$ rpki-client -vvf rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft File: rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft (raw, json) Hash identifier: uRuxYzL1PAtepa08j7KwgnYaFeOKHl/0jwqITWnlB4I= Subject key identifier: 8E:AA:25:CE:8C:85:F3:8E:3D:E1:2F:9B:87:25:FC:92:A2:94:BB:3C Authority key identifier: AC:E2:C4:CC:B0:89:D2:1B:37:04:54:B0:0E:6B:59:3A:F2:88:62:F6 Certificate issuer: /CN=A91702B9/serialNumber=ACE2C4CCB089D21B370454B00E6B593AF28862F6 Certificate serial: 034C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft Manifest number: 0343 Signing time: Tue 01 Jul 2025 01:39:33 +0000 Manifest this update: Tue 01 Jul 2025 01:39:33 +0000 Manifest next update: Tue 08 Jul 2025 01:39:33 +0000 Files and hashes: 1: rOLEzLCJ0hs3BFSwDmtZOvKIYvY.crl (hash: th4UxxnFnSjKRyXVv91dB3wX1yHcKblZSb3N4dCj6Sg=) 2: FC159BECF4D911EFB4F5FC16C4F9AE02.roa (hash: SFUw1crOwEdM2KZGmzmI0Y/ekMkiUyOErHqNpQ3ZimY=) 3: A047A07AD56811EFB57A5D33C4F9AE02.roa (hash: hW5FiSV5239AbImQE/mYJwi40OATdFzGCdVUMZFhemo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.crl rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:39:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 844 (0x34c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91702B9, serialNumber=ACE2C4CCB089D21B370454B00E6B593AF28862F6 Validity Not Before: Jul 1 01:39:33 2025 GMT Not After : Jul 8 01:39:33 2025 GMT Subject: CN=68633c55-4f6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:34:f7:f9:f2:c4:8d:98:59:88:22:87:4b:01: da:35:ae:fa:d5:fa:50:cf:cf:25:3f:cd:26:f8:ed: 24:51:99:79:fc:2e:3e:bf:52:c2:7d:57:84:d7:e3: aa:ba:22:f8:35:78:38:af:65:f5:49:6e:2f:fd:2d: 35:10:ee:41:40:f3:94:07:61:7c:c6:9d:40:51:9c: 95:e4:64:1e:24:9a:29:d7:04:70:b2:30:4e:f0:99: 63:23:7e:18:4f:c9:56:f9:b6:d7:08:7d:34:28:f1: 2a:28:7b:d1:1f:8f:2a:07:92:0b:62:08:2b:57:59: db:e3:ef:52:16:2c:4d:48:b2:a8:08:7e:9f:8c:bb: 43:e2:f3:bc:24:c3:e2:ce:98:a3:d5:9f:fa:76:39: 88:0d:e7:bf:0e:d6:8e:b8:3f:ad:08:d1:87:70:95: f4:34:f2:5c:64:14:fa:dd:0f:c3:e7:de:68:3a:42: b0:8d:5f:92:d0:f2:16:6d:91:9f:0d:12:1c:58:04: 8e:34:08:85:8d:7e:db:77:b7:2f:f1:ea:a2:5b:2e: 24:64:66:16:80:6c:ef:7f:2e:12:d8:c3:fa:78:2c: 13:ff:08:9b:2e:12:60:1d:6b:2f:24:6e:79:52:40: 1f:36:81:8a:ae:24:71:ce:c9:6f:c2:40:ff:50:ec: 37:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:AA:25:CE:8C:85:F3:8E:3D:E1:2F:9B:87:25:FC:92:A2:94:BB:3C X509v3 Authority Key Identifier: keyid:AC:E2:C4:CC:B0:89:D2:1B:37:04:54:B0:0E:6B:59:3A:F2:88:62:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:80:42:e7:6a:01:c8:70:1f:81:8c:7e:c5:b8:cc:99:2e:60: 70:1b:58:f5:6b:d5:d4:3f:27:78:30:18:2b:f7:b3:ec:a7:33: 48:b8:4b:4d:b4:fb:bd:59:ff:76:19:34:58:41:e5:f8:ac:1d: 82:6d:98:2e:62:47:7c:4b:d8:e0:71:b9:ca:b9:34:24:67:40: e3:73:da:52:a6:f5:98:9b:87:57:ca:9a:eb:59:79:bd:01:e3: 9a:63:56:e8:dc:4e:95:ad:fd:fc:b2:90:cd:a7:ba:0d:2f:8c: 20:52:c2:00:44:e1:39:42:1c:8c:33:07:d4:60:c1:59:6b:6e: 28:24:27:43:a2:cf:f8:fb:29:f8:b6:b9:76:74:3c:65:45:88: 7b:96:bd:d2:ec:b2:a1:5a:07:0d:92:de:2f:c2:17:74:04:ac: 42:48:39:4d:d5:82:be:ea:36:df:5f:72:df:ec:0b:4f:10:4e: b5:cb:5d:fd:ab:de:27:98:72:ee:ef:e4:5a:f8:08:e4:63:58: 12:8f:3d:b1:de:a7:7f:03:31:d5:d5:53:98:cd:85:a5:f5:b3: a5:60:d9:b0:02:e6:fc:db:5f:52:0b:93:89:67:2c:e9:3f:9b: 54:48:98:16:4a:7d:36:c5:f3:9e:0b:47:69:69:46:da:be:7c: 63:5b:38:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAyQjkxMTAvBgNVBAUTKEFDRTJDNENDQjA4OUQyMUIzNzA0NTRCMDBFNkI1OTNB RjI4ODYyRjYwHhcNMjUwNzAxMDEzOTMzWhcNMjUwNzA4MDEzOTMzWjAYMRYwFAYD VQQDEw02ODYzM2M1NS00ZjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsTT3+fLEjZhZiCKHSwHaNa761fpQz88lP80m+O0kUZl5/C4+v1LCfVeE1+Oq uiL4NXg4r2X1SW4v/S01EO5BQPOUB2F8xp1AUZyV5GQeJJop1wRwsjBO8JljI34Y T8lW+bbXCH00KPEqKHvRH48qB5ILYggrV1nb4+9SFixNSLKoCH6fjLtD4vO8JMPi zpij1Z/6djmIDee/DtaOuD+tCNGHcJX0NPJcZBT63Q/D595oOkKwjV+S0PIWbZGf DRIcWASONAiFjX7bd7cv8eqiWy4kZGYWgGzvfy4S2MP6eCwT/wibLhJgHWsvJG55 UkAfNoGKriRxzslvwkD/UOw3VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI6qJc6M hfOOPeEvm4cl/JKilLs8MB8GA1UdIwQYMBaAFKzixMywidIbNwRUsA5rWTryiGL2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDJCOS8zQjcyRUU5MEM2 MDUxMUVDQUI3NEQ5NjJDNEY5QUUwMi9yT0xFekxDSjBoczNCRlN3RG10Wk92S0lZ dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JPTEV6TENKMGhzM0JGU3dEbXRaT3ZLSVl2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDJCOS8zQjcyRUU5MEM2MDUxMUVDQUI3NEQ5NjJDNEY5QUUwMi9yT0xFekxDSjBo czNCRlN3RG10Wk92S0lZdlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdgELnagHIcB+BjH7FuMyZLmBwG1j1a9XUPyd4MBgr97PspzNIuEtN tPu9Wf92GTRYQeX4rB2CbZguYkd8S9jgcbnKuTQkZ0Djc9pSpvWYm4dXyprrWXm9 AeOaY1bo3E6Vrf38spDNp7oNL4wgUsIAROE5QhyMMwfUYMFZa24oJCdDos/4+yn4 trl2dDxlRYh7lr3S7LKhWgcNkt4vwhd0BKxCSDlN1YK+6jbfX3Lf7AtPEE61y139 q94nmHLu7+Ra+AjkY1gSjz2x3qd/AzHV1VOYzYWl9bOlYNmwAub8219SC5OJZyzp P5tUSJgWSn02xfOeC0dpaUbavnxjWzgL -----END CERTIFICATE-----Generated at Thu Jul 3 00:22:48 2025 by rpki-client