$ rpki-client -vvf rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.mft File: oLpGLyn4JaQCCWoyzXT3ooy8_uE.mft (raw, json) Hash identifier: qFznMC6ApNyFHXp3RhCwhD6yIVjDu6KYeV6LLmoqzZI= Subject key identifier: C3:23:A6:92:77:95:2B:C0:CE:C4:AB:6A:F0:91:47:93:6B:B7:C1:22 Authority key identifier: A0:BA:46:2F:29:F8:25:A4:02:09:6A:32:CD:74:F7:A2:8C:BC:FE:E1 Certificate issuer: /CN=A91E43F6/serialNumber=A0BA462F29F825A402096A32CD74F7A28CBCFEE1 Certificate serial: 05CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oLpGLyn4JaQCCWoyzXT3ooy8_uE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.mft Manifest number: 05C8 Signing time: Sun 04 May 2025 22:41:57 +0000 Manifest this update: Sun 04 May 2025 22:41:56 +0000 Manifest next update: Sun 11 May 2025 22:41:56 +0000 Files and hashes: 1: oLpGLyn4JaQCCWoyzXT3ooy8_uE.crl (hash: vKpwuCpjMbNy4lj7TlctrP0F0cFvZChoyqAAgTooQhA=) 2: 27560994BA0611EB8B424C22C4F9AE02.roa (hash: pqRxueuRQ9Xk1G5bNOlc+yk8F/47WS7KRa617CuzluU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.crl rsync://rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oLpGLyn4JaQCCWoyzXT3ooy8_uE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 22:41:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1485 (0x5cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E43F6, serialNumber=A0BA462F29F825A402096A32CD74F7A28CBCFEE1 Validity Not Before: May 4 22:41:56 2025 GMT Not After : May 11 22:41:56 2025 GMT Subject: CN=6817ed35-b8c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:64:b7:cd:fc:2a:4b:94:c5:84:fa:14:0f:30: 8f:22:d9:84:31:49:8b:28:73:a5:5d:b7:5e:24:11: e4:82:c0:d9:b6:8d:a8:94:6a:e6:96:d8:00:34:e0: d3:64:fc:a4:f8:08:b9:cf:f5:db:2b:7d:4d:cb:ff: 19:82:f5:d3:51:84:7e:71:dd:5d:17:10:f2:80:5b: 74:4e:9b:7f:4f:66:a2:84:ba:4e:6e:46:96:63:71: b2:42:86:da:91:b7:1b:c9:a1:06:3d:53:5f:8f:d3: d1:8b:47:ec:14:b9:f6:b2:86:5f:ff:1e:1e:b2:ae: 44:1f:8d:a5:c6:12:0d:c6:db:6c:73:8f:fa:19:9d: 4a:09:44:6e:1c:6b:bf:67:89:40:b2:33:ba:6f:b0: 8a:2c:8e:68:f6:84:f8:8a:60:66:4f:77:53:f9:29: ec:19:5d:78:df:ed:df:79:f5:1d:27:d4:fd:4e:d4: 29:58:a4:3e:12:cf:f9:6f:df:43:a5:07:9a:80:75: c2:b1:94:71:ac:e9:5b:28:58:10:8b:a1:33:84:17: 3a:d5:36:a3:8b:24:80:c5:d5:2f:2b:80:15:f1:93: 59:27:07:57:ef:a6:d5:18:36:80:ff:14:71:af:5c: 5a:f8:16:4f:04:90:e2:4c:25:63:0b:f3:92:3f:ba: e2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:23:A6:92:77:95:2B:C0:CE:C4:AB:6A:F0:91:47:93:6B:B7:C1:22 X509v3 Authority Key Identifier: keyid:A0:BA:46:2F:29:F8:25:A4:02:09:6A:32:CD:74:F7:A2:8C:BC:FE:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oLpGLyn4JaQCCWoyzXT3ooy8_uE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:c3:3a:e7:4e:ab:ab:ac:c4:bb:a8:a3:41:35:a2:92:c7:b8: 96:46:9c:60:1b:43:4d:7c:90:4b:d8:b1:0d:e4:eb:9a:42:d3: e4:2d:42:86:5a:9a:61:89:b8:13:19:d3:63:7a:7b:83:af:d7: ba:1e:af:ab:ab:d5:53:bc:f6:02:3c:94:cf:93:23:f0:64:55: 0f:e2:28:5a:6b:57:fb:ec:f5:dc:4d:e7:44:2c:6b:2b:da:cb: 15:d2:4a:78:db:59:1d:49:56:01:a2:7c:62:7a:ec:a7:fe:76: 98:ac:be:c8:66:4a:c1:c9:85:43:5c:61:53:49:d7:4e:2c:f7: 0f:95:07:b9:c3:e1:be:ca:29:06:a9:49:b0:03:6c:76:96:c4: 91:a5:46:a6:6d:6e:f0:c9:91:4b:0b:fd:c4:28:75:a9:e3:d0: dd:64:73:b3:58:d9:9e:6d:d0:b0:0c:7f:b5:ad:e0:4a:64:0c: 14:a8:a6:be:7a:22:4e:cc:31:ea:4f:f7:99:02:09:e5:f1:93: fb:95:0a:f8:55:f1:ed:28:12:d6:39:46:53:0f:a8:9b:fe:7f: 73:a6:69:8b:45:66:6a:a5:b7:9d:65:3c:ca:28:c1:7b:dc:07: 7a:de:e2:65:86:32:0d:81:58:f7:ae:93:e8:c1:55:6f:28:40: 2c:8d:42:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQzRjYxMTAvBgNVBAUTKEEwQkE0NjJGMjlGODI1QTQwMjA5NkEzMkNENzRGN0Ey OENCQ0ZFRTEwHhcNMjUwNTA0MjI0MTU2WhcNMjUwNTExMjI0MTU2WjAYMRYwFAYD VQQDEw02ODE3ZWQzNS1iOGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8mS3zfwqS5TFhPoUDzCPItmEMUmLKHOlXbdeJBHkgsDZto2olGrmltgANODT ZPyk+Ai5z/XbK31Ny/8ZgvXTUYR+cd1dFxDygFt0Tpt/T2aihLpObkaWY3GyQoba kbcbyaEGPVNfj9PRi0fsFLn2soZf/x4esq5EH42lxhINxttsc4/6GZ1KCURuHGu/ Z4lAsjO6b7CKLI5o9oT4imBmT3dT+SnsGV143+3fefUdJ9T9TtQpWKQ+Es/5b99D pQeagHXCsZRxrOlbKFgQi6EzhBc61TajiySAxdUvK4AV8ZNZJwdX76bVGDaA/xRx r1xa+BZPBJDiTCVjC/OSP7riSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMMjppJ3 lSvAzsSravCRR5Nrt8EiMB8GA1UdIwQYMBaAFKC6Ri8p+CWkAglqMs1096KMvP7h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDNGNi8yRDJGMjE4NkJB MDQxMUVCOTdGNUI0MUZDNEY5QUUwMi9vTHBHTHluNEphUUNDV295elhUM29veThf dUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29McEdMeW40SmFRQ0NXb3l6WFQzb295OF91RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDNGNi8yRDJGMjE4NkJBMDQxMUVCOTdGNUI0MUZDNEY5QUUwMi9vTHBHTHluNEph UUNDV295elhUM29veThfdUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqwzrnTqurrMS7qKNBNaKSx7iWRpxgG0NNfJBL2LEN5OuaQtPkLUKG WpphibgTGdNjenuDr9e6Hq+rq9VTvPYCPJTPkyPwZFUP4ihaa1f77PXcTedELGsr 2ssV0kp421kdSVYBonxieuyn/naYrL7IZkrByYVDXGFTSddOLPcPlQe5w+G+yikG qUmwA2x2lsSRpUambW7wyZFLC/3EKHWp49DdZHOzWNmebdCwDH+1reBKZAwUqKa+ eiJOzDHqT/eZAgnl8ZP7lQr4VfHtKBLWOUZTD6ib/n9zpmmLRWZqpbedZTzKKMF7 3Ad63uJlhjINgVj3rpPowVVvKEAsjUJs -----END CERTIFICATE-----Generated at Mon May 5 02:38:51 2025 by rpki-client