$ rpki-client -vvf rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft File: owkQUxBPCE11ymUhc2bq35hJE8E.mft (raw, json) Hash identifier: DZcZnruHWxypBDwtHHofUTKGygom86BYN//4V9XzZOQ= Subject key identifier: 78:4C:CE:6F:D9:8F:7E:DF:F9:CE:37:94:7E:DD:CE:FF:44:8E:6B:39 Authority key identifier: A3:09:10:53:10:4F:08:4D:75:CA:65:21:73:66:EA:DF:98:49:13:C1 Certificate issuer: /CN=A912C12B/serialNumber=A3091053104F084D75CA65217366EADF984913C1 Certificate serial: 0C5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft Manifest number: 0C53 Signing time: Thu 24 Apr 2025 18:16:06 +0000 Manifest this update: Thu 24 Apr 2025 18:16:05 +0000 Manifest next update: Thu 01 May 2025 18:16:05 +0000 Files and hashes: 1: owkQUxBPCE11ymUhc2bq35hJE8E.crl (hash: IHMJHaC6H+sJiY2zWqPMU7f5N6fZzwsiTqu75LnYQq0=) 2: 38D7B616768D11EB94573712C4F9AE02.roa (hash: osYkBFEZo4TGPYEkCTIfOfI2cJcgpXjHG6X4+VVwtkw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.crl rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:16:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3165 (0xc5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C12B, serialNumber=A3091053104F084D75CA65217366EADF984913C1 Validity Not Before: Apr 24 18:16:05 2025 GMT Not After : May 1 18:16:05 2025 GMT Subject: CN=680a7fe5-2d08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f7:94:65:4f:fb:b8:e2:ec:fd:51:95:d8:40: 15:f4:31:f2:ad:75:b4:aa:36:fc:fd:f4:c5:81:b6: df:9c:9f:49:70:28:9e:32:ac:24:3f:82:02:8c:96: fa:1a:65:81:70:21:f0:b1:a2:b4:8a:20:ba:09:ca: ab:ca:f8:3a:48:f9:77:0b:31:43:3a:4a:7a:16:33: 00:a3:73:c9:c8:ca:2f:ae:81:29:5b:03:ee:e6:6b: 61:2d:3e:da:80:c3:6f:d2:1e:50:ba:d8:fe:be:8f: 8d:4e:14:21:59:f8:48:91:40:82:17:d2:26:9b:fd: 78:90:dc:69:1c:d8:d8:a6:9b:86:14:d0:29:9f:52: a7:a0:78:40:ca:d3:bc:d3:b9:5a:62:17:4f:07:49: 52:fb:98:31:94:cf:3b:af:8f:9f:5b:f3:d1:e6:1a: 2a:46:15:11:19:90:ae:94:ff:47:5a:7b:9d:3f:85: 78:a5:62:a5:f9:eb:ad:13:5b:cf:0d:40:ce:43:c5: ae:d1:06:f1:08:ed:6f:3d:de:ab:31:68:b7:7c:81: 26:4e:f3:3e:51:21:c6:84:25:58:38:a5:f1:75:9d: e6:b2:b2:b7:ce:4b:83:13:b8:fd:17:76:02:3d:83: bf:8c:09:28:5f:8a:53:a5:9e:d5:04:18:22:dc:a4: 1c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:4C:CE:6F:D9:8F:7E:DF:F9:CE:37:94:7E:DD:CE:FF:44:8E:6B:39 X509v3 Authority Key Identifier: keyid:A3:09:10:53:10:4F:08:4D:75:CA:65:21:73:66:EA:DF:98:49:13:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:0b:c6:f2:20:ac:94:6d:6c:e2:cb:33:d4:32:b3:18:be:3d: e2:6a:16:c0:f0:b2:57:4b:37:31:f3:32:6e:2f:53:b3:7c:c4: e9:aa:56:ae:06:4e:52:04:fa:71:00:d7:80:c7:2a:00:43:a2: 91:d9:5a:28:55:bd:0a:37:83:7f:c4:30:11:52:99:13:5c:c4: 88:ed:f9:cb:09:ec:de:fd:fc:a4:16:3e:98:0d:e7:8f:7f:84: 6d:51:b2:ec:41:51:26:0d:22:b7:7c:a2:40:52:f0:e8:5b:93: 8c:bc:8f:e5:df:40:e6:f7:50:9b:03:d1:11:f0:67:07:55:25: 79:9e:ef:f7:af:bf:6b:4c:0b:71:55:4a:00:de:a3:85:9a:63: ca:41:00:e2:ae:7d:16:26:59:c4:64:24:11:62:eb:cb:6e:7e: 14:3d:c1:7b:00:59:5a:21:9d:59:fa:f4:a4:9e:ef:c1:12:68: f8:88:35:b5:4b:eb:0f:b3:9f:ea:b9:2e:35:d1:ef:2f:6b:58: d3:8e:02:94:85:62:73:7b:41:1d:d1:d5:5e:68:4e:63:ae:c1: 4f:7a:c4:95:5a:f6:4b:e6:64:0e:da:3e:31:35:c3:41:16:7b: 37:ea:da:92:61:55:ec:d0:cc:8e:8c:97:c9:7e:70:e9:b4:2f: 80:0c:c6:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMxMkIxMTAvBgNVBAUTKEEzMDkxMDUzMTA0RjA4NEQ3NUNBNjUyMTczNjZFQURG OTg0OTEzQzEwHhcNMjUwNDI0MTgxNjA1WhcNMjUwNTAxMTgxNjA1WjAYMRYwFAYD VQQDEw02ODBhN2ZlNS0yZDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1feUZU/7uOLs/VGV2EAV9DHyrXW0qjb8/fTFgbbfnJ9JcCieMqwkP4ICjJb6 GmWBcCHwsaK0iiC6Ccqryvg6SPl3CzFDOkp6FjMAo3PJyMovroEpWwPu5mthLT7a gMNv0h5Qutj+vo+NThQhWfhIkUCCF9Imm/14kNxpHNjYppuGFNApn1KnoHhAytO8 07laYhdPB0lS+5gxlM87r4+fW/PR5hoqRhURGZCulP9HWnudP4V4pWKl+eutE1vP DUDOQ8Wu0QbxCO1vPd6rMWi3fIEmTvM+USHGhCVYOKXxdZ3msrK3zkuDE7j9F3YC PYO/jAkoX4pTpZ7VBBgi3KQcCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHhMzm/Z j37f+c43lH7dzv9Ejms5MB8GA1UdIwQYMBaAFKMJEFMQTwhNdcplIXNm6t+YSRPB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzEyQi9GOUZFRDRDMkZG OUQxMUU5OTk2ODk1NzdDNEY5QUUwMi9vd2tRVXhCUENFMTF5bVVoYzJicTM1aEpF OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL293a1FVeEJQQ0UxMXltVWhjMmJxMzVoSkU4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzEyQi9GOUZFRDRDMkZGOUQxMUU5OTk2ODk1NzdDNEY5QUUwMi9vd2tRVXhCUENF MTF5bVVoYzJicTM1aEpFOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBC8byIKyUbWziyzPUMrMYvj3iahbA8LJXSzcx8zJuL1OzfMTpqlau Bk5SBPpxANeAxyoAQ6KR2VooVb0KN4N/xDARUpkTXMSI7fnLCeze/fykFj6YDeeP f4RtUbLsQVEmDSK3fKJAUvDoW5OMvI/l30Dm91CbA9ER8GcHVSV5nu/3r79rTAtx VUoA3qOFmmPKQQDirn0WJlnEZCQRYuvLbn4UPcF7AFlaIZ1Z+vSknu/BEmj4iDW1 S+sPs5/quS410e8va1jTjgKUhWJze0Ed0dVeaE5jrsFPesSVWvZL5mQO2j4xNcNB Fns36tqSYVXs0MyOjJfJfnDptC+ADMbk -----END CERTIFICATE-----Generated at Sat Apr 26 17:11:53 2025 by rpki-client