$ rpki-client -vvf rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft File: OS824KRQBTw9xm0uOJThDKcz3aY.mft (raw, json) Hash identifier: x8194d8fVSIeCE1PUuyT+AmS9qjIWe4k7xjiIVioi34= Subject key identifier: CD:77:14:F7:90:E5:65:82:6B:E3:8C:61:FB:77:34:5D:18:A7:ED:3E Authority key identifier: 39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6 Certificate issuer: /CN=A91C326F/serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6 Certificate serial: 06E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft Manifest number: 06C3 Signing time: Sat 10 May 2025 21:47:42 +0000 Manifest this update: Sat 10 May 2025 21:47:41 +0000 Manifest next update: Sat 17 May 2025 21:47:41 +0000 Files and hashes: 1: OS824KRQBTw9xm0uOJThDKcz3aY.crl (hash: GhuRNtRdWAa1XKI9hPP+Af5F9v52XF0rjW7T52qxpJc=) 2: DE6E8CA8257F11F0823F9E46C4F9AE02.roa (hash: jUyUfVKqSzdQ1Jiv0y+K/4ZOmbxn+iVK0WY87xliBD0=) 3: B9CCEC5A72E411ED833AE326C4F9AE02.roa (hash: 7STuNNvyySdvKLv0ZARurOGrWZyKElkT0Pp3fy6yFYY=) 4: B8D1689472E411ED833AE326C4F9AE02.roa (hash: JSwTLZ+Ks+XHKVTbFIphlZkac86sl1CWT662kq+fPJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 21:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1769 (0x6e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C326F, serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6 Validity Not Before: May 10 21:47:41 2025 GMT Not After : May 17 21:47:41 2025 GMT Subject: CN=681fc97e-8f91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9a:6b:5d:a5:93:bf:1c:c0:0a:84:c2:a0:02: b7:df:15:f8:ca:26:fe:da:11:3d:c2:4f:bb:fe:6a: c8:c5:25:04:44:01:df:0e:c8:b2:58:14:e8:48:10: 48:3a:05:56:d9:6c:54:6b:f7:2f:ca:04:8d:4a:ff: a8:a7:97:99:75:12:89:0b:21:bf:bc:e1:b4:d5:e6: c1:d7:5d:e0:0e:2d:4b:46:f2:87:b2:db:2b:d2:5b: 30:61:2a:cd:b8:46:00:e3:e2:bf:af:5d:fd:4c:16: c8:c7:fd:43:cb:b4:9e:b6:7c:55:a8:8e:a7:9b:d1: 1f:c2:80:60:46:7f:ad:5c:02:03:ca:db:13:c8:3e: 03:22:fb:cc:e1:4c:fe:69:9f:b8:e9:9b:20:e1:33: c2:7a:bc:2b:0c:44:42:3a:dc:ea:82:9c:9c:50:22: e6:a5:8c:ac:41:11:3f:84:5e:51:32:62:d9:b0:4c: 3f:3a:23:64:46:9d:fc:aa:eb:76:b3:ee:34:0e:aa: b0:b7:d8:6d:90:ee:cf:bc:44:f4:85:cd:5e:0e:f5: 52:61:39:06:b1:0e:77:0c:d6:d2:ce:99:d7:1b:e4: 63:5f:70:99:5b:99:e0:36:46:a5:35:12:ef:a5:fa: b3:e9:0b:4e:98:9e:7c:bf:6a:00:65:5f:2b:7e:eb: cd:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:77:14:F7:90:E5:65:82:6B:E3:8C:61:FB:77:34:5D:18:A7:ED:3E X509v3 Authority Key Identifier: keyid:39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e1:b4:40:9d:77:29:69:1c:68:11:29:33:2b:50:3a:76:45:8d: b9:25:24:5a:1f:01:63:6b:c1:12:cc:b1:bd:5c:ba:f9:f0:c2: c6:66:6d:19:f8:c2:12:3e:d4:c8:f1:7f:66:d7:e0:68:ba:b5: 9c:4b:58:c7:de:2e:60:d8:39:5d:4a:69:60:86:c4:c1:9a:00: 7b:37:2a:e5:81:e1:a0:18:fc:35:30:cc:22:37:2b:54:ad:1a: 0d:ef:b4:5b:82:55:ce:48:4d:99:71:b0:17:12:a4:df:8a:72: 80:80:ac:2d:fa:78:91:14:89:67:2f:4f:35:fc:b4:b2:1f:c3: 17:70:c4:9b:7d:43:ae:f6:a7:a6:9f:61:0c:24:33:cf:d0:cc: c2:0b:81:75:ad:42:7c:a3:3f:df:e7:93:20:7f:64:98:3b:9c: b4:18:57:e1:0a:d5:5e:a9:2d:a8:16:4b:1a:e8:d4:46:84:cf: e9:8b:59:cb:6d:63:43:30:3c:39:41:67:bb:5c:3a:01:bc:31: 99:12:85:0a:04:a1:cc:fe:52:1d:45:6f:09:76:c4:55:00:75: 44:e7:e6:d8:1d:7f:6b:1d:ed:b5:e7:08:dd:d5:5e:6d:2f:00: a9:2e:28:d9:d4:98:c0:a7:0b:52:43:11:64:d1:2f:5e:de:af: be:ed:10:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBukwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMyNkYxMTAvBgNVBAUTKDM5MkYzNkUwQTQ1MDA1M0MzREM2NkQyRTM4OTRFMTBD QTczM0REQTYwHhcNMjUwNTEwMjE0NzQxWhcNMjUwNTE3MjE0NzQxWjAYMRYwFAYD VQQDEw02ODFmYzk3ZS04ZjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzJprXaWTvxzACoTCoAK33xX4yib+2hE9wk+7/mrIxSUERAHfDsiyWBToSBBI OgVW2WxUa/cvygSNSv+op5eZdRKJCyG/vOG01ebB113gDi1LRvKHstsr0lswYSrN uEYA4+K/r139TBbIx/1Dy7SetnxVqI6nm9EfwoBgRn+tXAIDytsTyD4DIvvM4Uz+ aZ+46Zsg4TPCerwrDERCOtzqgpycUCLmpYysQRE/hF5RMmLZsEw/OiNkRp38qut2 s+40Dqqwt9htkO7PvET0hc1eDvVSYTkGsQ53DNbSzpnXG+RjX3CZW5ngNkalNRLv pfqz6QtOmJ58v2oAZV8rfuvNdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM13FPeQ 5WWCa+OMYft3NF0Yp+0+MB8GA1UdIwQYMBaAFDkvNuCkUAU8PcZtLjiU4QynM92m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzI2Ri83ODY2RjUzMDVG QzcxMUVCOEE2OTIwMkVDNEY5QUUwMi9PUzgyNEtSUUJUdzl4bTB1T0pUaERLY3oz YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09TODI0S1JRQlR3OXhtMHVPSlRoREtjejNhWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzI2Ri83ODY2RjUzMDVGQzcxMUVCOEE2OTIwMkVDNEY5QUUwMi9PUzgyNEtSUUJU dzl4bTB1T0pUaERLY3ozYVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDhtECddylpHGgRKTMrUDp2RY25JSRaHwFja8ESzLG9XLr58MLGZm0Z +MISPtTI8X9m1+BourWcS1jH3i5g2DldSmlghsTBmgB7NyrlgeGgGPw1MMwiNytU rRoN77RbglXOSE2ZcbAXEqTfinKAgKwt+niRFIlnL081/LSyH8MXcMSbfUOu9qem n2EMJDPP0MzCC4F1rUJ8oz/f55Mgf2SYO5y0GFfhCtVeqS2oFksa6NRGhM/pi1nL bWNDMDw5QWe7XDoBvDGZEoUKBKHM/lIdRW8JdsRVAHVE5+bYHX9rHe215wjd1V5t LwCpLijZ1JjApwtSQxFk0S9e3q++7RDo -----END CERTIFICATE-----Generated at Mon May 12 04:15:00 2025 by rpki-client