$ rpki-client -vvf rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft File: 0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft (raw, json) Hash identifier: 3wWtsry2BJoBYA+Sd3YdYJcmF/KJEty+c76hf32JpfU= Subject key identifier: E7:B5:D5:99:86:36:E0:4E:3E:92:B6:8C:2D:0B:0F:01:61:A3:13:99 Authority key identifier: D2:8C:52:ED:09:0C:53:9C:10:F2:22:DE:EC:D9:A7:3C:49:A1:68:04 Certificate issuer: /CN=A915617E/serialNumber=D28C52ED090C539C10F222DEECD9A73C49A16804 Certificate serial: 0D77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft Manifest number: 0D6F Signing time: Fri 30 May 2025 18:07:45 +0000 Manifest this update: Fri 30 May 2025 18:07:45 +0000 Manifest next update: Fri 06 Jun 2025 18:07:45 +0000 Files and hashes: 1: 0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl (hash: 3rYgEoXfQ0nplSGjLAZqq6twlxaV0xh4l03q1CrgrPg=) 2: 3F67E64E62BD11EE8F393D25C4F9AE02.roa (hash: 27YGiOVHeYRZmfLChwQ0MVLlQEu8P+YtfErwSj+QIxo=) 3: DBDAFF6CC99611E9A41BCF75C4F9AE02.roa (hash: Ff3/yMR0vWErszLBIPlNKjSAb7MzXOTFYgb7mDfdJMY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:07:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3447 (0xd77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915617E, serialNumber=D28C52ED090C539C10F222DEECD9A73C49A16804 Validity Not Before: May 30 18:07:45 2025 GMT Not After : Jun 6 18:07:45 2025 GMT Subject: CN=6839f3f1-b4b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b9:a8:77:b6:33:88:f4:96:5d:21:06:d1:84: 49:eb:f0:de:a1:20:59:72:35:09:c4:dc:33:d5:df: 33:21:d3:90:3f:5f:5e:b9:37:e3:cd:6a:14:5c:e6: ab:79:97:a7:71:49:41:6d:2d:dd:fb:55:ca:ab:50: c2:46:6b:15:c6:89:67:91:82:e8:89:bc:39:7e:0d: 71:1f:76:be:2d:d4:ba:83:15:33:4b:b7:2e:f1:7c: e4:7d:99:f0:3f:31:90:85:c3:bf:ad:e8:d1:7e:b0: 4d:f1:21:cd:d0:8b:5f:5c:72:42:1a:7e:2d:ef:5e: 39:6a:42:67:69:4c:3e:f6:f9:3e:a5:5a:9f:60:f0: a0:f7:87:47:c7:85:46:cb:62:8b:98:20:4c:40:e2: 20:dc:9f:46:b1:e2:82:11:9f:54:a5:5a:8a:60:49: c5:68:f0:98:2c:bb:7e:46:09:5d:49:f4:ab:2a:5e: d9:50:7c:a9:cb:0f:fb:cb:a3:cb:61:59:b6:77:37: c5:08:e2:55:c3:9f:8a:8f:db:ce:6d:4e:d0:37:1b: 11:4f:16:e0:15:f6:2a:4f:2c:c8:88:71:e1:7e:89: 58:69:b3:09:11:94:56:c5:a4:37:45:89:f5:6d:ce: ff:02:92:d3:00:d5:de:ff:9a:94:cd:12:b1:92:e5: e7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:B5:D5:99:86:36:E0:4E:3E:92:B6:8C:2D:0B:0F:01:61:A3:13:99 X509v3 Authority Key Identifier: keyid:D2:8C:52:ED:09:0C:53:9C:10:F2:22:DE:EC:D9:A7:3C:49:A1:68:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:44:ba:6c:38:34:11:13:fc:57:99:96:cf:5c:ac:c6:d5:e7: 5d:89:55:13:eb:03:79:8b:4c:35:f2:bb:b7:ec:95:0e:d2:64: 50:22:7b:0a:a0:41:5d:58:c0:be:d2:f5:40:ac:e1:30:28:be: ca:79:fe:af:7d:67:24:38:ce:24:5a:15:96:7f:71:bc:7c:bc: dc:c4:da:46:e7:07:8f:4d:48:03:fa:da:01:a5:a6:97:8c:75: e3:63:e2:83:58:57:4a:6c:aa:1f:86:7d:8e:94:f9:c6:71:24: 20:d1:ea:3a:bb:87:be:73:c8:0e:7c:cb:7b:43:30:8e:58:06: 92:bd:47:1c:e3:7a:8a:7e:c3:ab:12:15:ea:7b:67:17:bd:88: 90:f9:23:9c:85:e0:ce:52:c9:8c:d1:7d:ca:39:0e:54:6d:8c: 28:c0:d2:9f:e3:39:58:f8:f3:86:75:25:fe:b8:21:1d:cc:95: 91:8e:e4:2c:fb:4c:bf:79:9d:39:6f:bd:9e:ca:a1:01:87:59: d4:f5:06:b8:30:5e:bb:02:a7:81:fd:50:e3:13:5d:c2:41:1e: 42:5c:c9:34:b8:f0:88:11:7d:64:75:bd:3f:4e:16:62:97:3f: 08:60:59:2f:ee:3e:67:63:86:d3:42:70:6c:03:c9:88:3a:e2: 1b:29:26:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYxN0UxMTAvBgNVBAUTKEQyOEM1MkVEMDkwQzUzOUMxMEYyMjJERUVDRDlBNzND NDlBMTY4MDQwHhcNMjUwNTMwMTgwNzQ1WhcNMjUwNjA2MTgwNzQ1WjAYMRYwFAYD VQQDEw02ODM5ZjNmMS1iNGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAobmod7YziPSWXSEG0YRJ6/DeoSBZcjUJxNwz1d8zIdOQP19euTfjzWoUXOar eZencUlBbS3d+1XKq1DCRmsVxolnkYLoibw5fg1xH3a+LdS6gxUzS7cu8XzkfZnw PzGQhcO/rejRfrBN8SHN0ItfXHJCGn4t7145akJnaUw+9vk+pVqfYPCg94dHx4VG y2KLmCBMQOIg3J9GseKCEZ9UpVqKYEnFaPCYLLt+RgldSfSrKl7ZUHypyw/7y6PL YVm2dzfFCOJVw5+Kj9vObU7QNxsRTxbgFfYqTyzIiHHhfolYabMJEZRWxaQ3RYn1 bc7/ApLTANXe/5qUzRKxkuXnrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOe11ZmG NuBOPpK2jC0LDwFhoxOZMB8GA1UdIwQYMBaAFNKMUu0JDFOcEPIi3uzZpzxJoWgE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjE3RS9FMUFEQjc0NkM5 OTUxMUU5QkFBQUIxNzRDNEY5QUUwMi8wb3hTN1FrTVU1d1E4aUxlN05tblBFbWhh QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBveFM3UWtNVTV3UThpTGU3Tm1uUEVtaGFBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjE3RS9FMUFEQjc0NkM5OTUxMUU5QkFBQUIxNzRDNEY5QUUwMi8wb3hTN1FrTVU1 d1E4aUxlN05tblBFbWhhQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9RLpsODQRE/xXmZbPXKzG1eddiVUT6wN5i0w18ru37JUO0mRQInsK oEFdWMC+0vVArOEwKL7Kef6vfWckOM4kWhWWf3G8fLzcxNpG5wePTUgD+toBpaaX jHXjY+KDWFdKbKofhn2OlPnGcSQg0eo6u4e+c8gOfMt7QzCOWAaSvUcc43qKfsOr EhXqe2cXvYiQ+SOcheDOUsmM0X3KOQ5UbYwowNKf4zlY+POGdSX+uCEdzJWRjuQs +0y/eZ05b72eyqEBh1nU9Qa4MF67AqeB/VDjE13CQR5CXMk0uPCIEX1kdb0/ThZi lz8IYFkv7j5nY4bTQnBsA8mIOuIbKSYv -----END CERTIFICATE-----Generated at Sat May 31 17:56:20 2025 by rpki-client