$ rpki-client -vvf rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft File: 4OynvFsloMo3TZqDzEz5DdbPIgk.mft (raw, json) Hash identifier: 6bJPNmtOBnKpiXXt94caqfQeFLHZJvSfbRtJLfzGgC8= Subject key identifier: 47:CB:D6:1F:9F:78:A6:05:EF:42:71:8E:85:1D:F8:B9:7D:F5:4B:7D Authority key identifier: E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09 Certificate issuer: /CN=A91C74B5/serialNumber=E0ECA7BC5B25A0CA374D9A83CC4CF90DD6CF2209 Certificate serial: 0168 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft Manifest number: 015A Signing time: Tue 03 Jun 2025 03:54:53 +0000 Manifest this update: Tue 03 Jun 2025 03:54:52 +0000 Manifest next update: Tue 10 Jun 2025 03:54:52 +0000 Files and hashes: 1: 4OynvFsloMo3TZqDzEz5DdbPIgk.crl (hash: ROY84bf0OLmHY276ZmXcC0Yeg5XCb56sbX4/0gE1urA=) 2: FBCA5E628A4E11EE8EFFA44BC4F9AE02.roa (hash: n7d+wfVovpgFh/VPuHK0Be+tZJiAokXkxVBH6z58Cdo=) 3: 23E0203034AF11EE90E6263DC4F9AE02.roa (hash: qRwojUTlxnLhuw/Mk800h2tw73R4wHeoNMLoVaIWLSQ=) 4: FE53F0DE34AA11EE85FF0735C4F9AE02.roa (hash: FSryM40tOFsx9/9SakfMh/QfDHk+qmxC9WGqNR/nxQA=) 5: 2343647034AF11EE90E6263DC4F9AE02.roa (hash: O7wU5uPOsDFh8TlK1r/cSTqhuO+kftwlxz4zNibCfJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 03:54:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 360 (0x168) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C74B5, serialNumber=E0ECA7BC5B25A0CA374D9A83CC4CF90DD6CF2209 Validity Not Before: Jun 3 03:54:52 2025 GMT Not After : Jun 10 03:54:52 2025 GMT Subject: CN=683e720c-e402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a6:cc:bd:6f:ab:83:2f:6c:ff:39:51:54:25: 1b:f5:63:86:ed:cb:aa:0d:87:d7:a6:45:11:aa:b4: a4:a7:53:1a:7a:18:13:bf:b9:25:84:c1:47:0f:7a: b7:82:ad:e8:bd:3b:64:f7:c4:f3:9f:b7:82:d0:9a: 44:d0:d8:6c:78:15:0e:2d:0b:ca:a1:d3:ac:b3:e6: ce:d9:7b:ad:b2:d0:e7:3c:0b:0a:dd:bd:04:bf:4f: 2f:62:62:87:95:22:77:af:cf:82:35:ad:6c:e7:7c: 9a:b0:67:ce:ca:6f:93:21:a0:79:e2:78:35:ae:80: 9a:b1:6a:f9:6d:1b:9c:29:60:f5:c7:76:22:67:b8: 49:e5:b6:75:d5:11:61:a0:57:14:c9:e5:07:3a:6b: ea:e7:3f:6c:88:e0:45:45:fd:ea:90:d0:c0:29:1e: da:d7:58:09:75:80:5a:49:93:ce:bc:15:1f:2b:bf: f7:a7:ca:3d:ab:89:d2:e2:39:2a:15:bf:61:f5:27: 6c:ef:f7:f5:1d:3e:09:a1:03:c5:34:df:dd:a6:ac: 88:dd:fb:39:c5:42:11:c2:3c:da:66:26:68:c7:59: 88:1a:cf:19:d9:8c:d3:ec:55:46:5c:59:20:00:e0: 70:97:43:26:2e:43:f8:52:35:52:1a:ef:f6:ec:d4: b4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:CB:D6:1F:9F:78:A6:05:EF:42:71:8E:85:1D:F8:B9:7D:F5:4B:7D X509v3 Authority Key Identifier: keyid:E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:e0:2d:af:31:96:70:65:42:27:79:bd:b3:51:eb:9f:cd:fc: f1:78:3d:ff:06:e1:8e:18:af:8f:98:da:15:95:1f:af:0d:c8: ea:69:c3:50:7d:1e:c2:e3:4e:17:85:0e:15:47:e2:7b:7d:8f: 46:ff:e7:b1:93:ad:37:4c:14:fb:c9:70:bf:b9:f2:e5:3a:6d: 94:c3:c3:fb:cc:89:75:8f:eb:2b:98:60:3d:ff:e8:6f:f3:51: 08:cc:dd:ee:01:92:95:32:4f:27:44:a3:7c:55:8a:64:71:58: 48:be:cb:a2:6a:c0:5e:eb:c4:83:78:64:20:60:f9:d8:1c:dc: c1:77:99:cd:b2:97:09:6c:5e:5c:1b:40:4b:a3:3d:52:c2:8f: ae:0f:cd:95:79:ca:c1:7a:75:8d:06:b4:3e:0b:12:96:bc:31: 2b:a6:9f:f5:a6:1f:8d:74:34:98:07:54:a1:da:76:b8:2d:da: 78:87:7a:3d:4b:72:cf:cf:1c:f4:00:ac:ef:04:d7:e8:52:08: b7:89:0f:9e:ed:01:22:da:91:a1:49:f3:ee:41:41:2e:e1:fd: 84:ee:bc:09:ee:02:3b:8e:3e:1a:7b:97:f0:4e:37:0e:37:ac: b0:24:31:c6:39:1c:7a:8a:a2:b7:60:c0:cc:11:a8:1c:3f:a9: c1:92:96:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc0QjUxMTAvBgNVBAUTKEUwRUNBN0JDNUIyNUEwQ0EzNzREOUE4M0NDNENGOTBE RDZDRjIyMDkwHhcNMjUwNjAzMDM1NDUyWhcNMjUwNjEwMDM1NDUyWjAYMRYwFAYD VQQDEw02ODNlNzIwYy1lNDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqKbMvW+rgy9s/zlRVCUb9WOG7cuqDYfXpkURqrSkp1MaehgTv7klhMFHD3q3 gq3ovTtk98Tzn7eC0JpE0NhseBUOLQvKodOss+bO2XutstDnPAsK3b0Ev08vYmKH lSJ3r8+CNa1s53yasGfOym+TIaB54ng1roCasWr5bRucKWD1x3YiZ7hJ5bZ11RFh oFcUyeUHOmvq5z9siOBFRf3qkNDAKR7a11gJdYBaSZPOvBUfK7/3p8o9q4nS4jkq Fb9h9Sds7/f1HT4JoQPFNN/dpqyI3fs5xUIRwjzaZiZox1mIGs8Z2YzT7FVGXFkg AOBwl0MmLkP4UjVSGu/27NS0OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEfL1h+f eKYF70JxjoUd+Ll99Ut9MB8GA1UdIwQYMBaAFODsp7xbJaDKN02ag8xM+Q3WzyIJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzRCNS85ODA0MzU2RTM0 QUExMUVFQTA2QUUxMzNDNEY5QUUwMi80T3ludkZzbG9NbzNUWnFEekV6NURkYlBJ Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRPeW52RnNsb01vM1RacUR6RXo1RGRiUElnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzRCNS85ODA0MzU2RTM0QUExMUVFQTA2QUUxMzNDNEY5QUUwMi80T3ludkZzbG9N bzNUWnFEekV6NURkYlBJZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBB4C2vMZZwZUIneb2zUeufzfzxeD3/BuGOGK+PmNoVlR+vDcjqacNQ fR7C404XhQ4VR+J7fY9G/+exk603TBT7yXC/ufLlOm2Uw8P7zIl1j+srmGA9/+hv 81EIzN3uAZKVMk8nRKN8VYpkcVhIvsuiasBe68SDeGQgYPnYHNzBd5nNspcJbF5c G0BLoz1Swo+uD82VecrBenWNBrQ+CxKWvDErpp/1ph+NdDSYB1Sh2na4Ldp4h3o9 S3LPzxz0AKzvBNfoUgi3iQ+e7QEi2pGhSfPuQUEu4f2E7rwJ7gI7jj4ae5fwTjcO N6ywJDHGORx6iqK3YMDMEagcP6nBkpZ3 -----END CERTIFICATE-----Generated at Wed Jun 4 12:22:04 2025 by rpki-client