$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft File: oL2xs_Hk5wTrTU8s5f405lA3uUM.mft (raw, json) Hash identifier: EHHOF3bbmZmSh65p2TWAHinGnwNcPx6o6HDrs7Vs8Yc= Subject key identifier: 67:9E:B0:89:0A:FA:49:23:77:8E:2E:78:6F:95:9B:64:D3:C4:04:BC Authority key identifier: A0:BD:B1:B3:F1:E4:E7:04:EB:4D:4F:2C:E5:FE:34:E6:50:37:B9:43 Certificate issuer: /CN=A91A5B83/serialNumber=A0BDB1B3F1E4E704EB4D4F2CE5FE34E65037B943 Certificate serial: 08E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft Manifest number: 08DC Signing time: Mon 12 May 2025 20:15:58 +0000 Manifest this update: Mon 12 May 2025 20:15:58 +0000 Manifest next update: Mon 19 May 2025 20:15:58 +0000 Files and hashes: 1: oL2xs_Hk5wTrTU8s5f405lA3uUM.crl (hash: G1MakL6bQW4VpnNCAaTI7IiOLXlCDStPEn23/qFEs3s=) 2: 975BB0CE73AD11EDAD75DB7DC4F9AE02.roa (hash: 3hcEUgYqoshOk8lFFnh68Ppk5C9DLTGbNkZXNe5ZLqA=) 3: A21F0938C44B11EB8CF88F1EC4F9AE02.roa (hash: ao7owdTBxv72fQFQJlEFwxw2v4nLgAcrWGOJHUBmOYs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.crl rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:15:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2279 (0x8e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5B83, serialNumber=A0BDB1B3F1E4E704EB4D4F2CE5FE34E65037B943 Validity Not Before: May 12 20:15:58 2025 GMT Not After : May 19 20:15:58 2025 GMT Subject: CN=682256fe-457e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:26:b1:b5:8c:a3:9b:6f:62:c3:fb:05:58:5f: c1:bf:0b:84:c8:88:63:2d:33:51:4b:63:af:2c:41: 44:1d:ce:a6:10:1b:bb:76:4b:24:79:f2:13:0a:75: 7a:4d:aa:29:7d:08:f6:ff:31:06:62:60:a7:bb:e7: e1:f4:cb:7d:a1:89:15:10:fe:39:b9:07:fe:65:aa: b9:56:a1:78:43:67:c3:c2:49:fd:1a:33:27:8c:1f: bd:ad:8a:06:e2:b0:c6:b4:4b:b7:49:a1:b2:1b:d0: ad:02:da:fa:f4:7b:fb:5c:7d:b1:cc:8a:32:d7:8e: 3a:d8:41:f2:03:e6:ee:1e:5f:67:20:c8:1d:44:8a: 89:64:80:f3:03:3c:cf:4b:25:94:4e:af:1f:4e:11: 14:1e:4e:5c:49:1b:dc:0d:e4:1b:e7:3d:b1:23:39: c5:07:84:30:3d:f1:1f:24:2d:25:c1:f3:01:6b:6a: 8f:13:86:32:8b:12:2f:dd:f6:d0:28:92:01:62:23: 5f:6d:b6:a9:8f:dc:30:6c:9d:1e:a3:6f:b8:76:ad: 1e:e3:4c:c2:a4:69:c6:e7:a6:eb:89:37:cb:b4:78: f8:d4:e2:be:96:47:a7:17:5e:42:ce:6f:ef:4a:b5: 9f:c4:01:3d:5b:da:a6:c4:27:bb:5b:c3:b4:e2:35: 42:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:9E:B0:89:0A:FA:49:23:77:8E:2E:78:6F:95:9B:64:D3:C4:04:BC X509v3 Authority Key Identifier: keyid:A0:BD:B1:B3:F1:E4:E7:04:EB:4D:4F:2C:E5:FE:34:E6:50:37:B9:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:37:b5:af:60:56:17:1c:cf:e4:b8:51:8f:10:cd:c0:51:7e: 0a:61:fb:5c:84:31:22:8c:e7:e7:e3:50:ed:7b:89:cc:b8:ed: a6:0e:a1:69:01:a3:a1:e5:f7:82:68:ea:74:1d:39:db:58:63: aa:3c:14:6b:d2:9d:fa:7e:e2:b5:f8:71:9d:4b:67:5d:a4:0b: a1:bc:47:57:49:dc:e2:5d:d9:68:f3:ea:63:f7:76:5c:53:2e: c2:eb:e9:f6:dd:67:35:f3:a5:39:0c:f5:cb:f5:a3:05:10:72: 56:0a:a7:50:a4:55:b0:a1:2c:0e:43:85:2d:32:01:e5:8b:5c: c0:7e:2f:95:08:d4:f2:53:fc:d4:5e:08:18:d4:c8:30:b2:d4: 39:62:0e:be:61:c7:a4:72:e0:5c:4a:b7:37:04:dd:53:33:e5: bf:3b:5c:fb:cf:82:d5:39:58:94:79:6b:83:c4:f8:21:16:2a: e4:6c:71:30:ed:60:ba:d9:2e:8e:78:25:2c:c8:89:8f:d2:c5: 7a:7e:2d:c1:b0:df:0b:2e:4f:d0:03:f9:e2:92:6a:ad:d0:65: a5:1e:99:af:eb:56:fa:b9:84:1d:c3:8e:7c:68:82:96:a4:22: 5c:5e:cc:4d:f5:97:1f:36:f8:01:be:76:53:ea:d5:30:a1:c5: 17:bf:c6:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVCODMxMTAvBgNVBAUTKEEwQkRCMUIzRjFFNEU3MDRFQjRENEYyQ0U1RkUzNEU2 NTAzN0I5NDMwHhcNMjUwNTEyMjAxNTU4WhcNMjUwNTE5MjAxNTU4WjAYMRYwFAYD VQQDEw02ODIyNTZmZS00NTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvyaxtYyjm29iw/sFWF/BvwuEyIhjLTNRS2OvLEFEHc6mEBu7dkskefITCnV6 TaopfQj2/zEGYmCnu+fh9Mt9oYkVEP45uQf+Zaq5VqF4Q2fDwkn9GjMnjB+9rYoG 4rDGtEu3SaGyG9CtAtr69Hv7XH2xzIoy14462EHyA+buHl9nIMgdRIqJZIDzAzzP SyWUTq8fThEUHk5cSRvcDeQb5z2xIznFB4QwPfEfJC0lwfMBa2qPE4YyixIv3fbQ KJIBYiNfbbapj9wwbJ0eo2+4dq0e40zCpGnG56briTfLtHj41OK+lkenF15Czm/v SrWfxAE9W9qmxCe7W8O04jVCowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGeesIkK +kkjd44ueG+Vm2TTxAS8MB8GA1UdIwQYMBaAFKC9sbPx5OcE601PLOX+NOZQN7lD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUI4My8wRjQ2Q0E4Q0FE QUYxMUVBODRDMDRFMTBDNEY5QUUwMi9vTDJ4c19IazV3VHJUVThzNWY0MDVsQTN1 VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29MMnhzX0hrNXdUclRVOHM1ZjQwNWxBM3VVTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUI4My8wRjQ2Q0E4Q0FEQUYxMUVBODRDMDRFMTBDNEY5QUUwMi9vTDJ4c19IazV3 VHJUVThzNWY0MDVsQTN1VU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDUN7WvYFYXHM/kuFGPEM3AUX4KYftchDEijOfn41Dte4nMuO2mDqFp AaOh5feCaOp0HTnbWGOqPBRr0p36fuK1+HGdS2ddpAuhvEdXSdziXdlo8+pj93Zc Uy7C6+n23Wc186U5DPXL9aMFEHJWCqdQpFWwoSwOQ4UtMgHli1zAfi+VCNTyU/zU XggY1MgwstQ5Yg6+YcekcuBcSrc3BN1TM+W/O1z7z4LVOViUeWuDxPghFirkbHEw 7WC62S6OeCUsyImP0sV6fi3BsN8LLk/QA/nikmqt0GWlHpmv61b6uYQdw458aIKW pCJcXsxN9ZcfNvgBvnZT6tUwocUXv8ZB -----END CERTIFICATE-----Generated at Wed May 14 18:20:14 2025 by rpki-client