$ rpki-client -vvf rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft File: rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft (raw, json) Hash identifier: RgLJ6AAgc+aHESJHlOL941oS6M4k2irq44U7m3otoRc= Subject key identifier: 96:14:0B:79:51:B3:4F:89:80:8E:35:3F:B9:17:53:84:F9:68:C0:3F Authority key identifier: AC:E2:C4:CC:B0:89:D2:1B:37:04:54:B0:0E:6B:59:3A:F2:88:62:F6 Certificate issuer: /CN=A91702B9/serialNumber=ACE2C4CCB089D21B370454B00E6B593AF28862F6 Certificate serial: 031D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft Manifest number: 0316 Signing time: Sat 05 Apr 2025 01:20:11 +0000 Manifest this update: Sat 05 Apr 2025 01:20:10 +0000 Manifest next update: Sat 12 Apr 2025 01:20:10 +0000 Files and hashes: 1: rOLEzLCJ0hs3BFSwDmtZOvKIYvY.crl (hash: QAheLyrQ/KHEO9kdWTXGROcOi+keAfRq4tvf7HQvHqE=) 2: FC159BECF4D911EFB4F5FC16C4F9AE02.roa (hash: EZLa5tftXUFUf01Wk2bJeB4vL11mjoEDS6Q4R3zkR8A=) 3: A047A07AD56811EFB57A5D33C4F9AE02.roa (hash: sculBNu+C3bTcMWuMUqGiXBXDN/H8rYURoXjaVPMA2Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.crl rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 01:20:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 797 (0x31d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91702B9 Validity Not Before: Apr 5 01:20:10 2025 GMT Not After : Apr 12 01:20:10 2025 GMT Subject: CN=67f0854b-5c94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c7:76:f1:a4:8f:06:70:d0:7c:3b:c3:04:cb: 3a:5a:07:2e:49:1c:be:ff:67:c1:f0:65:08:ad:e7: a3:6e:18:25:26:e3:f8:e9:33:40:af:fb:7c:2c:6d: d7:7f:ba:aa:8e:ea:b8:0f:b2:96:16:5b:a4:52:65: c5:4a:87:1e:3e:55:8f:fd:c7:17:55:3c:6f:f5:db: d5:fd:1d:95:cc:a7:f7:6d:4b:d7:0b:c8:23:4f:f7: f7:a5:ef:c8:d6:79:9e:cf:eb:c0:70:89:62:cd:8a: ee:94:7b:94:4f:94:2d:75:5b:c8:b9:d1:a8:ad:64: b4:c6:12:a4:d5:16:c1:e5:32:ec:24:b7:4a:9d:47: 17:13:b0:f7:4e:e3:82:68:c4:41:fd:e1:d7:43:3f: b6:9d:0f:6d:c2:ce:00:30:d6:11:03:2a:61:08:13: 26:d0:fc:e5:a4:f4:f7:21:f3:07:d3:80:0f:2b:11: 63:2f:46:ff:4b:6a:c0:4f:bf:d1:e6:78:50:91:4b: 87:04:9f:e1:9e:d5:49:bd:aa:a5:7a:52:20:f7:7b: 3f:a1:fc:f0:aa:48:b5:9e:cf:22:ee:bf:b5:7e:19: 52:f8:86:76:47:f9:d5:b1:6c:d1:60:36:1f:32:87: 2b:74:f3:91:2c:cc:23:36:f9:c1:e8:03:7d:7e:bc: a8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:14:0B:79:51:B3:4F:89:80:8E:35:3F:B9:17:53:84:F9:68:C0:3F X509v3 Authority Key Identifier: keyid:AC:E2:C4:CC:B0:89:D2:1B:37:04:54:B0:0E:6B:59:3A:F2:88:62:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:df:67:7f:75:5f:44:35:fc:2e:b1:48:37:ba:94:84:87:fe: 43:e9:c3:9e:41:f3:58:19:0e:cd:76:92:34:bd:2a:1c:1a:a7: 9f:4f:9b:bb:8a:44:8d:96:2d:ea:b0:ab:8e:6c:87:37:f4:c1: b1:6a:8a:71:58:2a:b7:e8:fd:e7:e7:20:23:8a:2e:be:b3:ac: e6:e5:32:b4:2c:3f:53:76:8c:04:fa:fc:23:10:90:16:20:dd: e1:c4:15:4f:32:cb:59:30:05:79:d3:10:a6:05:bf:98:bf:ee: 99:fe:d0:b8:76:44:f6:13:d2:9a:b0:76:10:33:18:89:91:ed: c5:d0:58:fb:69:31:a2:0d:10:1a:57:df:78:b7:23:40:13:8d: 16:ea:ad:53:75:89:29:4e:2b:d9:d4:d9:35:6a:ff:f8:d5:ec: d6:de:4f:4c:86:4d:0c:02:64:88:36:93:dc:0a:39:25:85:99: f8:99:eb:22:b2:f1:69:d3:2c:3d:2c:2a:9e:7c:62:ba:e9:c2: 68:73:4d:80:21:dd:a0:51:db:32:c7:b5:5f:b4:a4:3b:3a:f0: 51:c4:3d:a5:1d:1c:a2:d7:e8:73:d1:76:6d:3b:0b:d7:f4:5b: 23:2c:82:be:64:2e:95:73:d5:d6:c5:8e:a6:c0:40:c1:90:2c: 31:9d:80:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAyQjkxMTAvBgNVBAUTKEFDRTJDNENDQjA4OUQyMUIzNzA0NTRCMDBFNkI1OTNB RjI4ODYyRjYwHhcNMjUwNDA1MDEyMDEwWhcNMjUwNDEyMDEyMDEwWjAYMRYwFAYD VQQDEw02N2YwODU0Yi01Yzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlMd28aSPBnDQfDvDBMs6WgcuSRy+/2fB8GUIreejbhglJuP46TNAr/t8LG3X f7qqjuq4D7KWFlukUmXFSocePlWP/ccXVTxv9dvV/R2VzKf3bUvXC8gjT/f3pe/I 1nmez+vAcIlizYrulHuUT5QtdVvIudGorWS0xhKk1RbB5TLsJLdKnUcXE7D3TuOC aMRB/eHXQz+2nQ9tws4AMNYRAyphCBMm0PzlpPT3IfMH04APKxFjL0b/S2rAT7/R 5nhQkUuHBJ/hntVJvaqlelIg93s/ofzwqki1ns8i7r+1fhlS+IZ2R/nVsWzRYDYf MocrdPORLMwjNvnB6AN9fryo+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJYUC3lR s0+JgI41P7kXU4T5aMA/MB8GA1UdIwQYMBaAFKzixMywidIbNwRUsA5rWTryiGL2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDJCOS8zQjcyRUU5MEM2 MDUxMUVDQUI3NEQ5NjJDNEY5QUUwMi9yT0xFekxDSjBoczNCRlN3RG10Wk92S0lZ dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JPTEV6TENKMGhzM0JGU3dEbXRaT3ZLSVl2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDJCOS8zQjcyRUU5MEM2MDUxMUVDQUI3NEQ5NjJDNEY5QUUwMi9yT0xFekxDSjBo czNCRlN3RG10Wk92S0lZdlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAl32d/dV9ENfwusUg3upSEh/5D6cOeQfNYGQ7NdpI0vSocGqefT5u7 ikSNli3qsKuObIc39MGxaopxWCq36P3n5yAjii6+s6zm5TK0LD9TdowE+vwjEJAW IN3hxBVPMstZMAV50xCmBb+Yv+6Z/tC4dkT2E9KasHYQMxiJke3F0Fj7aTGiDRAa V994tyNAE40W6q1TdYkpTivZ1Nk1av/41ezW3k9Mhk0MAmSINpPcCjklhZn4mesi svFp0yw9LCqefGK66cJoc02AId2gUdsyx7VftKQ7OvBRxD2lHRyi1+hz0XZtOwvX 9FsjLIK+ZC6Vc9XWxY6mwEDBkCwxnYDk -----END CERTIFICATE-----Generated at Sun Apr 6 05:34:52 2025 by rpki-client