$ rpki-client -vvf rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft File: owkQUxBPCE11ymUhc2bq35hJE8E.mft (raw, json) Hash identifier: tlrBklqqyc74rwULigkwcMI9akCrFjJKEX5iH7KXpr8= Subject key identifier: 11:DF:E1:02:85:AF:2A:28:2D:A4:63:4B:51:D0:05:6E:2D:D5:11:05 Authority key identifier: A3:09:10:53:10:4F:08:4D:75:CA:65:21:73:66:EA:DF:98:49:13:C1 Certificate issuer: /CN=A912C12B/serialNumber=A3091053104F084D75CA65217366EADF984913C1 Certificate serial: 0C6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft Manifest number: 0C65 Signing time: Fri 30 May 2025 18:29:51 +0000 Manifest this update: Fri 30 May 2025 18:29:50 +0000 Manifest next update: Fri 06 Jun 2025 18:29:50 +0000 Files and hashes: 1: owkQUxBPCE11ymUhc2bq35hJE8E.crl (hash: /CDfCgQdah0CFEuzuB/6Uaa7TbhnAg4tA4GM3URpW/Y=) 2: 38D7B616768D11EB94573712C4F9AE02.roa (hash: osYkBFEZo4TGPYEkCTIfOfI2cJcgpXjHG6X4+VVwtkw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.crl rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:29:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3183 (0xc6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C12B, serialNumber=A3091053104F084D75CA65217366EADF984913C1 Validity Not Before: May 30 18:29:50 2025 GMT Not After : Jun 6 18:29:50 2025 GMT Subject: CN=6839f91f-3750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a6:d1:0e:96:d2:3c:8b:bc:3a:b2:15:85:a4: 6f:ec:43:20:06:ab:32:b5:40:b7:e7:4e:ed:08:95: e1:e9:7a:b4:34:b8:0f:fb:c8:5a:28:fa:23:43:11: f2:01:d5:23:37:c9:60:58:65:70:af:78:bf:5f:38: 6c:46:39:1b:61:20:96:03:44:d9:bb:90:25:40:13: 49:46:e0:37:02:01:99:61:2a:d8:f2:8d:b2:61:e4: d4:3c:0c:fe:51:71:b1:56:29:c6:8f:47:dd:e6:e2: 4d:4d:72:a9:2e:0a:dd:67:b1:57:cf:c8:85:26:56: 2e:d3:e7:64:5a:5c:9f:87:0a:c5:b2:19:2f:7d:a8: a9:43:e0:af:5c:6b:38:88:eb:97:f6:4e:2d:28:d5: 4b:e0:5f:cb:61:98:8d:01:b0:c3:09:c1:27:34:f7: f5:18:9a:9f:7d:65:41:86:fd:94:ea:48:5a:14:80: 73:5f:a6:71:b2:5a:14:15:d8:2e:c4:a2:56:d8:82: 79:69:75:56:96:12:48:2c:e0:88:85:ea:8d:41:4b: ea:c4:49:38:6f:1e:82:36:b5:71:9d:cc:7f:e9:98: b6:c1:b2:09:a0:dc:69:6c:85:08:7e:8f:a9:7d:2f: 85:ad:0b:5e:d8:c9:58:24:6a:ef:d2:e4:3f:29:a0: 0f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:DF:E1:02:85:AF:2A:28:2D:A4:63:4B:51:D0:05:6E:2D:D5:11:05 X509v3 Authority Key Identifier: keyid:A3:09:10:53:10:4F:08:4D:75:CA:65:21:73:66:EA:DF:98:49:13:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:50:1e:15:b9:66:51:d0:b9:bb:8d:a8:45:0f:77:cb:e4:b4: 54:f1:37:18:6c:4c:42:d9:95:87:e3:35:18:1b:31:ef:2f:5d: c1:3e:07:92:79:6b:7c:e4:fc:da:c2:dd:e4:9f:67:e4:43:12: 4f:f4:e4:d6:8a:1b:62:15:12:4d:bf:03:d5:f0:01:ae:18:f5: 25:fd:b7:46:0c:19:44:96:8d:ac:df:ac:b3:18:c1:85:d1:f5: 30:75:c1:84:a1:77:15:3c:0b:0e:02:2b:73:6e:05:85:ed:5c: be:27:0e:c1:f9:25:d9:5d:5c:3e:5f:77:c4:30:f4:b6:f6:2f: e3:b1:81:44:f7:82:33:41:f0:00:9e:a7:16:39:33:b9:84:eb: c9:53:c8:ab:93:43:c1:63:fc:59:e0:d4:b0:51:9f:c9:f5:7a: fb:4e:3b:3c:98:d1:b5:77:73:1d:a7:ae:62:30:51:b2:ad:df: 7b:6f:98:3f:e8:8d:5e:04:e3:09:3b:4b:ea:6d:18:f5:9b:a0: 18:9a:55:d8:1f:d7:e9:30:46:b2:b7:c5:6c:0f:30:64:28:d3: 11:94:f9:da:02:11:84:d3:58:f6:f4:be:96:2b:9b:70:3b:2f: 43:96:f5:27:b5:70:8e:81:43:40:ba:ad:48:d9:f1:dd:48:68: 39:c2:cb:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMxMkIxMTAvBgNVBAUTKEEzMDkxMDUzMTA0RjA4NEQ3NUNBNjUyMTczNjZFQURG OTg0OTEzQzEwHhcNMjUwNTMwMTgyOTUwWhcNMjUwNjA2MTgyOTUwWjAYMRYwFAYD VQQDEw02ODM5ZjkxZi0zNzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0qbRDpbSPIu8OrIVhaRv7EMgBqsytUC3507tCJXh6Xq0NLgP+8haKPojQxHy AdUjN8lgWGVwr3i/XzhsRjkbYSCWA0TZu5AlQBNJRuA3AgGZYSrY8o2yYeTUPAz+ UXGxVinGj0fd5uJNTXKpLgrdZ7FXz8iFJlYu0+dkWlyfhwrFshkvfaipQ+CvXGs4 iOuX9k4tKNVL4F/LYZiNAbDDCcEnNPf1GJqffWVBhv2U6khaFIBzX6ZxsloUFdgu xKJW2IJ5aXVWlhJILOCIheqNQUvqxEk4bx6CNrVxncx/6Zi2wbIJoNxpbIUIfo+p fS+FrQte2MlYJGrv0uQ/KaAPPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBHf4QKF ryooLaRjS1HQBW4t1REFMB8GA1UdIwQYMBaAFKMJEFMQTwhNdcplIXNm6t+YSRPB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzEyQi9GOUZFRDRDMkZG OUQxMUU5OTk2ODk1NzdDNEY5QUUwMi9vd2tRVXhCUENFMTF5bVVoYzJicTM1aEpF OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL293a1FVeEJQQ0UxMXltVWhjMmJxMzVoSkU4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzEyQi9GOUZFRDRDMkZGOUQxMUU5OTk2ODk1NzdDNEY5QUUwMi9vd2tRVXhCUENF MTF5bVVoYzJicTM1aEpFOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7UB4VuWZR0Lm7jahFD3fL5LRU8TcYbExC2ZWH4zUYGzHvL13BPgeS eWt85Pzawt3kn2fkQxJP9OTWihtiFRJNvwPV8AGuGPUl/bdGDBlElo2s36yzGMGF 0fUwdcGEoXcVPAsOAitzbgWF7Vy+Jw7B+SXZXVw+X3fEMPS29i/jsYFE94IzQfAA nqcWOTO5hOvJU8irk0PBY/xZ4NSwUZ/J9Xr7Tjs8mNG1d3Mdp65iMFGyrd97b5g/ 6I1eBOMJO0vqbRj1m6AYmlXYH9fpMEayt8VsDzBkKNMRlPnaAhGE01j29L6WK5tw Oy9DlvUntXCOgUNAuq1I2fHdSGg5wssB -----END CERTIFICATE-----Generated at Sat May 31 17:45:02 2025 by rpki-client