$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft File: mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft (raw, json) Hash identifier: p5kSXENjaf+/u1aDrer7NiSv9YyKf3p35YgsqVsA0sE= Subject key identifier: F3:25:43:0C:EB:4C:A4:35:5B:E7:B1:18:76:21:C3:84:B7:53:85:88 Authority key identifier: 98:E8:63:E4:4B:59:7B:64:CA:8C:81:FE:3F:6D:CB:CD:DF:E1:F6:55 Certificate issuer: /CN=A91A4707/serialNumber=98E863E44B597B64CA8C81FE3F6DCBCDDFE1F655 Certificate serial: 04FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhj5EtZe2TKjIH-P23Lzd_h9lU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft Manifest number: 04F2 Signing time: Wed 14 May 2025 23:44:54 +0000 Manifest this update: Wed 14 May 2025 23:44:54 +0000 Manifest next update: Wed 21 May 2025 23:44:54 +0000 Files and hashes: 1: mOhj5EtZe2TKjIH-P23Lzd_h9lU.crl (hash: /z1nz8vvFGdmSyJzQW5nDYXLS1oSzBnmYk4Zidj8Q3s=) 2: 52B59ED2108D11ECA2542150C4F9AE02.roa (hash: YHM2Ry9OqK4ZQ8qnXB/9z3rSEtR8bDIhVl02jmEtILs=) 3: 5202131C108D11ECA2542150C4F9AE02.roa (hash: f0fj2CiJrQsqOvPb5aCJ72sWUs4weqyglPKr75EglVo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.crl rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhj5EtZe2TKjIH-P23Lzd_h9lU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 23:44:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1277 (0x4fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4707, serialNumber=98E863E44B597B64CA8C81FE3F6DCBCDDFE1F655 Validity Not Before: May 14 23:44:54 2025 GMT Not After : May 21 23:44:54 2025 GMT Subject: CN=68252af6-c282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b3:8b:4d:11:9b:d5:ad:4d:63:25:70:7a:53: fd:20:39:13:88:36:7b:3a:05:2d:a7:23:ca:9b:4f: 3c:cd:f6:f0:bd:2b:9e:1e:7e:25:0f:27:d2:a4:6f: 2e:b8:b9:d0:d8:e0:3a:a7:10:52:81:7a:9c:c7:29: e8:f4:9c:e3:49:73:73:4a:6e:e2:8d:9b:fa:14:95: 1f:a0:19:7e:76:04:9e:4d:75:43:b5:63:45:7e:73: be:44:1f:13:8f:a5:37:87:8c:d5:04:e8:b9:7d:cc: d0:1a:e0:ec:da:8b:40:ab:66:79:b8:6a:93:14:76: 2d:5f:34:e6:00:d4:47:1a:de:df:d9:5d:76:3d:74: 9c:fb:17:3f:cc:cf:e5:a7:a2:8f:e5:ab:5d:27:5a: 33:56:3c:72:49:8e:6f:89:d9:68:75:cd:20:1d:18: a0:46:93:3b:9e:83:0f:8a:cd:22:67:d5:c1:2e:47: f7:4d:d3:0b:c3:e2:69:e0:d1:5d:1d:7a:80:1c:49: df:7d:9d:fc:df:52:6a:ac:f6:79:5e:b1:9e:3b:f7: d8:fb:e6:c7:e1:fd:0e:7f:b2:26:29:c6:b6:80:3b: e6:bc:f3:28:da:03:12:2a:24:81:c4:cb:b6:b1:dc: 86:60:d6:cc:5b:06:28:12:3f:79:d5:a2:6d:a7:eb: 10:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:25:43:0C:EB:4C:A4:35:5B:E7:B1:18:76:21:C3:84:B7:53:85:88 X509v3 Authority Key Identifier: keyid:98:E8:63:E4:4B:59:7B:64:CA:8C:81:FE:3F:6D:CB:CD:DF:E1:F6:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhj5EtZe2TKjIH-P23Lzd_h9lU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:72:e0:66:53:ea:9b:57:8e:77:d2:ab:e0:68:35:69:2e:8f: 42:9f:aa:fa:62:30:8c:42:4b:5a:1f:b6:e6:3a:3b:a7:09:65: 8a:c2:c5:37:e9:48:6e:50:70:e5:f0:ca:5a:31:7f:38:b9:6b: e3:d7:9d:dd:8e:4b:c4:dc:61:4a:83:26:d7:b8:70:92:ec:33: 70:40:87:9d:4f:b4:17:f6:bd:52:49:ce:22:2e:3b:7d:a1:ad: f2:59:96:3f:a6:d1:a7:24:f4:26:b9:1b:3f:fe:f8:52:a1:34: af:38:88:da:49:09:a8:c6:04:a8:b3:3e:2e:b1:09:aa:a5:57: eb:4a:06:2f:32:91:f3:14:0b:32:8b:67:66:85:1d:a1:cd:56: 42:6b:4f:4f:74:fa:36:12:46:48:42:6f:68:8a:f0:7a:a5:95: f7:a0:fc:fc:13:72:d7:14:8f:e5:4a:ad:81:23:80:5d:2d:84: c2:d9:fd:10:f2:44:49:60:e1:3d:d4:ab:fa:e8:63:39:e0:b9: 00:1a:ba:5b:45:1f:86:a9:a5:6c:5d:d8:0d:ed:65:6d:71:ef: 55:60:d8:d4:14:6f:fc:81:c0:2e:94:9f:2c:79:2e:2f:06:36: 81:0a:c2:90:91:db:04:b9:7f:4f:84:54:12:2c:cc:6d:09:34: 2e:3f:ab:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ3MDcxMTAvBgNVBAUTKDk4RTg2M0U0NEI1OTdCNjRDQThDODFGRTNGNkRDQkNE REZFMUY2NTUwHhcNMjUwNTE0MjM0NDU0WhcNMjUwNTIxMjM0NDU0WjAYMRYwFAYD VQQDEw02ODI1MmFmNi1jMjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAurOLTRGb1a1NYyVwelP9IDkTiDZ7OgUtpyPKm088zfbwvSueHn4lDyfSpG8u uLnQ2OA6pxBSgXqcxyno9JzjSXNzSm7ijZv6FJUfoBl+dgSeTXVDtWNFfnO+RB8T j6U3h4zVBOi5fczQGuDs2otAq2Z5uGqTFHYtXzTmANRHGt7f2V12PXSc+xc/zM/l p6KP5atdJ1ozVjxySY5vidlodc0gHRigRpM7noMPis0iZ9XBLkf3TdMLw+Jp4NFd HXqAHEnffZ3831JqrPZ5XrGeO/fY++bH4f0Of7ImKca2gDvmvPMo2gMSKiSBxMu2 sdyGYNbMWwYoEj951aJtp+sQdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPMlQwzr TKQ1W+exGHYhw4S3U4WIMB8GA1UdIwQYMBaAFJjoY+RLWXtkyoyB/j9ty83f4fZV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDcwNy8yODY2QzIzNDEw OEIxMUVDODc4RjFCNEZDNEY5QUUwMi9tT2hqNUV0WmUyVEtqSUgtUDIzTHpkX2g5 bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21PaGo1RXRaZTJUS2pJSC1QMjNMemRfaDlsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDcwNy8yODY2QzIzNDEwOEIxMUVDODc4RjFCNEZDNEY5QUUwMi9tT2hqNUV0WmUy VEtqSUgtUDIzTHpkX2g5bFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2cuBmU+qbV4530qvgaDVpLo9Cn6r6YjCMQktaH7bmOjunCWWKwsU3 6UhuUHDl8MpaMX84uWvj153djkvE3GFKgybXuHCS7DNwQIedT7QX9r1SSc4iLjt9 oa3yWZY/ptGnJPQmuRs//vhSoTSvOIjaSQmoxgSosz4usQmqpVfrSgYvMpHzFAsy i2dmhR2hzVZCa09PdPo2EkZIQm9oivB6pZX3oPz8E3LXFI/lSq2BI4BdLYTC2f0Q 8kRJYOE91Kv66GM54LkAGrpbRR+GqaVsXdgN7WVtce9VYNjUFG/8gcAulJ8seS4v BjaBCsKQkdsEuX9PhFQSLMxtCTQuP6u0 -----END CERTIFICATE-----Generated at Fri May 16 02:37:30 2025 by rpki-client