$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.mft File: 0VLfcuXWwcb-QrZCN3w7CIEobec.mft (raw, json) Hash identifier: 87SW+7/exWOvqjVXifZmMjly9DioNsduDZ+7oVFgbR0= Subject key identifier: 6D:28:68:10:0D:D3:F8:D6:1C:75:0A:F3:35:DB:E4:17:3A:7C:29:C0 Authority key identifier: D1:52:DF:72:E5:D6:C1:C6:FE:42:B6:42:37:7C:3B:08:81:28:6D:E7 Certificate issuer: /CN=A91C0FAC/serialNumber=D152DF72E5D6C1C6FE42B642377C3B0881286DE7 Certificate serial: 051A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0VLfcuXWwcb-QrZCN3w7CIEobec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.mft Manifest number: 0516 Signing time: Fri 30 May 2025 23:48:20 +0000 Manifest this update: Fri 30 May 2025 23:48:19 +0000 Manifest next update: Fri 06 Jun 2025 23:48:19 +0000 Files and hashes: 1: 0VLfcuXWwcb-QrZCN3w7CIEobec.crl (hash: 9sIA0STMvnjYxY5Q5uO5w1kbET3NYGanQcZbXocEv9Q=) 2: 4C2E7A3C049B11ECAC7E5D0DC4F9AE02.roa (hash: RRDCzU53SK4RYR2DdbmwE16o06HoY4GRJ9TEKW1rm3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.crl rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0VLfcuXWwcb-QrZCN3w7CIEobec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:48:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1306 (0x51a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0FAC, serialNumber=D152DF72E5D6C1C6FE42B642377C3B0881286DE7 Validity Not Before: May 30 23:48:19 2025 GMT Not After : Jun 6 23:48:19 2025 GMT Subject: CN=683a43c3-a9b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:26:f6:ca:4b:e9:db:73:d3:3b:d2:b9:c9:1c: b5:56:0f:19:b9:56:b8:1c:7e:5d:35:48:77:9f:db: 7b:8d:4c:d3:d7:7f:76:93:df:c0:7f:f0:7d:28:a7: 32:99:8e:57:1a:8d:39:63:cd:fc:28:70:15:74:79: 33:50:40:05:9b:3c:60:0c:8f:ad:10:a8:a3:29:9c: 65:3d:e9:dc:1b:6a:22:1f:c4:16:a6:91:2d:b4:7d: 44:8c:d8:a2:da:2f:e0:8a:a4:c1:e5:85:74:68:da: 9e:5c:69:57:71:f0:04:63:8d:20:ed:cc:e1:32:06: c3:5c:fe:7d:d8:ba:49:21:da:bd:46:9a:c7:f9:8a: ae:67:f6:d0:1c:bf:1e:2d:a1:af:84:45:70:c0:7c: 36:ff:d5:8f:9a:e4:28:5d:d9:50:e7:71:73:b7:c7: 5b:f8:63:d8:84:05:9b:36:8e:4c:50:8e:6e:dd:1a: 9a:8e:79:5e:f5:83:85:a7:88:99:1e:86:da:6a:b1: fd:51:c2:51:fa:c4:79:73:c6:84:c5:50:7e:a2:96: a1:45:28:75:4f:e6:97:1b:69:0e:5c:87:5c:d0:f2: ac:91:5f:cd:66:4c:1f:f0:f6:25:ef:21:f7:65:20: 1b:55:5a:f0:f9:be:7d:12:dc:95:4c:db:30:07:e9: 09:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:28:68:10:0D:D3:F8:D6:1C:75:0A:F3:35:DB:E4:17:3A:7C:29:C0 X509v3 Authority Key Identifier: keyid:D1:52:DF:72:E5:D6:C1:C6:FE:42:B6:42:37:7C:3B:08:81:28:6D:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0VLfcuXWwcb-QrZCN3w7CIEobec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:f9:f4:9d:49:c1:52:13:76:3c:ca:8c:27:3d:76:f4:25:6b: ae:e0:e2:02:b5:ca:7e:c4:a8:88:78:c2:2b:fe:5f:09:4c:f0: fc:b5:b3:10:ef:8a:74:9d:e1:9c:55:86:ee:32:3e:a7:9a:06: d8:94:d1:85:37:f7:5c:0a:e5:35:46:9e:37:3c:e3:68:df:dc: 90:70:7d:9d:2d:94:d2:13:d1:5c:c4:77:07:60:75:86:94:b3: 06:25:9a:2a:77:77:94:71:33:56:62:04:1d:88:b0:32:88:c5: b3:4b:6f:ca:03:3c:6c:b4:64:92:7c:29:fd:30:48:b1:d5:6f: 1e:f1:2e:0e:15:1c:12:10:96:3e:f1:b8:fb:99:1a:0a:bd:29: 52:05:22:f7:2b:c3:87:e3:3b:7d:40:dd:58:95:0a:d6:08:68: 71:8e:e4:07:9b:1b:39:13:83:29:83:53:8e:b4:d0:84:f9:86: fb:f0:af:68:a8:e6:2b:34:e9:35:8d:d1:2b:7b:3b:ea:2a:c3: 35:7d:f7:76:a5:65:1b:ff:a9:fa:90:bd:18:19:4f:12:9e:e9: 31:e3:a3:eb:3b:6d:fa:6c:2d:b6:19:25:ef:19:bc:92:d7:ae: 19:de:fa:57:97:ed:0a:21:ec:f1:6f:8e:c2:81:1f:4d:c1:d5: 42:50:46:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBGQUMxMTAvBgNVBAUTKEQxNTJERjcyRTVENkMxQzZGRTQyQjY0MjM3N0MzQjA4 ODEyODZERTcwHhcNMjUwNTMwMjM0ODE5WhcNMjUwNjA2MjM0ODE5WjAYMRYwFAYD VQQDEw02ODNhNDNjMy1hOWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsib2ykvp23PTO9K5yRy1Vg8ZuVa4HH5dNUh3n9t7jUzT1392k9/Af/B9KKcy mY5XGo05Y838KHAVdHkzUEAFmzxgDI+tEKijKZxlPencG2oiH8QWppEttH1EjNii 2i/giqTB5YV0aNqeXGlXcfAEY40g7czhMgbDXP592LpJIdq9RprH+YquZ/bQHL8e LaGvhEVwwHw2/9WPmuQoXdlQ53Fzt8db+GPYhAWbNo5MUI5u3Rqajnle9YOFp4iZ HobaarH9UcJR+sR5c8aExVB+opahRSh1T+aXG2kOXIdc0PKskV/NZkwf8PYl7yH3 ZSAbVVrw+b59EtyVTNswB+kJ/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG0oaBAN 0/jWHHUK8zXb5Bc6fCnAMB8GA1UdIwQYMBaAFNFS33Ll1sHG/kK2Qjd8OwiBKG3n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEZBQy8zQ0Y3OThFMDA0 OTcxMUVDQTUzRDRCM0NDNEY5QUUwMi8wVkxmY3VYV3djYi1RclpDTjN3N0NJRW9i ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBWTGZjdVhXd2NiLVFyWkNOM3c3Q0lFb2JlYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEZBQy8zQ0Y3OThFMDA0OTcxMUVDQTUzRDRCM0NDNEY5QUUwMi8wVkxmY3VYV3dj Yi1RclpDTjN3N0NJRW9iZWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAq+fSdScFSE3Y8yownPXb0JWuu4OICtcp+xKiIeMIr/l8JTPD8tbMQ 74p0neGcVYbuMj6nmgbYlNGFN/dcCuU1Rp43PONo39yQcH2dLZTSE9FcxHcHYHWG lLMGJZoqd3eUcTNWYgQdiLAyiMWzS2/KAzxstGSSfCn9MEix1W8e8S4OFRwSEJY+ 8bj7mRoKvSlSBSL3K8OH4zt9QN1YlQrWCGhxjuQHmxs5E4Mpg1OOtNCE+Yb78K9o qOYrNOk1jdErezvqKsM1ffd2pWUb/6n6kL0YGU8Snukx46PrO236bC22GSXvGbyS 164Z3vpXl+0KIezxb47CgR9NwdVCUEZ2 -----END CERTIFICATE-----Generated at Sat May 31 17:37:46 2025 by rpki-client