$ rpki-client -vvf rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft File: 0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft (raw, json) Hash identifier: ov0+ENAmHGAl2e8AiCWb7vvB3jgVrxww0C9wuxMPZZg= Subject key identifier: 61:F5:E1:F1:31:26:29:4E:84:3B:32:FC:50:17:12:CB:FB:0D:13:8D Authority key identifier: D3:03:8B:A4:49:0E:A8:15:AD:B0:9F:1A:38:65:8B:CD:8B:17:F4:82 Certificate issuer: /CN=A91F018E/serialNumber=D3038BA4490EA815ADB09F1A38658BCD8B17F482 Certificate serial: 0E53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wOLpEkOqBWtsJ8aOGWLzYsX9II.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft Manifest number: 0E4C Signing time: Fri 30 May 2025 17:55:16 +0000 Manifest this update: Fri 30 May 2025 17:55:15 +0000 Manifest next update: Fri 06 Jun 2025 17:55:15 +0000 Files and hashes: 1: 0wOLpEkOqBWtsJ8aOGWLzYsX9II.crl (hash: JY06UKhseIN7lkI3a+RZekNGxs0fG9h8XLn34sLMfcM=) 2: 7214B0AA9E1711E9B3710950C4F9AE02.roa (hash: c4C00IYUahMg/MQNhIkPwEgft6IPuKV052m4LGanBW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.crl rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wOLpEkOqBWtsJ8aOGWLzYsX9II.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:55:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3667 (0xe53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F018E, serialNumber=D3038BA4490EA815ADB09F1A38658BCD8B17F482 Validity Not Before: May 30 17:55:15 2025 GMT Not After : Jun 6 17:55:15 2025 GMT Subject: CN=6839f104-3e55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:92:b8:6f:a6:a4:7c:89:f4:34:96:7f:9e:eb: e2:f3:01:34:3e:67:d2:21:1d:c6:75:2f:d3:5a:2d: 5b:65:af:06:52:37:dc:eb:7c:0f:79:27:91:52:f1: ea:bb:b2:f5:ed:ea:e1:d8:f3:fe:1b:6f:a5:6b:ae: d1:79:10:a6:fe:d2:64:e3:4c:8f:a1:ba:8b:d6:a1: 57:ec:e1:67:ea:e7:41:c2:08:89:b0:30:99:a6:b3: 0f:67:2a:3f:5c:96:0b:66:e8:22:80:26:39:e2:a0: 39:ae:0c:aa:45:b5:64:05:9e:3f:1e:6d:71:f9:a9: 6d:99:e4:09:e5:92:22:e9:bd:d1:9d:8b:7a:d4:97: 53:e8:a1:62:0c:d7:11:f2:ca:dc:17:cd:a5:35:44: 11:fc:38:99:82:e5:f0:40:57:22:aa:94:00:47:1f: 95:67:62:ad:c1:7b:17:89:9d:64:0e:58:d6:1f:07: df:94:46:0e:93:8d:ef:16:58:24:f0:73:eb:9a:01: 40:2c:3d:e4:65:fa:71:59:d5:6e:c6:90:e5:b2:bb: e2:de:54:7c:c1:df:a8:29:de:5c:bd:cf:df:bc:b2: f7:93:56:99:38:0c:de:28:2f:90:2f:4d:cf:b8:13: 7c:93:9f:60:f1:37:27:e8:4e:32:00:3a:6e:10:a8: 86:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:F5:E1:F1:31:26:29:4E:84:3B:32:FC:50:17:12:CB:FB:0D:13:8D X509v3 Authority Key Identifier: keyid:D3:03:8B:A4:49:0E:A8:15:AD:B0:9F:1A:38:65:8B:CD:8B:17:F4:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wOLpEkOqBWtsJ8aOGWLzYsX9II.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:2f:24:1d:20:44:af:31:51:50:5c:41:c8:d5:a5:c4:15:64: 3b:02:9d:68:26:97:77:16:e3:ac:ea:ff:4f:94:f9:cc:5c:2a: 61:8b:50:da:ca:72:5d:79:93:eb:55:57:e4:6d:22:50:a9:0a: c6:ea:79:82:9b:96:49:09:50:77:04:aa:42:58:04:43:62:94: b3:fb:e2:26:d2:96:95:b2:4c:6d:5d:64:ab:62:1d:c4:91:f7: 51:91:d5:c2:fc:70:2f:10:e9:fb:dd:09:18:e5:dd:b8:5f:b5: ee:8b:48:37:4e:dc:0e:13:eb:4e:ac:29:e5:c3:38:39:9a:c2: 29:23:54:67:88:b2:3a:2e:a2:19:df:51:e2:21:8b:8f:00:4f: 4c:a1:06:4d:8f:77:7f:e1:f6:70:fc:21:df:22:ed:44:96:1f: cc:e6:17:56:8e:36:6b:2f:ec:0d:9a:e5:a5:7f:9d:e0:83:44: 8d:89:b6:bb:93:9b:e1:87:76:1f:f6:b7:63:40:06:73:c9:45: 0c:fc:4e:32:72:98:99:d4:36:23:bc:72:6a:19:a1:80:f0:73: f3:f4:ae:20:a7:9a:9a:e1:9b:36:5e:0a:2b:33:1b:b2:7a:f0: 05:1e:27:fa:45:8d:90:ae:e9:96:c0:2c:6b:db:61:e6:34:3d: 3b:db:80:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDlMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjAxOEUxMTAvBgNVBAUTKEQzMDM4QkE0NDkwRUE4MTVBREIwOUYxQTM4NjU4QkNE OEIxN0Y0ODIwHhcNMjUwNTMwMTc1NTE1WhcNMjUwNjA2MTc1NTE1WjAYMRYwFAYD VQQDEw02ODM5ZjEwNC0zZTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl5K4b6akfIn0NJZ/nuvi8wE0PmfSIR3GdS/TWi1bZa8GUjfc63wPeSeRUvHq u7L17erh2PP+G2+la67ReRCm/tJk40yPobqL1qFX7OFn6udBwgiJsDCZprMPZyo/ XJYLZugigCY54qA5rgyqRbVkBZ4/Hm1x+altmeQJ5ZIi6b3RnYt61JdT6KFiDNcR 8srcF82lNUQR/DiZguXwQFciqpQARx+VZ2KtwXsXiZ1kDljWHwfflEYOk43vFlgk 8HPrmgFALD3kZfpxWdVuxpDlsrvi3lR8wd+oKd5cvc/fvLL3k1aZOAzeKC+QL03P uBN8k59g8Tcn6E4yADpuEKiG+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGH14fEx JilOhDsy/FAXEsv7DRONMB8GA1UdIwQYMBaAFNMDi6RJDqgVrbCfGjhli82LF/SC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDE4RS9GQTU2OEU1RTlF MTUxMUU5OTAxNTM2NEFDNEY5QUUwMi8wd09McEVrT3FCV3RzSjhhT0dXTHpZc1g5 SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB3T0xwRWtPcUJXdHNKOGFPR1dMellzWDlJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDE4RS9GQTU2OEU1RTlFMTUxMUU5OTAxNTM2NEFDNEY5QUUwMi8wd09McEVrT3FC V3RzSjhhT0dXTHpZc1g5SUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQLyQdIESvMVFQXEHI1aXEFWQ7Ap1oJpd3FuOs6v9PlPnMXCphi1Da ynJdeZPrVVfkbSJQqQrG6nmCm5ZJCVB3BKpCWARDYpSz++Im0paVskxtXWSrYh3E kfdRkdXC/HAvEOn73QkY5d24X7Xui0g3TtwOE+tOrCnlwzg5msIpI1RniLI6LqIZ 31HiIYuPAE9MoQZNj3d/4fZw/CHfIu1Elh/M5hdWjjZrL+wNmuWlf53gg0SNiba7 k5vhh3Yf9rdjQAZzyUUM/E4ycpiZ1DYjvHJqGaGA8HPz9K4gp5qa4Zs2XgorMxuy evAFHif6RY2QrumWwCxr22HmND0724Cv -----END CERTIFICATE-----Generated at Sat May 31 16:30:35 2025 by rpki-client