$ rpki-client -vvf rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft File: rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft (raw, json) Hash identifier: mWzIjVACpQPSEN1brwIxAMYMll/hbyAGcfKlWy/+v6A= Subject key identifier: C6:85:66:73:5A:C1:74:E4:DB:6C:E1:2E:36:09:DA:C6:47:16:35:0A Authority key identifier: AC:E2:C4:CC:B0:89:D2:1B:37:04:54:B0:0E:6B:59:3A:F2:88:62:F6 Certificate issuer: /CN=A91702B9/serialNumber=ACE2C4CCB089D21B370454B00E6B593AF28862F6 Certificate serial: 0334 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft Manifest number: 032B Signing time: Tue 13 May 2025 00:56:00 +0000 Manifest this update: Tue 13 May 2025 00:56:00 +0000 Manifest next update: Tue 20 May 2025 00:56:00 +0000 Files and hashes: 1: rOLEzLCJ0hs3BFSwDmtZOvKIYvY.crl (hash: BlBeKm2xlMDJv6pYVkrHMvIYHkDNmVVpES6dHX2bxyg=) 2: FC159BECF4D911EFB4F5FC16C4F9AE02.roa (hash: SFUw1crOwEdM2KZGmzmI0Y/ekMkiUyOErHqNpQ3ZimY=) 3: A047A07AD56811EFB57A5D33C4F9AE02.roa (hash: hW5FiSV5239AbImQE/mYJwi40OATdFzGCdVUMZFhemo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.crl rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:55:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 820 (0x334) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91702B9, serialNumber=ACE2C4CCB089D21B370454B00E6B593AF28862F6 Validity Not Before: May 13 00:56:00 2025 GMT Not After : May 20 00:56:00 2025 GMT Subject: CN=682298a0-8ea5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:09:fd:14:3b:76:48:6b:7f:08:61:4b:b6:4d: 9e:ed:05:6f:0f:17:fb:c1:da:3d:a3:06:01:30:15: 94:d2:4b:be:75:af:4f:13:83:b1:b4:77:fb:52:c5: ab:34:53:3d:f0:f3:31:b1:2f:87:4e:1f:7a:97:ff: 99:0e:e7:4b:fa:99:de:c7:ab:73:3c:3f:d2:de:ce: be:99:c8:0b:11:0c:a7:ff:79:08:90:c2:31:71:5b: 8b:fb:7b:ee:2a:94:75:cb:64:7e:78:a8:4a:a0:cc: a7:67:6f:be:8b:4c:ba:58:c7:14:58:de:fe:17:93: d0:7d:8d:14:53:bb:6e:4c:d1:d8:69:48:43:8b:08: a9:0e:69:64:f9:e3:7b:95:34:d7:03:64:06:89:8b: a1:8f:10:b1:61:94:8f:4f:82:f5:bf:86:44:e2:f9: 42:65:1f:1c:59:86:e9:d6:d5:b9:61:92:6f:ad:6e: 4c:7c:1b:99:86:a6:f7:3e:14:88:7a:08:7f:a9:e4: 1b:9c:47:ec:e4:fe:8f:bf:dc:3c:03:1f:76:b7:16: 85:e1:76:2c:2c:e0:ee:c0:0a:7c:76:0c:3a:0f:04: fe:f3:c2:5c:7b:43:26:96:60:22:0c:74:da:94:05: 33:a1:bb:d7:00:b6:e4:a1:06:07:9f:48:45:9c:0f: 36:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:85:66:73:5A:C1:74:E4:DB:6C:E1:2E:36:09:DA:C6:47:16:35:0A X509v3 Authority Key Identifier: keyid:AC:E2:C4:CC:B0:89:D2:1B:37:04:54:B0:0E:6B:59:3A:F2:88:62:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:9c:58:0c:24:76:8f:59:85:b3:22:70:b5:c7:a6:74:3d:63: 0d:c6:bf:5d:ca:30:6a:53:10:d2:65:8a:ef:98:bc:47:4c:2c: a7:9e:05:5f:89:33:76:81:74:34:1d:08:6d:54:0e:da:0e:a9: 77:41:c5:52:7b:2d:52:5f:d4:14:d7:51:ac:c7:b2:d5:84:12: 2d:e7:99:86:8e:05:27:d8:f4:64:e2:69:71:bc:03:5b:e6:3a: dc:74:2d:88:5e:f5:10:7f:1b:0e:0a:86:fb:20:dd:e5:ef:1b: 75:fa:f8:8d:fc:ff:76:01:21:d3:4d:28:05:bf:32:de:e3:bd: 01:25:47:4d:70:ca:0d:71:b8:46:c8:e6:51:66:3d:00:03:bb: 32:88:58:89:5d:05:19:54:39:c8:3b:24:06:7f:1e:83:cf:9e: 02:59:0b:e4:ad:49:fb:25:f5:e2:e8:65:ce:5f:9f:21:96:2d: fc:3d:64:d9:b6:f8:63:aa:1b:89:83:a7:24:55:dc:39:85:4f: a6:a9:27:14:09:35:45:b1:ec:58:45:ff:05:fd:6b:1a:2c:4b: d3:44:b9:44:fb:d4:ac:d6:42:1f:40:69:5e:61:ec:b1:62:3f: 41:69:f6:ea:0d:9d:7a:7d:e5:b9:b5:ff:1c:39:fe:79:86:c3: 62:f8:70:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAyQjkxMTAvBgNVBAUTKEFDRTJDNENDQjA4OUQyMUIzNzA0NTRCMDBFNkI1OTNB RjI4ODYyRjYwHhcNMjUwNTEzMDA1NjAwWhcNMjUwNTIwMDA1NjAwWjAYMRYwFAYD VQQDEw02ODIyOThhMC04ZWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxAn9FDt2SGt/CGFLtk2e7QVvDxf7wdo9owYBMBWU0ku+da9PE4OxtHf7UsWr NFM98PMxsS+HTh96l/+ZDudL+pnex6tzPD/S3s6+mcgLEQyn/3kIkMIxcVuL+3vu KpR1y2R+eKhKoMynZ2++i0y6WMcUWN7+F5PQfY0UU7tuTNHYaUhDiwipDmlk+eN7 lTTXA2QGiYuhjxCxYZSPT4L1v4ZE4vlCZR8cWYbp1tW5YZJvrW5MfBuZhqb3PhSI egh/qeQbnEfs5P6Pv9w8Ax92txaF4XYsLODuwAp8dgw6DwT+88Jce0MmlmAiDHTa lAUzobvXALbkoQYHn0hFnA82BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMaFZnNa wXTk22zhLjYJ2sZHFjUKMB8GA1UdIwQYMBaAFKzixMywidIbNwRUsA5rWTryiGL2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDJCOS8zQjcyRUU5MEM2 MDUxMUVDQUI3NEQ5NjJDNEY5QUUwMi9yT0xFekxDSjBoczNCRlN3RG10Wk92S0lZ dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JPTEV6TENKMGhzM0JGU3dEbXRaT3ZLSVl2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDJCOS8zQjcyRUU5MEM2MDUxMUVDQUI3NEQ5NjJDNEY5QUUwMi9yT0xFekxDSjBo czNCRlN3RG10Wk92S0lZdlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwnFgMJHaPWYWzInC1x6Z0PWMNxr9dyjBqUxDSZYrvmLxHTCynngVf iTN2gXQ0HQhtVA7aDql3QcVSey1SX9QU11Gsx7LVhBIt55mGjgUn2PRk4mlxvANb 5jrcdC2IXvUQfxsOCob7IN3l7xt1+viN/P92ASHTTSgFvzLe470BJUdNcMoNcbhG yOZRZj0AA7syiFiJXQUZVDnIOyQGfx6Dz54CWQvkrUn7JfXi6GXOX58hli38PWTZ tvhjqhuJg6ckVdw5hU+mqScUCTVFsexYRf8F/WsaLEvTRLlE+9Ss1kIfQGleYeyx Yj9BafbqDZ16feW5tf8cOf55hsNi+HAP -----END CERTIFICATE-----Generated at Wed May 14 17:11:42 2025 by rpki-client