$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft File: 2OL6sVCi_VePZ-GbApZTmzdSyak.mft (raw, json) Hash identifier: SrxtdrjJB6tLSApb30sGXKV9QFAmq/7H3Acl73j285o= Subject key identifier: C8:C4:96:EB:D0:57:C0:D3:DD:78:75:E3:AA:2A:7D:D6:50:AB:1C:25 Authority key identifier: D8:E2:FA:B1:50:A2:FD:57:8F:67:E1:9B:02:96:53:9B:37:52:C9:A9 Certificate issuer: /CN=A91EC225/serialNumber=D8E2FAB150A2FD578F67E19B0296539B3752C9A9 Certificate serial: 0E9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2OL6sVCi_VePZ-GbApZTmzdSyak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft Manifest number: 0E94 Signing time: Thu 08 May 2025 17:44:17 +0000 Manifest this update: Thu 08 May 2025 17:44:17 +0000 Manifest next update: Thu 15 May 2025 17:44:17 +0000 Files and hashes: 1: 2OL6sVCi_VePZ-GbApZTmzdSyak.crl (hash: TthDBBNA1z0wAGPagf6zgTok6Cs/Lfi3bSAmTV9+Ye0=) 2: 83974F92EF7C11EF9079DB1CC4F9AE02.roa (hash: yybAeEAc62kbf0vMICJ/T2r9CwvlPXBXXe+0zfXPjFk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.crl rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2OL6sVCi_VePZ-GbApZTmzdSyak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 17:44:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3741 (0xe9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC225, serialNumber=D8E2FAB150A2FD578F67E19B0296539B3752C9A9 Validity Not Before: May 8 17:44:17 2025 GMT Not After : May 15 17:44:17 2025 GMT Subject: CN=681ced71-653e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0c:4d:0a:7b:b3:de:14:97:eb:32:a9:96:76: 86:42:b1:2e:26:3d:3c:31:84:71:48:82:20:3e:dc: ac:3f:7d:73:71:3c:30:5c:65:94:73:c4:87:9c:6c: 9b:70:64:f5:c6:16:66:ec:bb:3f:1e:50:e5:cc:93: 62:30:af:2f:28:d1:0b:06:29:0d:7d:52:fb:fa:46: f2:e6:3c:6d:55:b8:fc:86:90:21:a1:c9:97:fd:39: d8:6d:e0:c7:39:50:87:dd:22:07:37:fe:7d:9e:6e: 3c:cc:51:a1:fa:a1:73:3c:c9:a5:49:c5:04:e3:49: a8:80:50:96:53:ec:62:34:08:fa:56:46:8f:da:3e: 83:a1:05:b4:8c:00:19:97:64:a6:3f:a5:d4:fb:34: 16:81:f7:76:84:d9:32:5d:1c:d5:b2:2d:50:65:9b: e1:ec:24:93:0c:65:bd:89:25:cc:6c:e6:88:3e:63: 85:bb:3a:f1:aa:31:81:e2:56:f0:6b:b1:f3:5b:08: 4c:ff:72:68:83:37:69:9b:89:9d:e0:b9:14:6d:5d: 74:70:84:bb:07:3c:41:65:65:be:24:3e:4b:14:5f: 05:a0:29:70:5d:42:c6:89:c9:13:90:aa:13:15:0f: 40:42:e1:63:cc:d4:76:10:6c:5a:94:b2:81:31:c7: 2d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C4:96:EB:D0:57:C0:D3:DD:78:75:E3:AA:2A:7D:D6:50:AB:1C:25 X509v3 Authority Key Identifier: keyid:D8:E2:FA:B1:50:A2:FD:57:8F:67:E1:9B:02:96:53:9B:37:52:C9:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2OL6sVCi_VePZ-GbApZTmzdSyak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:b9:af:6c:23:32:61:29:98:80:7a:85:70:e2:77:88:44:8d: 68:17:12:26:f1:b8:3b:1d:f5:3c:bd:9c:cb:10:fb:b7:8e:3a: b7:3c:26:0e:de:8e:15:e5:fb:2d:4b:49:fe:6e:77:ad:76:80: e4:48:a3:67:3d:2e:77:ae:e7:55:38:86:dc:be:8e:ef:23:8c: d8:0b:25:99:93:9d:b2:6f:94:84:4f:9f:22:6b:36:93:49:e4: 52:af:7a:d9:37:30:cf:b2:b2:fa:79:92:1c:eb:9d:b1:cd:44: d1:53:92:ea:d7:97:ab:07:53:39:c5:b2:8d:42:e1:93:b4:72: 8f:ef:e0:23:33:fa:77:51:ab:47:49:9d:02:5c:e4:4b:b5:63: 47:32:28:31:9b:05:14:e8:7e:1f:28:dd:7f:dc:a8:47:21:96: 46:6f:25:eb:2f:1c:a7:1e:c2:8a:83:5f:8e:de:50:c9:00:6e: 7c:a5:f8:54:bb:e3:e9:b2:f8:cd:8e:1f:23:6b:cf:14:b7:3b: 0e:17:82:fd:df:dd:66:88:0e:f8:5b:f2:78:ac:9b:41:75:0c: 8f:bd:86:d5:31:a1:37:df:39:52:75:e5:93:74:a4:5b:a5:c6: 71:1b:c8:92:49:e4:ee:c5:5e:b8:60:18:56:2a:e2:06:13:39: 1b:dc:89:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUMyMjUxMTAvBgNVBAUTKEQ4RTJGQUIxNTBBMkZENTc4RjY3RTE5QjAyOTY1MzlC Mzc1MkM5QTkwHhcNMjUwNTA4MTc0NDE3WhcNMjUwNTE1MTc0NDE3WjAYMRYwFAYD VQQDEw02ODFjZWQ3MS02NTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1gxNCnuz3hSX6zKplnaGQrEuJj08MYRxSIIgPtysP31zcTwwXGWUc8SHnGyb cGT1xhZm7Ls/HlDlzJNiMK8vKNELBikNfVL7+kby5jxtVbj8hpAhocmX/TnYbeDH OVCH3SIHN/59nm48zFGh+qFzPMmlScUE40mogFCWU+xiNAj6VkaP2j6DoQW0jAAZ l2SmP6XU+zQWgfd2hNkyXRzVsi1QZZvh7CSTDGW9iSXMbOaIPmOFuzrxqjGB4lbw a7HzWwhM/3Jogzdpm4md4LkUbV10cIS7BzxBZWW+JD5LFF8FoClwXULGickTkKoT FQ9AQuFjzNR2EGxalLKBMcctKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMjEluvQ V8DT3Xh146oqfdZQqxwlMB8GA1UdIwQYMBaAFNji+rFQov1Xj2fhmwKWU5s3Usmp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzIyNS80OTlGREY5MDhF NTUxMUU5ODBEMDlBNDJDNEY5QUUwMi8yT0w2c1ZDaV9WZVBaLUdiQXBaVG16ZFN5 YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJPTDZzVkNpX1ZlUFotR2JBcFpUbXpkU3lhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzIyNS80OTlGREY5MDhFNTUxMUU5ODBEMDlBNDJDNEY5QUUwMi8yT0w2c1ZDaV9W ZVBaLUdiQXBaVG16ZFN5YWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlua9sIzJhKZiAeoVw4neIRI1oFxIm8bg7HfU8vZzLEPu3jjq3PCYO 3o4V5fstS0n+bnetdoDkSKNnPS53rudVOIbcvo7vI4zYCyWZk52yb5SET58iazaT SeRSr3rZNzDPsrL6eZIc652xzUTRU5Lq15erB1M5xbKNQuGTtHKP7+AjM/p3UatH SZ0CXORLtWNHMigxmwUU6H4fKN1/3KhHIZZGbyXrLxynHsKKg1+O3lDJAG58pfhU u+PpsvjNjh8ja88UtzsOF4L9391miA74W/J4rJtBdQyPvYbVMaE33zlSdeWTdKRb pcZxG8iSSeTuxV64YBhWKuIGEzkb3Ilg -----END CERTIFICATE-----Generated at Sat May 10 10:40:05 2025 by rpki-client