$ rpki-client -vvf rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft File: o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft (raw, json) Hash identifier: vxlrqP8II8AdctXPuOZdFWBFELpm5vrQyJXUrdVPv3U= Subject key identifier: 17:11:7C:0E:37:D9:A9:47:CE:A5:27:4E:4F:FA:A5:20:D5:1A:D4:B6 Authority key identifier: A3:65:2D:9E:54:E9:64:68:B2:30:47:93:73:17:FA:4E:CD:7B:36:48 Certificate issuer: /CN=A91A36A7/serialNumber=A3652D9E54E96468B23047937317FA4ECD7B3648 Certificate serial: 05E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft Manifest number: 05DC Signing time: Fri 30 May 2025 23:12:00 +0000 Manifest this update: Fri 30 May 2025 23:12:00 +0000 Manifest next update: Fri 06 Jun 2025 23:12:00 +0000 Files and hashes: 1: o2UtnlTpZGiyMEeTcxf6Ts17Nkg.crl (hash: XRBG++geRDBG8iL2HJfkcuExZ1miDUrDgk/obdFs9L4=) 2: F0CA090EB94A11EBAF5BDD5AC4F9AE02.roa (hash: AxnCXioU+pzcVhOQczSiGNqFZn1BtxYji3/Mt/svcQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.crl rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:11:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1507 (0x5e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A36A7, serialNumber=A3652D9E54E96468B23047937317FA4ECD7B3648 Validity Not Before: May 30 23:12:00 2025 GMT Not After : Jun 6 23:12:00 2025 GMT Subject: CN=683a3b40-a19b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f3:d3:45:22:b2:e8:a6:cf:d4:8c:30:55:1d: 15:14:ff:d5:b9:9b:33:2e:b5:1a:86:36:cc:1d:d5: be:4f:ed:48:99:07:71:c9:9b:d1:49:e4:ac:37:75: 70:cf:64:bc:61:89:d8:58:07:a4:ba:33:13:aa:6a: 2d:de:dc:ea:93:a1:7a:0e:11:51:b4:a1:78:88:07: bc:86:2c:96:ea:1a:5a:de:14:02:25:ee:17:a1:70: db:8c:7f:b2:f5:b5:76:f8:6c:dd:2d:bc:d9:90:17: a4:12:d9:cc:55:92:bc:b5:20:2f:bb:49:05:c5:e5: 7a:d6:28:af:ca:ce:e0:9a:bf:61:d6:a4:7a:bb:10: 22:10:eb:6c:99:bf:02:3d:cf:49:2c:b2:6b:a3:a9: 96:b6:ea:e0:02:1a:19:d3:ba:62:ee:0f:4f:d2:0a: 82:3d:f9:b4:2e:7d:54:c3:d2:0a:47:c6:e2:3f:59: f7:0f:04:9b:c7:77:ca:46:9d:1c:ce:8b:3c:05:c9: 40:56:d7:b6:44:a2:34:6b:9f:e6:21:ae:a3:60:e1: 2d:19:61:ce:a2:81:c4:f5:fd:c1:2b:45:ae:c1:dc: d7:4e:23:5c:86:cf:82:f2:c2:0b:ae:16:9c:a8:31: b3:43:31:e4:2a:8d:b8:29:f1:58:e1:d7:e9:24:ba: 00:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:11:7C:0E:37:D9:A9:47:CE:A5:27:4E:4F:FA:A5:20:D5:1A:D4:B6 X509v3 Authority Key Identifier: keyid:A3:65:2D:9E:54:E9:64:68:B2:30:47:93:73:17:FA:4E:CD:7B:36:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:08:3a:88:64:0f:bd:87:01:0f:55:7c:50:bc:59:47:09:f3: 53:8c:15:18:9c:77:88:9e:74:b0:b6:87:3c:53:3a:5d:45:d5: 3c:af:bc:c0:24:f8:c9:f7:03:c2:03:f3:11:33:0a:8b:e4:4b: 68:5a:e1:3e:5f:29:fd:bd:41:71:39:83:58:9b:5f:b5:f4:5d: 67:e3:17:16:74:e0:0d:1f:bd:21:5d:d3:66:79:dc:2c:ca:e4: 1d:4f:9c:a8:23:48:45:26:8b:bb:0a:67:00:48:40:fd:88:7f: e0:89:63:9e:b7:23:19:45:a7:a3:ce:9c:01:c3:86:13:9c:70: f3:52:fc:21:06:b6:79:17:85:14:f1:7a:3e:28:72:4f:db:2c: 9b:b3:0c:93:0a:95:90:69:0e:86:87:e0:3b:19:1d:3f:dd:1b: dd:0f:6f:55:92:47:0a:e3:60:bd:34:e5:d6:69:68:3d:f1:da: d7:59:15:a7:76:e0:da:6d:18:df:06:f3:49:e7:91:1b:f7:f6: b3:ca:40:89:40:7a:0d:2e:3e:bd:a6:c7:80:38:3a:fe:9c:fb: 53:e6:76:77:a6:37:46:7c:88:12:b1:0a:d1:28:f1:d9:8d:13: 5b:01:12:ad:5d:e5:be:f0:f4:e7:d6:16:c2:53:8e:41:f0:47: a1:bb:e2:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM2QTcxMTAvBgNVBAUTKEEzNjUyRDlFNTRFOTY0NjhCMjMwNDc5MzczMTdGQTRF Q0Q3QjM2NDgwHhcNMjUwNTMwMjMxMjAwWhcNMjUwNjA2MjMxMjAwWjAYMRYwFAYD VQQDEw02ODNhM2I0MC1hMTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzfPTRSKy6KbP1IwwVR0VFP/VuZszLrUahjbMHdW+T+1ImQdxyZvRSeSsN3Vw z2S8YYnYWAekujMTqmot3tzqk6F6DhFRtKF4iAe8hiyW6hpa3hQCJe4XoXDbjH+y 9bV2+GzdLbzZkBekEtnMVZK8tSAvu0kFxeV61iivys7gmr9h1qR6uxAiEOtsmb8C Pc9JLLJro6mWturgAhoZ07pi7g9P0gqCPfm0Ln1Uw9IKR8biP1n3DwSbx3fKRp0c zos8BclAVte2RKI0a5/mIa6jYOEtGWHOooHE9f3BK0WuwdzXTiNchs+C8sILrhac qDGzQzHkKo24KfFY4dfpJLoAYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBcRfA43 2alHzqUnTk/6pSDVGtS2MB8GA1UdIwQYMBaAFKNlLZ5U6WRosjBHk3MX+k7NezZI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzZBNy84QUE2NUFGQ0I5 NDkxMUVCQkJCMzI1NUFDNEY5QUUwMi9vMlV0bmxUcFpHaXlNRWVUY3hmNlRzMTdO a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28yVXRubFRwWkdpeU1FZVRjeGY2VHMxN05rZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzZBNy84QUE2NUFGQ0I5NDkxMUVCQkJCMzI1NUFDNEY5QUUwMi9vMlV0bmxUcFpH aXlNRWVUY3hmNlRzMTdOa2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHCDqIZA+9hwEPVXxQvFlHCfNTjBUYnHeInnSwtoc8UzpdRdU8r7zA JPjJ9wPCA/MRMwqL5EtoWuE+Xyn9vUFxOYNYm1+19F1n4xcWdOANH70hXdNmedws yuQdT5yoI0hFJou7CmcASED9iH/giWOetyMZRaejzpwBw4YTnHDzUvwhBrZ5F4UU 8Xo+KHJP2yybswyTCpWQaQ6Gh+A7GR0/3RvdD29VkkcK42C9NOXWaWg98drXWRWn duDabRjfBvNJ55Eb9/azykCJQHoNLj69pseAODr+nPtT5nZ3pjdGfIgSsQrRKPHZ jRNbARKtXeW+8PTn1hbCU45B8Eehu+Kc -----END CERTIFICATE-----Generated at Sat May 31 17:37:47 2025 by rpki-client