$ rpki-client -vvf rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft File: OSQdwqlJIur_mC2bQID4vkD3tr0.mft (raw, json) Hash identifier: DZsdsY8znUOauSJSAPV/+30K7v1lJS2981jr3h2Pzls= Subject key identifier: 34:B9:54:FA:31:16:2E:7C:DE:40:3D:49:8A:B7:22:4B:51:33:29:1C Authority key identifier: 39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD Certificate issuer: /CN=A91E17F3/serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft Manifest number: 2E Signing time: Thu 05 Jun 2025 07:08:50 +0000 Manifest this update: Thu 05 Jun 2025 07:08:49 +0000 Manifest next update: Thu 12 Jun 2025 07:08:49 +0000 Files and hashes: 1: OSQdwqlJIur_mC2bQID4vkD3tr0.crl (hash: IWIxatq5S7DgULVolNutgVB05GW9HVQU4oTysXsVCuw=) 2: C565FFE0025011F0ACBE181CC4F9AE02.roa (hash: /AkxNQvclEOTbcMEyripKFhKBkJQiQZpl8ngTKJu9eY=) 3: 7B3E74A6025011F096E34819C4F9AE02.roa (hash: WR0rb26sSd7NNnmbaBSVENCtgD1Go/mwg9p/vOPLcpI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 07:08:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E17F3, serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD Validity Not Before: Jun 5 07:08:49 2025 GMT Not After : Jun 12 07:08:49 2025 GMT Subject: CN=68414282-9fbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2f:ad:87:ee:a2:7a:14:66:21:6e:60:5f:37: 05:66:99:c3:65:1b:84:39:2b:85:f6:a1:db:9b:9b: e2:04:f1:da:7b:58:e1:d0:b0:37:f2:28:82:cf:34: 54:d2:1c:a8:ff:41:91:3a:c2:2b:70:86:4c:07:da: 5a:48:4d:94:ed:e1:c7:e8:0e:60:8b:a8:a7:90:67: 71:97:59:30:4a:d1:79:b8:94:2c:5b:84:ac:a8:a4: 36:d3:be:fe:fa:cf:6f:0a:a6:9d:65:07:9c:82:21: 4a:e2:c8:09:e9:58:ac:cd:4c:0a:7e:25:2f:a4:89: 00:49:49:a3:19:8c:b8:02:f7:82:cb:f0:17:dd:6d: 11:37:26:b3:95:6c:81:a1:de:fb:ab:c4:c4:8d:71: 71:2c:1e:88:c8:4e:ea:bb:f1:84:ea:ec:5c:d4:78: e4:74:47:5e:ec:5c:00:b0:e1:a1:1d:bb:7e:12:9e: 60:1c:01:b3:3f:f9:79:f3:80:17:26:fc:fc:14:b5: eb:ec:17:9e:b3:35:bf:f5:fe:9e:99:a1:31:02:10: dd:49:7f:10:33:41:25:0c:6d:65:ff:20:75:41:fd: a7:9e:07:be:c3:21:6c:93:75:b9:01:7f:5b:46:ee: 86:5b:17:ae:91:94:a8:47:22:1c:5d:1f:4e:04:04: 9e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:B9:54:FA:31:16:2E:7C:DE:40:3D:49:8A:B7:22:4B:51:33:29:1C X509v3 Authority Key Identifier: keyid:39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:8c:51:b9:eb:40:20:04:d2:c5:75:e8:7f:4d:c6:6e:13:a9: a4:46:d0:88:ee:5e:7e:40:b6:8d:eb:8f:cd:01:b6:e2:aa:0d: 2e:4a:e6:d3:6f:24:55:f6:14:81:1c:96:03:75:27:b6:7e:80: 51:86:d8:dd:c5:53:92:98:38:e4:4a:8a:00:b2:68:97:1a:1f: aa:8f:9a:10:3d:17:59:1e:9a:be:ff:97:03:50:a5:24:47:97: 7a:8c:e7:a0:52:7d:5b:6e:a5:e0:2c:e6:b0:7a:16:4e:b1:5d: f5:cc:b8:91:75:3c:1c:3c:2b:a8:1c:0a:89:28:ca:7c:e7:4e: 91:d3:b0:9c:e6:bd:08:af:f5:49:10:9d:b8:92:b6:fc:01:9f: 56:ff:80:9a:70:bb:90:2d:d4:5d:58:ab:93:36:45:ed:76:76: dc:fc:e4:84:37:7e:33:41:02:96:01:f2:4d:97:6f:78:d0:4c: 85:b3:3f:fd:77:09:5d:b6:f9:74:c3:27:f8:6a:52:03:4a:e5: ae:61:74:60:b6:12:bf:5d:43:a5:5d:fb:f7:8e:0e:eb:cb:8b: 67:3c:39:bc:cc:26:a7:c2:ba:43:7b:e8:0b:78:c9:d0:54:d7: 09:54:29:33:18:8d:0a:e5:eb:6d:1d:61:32:b1:d4:30:89:7e: 45:3c:78:63 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MTdGMzExMC8GA1UEBRMoMzkyNDFEQzJBOTQ5MjJFQUZGOTgyRDlCNDA4MEY4QkU0 MEY3QjZCRDAeFw0yNTA2MDUwNzA4NDlaFw0yNTA2MTIwNzA4NDlaMBgxFjAUBgNV BAMTDTY4NDE0MjgyLTlmYmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3L62H7qJ6FGYhbmBfNwVmmcNlG4Q5K4X2odubm+IE8dp7WOHQsDfyKILPNFTS HKj/QZE6witwhkwH2lpITZTt4cfoDmCLqKeQZ3GXWTBK0Xm4lCxbhKyopDbTvv76 z28Kpp1lB5yCIUriyAnpWKzNTAp+JS+kiQBJSaMZjLgC94LL8BfdbRE3JrOVbIGh 3vurxMSNcXEsHojITuq78YTq7FzUeOR0R17sXACw4aEdu34SnmAcAbM/+XnzgBcm /PwUtevsF56zNb/1/p6ZoTECEN1JfxAzQSUMbWX/IHVB/aeeB77DIWyTdbkBf1tG 7oZbF66RlKhHIhxdH04EBJ5dAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNLlU+jEW LnzeQD1JirciS1EzKRwwHwYDVR0jBBgwFoAUOSQdwqlJIur/mC2bQID4vkD3tr0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxN0YzLzlBOUZCOEYyRkZF QzExRUZCRjU1QkI2RkM0RjlBRTAyL09TUWR3cWxKSXVyX21DMmJRSUQ0dmtEM3Ry MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT1NRZHdxbEpJdXJfbUMyYlFJRDR2a0QzdHIwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx N0YzLzlBOUZCOEYyRkZFQzExRUZCRjU1QkI2RkM0RjlBRTAyL09TUWR3cWxKSXVy X21DMmJRSUQ0dmtEM3RyMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAImMUbnrQCAE0sV16H9Nxm4TqaRG0IjuXn5Ato3rj80BtuKqDS5K5tNv JFX2FIEclgN1J7Z+gFGG2N3FU5KYOORKigCyaJcaH6qPmhA9F1kemr7/lwNQpSRH l3qM56BSfVtupeAs5rB6Fk6xXfXMuJF1PBw8K6gcCokoynznTpHTsJzmvQiv9UkQ nbiStvwBn1b/gJpwu5At1F1Yq5M2Re12dtz85IQ3fjNBApYB8k2Xb3jQTIWzP/13 CV22+XTDJ/hqUgNK5a5hdGC2Er9dQ6Vd+/eODuvLi2c8ObzMJqfCukN76At4ydBU 1wlUKTMYjQrl620dYTKx1DCJfkU8eGM= -----END CERTIFICATE-----Generated at Sat Jun 7 05:12:06 2025 by rpki-client