$ rpki-client -vvf rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.mft File: oNZvEXVTOiOoUulRUGXIWjOec4Y.mft (raw, json) Hash identifier: zkGbCgjU0hp1mkriiTDn86P3WPIlTNYHqD7Aq0w/B8w= Subject key identifier: AC:D8:B0:6E:BD:CB:0A:8F:EC:65:F3:F9:DA:F4:0F:B4:68:F8:84:97 Authority key identifier: A0:D6:6F:11:75:53:3A:23:A8:52:E9:51:50:65:C8:5A:33:9E:73:86 Certificate issuer: /CN=A9158547/serialNumber=A0D66F1175533A23A852E9515065C85A339E7386 Certificate serial: 0111 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNZvEXVTOiOoUulRUGXIWjOec4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.mft Manifest number: 010F Signing time: Thu 15 May 2025 04:17:35 +0000 Manifest this update: Thu 15 May 2025 04:17:34 +0000 Manifest next update: Thu 22 May 2025 04:17:34 +0000 Files and hashes: 1: oNZvEXVTOiOoUulRUGXIWjOec4Y.crl (hash: ZFPk/MB1RM6ICym61TYYCchKMWLQm2+e25KnKFXRdRc=) 2: 6E7BFE7092A611EEBD5D8720C4F9AE02.roa (hash: nLAI2KpHv4yGG3LNJRHSRrSrOVvhwD5I70+pJLgB34A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.crl rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNZvEXVTOiOoUulRUGXIWjOec4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 04:17:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 273 (0x111) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158547, serialNumber=A0D66F1175533A23A852E9515065C85A339E7386 Validity Not Before: May 15 04:17:34 2025 GMT Not After : May 22 04:17:34 2025 GMT Subject: CN=68256adf-3bde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:59:b5:e4:79:38:97:27:7a:09:ae:75:2e:5d: d3:f6:14:97:4d:35:3c:96:e0:2d:9d:d0:ba:a2:a0: 17:12:99:23:0a:93:8d:e0:5e:99:69:3d:b2:54:2a: 07:20:b1:6d:b1:ae:25:72:ed:c1:a5:6c:95:5f:20: 45:b3:40:d4:d3:0f:b5:9b:23:bb:1d:3c:26:79:b0: 54:bc:1e:b6:4f:eb:30:0d:4f:aa:bb:7a:ae:78:17: 19:24:8e:40:bc:84:bd:c8:bf:21:ef:39:82:34:c9: ce:ee:7e:48:7e:6c:15:b2:7f:d5:cf:7d:1d:11:53: 4c:e2:01:bf:a4:9c:c2:9b:16:22:0a:1f:51:dd:10: 6c:28:4e:c4:80:b9:36:c9:62:8b:a6:93:d9:e3:ff: 21:60:b3:fb:94:2d:b6:1d:17:1f:af:24:e5:53:68: 85:b8:2c:15:12:cf:86:8e:a2:5f:cd:55:0c:a3:53: 82:6b:d1:ed:3c:d2:b9:a4:95:66:d2:ff:c0:9d:31: b3:1c:b9:c8:d3:9b:d2:3e:80:3c:73:8d:ec:6f:9a: 9a:43:d4:6a:fb:96:dd:d5:8e:0f:b5:08:34:94:5d: 3c:9c:0d:97:e6:fc:ee:2e:f6:8d:6b:01:f4:81:7a: cd:ba:89:06:37:7b:68:03:a1:31:d1:7a:01:53:cd: ef:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:D8:B0:6E:BD:CB:0A:8F:EC:65:F3:F9:DA:F4:0F:B4:68:F8:84:97 X509v3 Authority Key Identifier: keyid:A0:D6:6F:11:75:53:3A:23:A8:52:E9:51:50:65:C8:5A:33:9E:73:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNZvEXVTOiOoUulRUGXIWjOec4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:81:3b:8f:b0:2e:12:69:1f:a1:39:32:3b:44:11:5a:69:67: 5a:1a:dc:c0:55:65:30:2b:22:52:4c:ad:27:f2:ce:8a:4a:8f: c0:f5:b8:06:9d:bb:bf:c6:06:5f:63:de:eb:83:91:d7:cb:13: e0:82:81:43:9e:c3:d7:b6:be:79:52:d6:77:8b:25:84:df:11: a8:56:28:83:0c:8c:6b:e2:c6:79:84:f0:31:01:66:f5:ba:87: 52:2a:05:03:33:4e:95:68:bb:76:cb:8c:fc:e9:dc:86:90:29: bc:c5:3f:cc:4c:65:cf:23:eb:dd:8f:13:53:c9:54:2b:56:b7: 02:ec:b1:86:96:0e:54:75:15:43:8e:cb:da:00:5d:7a:91:90: 82:72:0d:a4:54:8e:68:0e:c8:84:22:cb:1a:f8:16:bf:d0:86: 9d:03:68:88:8d:38:a6:1c:f5:9d:34:df:45:94:56:ad:23:b8: d4:e2:e8:37:74:37:05:7f:79:5e:45:33:2d:7d:b5:2f:1b:f1: ba:2e:fd:82:bf:0d:06:05:f3:48:cb:55:fc:d4:cc:7b:83:61: 71:b6:97:53:ed:e6:60:16:14:3a:51:9f:c0:07:93:29:47:02: 23:a2:de:9d:eb:37:8e:84:4a:cb:5b:ca:0f:11:6e:8b:d1:b1: 7f:79:5d:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg1NDcxMTAvBgNVBAUTKEEwRDY2RjExNzU1MzNBMjNBODUyRTk1MTUwNjVDODVB MzM5RTczODYwHhcNMjUwNTE1MDQxNzM0WhcNMjUwNTIyMDQxNzM0WjAYMRYwFAYD VQQDEw02ODI1NmFkZi0zYmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApVm15Hk4lyd6Ca51Ll3T9hSXTTU8luAtndC6oqAXEpkjCpON4F6ZaT2yVCoH ILFtsa4lcu3BpWyVXyBFs0DU0w+1myO7HTwmebBUvB62T+swDU+qu3queBcZJI5A vIS9yL8h7zmCNMnO7n5IfmwVsn/Vz30dEVNM4gG/pJzCmxYiCh9R3RBsKE7EgLk2 yWKLppPZ4/8hYLP7lC22HRcfryTlU2iFuCwVEs+GjqJfzVUMo1OCa9HtPNK5pJVm 0v/AnTGzHLnI05vSPoA8c43sb5qaQ9Rq+5bd1Y4PtQg0lF08nA2X5vzuLvaNawH0 gXrNuokGN3toA6Ex0XoBU83vjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKzYsG69 ywqP7GXz+dr0D7Ro+ISXMB8GA1UdIwQYMBaAFKDWbxF1UzojqFLpUVBlyFoznnOG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODU0Ny9CMzg2NjhFNDky QTUxMUVFOENEOTVCMUVDNEY5QUUwMi9vTlp2RVhWVE9pT29VdWxSVUdYSVdqT2Vj NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29OWnZFWFZUT2lPb1V1bFJVR1hJV2pPZWM0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODU0Ny9CMzg2NjhFNDkyQTUxMUVFOENEOTVCMUVDNEY5QUUwMi9vTlp2RVhWVE9p T29VdWxSVUdYSVdqT2VjNFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHgTuPsC4SaR+hOTI7RBFaaWdaGtzAVWUwKyJSTK0n8s6KSo/A9bgG nbu/xgZfY97rg5HXyxPggoFDnsPXtr55UtZ3iyWE3xGoViiDDIxr4sZ5hPAxAWb1 uodSKgUDM06VaLt2y4z86dyGkCm8xT/MTGXPI+vdjxNTyVQrVrcC7LGGlg5UdRVD jsvaAF16kZCCcg2kVI5oDsiEIssa+Ba/0IadA2iIjTimHPWdNN9FlFatI7jU4ug3 dDcFf3leRTMtfbUvG/G6Lv2Cvw0GBfNIy1X81Mx7g2FxtpdT7eZgFhQ6UZ/AB5Mp RwIjot6d6zeOhErLW8oPEW6L0bF/eV2Q -----END CERTIFICATE-----Generated at Thu May 15 12:19:18 2025 by rpki-client