$ rpki-client -vvf rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft File: o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft (raw, json) Hash identifier: pczY9Z3ar2kyemyjoipcQgpGhKmI+8kvQZ1ADbpQP40= Subject key identifier: 69:DD:A8:0B:B9:D4:A9:85:4C:FB:8F:9C:95:CD:89:B6:A4:BF:B6:CB Authority key identifier: A3:47:1C:31:53:3B:88:D1:BF:8A:40:A3:2A:7D:DE:3B:A0:BB:1C:BF Certificate issuer: /CN=A91C913E/serialNumber=A3471C31533B88D1BF8A40A32A7DDE3BA0BB1CBF Certificate serial: 0331 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft Manifest number: 032C Signing time: Sat 31 May 2025 01:18:39 +0000 Manifest this update: Sat 31 May 2025 01:18:39 +0000 Manifest next update: Sat 07 Jun 2025 01:18:39 +0000 Files and hashes: 1: o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl (hash: 9EHgIDc2MTfWP/e52O92GzcWIgMMmpdOcGP2wgoWeTA=) 2: 24578ECED56A11EFB764F716C4F9AE02.roa (hash: t5WMcFCD2OO+gp845WzQi07gNbar1uWW5UXsijptYhw=) 3: 1445557CC6C011EC9D09EF1DC4F9AE02.roa (hash: JL3deikXqirsZKv5Pglr4MkJVud4y4Ww4HTgjluu/lA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 817 (0x331) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C913E, serialNumber=A3471C31533B88D1BF8A40A32A7DDE3BA0BB1CBF Validity Not Before: May 31 01:18:39 2025 GMT Not After : Jun 7 01:18:39 2025 GMT Subject: CN=683a58ef-1514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:da:de:74:66:d6:9e:05:d9:69:b8:39:14:b2: fe:52:37:49:45:6f:97:9d:b9:46:e0:b1:c8:3d:a8: 5c:bf:4e:d1:a4:a1:af:cf:9b:34:f4:ee:c0:2d:ea: c6:73:bc:fb:a8:d3:2c:05:de:2e:23:f6:32:94:1c: 0b:16:f5:40:e9:d4:94:50:1c:f7:3f:14:39:d2:07: ef:80:f4:2d:bd:66:8c:07:c9:91:8c:01:b5:16:4b: 1f:58:19:12:1c:b8:4f:83:e1:40:3c:b4:07:f3:bb: be:27:60:3f:20:f4:1d:50:2f:14:56:ae:c8:2b:3f: e8:2c:ec:3f:e6:5c:a4:00:f0:4a:bd:e5:14:89:9e: 02:6b:d9:b7:cd:dd:36:14:2b:00:21:59:df:70:03: c9:b1:d6:06:b1:21:44:1a:8b:f3:54:0e:73:2f:2a: ba:fc:3d:65:ba:0d:b9:70:47:29:95:9e:75:20:6a: 05:71:4d:7f:75:73:2f:6e:59:ac:46:9c:f3:15:63: 85:7c:da:03:34:1c:8b:a4:40:07:38:88:ef:50:1c: c7:d2:42:19:6b:21:b7:ea:9b:1f:ec:91:ee:cb:ca: 7f:a5:e6:96:51:4d:67:aa:4a:b9:9f:41:9a:3d:85: fd:c9:99:d3:ca:82:2d:a9:6d:b9:a4:db:e5:7e:93: cb:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:DD:A8:0B:B9:D4:A9:85:4C:FB:8F:9C:95:CD:89:B6:A4:BF:B6:CB X509v3 Authority Key Identifier: keyid:A3:47:1C:31:53:3B:88:D1:BF:8A:40:A3:2A:7D:DE:3B:A0:BB:1C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:1a:10:a1:42:8d:4d:80:a8:9c:f3:b3:79:d6:49:c5:e3:8e: 99:64:81:bf:f5:c5:81:3a:07:34:14:d4:f5:b3:e3:12:ab:85: 97:25:2d:51:86:4f:15:af:62:65:ef:85:cb:fa:22:3c:be:b8: fe:5e:7d:06:e8:65:64:56:dd:33:7c:ed:2c:a8:98:b6:33:16: 1e:20:68:97:d9:2a:95:35:88:27:cd:2a:09:b3:d1:70:c0:a9: ce:dc:e3:61:1d:d2:e4:45:31:f2:f4:ec:a5:89:2c:45:0d:84: cd:44:12:23:ba:20:39:e7:6c:6b:ff:b9:ba:66:02:b2:14:72: 1d:5e:62:45:8a:f9:d8:f7:84:e7:38:36:2c:47:12:0f:1d:e9: 77:09:7d:d3:b0:9d:06:13:57:07:c8:f0:5f:2e:e4:f7:76:db: df:c2:d7:45:62:48:f7:9d:c6:74:bd:5e:60:fe:1d:7c:21:1c: 86:19:81:b0:7e:45:91:91:02:71:58:af:92:a6:06:bf:a7:43: 73:a3:61:99:f4:87:60:41:64:fd:e7:ec:15:56:25:0f:e4:64: 64:ce:29:5a:b9:27:9f:3e:a5:6c:dd:df:17:ee:b4:04:5a:25: 06:1e:bf:08:da:c0:d7:0c:f7:c8:15:4f:a8:1b:50:ca:f9:f6: a9:6d:19:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkxM0UxMTAvBgNVBAUTKEEzNDcxQzMxNTMzQjg4RDFCRjhBNDBBMzJBN0RERTNC QTBCQjFDQkYwHhcNMjUwNTMxMDExODM5WhcNMjUwNjA3MDExODM5WjAYMRYwFAYD VQQDEw02ODNhNThlZi0xNTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzNredGbWngXZabg5FLL+UjdJRW+XnblG4LHIPahcv07RpKGvz5s09O7ALerG c7z7qNMsBd4uI/YylBwLFvVA6dSUUBz3PxQ50gfvgPQtvWaMB8mRjAG1FksfWBkS HLhPg+FAPLQH87u+J2A/IPQdUC8UVq7IKz/oLOw/5lykAPBKveUUiZ4Ca9m3zd02 FCsAIVnfcAPJsdYGsSFEGovzVA5zLyq6/D1lug25cEcplZ51IGoFcU1/dXMvblms RpzzFWOFfNoDNByLpEAHOIjvUBzH0kIZayG36psf7JHuy8p/peaWUU1nqkq5n0Ga PYX9yZnTyoItqW25pNvlfpPLOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGndqAu5 1KmFTPuPnJXNibakv7bLMB8GA1UdIwQYMBaAFKNHHDFTO4jRv4pAoyp93juguxy/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTEzRS9ERDA4OThGMEM2 QkQxMUVDODk2Mzc0MURDNEY5QUUwMi9vMGNjTVZNN2lOR19pa0NqS24zZU82QzdI TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28wY2NNVk03aU5HX2lrQ2pLbjNlTzZDN0hMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTEzRS9ERDA4OThGMEM2QkQxMUVDODk2Mzc0MURDNEY5QUUwMi9vMGNjTVZNN2lO R19pa0NqS24zZU82QzdITDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwGhChQo1NgKic87N51knF446ZZIG/9cWBOgc0FNT1s+MSq4WXJS1R hk8Vr2Jl74XL+iI8vrj+Xn0G6GVkVt0zfO0sqJi2MxYeIGiX2SqVNYgnzSoJs9Fw wKnO3ONhHdLkRTHy9OyliSxFDYTNRBIjuiA552xr/7m6ZgKyFHIdXmJFivnY94Tn ODYsRxIPHel3CX3TsJ0GE1cHyPBfLuT3dtvfwtdFYkj3ncZ0vV5g/h18IRyGGYGw fkWRkQJxWK+Spga/p0Nzo2GZ9IdgQWT95+wVViUP5GRkzilauSefPqVs3d8X7rQE WiUGHr8I2sDXDPfIFU+oG1DK+fapbRmN -----END CERTIFICATE-----Generated at Sat May 31 16:59:27 2025 by rpki-client