$ rpki-client -vvf rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft File: OSQdwqlJIur_mC2bQID4vkD3tr0.mft (raw, json) Hash identifier: bJ+WCI3oatMqdTYFOFYAeoBG5fxZr1dyIBQA8A2BUnc= Subject key identifier: 35:6D:B2:FC:F8:94:91:00:08:32:5E:D7:B0:A9:3F:38:D8:4B:57:95 Authority key identifier: 39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD Certificate issuer: /CN=A91E17F3/serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft Manifest number: 22 Signing time: Sun 11 May 2025 06:36:27 +0000 Manifest this update: Sun 11 May 2025 06:36:27 +0000 Manifest next update: Sun 18 May 2025 06:36:27 +0000 Files and hashes: 1: OSQdwqlJIur_mC2bQID4vkD3tr0.crl (hash: SoUPS2p2+TsnEcDIQBFuO93foi1oCcHl2Bk/e65XUAo=) 2: C565FFE0025011F0ACBE181CC4F9AE02.roa (hash: /AkxNQvclEOTbcMEyripKFhKBkJQiQZpl8ngTKJu9eY=) 3: 7B3E74A6025011F096E34819C4F9AE02.roa (hash: WR0rb26sSd7NNnmbaBSVENCtgD1Go/mwg9p/vOPLcpI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E17F3, serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD Validity Not Before: May 11 06:36:27 2025 GMT Not After : May 18 06:36:27 2025 GMT Subject: CN=6820456b-bd0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ce:51:cd:47:d7:61:18:b3:a4:a7:f4:6c:42: 23:c8:23:64:84:d1:c5:0c:8b:49:e7:23:5c:ad:c7: 5a:5a:ee:b4:ff:30:b2:34:c9:07:03:50:9e:33:97: 15:5d:28:10:e5:36:e8:46:d4:67:db:19:cd:86:2e: 1e:ca:f6:da:3a:b7:6c:59:b6:9b:a7:f5:21:d8:41: 48:4f:ef:cc:f9:18:c7:d3:18:8c:bb:ac:77:b6:26: c2:48:03:7a:53:93:11:72:d6:ba:2a:db:7d:7b:81: 03:c0:ff:27:72:6e:e0:4c:e0:c3:f8:dd:4b:d5:78: 51:9c:ce:30:f6:28:ed:e4:8f:65:6b:54:44:5b:c1: cb:1d:c8:a3:14:2b:df:fa:09:35:81:c0:88:20:3d: 13:d1:0d:0d:1e:b4:e0:04:7c:5d:a3:45:23:da:5b: e8:55:97:41:6b:91:f7:ae:42:80:be:95:88:5a:e7: 86:8d:f9:22:80:85:97:4c:d9:35:78:fe:2e:08:04: 64:87:05:f5:d7:b8:2e:17:09:0d:69:83:73:6f:ef: 47:95:4c:b3:34:c3:01:65:26:b9:64:27:44:54:91: d7:ab:ce:4b:a3:97:42:10:af:85:70:2e:0e:0b:81: 50:3a:73:29:bd:88:10:d6:27:07:d2:2f:24:9d:6b: ff:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:6D:B2:FC:F8:94:91:00:08:32:5E:D7:B0:A9:3F:38:D8:4B:57:95 X509v3 Authority Key Identifier: keyid:39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:9d:41:da:0f:84:91:f1:6d:50:f0:fd:a0:4d:14:13:c6:d9: 6d:33:47:ed:1c:67:81:0a:c5:ec:b2:93:4f:6d:b7:77:f7:57: 57:4b:79:39:7d:ab:4c:79:a6:0a:82:f7:15:34:f9:71:59:de: ed:f4:80:03:8b:1f:3b:de:b9:3f:d2:92:ed:d0:9b:36:c4:88: 0a:01:a4:c6:cb:f7:b6:06:e3:7c:8a:70:ae:72:9d:05:08:a4: dd:2c:f7:eb:e8:c8:b1:cf:cd:2b:79:7b:3b:bf:5c:e7:4b:bf: ea:cf:9c:2c:75:81:3c:fb:80:3c:4f:69:73:df:75:e5:d3:41: 40:aa:73:3f:cb:42:86:96:40:5c:b8:ee:5e:9b:31:4c:74:6a: c4:7d:4d:f2:5d:07:f1:89:04:c0:d0:11:68:1c:57:c7:d1:a5: bd:fb:fa:e4:52:12:8d:b2:ac:a7:12:e5:87:e0:78:b5:8f:c4: 24:b4:6d:80:3f:8f:fd:06:87:90:46:5f:5d:2c:de:b5:4b:48: e1:7b:eb:67:eb:5e:d6:3d:94:b8:b7:f8:b2:1c:41:96:fa:28: 47:47:5a:2c:55:49:a8:fa:3f:2a:c4:31:ba:b7:be:bc:e8:04: 4c:48:40:f9:7a:38:12:e6:13:8f:d4:d4:bd:b1:07:db:9d:e3: 7d:06:73:32 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MTdGMzExMC8GA1UEBRMoMzkyNDFEQzJBOTQ5MjJFQUZGOTgyRDlCNDA4MEY4QkU0 MEY3QjZCRDAeFw0yNTA1MTEwNjM2MjdaFw0yNTA1MTgwNjM2MjdaMBgxFjAUBgNV BAMTDTY4MjA0NTZiLWJkMGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCzlHNR9dhGLOkp/RsQiPII2SE0cUMi0nnI1ytx1pa7rT/MLI0yQcDUJ4zlxVd KBDlNuhG1GfbGc2GLh7K9to6t2xZtpun9SHYQUhP78z5GMfTGIy7rHe2JsJIA3pT kxFy1roq2317gQPA/ydybuBM4MP43UvVeFGczjD2KO3kj2VrVERbwcsdyKMUK9/6 CTWBwIggPRPRDQ0etOAEfF2jRSPaW+hVl0FrkfeuQoC+lYha54aN+SKAhZdM2TV4 /i4IBGSHBfXXuC4XCQ1pg3Nv70eVTLM0wwFlJrlkJ0RUkderzkujl0IQr4VwLg4L gVA6cym9iBDWJwfSLySda/8bAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNW2y/PiU kQAIMl7XsKk/ONhLV5UwHwYDVR0jBBgwFoAUOSQdwqlJIur/mC2bQID4vkD3tr0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxN0YzLzlBOUZCOEYyRkZF QzExRUZCRjU1QkI2RkM0RjlBRTAyL09TUWR3cWxKSXVyX21DMmJRSUQ0dmtEM3Ry MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT1NRZHdxbEpJdXJfbUMyYlFJRDR2a0QzdHIwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx N0YzLzlBOUZCOEYyRkZFQzExRUZCRjU1QkI2RkM0RjlBRTAyL09TUWR3cWxKSXVy X21DMmJRSUQ0dmtEM3RyMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFidQdoPhJHxbVDw/aBNFBPG2W0zR+0cZ4EKxeyyk09tt3f3V1dLeTl9 q0x5pgqC9xU0+XFZ3u30gAOLHzveuT/Sku3QmzbEiAoBpMbL97YG43yKcK5ynQUI pN0s9+voyLHPzSt5ezu/XOdLv+rPnCx1gTz7gDxPaXPfdeXTQUCqcz/LQoaWQFy4 7l6bMUx0asR9TfJdB/GJBMDQEWgcV8fRpb37+uRSEo2yrKcS5YfgeLWPxCS0bYA/ j/0Gh5BGX10s3rVLSOF762frXtY9lLi3+LIcQZb6KEdHWixVSaj6PyrEMbq3vrzo BExIQPl6OBLmE4/U1L2xB9ud430GczI= -----END CERTIFICATE-----Generated at Sun May 11 14:53:23 2025 by rpki-client