$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft File: oE50OtMfT4PwncXS9-9Pq-HvaHs.mft (raw, json) Hash identifier: HvaLrWLEC+Pmd1tAahZm9DqBzzzTpJ5YCNQrbXaHU0Q= Subject key identifier: 0F:3D:BD:D2:16:0B:B6:A4:66:C8:61:38:DF:4E:DB:6D:6C:C5:30:33 Authority key identifier: A0:4E:74:3A:D3:1F:4F:83:F0:9D:C5:D2:F7:EF:4F:AB:E1:EF:68:7B Certificate issuer: /CN=A91E0EF8/serialNumber=A04E743AD31F4F83F09DC5D2F7EF4FABE1EF687B Certificate serial: 05C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft Manifest number: 05AE Signing time: Fri 30 May 2025 23:23:03 +0000 Manifest this update: Fri 30 May 2025 23:23:03 +0000 Manifest next update: Fri 06 Jun 2025 23:23:03 +0000 Files and hashes: 1: oE50OtMfT4PwncXS9-9Pq-HvaHs.crl (hash: XAI7Ptpa1KWranj4UllN3IEpwFjy+Hv5pUpJtg5Erl0=) 2: 2F581CEA33F311EEABFC7410C4F9AE02.roa (hash: 0O6TcMZ7cyiTOQX6a4lo9IW8lZvmQl+TflI94IQBsXg=) 3: 180DF9BE93C711EDB3D8A867C4F9AE02.roa (hash: QypSaOJWNZPEYJNaUp+tgMHOgSp9cYSc6zUXtXVCQpg=) 4: 1767CE4A93C711EDB3D8A867C4F9AE02.roa (hash: 5EMVY+mr8MeziaFmHYoIUZ8HY+OW0Ux+vJdDqNYyM+A=) 5: 16A4DFE893C711EDB3D8A867C4F9AE02.roa (hash: BMRoArOkK6XKfXiCgVXjRFI7Ts9ZVPZguMrIduSzckU=) 6: 1614034C93C711EDB3D8A867C4F9AE02.roa (hash: o0PMmxNvCxGi4Ma1i/XdkAnkuomNueTn7pJoxsJKzxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.crl rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:23:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1474 (0x5c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0EF8, serialNumber=A04E743AD31F4F83F09DC5D2F7EF4FABE1EF687B Validity Not Before: May 30 23:23:03 2025 GMT Not After : Jun 6 23:23:03 2025 GMT Subject: CN=683a3dd7-b24d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d0:7d:81:ef:c8:eb:4b:13:1a:7b:af:9c:b6: 4b:b2:18:f1:83:5c:b1:b4:b3:0a:e7:f3:1f:c3:b8: 5c:05:ae:c9:35:34:51:a4:43:31:db:66:f3:c4:e6: 5c:83:91:cf:37:a0:a5:eb:71:3c:01:b6:73:c2:69: f0:f4:24:31:61:7b:7a:73:aa:8e:45:d6:12:51:3c: 17:bc:63:50:69:9d:34:cb:68:df:47:dc:79:93:63: 26:98:e2:b7:40:12:d6:60:61:1c:13:a8:79:22:fc: 42:f2:f8:9d:bf:e9:11:ee:36:59:bf:0e:8b:07:d1: ed:95:04:4e:4f:d4:bc:5c:36:d1:72:50:5d:2f:7a: 92:55:a4:c5:64:ba:d6:88:7c:02:95:b3:3a:59:68: 21:76:98:08:9f:fb:e4:80:fa:11:a8:2f:28:a5:76: d6:c2:6c:b3:ac:8f:67:f6:76:94:15:e7:99:9f:10: 9f:c1:15:4f:7b:ec:d2:61:c6:99:e6:a4:b4:54:85: ac:b6:9e:4c:31:d2:e4:61:41:de:a9:bc:9f:51:8e: 74:1a:23:f4:2f:fc:42:84:c8:7c:e1:e1:03:36:48: 9e:f7:c6:44:32:1d:26:3f:c6:cb:27:3e:51:b5:77: 39:b9:52:fd:8a:67:58:28:0f:ce:96:3c:92:2f:05: 7f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:3D:BD:D2:16:0B:B6:A4:66:C8:61:38:DF:4E:DB:6D:6C:C5:30:33 X509v3 Authority Key Identifier: keyid:A0:4E:74:3A:D3:1F:4F:83:F0:9D:C5:D2:F7:EF:4F:AB:E1:EF:68:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:c6:0c:85:4a:b5:a5:f6:d3:1d:d1:8c:ac:e2:bd:83:e8:45: a3:7d:23:91:5b:1b:8a:fe:20:e5:ef:d6:94:2e:09:ee:59:d2: e7:55:7f:0a:14:3b:7b:b4:e9:db:8b:0e:85:e0:ef:f2:4f:aa: 96:f0:e3:67:6f:d2:ec:c3:38:80:4e:0b:3b:ef:6e:15:40:d6: 4c:99:d2:97:a8:88:06:67:8f:f8:9d:0b:82:f9:f1:bc:08:1a: 44:be:12:8e:ff:bb:06:39:1e:bc:f7:b4:aa:64:71:73:bc:dd: 85:85:12:cc:5a:17:83:ad:dc:2e:a5:45:98:27:27:31:02:24: ba:1c:ff:91:b2:69:e1:52:4b:80:2d:fc:61:e6:ba:9f:06:a4: dc:b9:7e:71:7c:f2:32:60:6e:d9:3a:5f:ff:1f:44:06:2c:a7: d6:93:05:6d:aa:cd:08:e4:42:ca:71:d2:7d:26:0d:73:30:28: ae:ea:94:89:73:09:f3:ca:70:b2:35:42:ff:94:67:50:c6:78: f2:9a:a3:84:77:00:18:2b:48:40:9e:4c:15:40:25:39:87:71: 44:95:f0:a1:95:35:34:0b:4e:ba:d0:00:1e:21:37:50:24:69: ba:5c:36:4c:f9:2c:81:5e:73:6f:f6:f1:4d:88:ac:36:43:52: 2d:69:6e:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBFRjgxMTAvBgNVBAUTKEEwNEU3NDNBRDMxRjRGODNGMDlEQzVEMkY3RUY0RkFC RTFFRjY4N0IwHhcNMjUwNTMwMjMyMzAzWhcNMjUwNjA2MjMyMzAzWjAYMRYwFAYD VQQDEw02ODNhM2RkNy1iMjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuNB9ge/I60sTGnuvnLZLshjxg1yxtLMK5/Mfw7hcBa7JNTRRpEMx22bzxOZc g5HPN6Cl63E8AbZzwmnw9CQxYXt6c6qORdYSUTwXvGNQaZ00y2jfR9x5k2MmmOK3 QBLWYGEcE6h5IvxC8vidv+kR7jZZvw6LB9HtlQROT9S8XDbRclBdL3qSVaTFZLrW iHwClbM6WWghdpgIn/vkgPoRqC8opXbWwmyzrI9n9naUFeeZnxCfwRVPe+zSYcaZ 5qS0VIWstp5MMdLkYUHeqbyfUY50GiP0L/xChMh84eEDNkie98ZEMh0mP8bLJz5R tXc5uVL9imdYKA/OljySLwV/EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA89vdIW C7akZshhON9O221sxTAzMB8GA1UdIwQYMBaAFKBOdDrTH0+D8J3F0vfvT6vh72h7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEVGOC9DOTM4RDEwNkNC NTQxMUVCQTNEMzZDNUJDNEY5QUUwMi9vRTUwT3RNZlQ0UHduY1hTOS05UHEtSHZh SHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29FNTBPdE1mVDRQd25jWFM5LTlQcS1IdmFIcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEVGOC9DOTM4RDEwNkNCNTQxMUVCQTNEMzZDNUJDNEY5QUUwMi9vRTUwT3RNZlQ0 UHduY1hTOS05UHEtSHZhSHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjxgyFSrWl9tMd0Yys4r2D6EWjfSORWxuK/iDl79aULgnuWdLnVX8K FDt7tOnbiw6F4O/yT6qW8ONnb9LswziATgs7724VQNZMmdKXqIgGZ4/4nQuC+fG8 CBpEvhKO/7sGOR6897SqZHFzvN2FhRLMWheDrdwupUWYJycxAiS6HP+RsmnhUkuA Lfxh5rqfBqTcuX5xfPIyYG7ZOl//H0QGLKfWkwVtqs0I5ELKcdJ9Jg1zMCiu6pSJ cwnzynCyNUL/lGdQxnjymqOEdwAYK0hAnkwVQCU5h3FElfChlTU0C0660AAeITdQ JGm6XDZM+SyBXnNv9vFNiKw2Q1ItaW5g -----END CERTIFICATE-----Generated at Sat May 31 17:08:59 2025 by rpki-client