$ rpki-client -vvf rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.mft File: oXkseNMOEHMKPERWHH5YIufxwvg.mft (raw, json) Hash identifier: +CLCbbYLXiJ6p4h8luUU57FT3xmeNRU4SiFvkNv1j0E= Subject key identifier: B2:75:8A:08:04:79:DD:AF:01:3C:22:CA:11:93:7C:14:D9:3A:79:8E Authority key identifier: A1:79:2C:78:D3:0E:10:73:0A:3C:44:56:1C:7E:58:22:E7:F1:C2:F8 Certificate issuer: /CN=A91A093A/serialNumber=A1792C78D30E10730A3C44561C7E5822E7F1C2F8 Certificate serial: 0851 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXkseNMOEHMKPERWHH5YIufxwvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.mft Manifest number: 0845 Signing time: Mon 12 May 2025 20:34:54 +0000 Manifest this update: Mon 12 May 2025 20:34:53 +0000 Manifest next update: Mon 19 May 2025 20:34:53 +0000 Files and hashes: 1: oXkseNMOEHMKPERWHH5YIufxwvg.crl (hash: BWvy+3e1OKAIBr7Ly3aGhhTc4do/kQtewgygVVjoBwE=) 2: 153A3AE86A9111EF905C3C37C4F9AE02.roa (hash: LYF+KadzZ69diyD5rWiKHJlYkwO/eA/Z250K04w+xPI=) 3: AA973CB86A8B11EFB0774B61C4F9AE02.roa (hash: +w6DPiK2iGC1sFd6+H0KMfGyjFvRHYPwKc/prnzBHkc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.crl rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXkseNMOEHMKPERWHH5YIufxwvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:34:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2129 (0x851) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A093A, serialNumber=A1792C78D30E10730A3C44561C7E5822E7F1C2F8 Validity Not Before: May 12 20:34:53 2025 GMT Not After : May 19 20:34:53 2025 GMT Subject: CN=68225b6d-58c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:72:5c:45:b3:2a:f2:ff:82:75:87:84:e0:70: 3d:54:ef:0a:36:c3:ec:89:58:04:43:77:24:a1:d0: ed:2d:d9:f9:08:4f:c4:e6:d5:08:ca:f1:3c:5d:8f: 48:ce:cf:51:4a:5b:5f:1c:46:af:43:97:07:33:fd: 28:87:01:ee:a5:34:89:0b:2c:69:ae:7d:9d:10:5b: dc:1d:ac:7b:b8:fc:8d:e2:4e:a4:8c:be:92:6a:84: 54:5f:06:4b:d6:10:c4:40:87:a3:10:b9:90:b0:ad: 6d:b3:20:5a:d8:37:b7:b4:d6:86:95:1f:18:8c:58: 7f:a5:b6:b2:2d:85:ca:0c:fe:0c:b4:60:bb:13:53: c6:e1:e5:d7:4e:be:a7:c4:f7:4a:11:92:6f:b6:d4: c1:56:62:9b:6a:86:a5:7b:75:99:ed:e1:37:fd:ea: 7f:c7:21:1f:31:b1:29:6c:ad:da:3b:87:e8:36:13: 15:a7:bb:57:6f:f9:e2:01:09:8a:16:90:84:74:ab: 07:a8:20:67:f5:9e:de:a3:9a:53:ed:25:90:77:7f: 30:0e:f1:6f:3e:46:60:a2:cc:12:79:33:f7:91:36: 59:55:0d:17:e4:6b:33:25:94:1d:39:a0:19:df:33: 93:9c:46:37:6a:89:f0:a8:47:40:4c:e1:a7:f9:ef: e0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:75:8A:08:04:79:DD:AF:01:3C:22:CA:11:93:7C:14:D9:3A:79:8E X509v3 Authority Key Identifier: keyid:A1:79:2C:78:D3:0E:10:73:0A:3C:44:56:1C:7E:58:22:E7:F1:C2:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXkseNMOEHMKPERWHH5YIufxwvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:ce:22:83:bb:a0:9c:a9:f9:4e:9d:b4:98:e2:5c:1b:b9:e1: 72:40:8e:df:f6:d3:43:8a:71:6d:fa:c1:40:2d:71:13:a8:88: 62:df:fb:ee:d0:7c:33:e8:d0:a8:d9:d3:09:b6:c9:7f:e6:82: a0:5d:14:c4:02:d7:d1:ee:a2:07:4c:53:04:04:2a:dd:22:13: b3:28:67:6d:47:d9:e8:67:47:ba:08:38:76:49:28:c1:ab:b8: af:9a:59:ae:96:3d:c7:54:bd:e6:c4:61:04:4b:8e:7b:9a:9f: 54:00:6c:52:c9:3f:5c:4a:51:43:6e:cd:9d:b1:7f:f8:c2:cb: 0e:fb:6d:b9:cb:82:9d:38:f2:f3:b1:c9:85:d2:4d:cb:78:c4: f1:e0:33:cf:8a:c9:62:78:5c:3b:13:e8:f6:e1:ab:04:8c:0c: d4:aa:dc:38:cc:75:cd:e0:ba:00:28:74:31:a7:4a:a0:72:7c: 8f:a9:a3:be:c5:d1:09:a2:1f:fb:e3:63:c6:72:94:42:fc:dc: 5f:95:01:a7:56:c2:0c:07:2e:47:a8:cd:38:41:ea:d3:9e:18: 75:32:e1:1d:c8:1c:52:41:bf:0f:08:00:4e:f8:7d:ef:d7:88: 5e:0e:ef:1e:c6:7a:75:49:20:40:e6:a7:6e:c7:9a:07:63:bf: d6:10:bc:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA5M0ExMTAvBgNVBAUTKEExNzkyQzc4RDMwRTEwNzMwQTNDNDQ1NjFDN0U1ODIy RTdGMUMyRjgwHhcNMjUwNTEyMjAzNDUzWhcNMjUwNTE5MjAzNDUzWjAYMRYwFAYD VQQDEw02ODIyNWI2ZC01OGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAznJcRbMq8v+CdYeE4HA9VO8KNsPsiVgEQ3ckodDtLdn5CE/E5tUIyvE8XY9I zs9RSltfHEavQ5cHM/0ohwHupTSJCyxprn2dEFvcHax7uPyN4k6kjL6SaoRUXwZL 1hDEQIejELmQsK1tsyBa2De3tNaGlR8YjFh/pbayLYXKDP4MtGC7E1PG4eXXTr6n xPdKEZJvttTBVmKbaoale3WZ7eE3/ep/xyEfMbEpbK3aO4foNhMVp7tXb/niAQmK FpCEdKsHqCBn9Z7eo5pT7SWQd38wDvFvPkZgoswSeTP3kTZZVQ0X5GszJZQdOaAZ 3zOTnEY3aonwqEdATOGn+e/gdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLJ1iggE ed2vATwiyhGTfBTZOnmOMB8GA1UdIwQYMBaAFKF5LHjTDhBzCjxEVhx+WCLn8cL4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDkzQS9FQkEzNTMxRUNC RDgxMUVBODY3QUZCNEZDNEY5QUUwMi9vWGtzZU5NT0VITUtQRVJXSEg1WUl1Znh3 dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Ya3NlTk1PRUhNS1BFUldISDVZSXVmeHd2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDkzQS9FQkEzNTMxRUNCRDgxMUVBODY3QUZCNEZDNEY5QUUwMi9vWGtzZU5NT0VI TUtQRVJXSEg1WUl1Znh3dmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfziKDu6CcqflOnbSY4lwbueFyQI7f9tNDinFt+sFALXETqIhi3/vu 0Hwz6NCo2dMJtsl/5oKgXRTEAtfR7qIHTFMEBCrdIhOzKGdtR9noZ0e6CDh2SSjB q7ivmlmulj3HVL3mxGEES457mp9UAGxSyT9cSlFDbs2dsX/4wssO+225y4KdOPLz scmF0k3LeMTx4DPPislieFw7E+j24asEjAzUqtw4zHXN4LoAKHQxp0qgcnyPqaO+ xdEJoh/742PGcpRC/NxflQGnVsIMBy5HqM04QerTnhh1MuEdyBxSQb8PCABO+H3v 14heDu8exnp1SSBA5qdux5oHY7/WELyE -----END CERTIFICATE-----Generated at Tue May 13 14:55:20 2025 by rpki-client