$ rpki-client -vvf rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft File: Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft (raw, json) Hash identifier: uROwL71ZEhWmjwp8IfuoZD+1JglyuyvIWdGekp5Bvus= Subject key identifier: 58:32:71:CA:FF:51:10:4D:A4:F6:CC:F4:2C:E6:64:8F:FD:EB:93:FC Authority key identifier: 3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60 Certificate issuer: /CN=A91188EE/serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360 Certificate serial: E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft Manifest number: D8 Signing time: Sat 31 May 2025 05:17:10 +0000 Manifest this update: Sat 31 May 2025 05:17:09 +0000 Manifest next update: Sat 07 Jun 2025 05:17:09 +0000 Files and hashes: 1: Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl (hash: WanFeSWfBSLUSMsSWMJa4kXYbbPl5C56hMWqEMe6p80=) 2: 6313E67C8D5711EFB5214A3AC4F9AE02.roa (hash: H9y99bkQAenZ+5dQW/QgFhQvNtXIL5GTmQ8MEBG2Zlw=) 3: 9EE9468811FB11EFB73CB561C4F9AE02.roa (hash: wQPQHggW2pcWJJTTCEnG8wZ6ChbePlicDoKqF+XySGc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:17:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 224 (0xe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91188EE, serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360 Validity Not Before: May 31 05:17:09 2025 GMT Not After : Jun 7 05:17:09 2025 GMT Subject: CN=683a90d5-d052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:fe:f2:85:45:fb:67:9e:de:00:13:b1:50:50: 8d:f1:89:cb:a7:ec:1e:60:4c:35:d2:23:24:70:87: 41:83:0d:4b:d3:d9:25:fc:30:ad:c2:51:0d:d1:71: cd:61:b5:1a:4b:26:e6:29:bf:d0:eb:c4:2d:f8:74: 4a:41:45:91:ee:44:fc:4e:97:69:81:11:93:00:e0: 83:b1:f5:6e:c1:a4:f2:08:c2:44:12:d3:80:95:65: f3:09:a9:2d:d9:a7:e8:55:c9:d0:cf:3c:41:81:32: 7d:e8:0a:4e:1d:e7:2d:ce:5b:97:ed:64:9a:5e:8c: 7d:ca:a5:5d:a5:b2:d9:39:43:37:d4:22:51:a1:2b: 4b:d3:cc:fd:39:27:57:bb:3a:7e:c4:3c:eb:fc:6b: eb:2e:8f:3d:55:91:31:76:e1:f3:29:b3:7c:dc:40: fd:4d:f6:db:db:44:4e:81:3f:76:a5:31:bc:b4:b2: 70:6d:07:22:a5:f5:d8:3a:4e:66:61:ae:cf:5b:c3: 29:d0:d6:e3:75:41:e6:44:7f:b2:c8:ac:ed:79:48: 00:4a:82:1b:45:26:09:45:aa:ef:cc:e5:9f:f1:51: e9:2a:b9:d6:5b:5e:ab:57:7e:59:e6:2a:8f:11:6e: 4f:98:1b:db:3b:d6:58:1e:ed:14:6a:3b:20:1b:3a: c2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:32:71:CA:FF:51:10:4D:A4:F6:CC:F4:2C:E6:64:8F:FD:EB:93:FC X509v3 Authority Key Identifier: keyid:3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:b6:ad:18:be:6c:90:e0:48:c8:34:7e:0d:09:21:95:c3:25: 15:85:6a:73:37:92:6e:82:06:74:53:b7:34:42:13:41:18:f2: 7d:c9:fc:5c:5c:ad:af:3b:0b:dc:8c:60:c1:66:03:2e:f3:b6: 79:50:b8:be:89:ea:9f:a5:b0:1a:88:44:ac:5b:f3:b4:f9:90: e1:e4:df:33:2e:32:18:ff:b3:81:44:ea:d3:e4:d8:ce:6b:47: 7c:44:c7:ee:c7:eb:bb:76:6e:e0:67:1e:56:7d:e7:3e:54:10: a0:e3:76:84:f5:6c:d8:e6:ef:41:a0:6d:da:21:1d:9d:3f:b3: fd:52:09:76:3f:9c:de:d3:c9:ab:6f:fe:aa:44:de:d6:8c:f7: 69:a3:de:33:fe:3c:95:12:43:87:a9:e6:08:a3:4c:8f:39:3f: c9:23:ff:0a:39:3a:14:60:5e:28:10:30:05:0a:cc:90:1d:11: be:7e:08:73:2c:b9:f7:e0:95:da:8f:49:9a:20:82:be:17:59: 08:bb:d0:0a:af:eb:86:ec:bf:ac:2b:39:40:50:f9:18:fc:72: cb:eb:5d:16:cd:9a:88:df:44:c6:69:cc:a8:39:5b:c4:fa:0a: 3b:50:64:bd:be:d4:fd:e5:90:38:8a:b6:98:67:eb:63:dc:27: 0a:32:df:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg4RUUxMTAvBgNVBAUTKDNBRURBODA0MDdENzdCQjUyODQ4QUJEOUY3MjU5QkQ4 MDdBNUQzNjAwHhcNMjUwNTMxMDUxNzA5WhcNMjUwNjA3MDUxNzA5WjAYMRYwFAYD VQQDEw02ODNhOTBkNS1kMDUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4f7yhUX7Z57eABOxUFCN8YnLp+weYEw10iMkcIdBgw1L09kl/DCtwlEN0XHN YbUaSybmKb/Q68Qt+HRKQUWR7kT8TpdpgRGTAOCDsfVuwaTyCMJEEtOAlWXzCakt 2afoVcnQzzxBgTJ96ApOHectzluX7WSaXox9yqVdpbLZOUM31CJRoStL08z9OSdX uzp+xDzr/GvrLo89VZExduHzKbN83ED9Tfbb20ROgT92pTG8tLJwbQcipfXYOk5m Ya7PW8Mp0NbjdUHmRH+yyKzteUgASoIbRSYJRarvzOWf8VHpKrnWW16rV35Z5iqP EW5PmBvbO9ZYHu0UajsgGzrC2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFgyccr/ URBNpPbM9CzmZI/965P8MB8GA1UdIwQYMBaAFDrtqAQH13u1KEir2fclm9gHpdNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODhFRS8zMjA5NzMxQUZC QUYxMUVFQTZCQzM5NTJDNEY5QUUwMi9PdTJvQkFmWGU3VW9TS3ZaOXlXYjJBZWww MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL091Mm9CQWZYZTdVb1NLdlo5eVdiMkFlbDAyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODhFRS8zMjA5NzMxQUZCQUYxMUVFQTZCQzM5NTJDNEY5QUUwMi9PdTJvQkFmWGU3 VW9TS3ZaOXlXYjJBZWwwMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBtq0YvmyQ4EjINH4NCSGVwyUVhWpzN5JuggZ0U7c0QhNBGPJ9yfxc XK2vOwvcjGDBZgMu87Z5ULi+ieqfpbAaiESsW/O0+ZDh5N8zLjIY/7OBROrT5NjO a0d8RMfux+u7dm7gZx5Wfec+VBCg43aE9WzY5u9BoG3aIR2dP7P9Ugl2P5ze08mr b/6qRN7WjPdpo94z/jyVEkOHqeYIo0yPOT/JI/8KOToUYF4oEDAFCsyQHRG+fghz LLn34JXaj0maIIK+F1kIu9AKr+uG7L+sKzlAUPkY/HLL610WzZqI30TGacyoOVvE +go7UGS9vtT95ZA4iraYZ+tj3CcKMt+M -----END CERTIFICATE-----Generated at Sat May 31 17:16:16 2025 by rpki-client