$ rpki-client -vvf rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft File: OIX50v0IYCg7VTgfHE9KWjoe7z8.mft (raw, json) Hash identifier: z3u8VM2alVDicrN0DBy8WsGYC+V8ZQusyVL9ApF9Xjg= Subject key identifier: 4C:98:9D:5F:F4:9B:0F:9A:55:7F:E4:96:71:5E:93:86:A1:DF:75:5A Authority key identifier: 38:85:F9:D2:FD:08:60:28:3B:55:38:1F:1C:4F:4A:5A:3A:1E:EF:3F Certificate issuer: /CN=A91847C2/serialNumber=3885F9D2FD0860283B55381F1C4F4A5A3A1EEF3F Certificate serial: C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIX50v0IYCg7VTgfHE9KWjoe7z8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft Manifest number: BE Signing time: Sat 03 May 2025 05:12:40 +0000 Manifest this update: Sat 03 May 2025 05:12:39 +0000 Manifest next update: Sat 10 May 2025 05:12:39 +0000 Files and hashes: 1: OIX50v0IYCg7VTgfHE9KWjoe7z8.crl (hash: jk2Y1dEl0j1yJWLFJOmhgNgJFAGOyDMhfN3C92nYe0c=) 2: 744D8A1005EE11EF851FA42FC4F9AE02.roa (hash: g7/I1107TKCwjJnWd7arEQMGj8EBr7MRJOF1ZUaFXNI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.crl rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIX50v0IYCg7VTgfHE9KWjoe7z8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 05:12:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 192 (0xc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847C2, serialNumber=3885F9D2FD0860283B55381F1C4F4A5A3A1EEF3F Validity Not Before: May 3 05:12:39 2025 GMT Not After : May 10 05:12:39 2025 GMT Subject: CN=6815a5c8-4e49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:3f:1b:4b:f1:2b:11:5f:fa:4e:e6:f5:75:0d: d5:39:b6:4a:d4:84:26:d0:02:43:cc:1a:64:35:f0: 86:a8:ba:f0:fd:68:65:5e:dc:7a:2e:c0:d3:36:d1: ae:8d:d8:47:71:51:e7:fd:18:26:4b:72:bc:03:7a: 03:7a:b5:f9:68:9f:f9:f6:d7:f9:77:4a:26:e4:91: e0:f6:8c:c2:84:05:e2:57:a5:41:2f:f6:45:6e:a8: 96:8c:75:64:bf:4e:09:f6:7b:44:49:a2:05:11:9a: 9e:b9:c8:a7:83:f5:46:55:4d:15:cc:8b:72:fd:be: 94:37:a0:e8:30:9a:ac:b2:87:b5:d9:23:08:be:07: aa:50:a2:42:0b:f4:31:54:96:9c:77:65:64:65:bb: dd:b3:47:75:ae:45:24:b9:7a:96:dc:73:41:79:b8: 3c:dc:e0:e8:67:e3:a9:eb:c0:52:f6:f7:76:87:5f: 5d:ed:3f:8b:68:44:fc:58:da:f4:71:9a:f0:91:21: d6:1b:aa:a3:9a:be:8d:8a:60:80:c4:04:05:62:eb: bd:13:f6:6a:43:de:af:fb:fc:70:f4:91:e2:1a:19: d6:76:ab:3a:56:94:51:8c:d1:5b:34:de:67:36:5e: 44:e7:73:0c:6f:8a:e7:4d:da:39:17:4c:3e:bf:de: 10:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:98:9D:5F:F4:9B:0F:9A:55:7F:E4:96:71:5E:93:86:A1:DF:75:5A X509v3 Authority Key Identifier: keyid:38:85:F9:D2:FD:08:60:28:3B:55:38:1F:1C:4F:4A:5A:3A:1E:EF:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIX50v0IYCg7VTgfHE9KWjoe7z8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:2a:fc:07:66:e5:a9:48:65:6b:a9:67:2e:bd:be:9b:1d:d5: e9:18:c1:aa:92:c5:7e:01:6c:c2:8d:26:bc:93:93:e7:34:6e: 68:51:0d:9b:da:db:f0:6c:23:68:ac:25:0e:5c:f9:1f:e7:27: 57:95:96:41:44:87:90:fb:b2:94:be:9b:23:65:f3:8e:3f:73: 69:5c:b1:f1:f2:a2:cb:32:fb:23:01:60:cd:7d:be:a6:02:1d: d8:ae:a1:79:e9:a2:6d:0a:95:6f:7d:90:e9:18:5f:9e:ff:7f: 7e:63:ea:c2:a0:0a:44:25:a5:f6:1c:d2:a5:41:33:9b:78:94: 5d:3c:c6:42:49:95:36:c2:8d:a6:f7:3e:fe:45:19:d5:60:e0: 3c:df:0d:f1:4e:8f:42:9f:29:11:b4:c1:14:b4:92:ca:fe:12: da:86:fb:43:30:ac:d4:fb:cc:4c:96:e8:8c:d0:77:fa:2a:87: e7:6d:64:68:b9:eb:db:32:1e:37:bd:40:bc:84:e1:9a:32:9c: 3b:98:71:37:26:bc:78:3e:43:44:40:d3:7a:09:ea:b7:ae:eb: f2:91:2c:cb:ee:8c:f6:3e:59:a5:c9:6b:43:74:d5:eb:d7:07: fc:fa:6c:a0:d8:60:65:8c:78:ef:3e:16:c1:18:ff:66:53:67: d8:96:75:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ3QzIxMTAvBgNVBAUTKDM4ODVGOUQyRkQwODYwMjgzQjU1MzgxRjFDNEY0QTVB M0ExRUVGM0YwHhcNMjUwNTAzMDUxMjM5WhcNMjUwNTEwMDUxMjM5WjAYMRYwFAYD VQQDEw02ODE1YTVjOC00ZTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6z8bS/ErEV/6Tub1dQ3VObZK1IQm0AJDzBpkNfCGqLrw/WhlXtx6LsDTNtGu jdhHcVHn/RgmS3K8A3oDerX5aJ/59tf5d0om5JHg9ozChAXiV6VBL/ZFbqiWjHVk v04J9ntESaIFEZqeucing/VGVU0VzIty/b6UN6DoMJqssoe12SMIvgeqUKJCC/Qx VJacd2VkZbvds0d1rkUkuXqW3HNBebg83ODoZ+Op68BS9vd2h19d7T+LaET8WNr0 cZrwkSHWG6qjmr6NimCAxAQFYuu9E/ZqQ96v+/xw9JHiGhnWdqs6VpRRjNFbNN5n Nl5E53MMb4rnTdo5F0w+v94QNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEyYnV/0 mw+aVX/klnFek4ah33VaMB8GA1UdIwQYMBaAFDiF+dL9CGAoO1U4HxxPSlo6Hu8/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdDMi9COTJCRkFENDA1 RUIxMUVGOTU2QkQ2NDNDNEY5QUUwMi9PSVg1MHYwSVlDZzdWVGdmSEU5S1dqb2U3 ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09JWDUwdjBJWUNnN1ZUZ2ZIRTlLV2pvZTd6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDdDMi9COTJCRkFENDA1RUIxMUVGOTU2QkQ2NDNDNEY5QUUwMi9PSVg1MHYwSVlD ZzdWVGdmSEU5S1dqb2U3ejgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASKvwHZuWpSGVrqWcuvb6bHdXpGMGqksV+AWzCjSa8k5PnNG5oUQ2b 2tvwbCNorCUOXPkf5ydXlZZBRIeQ+7KUvpsjZfOOP3NpXLHx8qLLMvsjAWDNfb6m Ah3YrqF56aJtCpVvfZDpGF+e/39+Y+rCoApEJaX2HNKlQTObeJRdPMZCSZU2wo2m 9z7+RRnVYOA83w3xTo9CnykRtMEUtJLK/hLahvtDMKzU+8xMluiM0Hf6KofnbWRo uevbMh43vUC8hOGaMpw7mHE3Jrx4PkNEQNN6Ceq3ruvykSzL7oz2PlmlyWtDdNXr 1wf8+myg2GBljHjvPhbBGP9mU2fYlnVl -----END CERTIFICATE-----Generated at Mon May 5 02:58:48 2025 by rpki-client