C8:9A Authority key identifier: D2:8C:52:ED:09:0C:53:9C:10:F2:22:DE:EC:D9:A7:3C:49:A1:68:04 Certificate issuer: /CN=A915617E/serialNumber=D28C52ED090C539C10F222DEECD9A73C49A16804 Certificate serial: 0D71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft Manifest number: 0D69 Signing time: Fri 16 May 2025 18:12:31 +0000 Manifest this update: Fri 16 May 2025 18:12:30 +0000 Manifest next update: Fri 23 May 2025 18:12:30 +0000 Files and hashes: 1: 0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl (hash: vXB1XfXKUOd3ORcGGMRYfvV1t3990UuqV5DmmO08Bro=) 2: 3F67E64E62BD11EE8F393D25C4F9AE02.roa (hash: 27YGiOVHeYRZmfLChwQ0MVLlQEu8P+YtfErwSj+QIxo=) 3: DBDAFF6CC99611E9A41BCF75C4F9AE02.roa (hash: Ff3/yMR0vWErszLBIPlNKjSAb7MzXOTFYgb7mDfdJMY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 18:12:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3441 (0xd71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915617E, serialNumber=D28C52ED090C539C10F222DEECD9A73C49A16804 Validity Not Before: May 16 18:12:30 2025 GMT Not After : May 23 18:12:30 2025 GMT Subject: CN=6827800f-3483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:6b:f0:74:1c:15:6c:c6:4f:6d:df:c9:74:dd: 0e:dc:4b:74:7b:62:54:5e:6e:fa:01:e9:13:23:36: 1e:01:f5:a4:9b:0b:29:8e:fb:8c:0a:d3:a5:ca:17: 71:3d:a6:ce:d3:f4:7c:00:27:b0:ab:b8:f2:e5:95: 61:e2:7d:60:bb:2f:23:18:ed:1e:c1:41:7d:5d:c7: ef:75:00:e9:7a:21:b4:f1:c7:bb:35:d2:00:4e:ae: ea:ec:57:2f:a1:54:4a:f0:be:bf:26:5b:ea:91:79: 94:45:6d:36:dc:1b:46:94:4b:97:4d:11:31:61:3e: 3e:42:a9:d8:68:d8:77:fb:e0:a7:01:d4:a5:28:33: b7:06:b4:5b:99:1e:be:39:a8:52:15:d1:8f:b8:cd: 93:49:f8:e3:f1:dc:c8:df:a5:f0:99:15:e2:31:8f: b4:69:3b:80:a7:fe:32:0a:d7:d4:68:39:e7:e2:82: 51:f7:9b:c8:f9:ed:72:a7:3b:f3:33:8d:00:02:7d: d7:ec:e7:c0:9a:af:6b:06:62:7f:90:98:2c:c1:71: ba:b5:1b:19:fa:3c:29:8f:25:57:dc:9b:13:a4:d2: 5b:7b:29:b6:5f:a5:f7:97:d0:0a:45:08:ed:27:24: a8:66:42:94:c5:46:8d:90:0c:44:a5:15:da:8a:02: 81:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A8:4F:35:2B:42:19:C1:1C:13:79:32:FD:08:85:00:89:41:C8:9A X509v3 Authority Key Identifier: keyid:D2:8C:52:ED:09:0C:53:9C:10:F2:22:DE:EC:D9:A7:3C:49:A1:68:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:d2:45:1f:4a:27:b8:78:ac:2d:fa:89:e8:89:60:40:75:3d: 07:d6:e3:6c:73:d9:4d:89:7a:93:5a:d7:ed:12:12:48:70:be: 90:18:67:cb:57:5f:c3:e5:ae:90:9b:c7:a5:31:be:7c:e5:60: e6:9a:2d:ef:00:59:4b:3a:ff:ea:d8:89:5a:1a:32:aa:94:8e: 4e:a5:d1:fd:61:a6:b3:a2:5e:63:71:46:ed:ef:d4:40:a7:63: 4b:8e:65:d4:da:28:0d:dc:0f:b8:42:80:3d:13:04:b0:8a:a3: 94:ef:24:e4:f8:31:15:3b:99:d1:6c:77:d6:1b:5a:eb:12:ae: bc:04:80:88:ba:b6:c6:c1:df:e7:b6:62:bc:a5:ee:55:4d:7e: 7d:a8:ce:8d:14:9f:77:ed:a7:20:43:2a:11:3a:89:24:93:7c: 0c:a2:72:b4:f8:b1:e5:d8:6b:6d:26:65:ce:18:b6:e0:84:00: d6:8d:ac:e8:8f:9b:c4:24:59:f3:a5:4b:64:ec:24:43:09:b2: 9a:2d:34:c8:72:27:b6:0f:65:c8:db:ac:4b:bc:10:ca:bb:e5: cf:0e:f5:07:95:02:43:e4:13:38:fc:09:c8:04:a1:79:b2:c4: 11:e0:6c:04:6c:76:df:02:2f:ae:66:d0:11:1b:5a:28:99:6b: 5b:30:93:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYxN0UxMTAvBgNVBAUTKEQyOEM1MkVEMDkwQzUzOUMxMEYyMjJERUVDRDlBNzND NDlBMTY4MDQwHhcNMjUwNTE2MTgxMjMwWhcNMjUwNTIzMTgxMjMwWjAYMRYwFAYD VQQDEw02ODI3ODAwZi0zNDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA22vwdBwVbMZPbd/JdN0O3Et0e2JUXm76AekTIzYeAfWkmwspjvuMCtOlyhdx PabO0/R8ACewq7jy5ZVh4n1guy8jGO0ewUF9XcfvdQDpeiG08ce7NdIATq7q7Fcv oVRK8L6/JlvqkXmURW023BtGlEuXTRExYT4+QqnYaNh3++CnAdSlKDO3BrRbmR6+ OahSFdGPuM2TSfjj8dzI36XwmRXiMY+0aTuAp/4yCtfUaDnn4oJR95vI+e1ypzvz M40AAn3X7OfAmq9rBmJ/kJgswXG6tRsZ+jwpjyVX3JsTpNJbeym2X6X3l9AKRQjt JySoZkKUxUaNkAxEpRXaigKBVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAmoTzUr QhnBHBN5Mv0IhQCJQciaMB8GA1UdIwQYMBaAFNKMUu0JDFOcEPIi3uzZpzxJoWgE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjE3RS9FMUFEQjc0NkM5 OTUxMUU5QkFBQUIxNzRDNEY5QUUwMi8wb3hTN1FrTVU1d1E4aUxlN05tblBFbWhh QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBveFM3UWtNVTV3UThpTGU3Tm1uUEVtaGFBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjE3RS9FMUFEQjc0NkM5OTUxMUU5QkFBQUIxNzRDNEY5QUUwMi8wb3hTN1FrTVU1 d1E4aUxlN05tblBFbWhhQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDK0kUfSie4eKwt+onoiWBAdT0H1uNsc9lNiXqTWtftEhJIcL6QGGfL V1/D5a6Qm8elMb585WDmmi3vAFlLOv/q2IlaGjKqlI5OpdH9Yaazol5jcUbt79RA p2NLjmXU2igN3A+4QoA9EwSwiqOU7yTk+DEVO5nRbHfWG1rrEq68BICIurbGwd/n tmK8pe5VTX59qM6NFJ937acgQyoROokkk3wMonK0+LHl2GttJmXOGLbghADWjazo j5vEJFnzpUtk7CRDCbKaLTTIcie2D2XI26xLvBDKu+XPDvUHlQJD5BM4/AnIBKF5 ssQR4GwEbHbfAi+uZtARG1oomWtbMJM6 -----END CERTIFICATE-----Generated at Sun May 18 02:13:55 2025 by rpki-client