$ rpki-client -vvf rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.mft File: o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.mft (raw, json) Hash identifier: DGndehCBHrWTQso+EBIC8e/HQFUwpqFZo0e+Uflcj0g= Subject key identifier: 6A:05:A9:65:D8:84:B7:CB:1C:04:04:30:07:34:1F:15:E0:23:22:4C Authority key identifier: A3:B1:64:81:B5:D6:C1:79:FC:0B:73:AE:1E:0E:53:DE:96:76:41:DC Certificate issuer: /CN=A9158877/serialNumber=A3B16481B5D6C179FC0B73AE1E0E53DE967641DC Certificate serial: 05B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.mft Manifest number: 05AB Signing time: Fri 30 May 2025 23:22:15 +0000 Manifest this update: Fri 30 May 2025 23:22:15 +0000 Manifest next update: Fri 06 Jun 2025 23:22:15 +0000 Files and hashes: 1: o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.crl (hash: HzkgcGYiRHeN8qoa0M9TMqsVaD21CU4yT+TgYbza/Go=) 2: 58C1F4C06E2211EE98839C33C4F9AE02.roa (hash: lCYYN1i9IbJqwRctgnEOzzG7AOe1LHSeBCWruRPnC40=) 3: 931EBB586D6E11EE8AF4BF30C4F9AE02.roa (hash: 8IJ4hd5hgtTMjRCQeFaMZGfRaNHjTczEG5GeSYDk6qI=) 4: DD21ADFACA7311EBAA6E0567C4F9AE02.roa (hash: ZotghGiuMfOw+s3uuTOdkshmDTpBWNWmcIBqIc4IVro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.crl rsync://rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:22:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1459 (0x5b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158877, serialNumber=A3B16481B5D6C179FC0B73AE1E0E53DE967641DC Validity Not Before: May 30 23:22:15 2025 GMT Not After : Jun 6 23:22:15 2025 GMT Subject: CN=683a3da7-d68b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:35:90:31:fb:68:85:c9:b4:49:00:57:fa:d8: 0e:cd:db:80:38:f5:43:18:6d:c9:be:5f:0f:7b:af: ea:75:38:c8:34:e9:0c:6e:6b:79:fe:67:40:5d:17: 38:e6:57:51:b4:e5:be:88:ca:43:ef:ed:27:79:d0: d9:36:2c:76:7d:0e:93:42:44:72:12:80:1b:7e:89: f3:98:c4:66:6f:b3:cf:23:19:52:ce:9b:07:b4:0d: 90:2b:e5:3a:5a:6a:8a:3f:69:d4:cf:94:50:37:ed: 0c:ea:dd:bd:2e:4f:71:c7:62:a9:d5:11:11:52:10: 45:34:3f:e4:a7:6a:58:07:6d:2e:48:9b:07:8b:aa: 76:d4:09:db:f1:93:01:93:8c:bf:54:7e:e6:8f:ba: 16:1f:b5:13:16:13:aa:9b:57:63:c1:3a:ba:38:fa: fb:10:40:99:14:75:bc:0a:13:12:2f:97:e8:29:e5: 68:b8:b7:46:07:14:8f:f5:62:02:eb:49:26:40:a3: 78:10:7c:06:81:96:89:cf:f1:bc:52:56:3e:4d:3a: 97:dc:5d:b4:4e:bc:88:46:dd:6a:49:88:4d:cf:75: 9d:bc:ea:c6:57:2d:cf:b5:80:01:04:95:34:5e:b2: 75:92:96:33:ee:89:44:14:23:ac:8b:32:59:36:59: 2f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:05:A9:65:D8:84:B7:CB:1C:04:04:30:07:34:1F:15:E0:23:22:4C X509v3 Authority Key Identifier: keyid:A3:B1:64:81:B5:D6:C1:79:FC:0B:73:AE:1E:0E:53:DE:96:76:41:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:68:b8:4c:f8:02:5e:b9:58:4b:bd:8d:da:da:9b:05:14:d5: bb:81:39:05:d3:65:a7:5e:02:19:bd:02:8d:a8:0b:d2:b3:f6: da:85:2e:e8:27:87:66:61:6b:f6:a5:70:07:dd:e2:32:b2:60: 14:d4:12:34:32:e2:45:02:85:fc:4d:87:6e:b3:45:33:0b:e2: 4a:cb:5c:c0:55:b9:04:38:3f:a3:e1:c8:f0:2b:74:53:5c:d3: f9:fc:95:21:6f:29:f5:1c:4b:88:51:b1:da:9a:8a:f9:96:79: 78:24:31:9e:70:e7:20:36:9d:38:67:7b:dd:39:4e:d6:70:5c: a0:28:e9:8d:cd:43:b1:df:54:4b:e5:4a:12:ff:94:18:d5:1b: 8c:a7:5e:61:de:b0:2b:01:59:8b:e8:a8:c1:c7:4b:31:01:24: 65:3f:4d:a2:75:c8:c3:67:bf:76:f3:28:21:ae:11:31:d6:73: 47:58:51:26:8e:63:47:6e:b9:d6:95:5d:25:37:d9:c6:8f:93: b9:d7:df:0e:23:82:1c:e0:e5:99:be:7e:87:28:fb:a6:9c:49: 88:ac:1d:c4:0f:19:2e:e5:2b:eb:02:ed:95:4f:13:76:9d:11: 72:a3:44:bc:29:58:94:8f:cf:96:41:b1:2e:80:68:d0:7e:65: 38:e4:6e:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg4NzcxMTAvBgNVBAUTKEEzQjE2NDgxQjVENkMxNzlGQzBCNzNBRTFFMEU1M0RF OTY3NjQxREMwHhcNMjUwNTMwMjMyMjE1WhcNMjUwNjA2MjMyMjE1WjAYMRYwFAYD VQQDEw02ODNhM2RhNy1kNjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvDWQMftohcm0SQBX+tgOzduAOPVDGG3Jvl8Pe6/qdTjINOkMbmt5/mdAXRc4 5ldRtOW+iMpD7+0nedDZNix2fQ6TQkRyEoAbfonzmMRmb7PPIxlSzpsHtA2QK+U6 WmqKP2nUz5RQN+0M6t29Lk9xx2Kp1RERUhBFND/kp2pYB20uSJsHi6p21Anb8ZMB k4y/VH7mj7oWH7UTFhOqm1djwTq6OPr7EECZFHW8ChMSL5foKeVouLdGBxSP9WIC 60kmQKN4EHwGgZaJz/G8UlY+TTqX3F20TryIRt1qSYhNz3WdvOrGVy3PtYABBJU0 XrJ1kpYz7olEFCOsizJZNlkvPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGoFqWXY hLfLHAQEMAc0HxXgIyJMMB8GA1UdIwQYMBaAFKOxZIG11sF5/Atzrh4OU96WdkHc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODg3Ny9GMDU4NThCOENB NzAxMUVCQTlEMkRDNjFDNEY5QUUwMi9vN0ZrZ2JYV3dYbjhDM091SGc1VDNwWjJR ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL283RmtnYlhXd1huOEMzT3VIZzVUM3BaMlFkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODg3Ny9GMDU4NThCOENBNzAxMUVCQTlEMkRDNjFDNEY5QUUwMi9vN0ZrZ2JYV3dY bjhDM091SGc1VDNwWjJRZHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOaLhM+AJeuVhLvY3a2psFFNW7gTkF02WnXgIZvQKNqAvSs/bahS7o J4dmYWv2pXAH3eIysmAU1BI0MuJFAoX8TYdus0UzC+JKy1zAVbkEOD+j4cjwK3RT XNP5/JUhbyn1HEuIUbHamor5lnl4JDGecOcgNp04Z3vdOU7WcFygKOmNzUOx31RL 5UoS/5QY1RuMp15h3rArAVmL6KjBx0sxASRlP02idcjDZ7928yghrhEx1nNHWFEm jmNHbrnWlV0lN9nGj5O5198OI4Ic4OWZvn6HKPumnEmIrB3EDxku5SvrAu2VTxN2 nRFyo0S8KViUj8+WQbEugGjQfmU45G5V -----END CERTIFICATE-----Generated at Sat May 31 17:47:16 2025 by rpki-client