$ rpki-client -vvf rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft File: Ol4QKeZcY2gSMttn2AU90vaU5h8.mft (raw, json) Hash identifier: JwR7Wc4w8/4XKGoOLYoCvHXfaULMmC9ExS8w2CoruDU= Subject key identifier: E1:B9:1E:BD:3D:F6:9C:D7:05:D2:A7:27:D4:97:26:30:E9:E4:59:33 Authority key identifier: 3A:5E:10:29:E6:5C:63:68:12:32:DB:67:D8:05:3D:D2:F6:94:E6:1F Certificate issuer: /CN=A9174EC5/serialNumber=3A5E1029E65C63681232DB67D8053DD2F694E61F Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ol4QKeZcY2gSMttn2AU90vaU5h8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft Manifest number: 42 Signing time: Sat 31 May 2025 07:01:43 +0000 Manifest this update: Sat 31 May 2025 07:01:43 +0000 Manifest next update: Sat 07 Jun 2025 07:01:43 +0000 Files and hashes: 1: Ol4QKeZcY2gSMttn2AU90vaU5h8.crl (hash: Ozs9d5e6oIR1yyiCRxSbtUWa/lYL9Wo+pEhsVH/tacs=) 2: E8112D9AD95A11EF815C7470C4F9AE02.roa (hash: mG5mPJ9TzgmR6vCAw7pVeBBypwUd04LX9QtyyGLebqw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.crl rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ol4QKeZcY2gSMttn2AU90vaU5h8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174EC5, serialNumber=3A5E1029E65C63681232DB67D8053DD2F694E61F Validity Not Before: May 31 07:01:43 2025 GMT Not After : Jun 7 07:01:43 2025 GMT Subject: CN=683aa957-2594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bc:99:41:1a:af:30:9d:31:dc:fa:f2:83:a8: d4:75:95:25:31:7e:35:67:1b:18:79:f3:92:f5:e3: 1d:1d:a8:25:a2:c2:0a:38:f7:03:be:61:75:ff:ab: 29:f1:78:95:7c:43:64:5a:39:15:23:d1:de:c0:0f: ec:97:c5:65:41:54:a7:ac:30:f1:88:64:47:46:92: 65:a5:a7:8f:08:83:f9:d8:f4:5c:e9:c5:8e:38:a6: 43:c9:b7:cc:78:a2:c0:3c:c9:d7:ea:90:d4:da:12: 6f:05:4a:95:33:4f:18:3b:32:9f:93:38:7a:11:42: 65:21:d4:cb:83:66:ea:18:3d:b2:4b:2b:64:28:af: 38:1c:52:35:1e:20:63:9a:4d:ff:f8:27:4b:b1:ce: 6e:92:12:1f:fb:6b:62:c7:82:55:24:14:2f:6e:c7: 03:e8:01:0b:63:dc:b7:89:1c:2d:97:17:11:af:9a: cd:a2:2c:e3:c9:8d:c6:6f:73:4d:7d:e4:79:72:d9: b8:49:89:7e:ff:6b:f4:72:62:3c:da:10:bb:09:6d: e7:28:ff:03:62:00:16:47:60:25:00:52:53:50:c5: f3:80:4b:3e:16:f6:ac:fc:c2:7f:6a:8c:62:8f:0d: 39:38:77:69:a8:7e:f7:25:f3:a1:eb:d1:fa:00:55: cb:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:B9:1E:BD:3D:F6:9C:D7:05:D2:A7:27:D4:97:26:30:E9:E4:59:33 X509v3 Authority Key Identifier: keyid:3A:5E:10:29:E6:5C:63:68:12:32:DB:67:D8:05:3D:D2:F6:94:E6:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ol4QKeZcY2gSMttn2AU90vaU5h8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:31:d4:72:9b:a4:0f:20:d1:9a:72:43:52:02:1d:f5:de:ff: 86:c5:ed:1e:e8:40:44:a0:8e:f6:b6:62:fd:42:60:6f:cd:75: b3:75:e0:c9:6f:58:f9:df:6c:73:51:ea:b5:73:84:89:c3:79: 54:75:35:41:65:0f:c5:ac:6a:71:1c:df:2d:4b:5f:03:bf:53: 36:c1:9b:4a:63:49:89:0a:99:60:5e:e3:f6:90:6f:e7:19:d5: ce:02:9e:e6:5e:62:65:dc:55:7d:3b:32:a0:82:90:ff:e3:56: 14:26:d5:41:f2:67:61:10:28:45:0b:44:8c:ea:f1:b1:98:5c: 27:44:ad:15:d7:1f:0c:73:aa:d3:8d:17:52:dc:ae:1d:75:cb: 38:58:75:bb:73:26:87:3f:d0:30:4f:22:f1:1d:d8:12:3c:02: 79:a2:35:30:47:9c:8c:84:38:f3:1d:0e:55:2c:07:7e:73:54: 11:d3:a7:37:e4:08:d2:9c:ba:cb:16:ba:db:45:b7:e0:29:54: e9:c9:ac:ff:09:48:c1:5c:97:77:e7:61:96:5a:12:e9:4f:a6: 44:24:0d:e1:2e:d4:35:d4:6d:40:8c:29:cc:fb:1e:5a:f9:f9: 44:45:7f:7d:43:5f:2b:33:00:13:00:f1:85:1b:7d:8b:fb:46: 6b:08:f4:5e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NEVDNTExMC8GA1UEBRMoM0E1RTEwMjlFNjVDNjM2ODEyMzJEQjY3RDgwNTNERDJG Njk0RTYxRjAeFw0yNTA1MzEwNzAxNDNaFw0yNTA2MDcwNzAxNDNaMBgxFjAUBgNV BAMTDTY4M2FhOTU3LTI1OTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCovJlBGq8wnTHc+vKDqNR1lSUxfjVnGxh585L14x0dqCWiwgo49wO+YXX/qynx eJV8Q2RaORUj0d7AD+yXxWVBVKesMPGIZEdGkmWlp48Ig/nY9FzpxY44pkPJt8x4 osA8ydfqkNTaEm8FSpUzTxg7Mp+TOHoRQmUh1MuDZuoYPbJLK2QorzgcUjUeIGOa Tf/4J0uxzm6SEh/7a2LHglUkFC9uxwPoAQtj3LeJHC2XFxGvms2iLOPJjcZvc019 5Hly2bhJiX7/a/RyYjzaELsJbeco/wNiABZHYCUAUlNQxfOASz4W9qz8wn9qjGKP DTk4d2mofvcl86Hr0foAVcvfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4bkevT32 nNcF0qcn1JcmMOnkWTMwHwYDVR0jBBgwFoAUOl4QKeZcY2gSMttn2AU90vaU5h8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0RUM1LzgyMzM1QTIwRDk1 QTExRUZBMDJGQjQ2RkM0RjlBRTAyL09sNFFLZVpjWTJnU010dG4yQVU5MHZhVTVo OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT2w0UUtlWmNZMmdTTXR0bjJBVTkwdmFVNWg4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0 RUM1LzgyMzM1QTIwRDk1QTExRUZBMDJGQjQ2RkM0RjlBRTAyL09sNFFLZVpjWTJn U010dG4yQVU5MHZhVTVoOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGkx1HKbpA8g0ZpyQ1ICHfXe/4bF7R7oQESgjva2Yv1CYG/NdbN14Mlv WPnfbHNR6rVzhInDeVR1NUFlD8WsanEc3y1LXwO/UzbBm0pjSYkKmWBe4/aQb+cZ 1c4CnuZeYmXcVX07MqCCkP/jVhQm1UHyZ2EQKEULRIzq8bGYXCdErRXXHwxzqtON F1Lcrh11yzhYdbtzJoc/0DBPIvEd2BI8AnmiNTBHnIyEOPMdDlUsB35zVBHTpzfk CNKcussWuttFt+ApVOnJrP8JSMFcl3fnYZZaEulPpkQkDeEu1DXUbUCMKcz7Hlr5 +URFf31DXyszABMA8YUbfYv7RmsI9F4= -----END CERTIFICATE-----Generated at Sat May 31 17:16:10 2025 by rpki-client