$ rpki-client -vvf rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft File: 0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft (raw, json) Hash identifier: psTYqenygENiVW7pxjQAfLp9sCrYiIMIOFUvFCVkqRE= Subject key identifier: AC:56:A5:9F:70:C9:7E:DF:33:36:2A:96:43:80:20:45:7A:8B:1E:F7 Authority key identifier: D3:03:8B:A4:49:0E:A8:15:AD:B0:9F:1A:38:65:8B:CD:8B:17:F4:82 Certificate issuer: /CN=A91F018E/serialNumber=D3038BA4490EA815ADB09F1A38658BCD8B17F482 Certificate serial: 0E3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wOLpEkOqBWtsJ8aOGWLzYsX9II.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft Manifest number: 0E35 Signing time: Sat 12 Apr 2025 17:40:07 +0000 Manifest this update: Sat 12 Apr 2025 17:40:07 +0000 Manifest next update: Sat 19 Apr 2025 17:40:07 +0000 Files and hashes: 1: 0wOLpEkOqBWtsJ8aOGWLzYsX9II.crl (hash: foD9Ms0xdokQdHGJsNsFcMnkX1ne4CPfU9IEVJ98lDc=) 2: 7214B0AA9E1711E9B3710950C4F9AE02.roa (hash: c4C00IYUahMg/MQNhIkPwEgft6IPuKV052m4LGanBW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.crl rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wOLpEkOqBWtsJ8aOGWLzYsX9II.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 17:40:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3644 (0xe3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F018E, serialNumber=D3038BA4490EA815ADB09F1A38658BCD8B17F482 Validity Not Before: Apr 12 17:40:07 2025 GMT Not After : Apr 19 17:40:07 2025 GMT Subject: CN=67faa577-2117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c9:76:b1:b2:b6:6f:a1:95:8e:ce:df:34:63: a1:4b:ec:c4:5b:02:41:ac:a4:89:21:4a:17:43:c5: 17:69:ef:ad:88:6b:db:00:76:63:07:d1:de:47:8d: 55:db:97:86:dd:ae:0f:b8:b1:11:bd:07:af:42:20: 45:40:96:d4:f0:c8:2a:d9:0f:55:d3:b1:f4:88:07: 44:e0:0a:28:eb:3a:f3:8b:87:62:d6:57:48:5e:e6: c0:b2:bd:67:62:7a:40:2b:91:e3:45:c7:1a:43:68: 11:b3:27:76:e7:12:17:98:17:88:7b:17:a0:99:6f: 63:29:0c:de:d1:3c:50:b0:6d:58:c1:b1:2f:f7:d3: f8:33:85:c2:67:e1:71:c0:14:5b:6c:dc:68:13:a3: 0c:f0:8b:c1:e2:8c:96:78:f9:80:8e:9c:3b:ac:8b: f3:47:8a:51:70:18:6f:8d:95:09:00:de:88:69:2f: 50:5d:46:a9:52:48:0c:9f:af:aa:3a:b0:9e:7f:ef: fe:1b:e9:ca:a8:c1:98:5d:ba:26:11:98:3a:27:0e: b6:ee:5c:2f:36:41:ce:28:44:a5:24:af:15:c9:17: d8:45:e5:1f:d0:c8:e2:3c:56:dc:2d:65:a7:c6:25: 34:07:49:19:56:2b:db:e0:b4:9a:1e:a3:dc:5f:8f: 26:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:56:A5:9F:70:C9:7E:DF:33:36:2A:96:43:80:20:45:7A:8B:1E:F7 X509v3 Authority Key Identifier: keyid:D3:03:8B:A4:49:0E:A8:15:AD:B0:9F:1A:38:65:8B:CD:8B:17:F4:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wOLpEkOqBWtsJ8aOGWLzYsX9II.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:8a:7f:27:2d:63:c0:61:fd:e3:4e:90:17:e9:53:14:27:81: f0:ca:47:76:1c:fe:16:84:7f:14:fc:53:db:3b:2d:fc:ea:df: 31:c7:90:fd:18:52:95:12:29:df:75:59:a2:e9:5d:0a:b3:d6: ae:54:7f:ab:85:1a:4e:0f:91:a9:0c:c1:30:ed:b8:e7:dc:a3: 39:c8:5b:12:4c:f7:41:00:20:4d:f4:c9:40:e2:98:5e:b5:d3: f5:63:5e:9f:18:c4:52:b2:8e:f8:22:7e:bd:3b:ee:b3:83:be: cd:d7:4d:68:d8:ce:84:0a:ba:a6:5a:6a:1b:51:e6:93:8b:55: 70:ad:39:9b:da:a1:b4:23:75:f8:8b:61:e2:a3:aa:7b:12:32: a6:a3:7a:56:1a:91:5f:97:99:78:12:fc:af:fd:40:b2:0c:46: d1:ca:3d:b4:46:74:3c:b8:ad:34:27:7d:05:2f:b2:8b:f3:8f: 4a:29:cd:54:3e:59:e7:70:b8:d5:66:a8:54:fc:31:2c:69:69: 05:67:58:ab:ba:91:72:18:3e:f4:53:98:7a:f4:81:9e:9d:9e: 3a:fa:39:93:db:39:95:1f:ff:2c:f9:79:f2:0c:0e:67:82:cb: 83:01:b0:42:8f:e4:7a:68:a8:bb:b1:2e:23:ef:c6:1b:72:90: 0a:8b:06:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjAxOEUxMTAvBgNVBAUTKEQzMDM4QkE0NDkwRUE4MTVBREIwOUYxQTM4NjU4QkNE OEIxN0Y0ODIwHhcNMjUwNDEyMTc0MDA3WhcNMjUwNDE5MTc0MDA3WjAYMRYwFAYD VQQDEw02N2ZhYTU3Ny0yMTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuMl2sbK2b6GVjs7fNGOhS+zEWwJBrKSJIUoXQ8UXae+tiGvbAHZjB9HeR41V 25eG3a4PuLERvQevQiBFQJbU8Mgq2Q9V07H0iAdE4Aoo6zrzi4di1ldIXubAsr1n YnpAK5HjRccaQ2gRsyd25xIXmBeIexegmW9jKQze0TxQsG1YwbEv99P4M4XCZ+Fx wBRbbNxoE6MM8IvB4oyWePmAjpw7rIvzR4pRcBhvjZUJAN6IaS9QXUapUkgMn6+q OrCef+/+G+nKqMGYXbomEZg6Jw627lwvNkHOKESlJK8VyRfYReUf0MjiPFbcLWWn xiU0B0kZVivb4LSaHqPcX48mxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKxWpZ9w yX7fMzYqlkOAIEV6ix73MB8GA1UdIwQYMBaAFNMDi6RJDqgVrbCfGjhli82LF/SC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDE4RS9GQTU2OEU1RTlF MTUxMUU5OTAxNTM2NEFDNEY5QUUwMi8wd09McEVrT3FCV3RzSjhhT0dXTHpZc1g5 SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB3T0xwRWtPcUJXdHNKOGFPR1dMellzWDlJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDE4RS9GQTU2OEU1RTlFMTUxMUU5OTAxNTM2NEFDNEY5QUUwMi8wd09McEVrT3FC V3RzSjhhT0dXTHpZc1g5SUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdin8nLWPAYf3jTpAX6VMUJ4Hwykd2HP4WhH8U/FPbOy386t8xx5D9 GFKVEinfdVmi6V0Ks9auVH+rhRpOD5GpDMEw7bjn3KM5yFsSTPdBACBN9MlA4phe tdP1Y16fGMRSso74In69O+6zg77N101o2M6ECrqmWmobUeaTi1VwrTmb2qG0I3X4 i2Hio6p7EjKmo3pWGpFfl5l4Evyv/UCyDEbRyj20RnQ8uK00J30FL7KL849KKc1U PlnncLjVZqhU/DEsaWkFZ1irupFyGD70U5h69IGenZ46+jmT2zmVH/8s+XnyDA5n gsuDAbBCj+R6aKi7sS4j78YbcpAKiwbN -----END CERTIFICATE-----Generated at Sat Apr 12 19:54:15 2025 by rpki-client