$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/owQJVBg5BUscPhXRmD19vYp9ZII.mft File: owQJVBg5BUscPhXRmD19vYp9ZII.mft (raw, json) Hash identifier: wIXT32LQFjZq3yTpXWgeUlCNe55x7YRvNIOVJ9LafKg= Subject key identifier: 8C:3F:F3:5E:3D:85:2B:F8:FF:D6:99:6E:11:E4:E9:5C:46:77:62:88 Authority key identifier: A3:04:09:54:18:39:05:4B:1C:3E:15:D1:98:3D:7D:BD:8A:7D:64:82 Certificate issuer: /CN=A91D9E03/serialNumber=A30409541839054B1C3E15D1983D7DBD8A7D6482 Certificate serial: 0380 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owQJVBg5BUscPhXRmD19vYp9ZII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/owQJVBg5BUscPhXRmD19vYp9ZII.mft Manifest number: 037C Signing time: Sat 05 Apr 2025 00:57:56 +0000 Manifest this update: Sat 05 Apr 2025 00:57:56 +0000 Manifest next update: Sat 12 Apr 2025 00:57:56 +0000 Files and hashes: 1: owQJVBg5BUscPhXRmD19vYp9ZII.crl (hash: kLPR+DBqZvj4TGvgbGWypow7KWqiARzGh9uAZdW0NTQ=) 2: 521DCED89C5911EC97E58855C4F9AE02.roa (hash: K/6Sxmjn7Y9RMsh3D/CkcDPEvNJggoP2DR+Gq8xtxL8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/owQJVBg5BUscPhXRmD19vYp9ZII.crl rsync://rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/owQJVBg5BUscPhXRmD19vYp9ZII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owQJVBg5BUscPhXRmD19vYp9ZII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 00:57:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 896 (0x380) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9E03 Validity Not Before: Apr 5 00:57:56 2025 GMT Not After : Apr 12 00:57:56 2025 GMT Subject: CN=67f08014-6161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:19:b0:a7:1f:77:0a:38:f2:92:26:60:08:a7: 05:6f:c9:60:6c:b3:ba:50:1b:4a:61:6f:4d:1d:e0: 14:c9:b6:67:26:9a:fc:38:de:ae:9f:b2:45:73:34: ca:ca:cd:19:6c:ff:54:f4:51:c8:2c:f2:f2:15:95: 66:4e:4a:ec:2d:3b:01:3d:9a:83:f4:5c:41:fa:72: f5:ea:eb:07:17:e9:64:62:40:a2:b8:bf:ae:54:6b: c4:37:9e:9d:c6:07:45:0e:a0:30:e9:5a:8d:73:9f: d7:b7:fb:a4:11:9f:51:7d:42:0a:bb:c7:af:ed:f3: 3d:56:eb:00:a9:2a:ad:ae:70:2e:4f:08:90:2d:49: 64:2d:f5:02:9b:65:18:3f:c7:61:63:b0:2c:ee:94: 6c:8b:31:aa:ed:11:0e:bd:3b:33:e6:3b:ab:1b:82: c1:a6:16:05:6a:2f:11:df:33:07:fc:a2:41:5a:fc: 5f:b1:31:6c:50:49:cf:e0:70:be:98:8b:15:c0:1c: 4f:dc:a7:35:23:8e:02:ee:78:8c:01:a4:3d:e9:65: 58:b8:43:35:fd:45:a7:ce:8e:07:93:90:b9:de:b2: c1:cd:e9:4b:3d:b5:51:b3:70:87:0f:9a:2c:5e:2c: 78:2b:ed:df:bf:99:a7:2a:b4:d6:85:fe:f8:8e:15: 50:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:3F:F3:5E:3D:85:2B:F8:FF:D6:99:6E:11:E4:E9:5C:46:77:62:88 X509v3 Authority Key Identifier: keyid:A3:04:09:54:18:39:05:4B:1C:3E:15:D1:98:3D:7D:BD:8A:7D:64:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/owQJVBg5BUscPhXRmD19vYp9ZII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owQJVBg5BUscPhXRmD19vYp9ZII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/owQJVBg5BUscPhXRmD19vYp9ZII.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:41:91:0c:e0:25:76:ad:af:0c:b4:69:95:4e:ce:58:dc:e2: 0d:36:b5:46:45:f0:33:15:d8:23:13:73:75:12:20:6c:46:44: 6c:e5:3d:e9:ab:88:37:eb:67:a2:87:4b:43:f2:e9:8d:99:27: 99:0e:48:45:81:c8:5d:18:4a:2d:ec:c9:9d:f0:16:f0:66:6d: dd:d6:bf:ea:e7:c2:4f:61:4c:b7:09:c3:38:15:ea:2f:eb:a1: e5:12:39:ad:25:cd:18:3b:ac:a7:e5:68:35:a7:02:15:85:68: b8:a5:04:91:9f:c8:3a:4d:21:17:ad:86:fb:70:d9:d6:61:b5: 89:04:b7:21:0b:5f:1e:54:b8:57:74:a4:35:e9:4e:17:8b:78: 02:97:0a:17:dd:5b:54:1d:e1:79:46:67:dc:cc:44:9b:92:fa: 7a:2f:b2:14:c3:c2:20:c5:07:ff:33:8b:b0:ea:09:1c:3f:96: 6f:ce:30:cb:3d:99:46:8f:3b:79:01:b8:68:d5:d3:78:f0:00: 83:18:92:58:dd:11:13:2e:53:5e:50:33:92:8f:53:e7:03:82: 9d:6a:78:27:49:05:6e:4f:97:a4:2a:73:e2:e2:e7:9c:2c:c9: e4:d1:49:58:02:c2:a8:02:26:19:ee:ae:ff:a6:8d:b5:eb:10: 6a:7d:67:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlFMDMxMTAvBgNVBAUTKEEzMDQwOTU0MTgzOTA1NEIxQzNFMTVEMTk4M0Q3REJE OEE3RDY0ODIwHhcNMjUwNDA1MDA1NzU2WhcNMjUwNDEyMDA1NzU2WjAYMRYwFAYD VQQDEw02N2YwODAxNC02MTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/hmwpx93CjjykiZgCKcFb8lgbLO6UBtKYW9NHeAUybZnJpr8ON6un7JFczTK ys0ZbP9U9FHILPLyFZVmTkrsLTsBPZqD9FxB+nL16usHF+lkYkCiuL+uVGvEN56d xgdFDqAw6VqNc5/Xt/ukEZ9RfUIKu8ev7fM9VusAqSqtrnAuTwiQLUlkLfUCm2UY P8dhY7As7pRsizGq7REOvTsz5jurG4LBphYFai8R3zMH/KJBWvxfsTFsUEnP4HC+ mIsVwBxP3Kc1I44C7niMAaQ96WVYuEM1/UWnzo4Hk5C53rLBzelLPbVRs3CHD5os Xix4K+3fv5mnKrTWhf74jhVQ3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIw/8149 hSv4/9aZbhHk6VxGd2KIMB8GA1UdIwQYMBaAFKMECVQYOQVLHD4V0Zg9fb2KfWSC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUUwMy85OTZBN0U4ODlD NTYxMUVDQkRFRTA1NTNDNEY5QUUwMi9vd1FKVkJnNUJVc2NQaFhSbUQxOXZZcDla SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL293UUpWQmc1QlVzY1BoWFJtRDE5dllwOVpJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUUwMy85OTZBN0U4ODlDNTYxMUVDQkRFRTA1NTNDNEY5QUUwMi9vd1FKVkJnNUJV c2NQaFhSbUQxOXZZcDlaSUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMQZEM4CV2ra8MtGmVTs5Y3OINNrVGRfAzFdgjE3N1EiBsRkRs5T3p q4g362eih0tD8umNmSeZDkhFgchdGEot7Mmd8BbwZm3d1r/q58JPYUy3CcM4Feov 66HlEjmtJc0YO6yn5Wg1pwIVhWi4pQSRn8g6TSEXrYb7cNnWYbWJBLchC18eVLhX dKQ16U4Xi3gClwoX3VtUHeF5RmfczESbkvp6L7IUw8IgxQf/M4uw6gkcP5ZvzjDL PZlGjzt5Abho1dN48ACDGJJY3RETLlNeUDOSj1PnA4KdangnSQVuT5ekKnPi4uec LMnk0UlYAsKoAiYZ7q7/po216xBqfWdA -----END CERTIFICATE-----Generated at Sat Apr 5 13:25:14 2025 by rpki-client