$ rpki-client -vvf rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft File: OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft (raw, json) Hash identifier: hy0fys9siH9tukhkuiB9xffPbwHtgZzDK1pSSGsQ9hI= Subject key identifier: 22:5B:33:DC:96:29:30:7B:2A:FC:3A:10:CD:01:78:69:F9:56:C4:8B Authority key identifier: 3A:5C:08:13:C0:FE:D0:A8:3B:3D:D0:1B:7A:5A:E1:A1:30:82:70:28 Certificate issuer: /CN=A91592B3/serialNumber=3A5C0813C0FED0A83B3DD01B7A5AE1A130827028 Certificate serial: 2432 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft Manifest number: 241C Signing time: Wed 02 Jul 2025 15:54:54 +0000 Manifest this update: Wed 02 Jul 2025 15:54:53 +0000 Manifest next update: Wed 09 Jul 2025 15:54:53 +0000 Files and hashes: 1: OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl (hash: rXke17iqq3PKsAs62x6xnceqWPQgC+Gn925NUwjtfyE=) 2: 9876A6C025B211ECB5356475C4F9AE02.roa (hash: DNBT8zhDN25f9UDGQ5nfWBA6s2lB80HUpbXVqjHmAQM=) 3: D8D3FB6414F111F08EE5E32DC4F9AE02.roa (hash: tOvAiPhxRE202cumPZpJeSLK5i3uUM9dNppjhBHTGzA=) 4: 54EE8F7615FE11ECAF541012C4F9AE02.roa (hash: IA4iHCGoqRIo6kbssAA01N8/wPFo68lHVDwSEc9PASs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:54:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9266 (0x2432) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91592B3, serialNumber=3A5C0813C0FED0A83B3DD01B7A5AE1A130827028 Validity Not Before: Jul 2 15:54:53 2025 GMT Not After : Jul 9 15:54:53 2025 GMT Subject: CN=6865564d-7c4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d7:27:dc:76:9d:51:c9:af:db:d0:62:a0:82: 8c:6b:8e:e0:cb:da:22:04:a3:b4:16:e0:78:03:e0: f3:9c:3c:f7:1a:66:0b:de:aa:0a:ef:ad:81:d8:f5: 83:bd:01:40:73:c0:d9:33:b4:13:c5:5b:c4:25:6f: be:bb:da:48:a4:70:a0:57:27:3b:ea:1b:bb:81:28: d4:69:96:13:87:9d:53:c9:b4:81:ff:70:9d:6d:e7: 6e:47:90:41:51:48:99:a1:2a:cc:fb:38:a5:3b:05: cf:3d:6a:03:01:3a:d5:61:95:89:47:a0:f7:94:9c: 1d:f4:1c:81:11:99:23:50:15:4d:41:35:82:62:8a: a8:33:13:c4:85:0e:84:9c:96:0a:f7:e6:61:5d:22: 6e:ab:fd:d3:1e:0b:2f:12:db:53:d3:88:93:f0:ce: 9b:b2:07:eb:d3:b6:6f:54:df:8d:4e:30:ca:7e:6c: 7e:d9:31:93:2c:d4:07:85:30:05:82:16:f1:6b:cf: fb:48:79:f0:0e:4b:05:a0:42:63:f8:94:3d:59:4c: 91:6d:2f:f2:c9:a5:64:81:c1:5c:4b:2f:df:be:bb: 23:6e:98:8f:bc:69:62:c0:42:f3:ea:d5:70:65:a7: 3a:e0:dd:74:a3:cd:1e:3b:51:2b:f6:ec:f0:de:67: 8d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:5B:33:DC:96:29:30:7B:2A:FC:3A:10:CD:01:78:69:F9:56:C4:8B X509v3 Authority Key Identifier: keyid:3A:5C:08:13:C0:FE:D0:A8:3B:3D:D0:1B:7A:5A:E1:A1:30:82:70:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:94:84:63:16:b3:df:08:20:9a:f9:ee:6a:d9:b3:a9:79:2f: 62:51:a5:11:3c:37:d5:fa:64:89:fa:58:7a:e4:29:38:0a:48: dd:b1:22:b8:68:5a:24:38:a4:47:3e:38:fe:3b:e7:bb:62:00: e8:10:2c:bc:09:7d:a6:97:43:ae:1e:d5:01:f0:57:df:2c:02: f9:4b:0e:19:eb:98:88:89:f9:90:ee:0f:f1:27:1c:ba:4d:99: d4:69:7f:c6:f7:71:87:06:84:03:e8:a2:4c:07:d0:d6:9c:c0: ad:e9:f4:9c:c5:59:6e:02:88:29:2c:20:83:11:98:f5:9f:e3: f5:b3:af:9d:bd:6b:81:28:d1:6d:8e:10:b8:27:be:fe:49:36: 92:c4:fa:af:89:8e:69:0a:d4:11:63:81:da:93:27:ea:59:dd: ff:2c:ce:af:4c:0d:02:65:35:36:8d:38:26:61:7f:e2:a0:6e: fa:51:b7:00:85:ef:29:e9:f9:92:38:d9:19:7c:61:fe:0a:59: c7:d4:a2:d3:c0:d0:ca:da:4e:4d:d3:43:50:6e:25:bd:a8:06: b5:db:c9:63:0a:db:ec:eb:0a:a3:d7:75:19:e8:58:68:66:ff: b1:9d:53:5b:29:38:70:c7:77:07:91:6e:0a:ed:80:f9:f0:ef: a9:ef:89:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJDIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkyQjMxMTAvBgNVBAUTKDNBNUMwODEzQzBGRUQwQTgzQjNERDAxQjdBNUFFMUEx MzA4MjcwMjgwHhcNMjUwNzAyMTU1NDUzWhcNMjUwNzA5MTU1NDUzWjAYMRYwFAYD VQQDEw02ODY1NTY0ZC03YzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw9cn3HadUcmv29BioIKMa47gy9oiBKO0FuB4A+DznDz3GmYL3qoK762B2PWD vQFAc8DZM7QTxVvEJW++u9pIpHCgVyc76hu7gSjUaZYTh51TybSB/3CdbeduR5BB UUiZoSrM+zilOwXPPWoDATrVYZWJR6D3lJwd9ByBEZkjUBVNQTWCYoqoMxPEhQ6E nJYK9+ZhXSJuq/3THgsvEttT04iT8M6bsgfr07ZvVN+NTjDKfmx+2TGTLNQHhTAF ghbxa8/7SHnwDksFoEJj+JQ9WUyRbS/yyaVkgcFcSy/fvrsjbpiPvGliwELz6tVw Zac64N10o80eO1Er9uzw3meN1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCJbM9yW KTB7Kvw6EM0BeGn5VsSLMB8GA1UdIwQYMBaAFDpcCBPA/tCoOz3QG3pa4aEwgnAo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTJCMy84OTE3RkIyQTVE MEUxMUU1QjNCRUFENTdDNEY5QUUwMi9PbHdJRThELTBLZzdQZEFiZWxyaG9UQ0Nj Q2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09sd0lFOEQtMEtnN1BkQWJlbHJob1RDQ2NDZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTJCMy84OTE3RkIyQTVEMEUxMUU1QjNCRUFENTdDNEY5QUUwMi9PbHdJRThELTBL ZzdQZEFiZWxyaG9UQ0NjQ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASlIRjFrPfCCCa+e5q2bOpeS9iUaURPDfV+mSJ+lh65Ck4CkjdsSK4 aFokOKRHPjj+O+e7YgDoECy8CX2ml0OuHtUB8FffLAL5Sw4Z65iIifmQ7g/xJxy6 TZnUaX/G93GHBoQD6KJMB9DWnMCt6fScxVluAogpLCCDEZj1n+P1s6+dvWuBKNFt jhC4J77+STaSxPqviY5pCtQRY4HakyfqWd3/LM6vTA0CZTU2jTgmYX/ioG76UbcA he8p6fmSONkZfGH+ClnH1KLTwNDK2k5N00NQbiW9qAa128ljCtvs6wqj13UZ6Fho Zv+xnVNbKThwx3cHkW4K7YD58O+p74mH -----END CERTIFICATE-----Generated at Fri Jul 4 04:04:02 2025 by rpki-client