$ rpki-client -vvf rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft File: 0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft (raw, json) Hash identifier: dhp2+Dyz2Etbey3A0N8PUfRz72lRk0jxxUjn4DxRSZU= Subject key identifier: E6:C0:38:7D:C4:92:4F:DF:0E:1F:2E:01:71:1D:AD:02:16:6C:EB:64 Authority key identifier: D3:03:8B:A4:49:0E:A8:15:AD:B0:9F:1A:38:65:8B:CD:8B:17:F4:82 Certificate issuer: /CN=A91F018E/serialNumber=D3038BA4490EA815ADB09F1A38658BCD8B17F482 Certificate serial: 0E48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wOLpEkOqBWtsJ8aOGWLzYsX9II.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft Manifest number: 0E41 Signing time: Tue 06 May 2025 17:45:09 +0000 Manifest this update: Tue 06 May 2025 17:45:08 +0000 Manifest next update: Tue 13 May 2025 17:45:08 +0000 Files and hashes: 1: 0wOLpEkOqBWtsJ8aOGWLzYsX9II.crl (hash: zcYoDQPK4qiH8PqDqY6oE2FKFbWu3ofyhzF+KRQnZ1A=) 2: 7214B0AA9E1711E9B3710950C4F9AE02.roa (hash: c4C00IYUahMg/MQNhIkPwEgft6IPuKV052m4LGanBW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.crl rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wOLpEkOqBWtsJ8aOGWLzYsX9II.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 17:45:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3656 (0xe48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F018E, serialNumber=D3038BA4490EA815ADB09F1A38658BCD8B17F482 Validity Not Before: May 6 17:45:08 2025 GMT Not After : May 13 17:45:08 2025 GMT Subject: CN=681a4aa4-e394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:17:c6:be:31:dd:4e:74:46:50:08:4e:d2:f4: 70:22:5d:54:c7:92:7d:d0:eb:c6:c2:88:d9:3f:25: f4:c2:2c:04:b4:3b:67:42:7d:d6:e9:fe:87:37:1b: fa:ee:6c:58:4d:ec:24:51:11:d5:0e:88:8a:b8:da: f5:11:43:78:8c:54:54:65:16:a0:0b:2f:58:26:d8: 65:c4:ca:51:c0:37:f4:86:54:7a:af:0e:2e:1f:b3: 91:2a:a5:96:83:94:84:ae:83:ac:87:f2:53:92:02: 92:37:26:15:6d:00:9b:10:ed:2b:27:88:7a:e1:80: db:e7:a3:49:c4:a1:7d:a1:4c:1e:70:39:8d:ff:0d: 31:ce:53:4d:8c:6e:e0:f3:e2:50:d2:e1:28:1b:13: 75:79:ea:40:cd:22:72:d4:5e:43:7b:bf:07:07:6d: 64:3d:61:35:65:e4:be:9f:a9:ac:ff:d0:1a:59:25: 64:17:37:b7:21:71:9d:f8:9b:6f:d8:36:2f:b7:51: 22:0a:20:e3:62:58:13:bc:03:23:8a:bd:c3:19:b1: 22:b5:21:0f:87:e4:8a:7b:92:1f:de:f6:22:48:46: a2:ec:04:01:f2:e5:b6:d3:e2:f6:99:5c:fc:bf:52: 24:d7:cc:30:4f:73:1c:f8:2a:56:7f:7c:34:68:14: 89:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:C0:38:7D:C4:92:4F:DF:0E:1F:2E:01:71:1D:AD:02:16:6C:EB:64 X509v3 Authority Key Identifier: keyid:D3:03:8B:A4:49:0E:A8:15:AD:B0:9F:1A:38:65:8B:CD:8B:17:F4:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wOLpEkOqBWtsJ8aOGWLzYsX9II.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:8f:14:b0:e2:ca:e3:aa:0c:ba:d2:44:86:c4:0d:02:6b:e2: 2f:16:d4:d4:33:a8:94:51:c5:80:ff:0b:cb:4a:79:b8:66:8f: 54:37:43:9c:1c:c4:b3:e2:6c:9c:e8:d0:6b:70:3a:9c:b3:6c: cb:ab:96:31:4d:c2:9f:10:a3:76:91:a5:12:1a:90:c4:3d:f8: 8e:be:63:e7:1c:2c:ad:77:1f:6e:2a:08:2f:0d:11:e7:68:e5: 4a:9e:73:ae:fd:68:8a:8f:b1:57:bf:af:bb:1d:5a:03:3a:ac: 10:b4:ba:30:03:32:c1:33:5f:ba:3e:35:e2:e5:ab:d6:48:93: 94:c3:c2:8a:15:5e:07:01:b9:4d:41:e9:ac:75:79:57:6e:5a: a2:5c:81:8c:2c:70:09:81:51:33:2c:8b:ff:57:bf:bb:35:2f: 5e:fd:dc:e4:4d:2f:cd:ee:ff:e6:f6:e3:33:12:cc:03:12:e2: 80:90:be:0e:0c:cb:b7:10:56:d6:d2:71:00:2a:60:1a:8c:b0: 58:6d:91:18:b8:af:fa:89:bd:76:e5:a9:24:14:ac:a0:08:41: 49:35:61:af:29:42:d9:a2:a1:cb:b8:b3:f4:c5:a0:a2:74:1d: 3d:1d:7d:ea:9b:d7:62:e5:f4:91:c7:58:52:ff:a3:df:55:d4: 8e:42:cb:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjAxOEUxMTAvBgNVBAUTKEQzMDM4QkE0NDkwRUE4MTVBREIwOUYxQTM4NjU4QkNE OEIxN0Y0ODIwHhcNMjUwNTA2MTc0NTA4WhcNMjUwNTEzMTc0NTA4WjAYMRYwFAYD VQQDEw02ODFhNGFhNC1lMzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4RfGvjHdTnRGUAhO0vRwIl1Ux5J90OvGwojZPyX0wiwEtDtnQn3W6f6HNxv6 7mxYTewkURHVDoiKuNr1EUN4jFRUZRagCy9YJthlxMpRwDf0hlR6rw4uH7ORKqWW g5SEroOsh/JTkgKSNyYVbQCbEO0rJ4h64YDb56NJxKF9oUwecDmN/w0xzlNNjG7g 8+JQ0uEoGxN1eepAzSJy1F5De78HB21kPWE1ZeS+n6ms/9AaWSVkFze3IXGd+Jtv 2DYvt1EiCiDjYlgTvAMjir3DGbEitSEPh+SKe5If3vYiSEai7AQB8uW20+L2mVz8 v1Ik18wwT3Mc+CpWf3w0aBSJAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFObAOH3E kk/fDh8uAXEdrQIWbOtkMB8GA1UdIwQYMBaAFNMDi6RJDqgVrbCfGjhli82LF/SC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDE4RS9GQTU2OEU1RTlF MTUxMUU5OTAxNTM2NEFDNEY5QUUwMi8wd09McEVrT3FCV3RzSjhhT0dXTHpZc1g5 SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB3T0xwRWtPcUJXdHNKOGFPR1dMellzWDlJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDE4RS9GQTU2OEU1RTlFMTUxMUU5OTAxNTM2NEFDNEY5QUUwMi8wd09McEVrT3FC V3RzSjhhT0dXTHpZc1g5SUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgjxSw4srjqgy60kSGxA0Ca+IvFtTUM6iUUcWA/wvLSnm4Zo9UN0Oc HMSz4myc6NBrcDqcs2zLq5YxTcKfEKN2kaUSGpDEPfiOvmPnHCytdx9uKggvDRHn aOVKnnOu/WiKj7FXv6+7HVoDOqwQtLowAzLBM1+6PjXi5avWSJOUw8KKFV4HAblN QemsdXlXblqiXIGMLHAJgVEzLIv/V7+7NS9e/dzkTS/N7v/m9uMzEswDEuKAkL4O DMu3EFbW0nEAKmAajLBYbZEYuK/6ib125akkFKygCEFJNWGvKULZoqHLuLP0xaCi dB09HX3qm9di5fSRx1hS/6PfVdSOQsvF -----END CERTIFICATE-----Generated at Thu May 8 10:04:36 2025 by rpki-client