$ rpki-client -vvf rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft File: 0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft (raw, json) Hash identifier: ncLG+dT3/hx63t8ITY5qAh1mL8jsofQ6BI3B7DkGIo4= Subject key identifier: D9:71:79:23:5D:1D:94:77:D0:D4:C6:7D:7D:D9:39:21:71:83:B6:A3 Authority key identifier: D0:E5:44:05:B0:3D:3D:12:34:59:DE:01:BB:40:0F:4D:7A:83:29:D0 Certificate issuer: /CN=A91B834D/serialNumber=D0E54405B03D3D123459DE01BB400F4D7A8329D0 Certificate serial: 01BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft Manifest number: 01B1 Signing time: Sat 31 May 2025 02:54:18 +0000 Manifest this update: Sat 31 May 2025 02:54:17 +0000 Manifest next update: Sat 07 Jun 2025 02:54:17 +0000 Files and hashes: 1: 0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl (hash: 72B3JYORD3HOmOHmgru74S5XDpB1wYGIR6VaiMB42mE=) 2: F9B10D46ADAA11ED810C6C45C4F9AE02.roa (hash: 9uR9cVnp9mE1i5KXBSkkfpXEwSfx3/BMoE6xrI/LuMM=) 3: 61883292ADA511EDB2C68947C4F9AE02.roa (hash: jVsOkESQWaLXR1oAo7YvVLXTH7CGZNa6Fnq6GGFvuF4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:54:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 442 (0x1ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B834D, serialNumber=D0E54405B03D3D123459DE01BB400F4D7A8329D0 Validity Not Before: May 31 02:54:17 2025 GMT Not After : Jun 7 02:54:17 2025 GMT Subject: CN=683a6f59-3e95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5f:43:d8:e5:61:1a:20:e5:e7:3a:fe:54:c2: 6a:76:3f:07:e6:a4:49:ec:37:98:f9:e6:69:52:08: 44:ed:b4:60:f5:13:28:01:b9:17:bc:1c:fc:d1:91: e2:72:a4:0c:81:3c:f2:14:47:a1:c0:f1:45:dd:0c: 2f:c0:64:6e:6e:72:bd:04:91:20:f8:b3:b2:c5:79: 14:12:d0:f1:d1:f8:84:d2:d5:a8:4a:10:5e:e8:ef: 15:17:58:4a:80:33:e3:37:c0:03:3a:aa:8d:f0:08: d0:27:5d:9f:90:17:85:67:9a:3d:b7:09:b6:3e:2f: 08:dc:aa:51:b2:24:1f:a6:d7:30:f6:26:08:c3:b0: 66:21:a8:69:1d:30:c1:2a:c2:07:37:f1:0b:94:4e: 8b:bc:9a:81:0e:33:50:30:6e:eb:33:10:eb:eb:37: 77:12:83:27:55:b5:04:f2:4f:fb:e1:6a:95:41:1b: 96:07:91:78:f5:97:88:9e:70:73:60:9c:94:4a:eb: 69:fa:40:5a:98:86:aa:b8:55:98:08:f1:ec:d2:bd: d8:9c:b4:72:04:08:15:48:f8:71:3f:67:6e:3b:73: 52:d3:ac:fa:fa:5a:70:bd:92:a0:ee:7a:9e:99:27: fc:5a:65:de:d9:0f:ce:04:c9:e4:6d:c8:a5:e6:5e: 51:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:71:79:23:5D:1D:94:77:D0:D4:C6:7D:7D:D9:39:21:71:83:B6:A3 X509v3 Authority Key Identifier: keyid:D0:E5:44:05:B0:3D:3D:12:34:59:DE:01:BB:40:0F:4D:7A:83:29:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:0a:98:be:a5:9b:78:12:dc:e6:1b:4d:46:69:e7:2f:10:b8: 54:4b:d8:58:ed:a0:e3:e8:a6:02:c3:55:26:d1:bf:d9:23:2a: 4f:dc:21:94:e7:94:ad:3b:c5:29:19:3d:f0:ea:ef:21:fe:e4: f8:22:79:2e:ea:de:ea:6d:79:58:7c:c3:9a:56:e8:bb:a6:b8: 5a:fc:86:00:1f:ea:6b:ac:73:67:8a:4c:93:1d:fa:34:c0:03: 1f:c3:6f:fd:00:5d:12:38:e9:5c:f2:2b:f7:3a:0e:27:79:3a: 8d:03:fb:f4:52:6c:12:04:62:aa:0b:e6:7c:2c:5a:d4:79:99: 55:16:7e:54:48:de:17:64:1b:5e:88:1c:22:9c:90:d0:64:0b: 83:ec:72:47:12:56:ff:f3:98:cf:a0:b1:9b:dd:c1:7a:2f:09: 6d:62:1e:b7:44:e1:39:b4:1f:ae:02:22:8e:93:f5:b4:eb:86: 27:16:ed:25:de:ec:3e:34:84:6b:d0:2a:a6:78:51:a1:22:fd: 47:e7:fc:50:b7:56:d7:d6:b0:dc:c0:e7:22:b3:6a:55:ee:24: 86:0f:36:45:a3:18:ee:3d:72:fb:82:e6:ef:c2:1a:e8:81:34: fa:57:6c:69:12:07:4f:f3:8c:63:7d:4f:5f:99:0f:59:c8:5f: d5:eb:3b:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgzNEQxMTAvBgNVBAUTKEQwRTU0NDA1QjAzRDNEMTIzNDU5REUwMUJCNDAwRjRE N0E4MzI5RDAwHhcNMjUwNTMxMDI1NDE3WhcNMjUwNjA3MDI1NDE3WjAYMRYwFAYD VQQDEw02ODNhNmY1OS0zZTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx19D2OVhGiDl5zr+VMJqdj8H5qRJ7DeY+eZpUghE7bRg9RMoAbkXvBz80ZHi cqQMgTzyFEehwPFF3QwvwGRubnK9BJEg+LOyxXkUEtDx0fiE0tWoShBe6O8VF1hK gDPjN8ADOqqN8AjQJ12fkBeFZ5o9twm2Pi8I3KpRsiQfptcw9iYIw7BmIahpHTDB KsIHN/ELlE6LvJqBDjNQMG7rMxDr6zd3EoMnVbUE8k/74WqVQRuWB5F49ZeInnBz YJyUSutp+kBamIaquFWYCPHs0r3YnLRyBAgVSPhxP2duO3NS06z6+lpwvZKg7nqe mSf8WmXe2Q/OBMnkbcil5l5R/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNlxeSNd HZR30NTGfX3ZOSFxg7ajMB8GA1UdIwQYMBaAFNDlRAWwPT0SNFneAbtAD016gynQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODM0RC8zQTJDNTE5NkFE QTExMUVEQUI2REY0MkRDNEY5QUUwMi8wT1ZFQmJBOVBSSTBXZDRCdTBBUFRYcURL ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBPVkVCYkE5UFJJMFdkNEJ1MEFQVFhxREtkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODM0RC8zQTJDNTE5NkFEQTExMUVEQUI2REY0MkRDNEY5QUUwMi8wT1ZFQmJBOVBS STBXZDRCdTBBUFRYcURLZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjCpi+pZt4EtzmG01GaecvELhUS9hY7aDj6KYCw1Um0b/ZIypP3CGU 55StO8UpGT3w6u8h/uT4Inku6t7qbXlYfMOaVui7prha/IYAH+prrHNnikyTHfo0 wAMfw2/9AF0SOOlc8iv3Og4neTqNA/v0UmwSBGKqC+Z8LFrUeZlVFn5USN4XZBte iBwinJDQZAuD7HJHElb/85jPoLGb3cF6LwltYh63ROE5tB+uAiKOk/W064YnFu0l 3uw+NIRr0CqmeFGhIv1H5/xQt1bX1rDcwOcis2pV7iSGDzZFoxjuPXL7gubvwhro gTT6V2xpEgdP84xjfU9fmQ9ZyF/V6ztU -----END CERTIFICATE-----Generated at Sat May 31 16:31:19 2025 by rpki-client