$ rpki-client -vvf rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft File: 0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft (raw, json) Hash identifier: x9JKBZbNSGwhCmPOB4fZBdwzgRBNAukhO8C8192Vgr8= Subject key identifier: 12:F3:E8:BC:96:F4:F0:B1:BA:94:A5:84:8F:2F:C0:5E:2C:1A:BB:9B Authority key identifier: D2:8C:52:ED:09:0C:53:9C:10:F2:22:DE:EC:D9:A7:3C:49:A1:68:04 Certificate issuer: /CN=A915617E/serialNumber=D28C52ED090C539C10F222DEECD9A73C49A16804 Certificate serial: 0D66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft Manifest number: 0D5E Signing time: Thu 24 Apr 2025 17:56:05 +0000 Manifest this update: Thu 24 Apr 2025 17:56:05 +0000 Manifest next update: Thu 01 May 2025 17:56:05 +0000 Files and hashes: 1: 0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl (hash: iyp0EotoCfLqBudj3nPGAoE3dLx4ULJAGuJu0FpWOd4=) 2: 3F67E64E62BD11EE8F393D25C4F9AE02.roa (hash: 27YGiOVHeYRZmfLChwQ0MVLlQEu8P+YtfErwSj+QIxo=) 3: DBDAFF6CC99611E9A41BCF75C4F9AE02.roa (hash: Ff3/yMR0vWErszLBIPlNKjSAb7MzXOTFYgb7mDfdJMY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:56:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3430 (0xd66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915617E, serialNumber=D28C52ED090C539C10F222DEECD9A73C49A16804 Validity Not Before: Apr 24 17:56:05 2025 GMT Not After : May 1 17:56:05 2025 GMT Subject: CN=680a7b35-ac27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:55:3d:7a:80:38:5f:5a:c3:e0:95:d3:cd:e8: 25:52:27:7b:5c:a5:5b:fc:58:63:67:b6:17:73:6e: 29:94:54:60:97:df:86:aa:72:e6:6e:f9:08:22:e7: f6:93:dd:b5:80:57:5a:de:85:b1:c2:36:78:3d:40: f1:57:98:ea:ef:12:30:62:58:bb:1b:50:ae:0e:3b: 60:7a:e7:98:53:3d:69:62:98:66:16:30:27:ec:2d: 43:52:2e:d1:b5:14:b9:c7:78:6f:1e:95:97:be:42: b4:62:3c:a0:d7:ce:4a:62:fb:b0:05:61:bc:6b:13: 9b:ed:9d:ba:1f:14:fd:37:e0:75:7a:ca:f9:ee:84: b4:d3:f3:0e:c4:1e:0b:e1:d6:87:18:e5:08:89:f1: 9e:85:dd:31:23:c9:1e:09:85:cc:89:95:f9:f4:22: 06:6f:2a:02:01:36:5b:82:97:54:00:4b:8a:b5:d0: b1:79:d9:cf:05:92:b9:7a:ea:86:ae:fc:fe:2c:cf: 3c:2d:3f:c3:cc:33:30:12:c5:3e:b3:d4:96:9a:b9: 6b:a8:c7:45:00:2d:0c:7b:46:0a:c5:3d:53:64:1c: bf:f2:4c:58:84:a0:81:bd:7d:c1:93:72:ad:81:27: 85:af:3b:24:90:2a:3e:9e:4a:30:f6:12:d4:60:81: 79:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F3:E8:BC:96:F4:F0:B1:BA:94:A5:84:8F:2F:C0:5E:2C:1A:BB:9B X509v3 Authority Key Identifier: keyid:D2:8C:52:ED:09:0C:53:9C:10:F2:22:DE:EC:D9:A7:3C:49:A1:68:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:ff:16:10:79:99:e7:4e:73:7a:ab:43:84:97:4f:ae:86:6c: 31:60:7f:e2:96:43:d6:4d:56:d9:c6:3c:53:09:af:4d:07:18: de:92:3e:bc:b1:9b:4e:3b:65:08:9f:e1:bc:4d:47:c3:39:c0: 5d:27:9a:57:dc:b9:06:82:8a:98:1e:5b:bd:ee:1a:fd:39:cd: 3e:31:f8:2a:c6:a2:a5:7c:95:fd:ee:65:12:cd:ee:38:b9:d1: c8:af:fc:86:67:fb:66:01:b9:bc:f9:bb:61:f8:0f:40:a1:50: fc:2b:02:ab:c6:86:02:54:5f:77:5e:7d:67:0f:9f:99:91:0d: 14:aa:02:4c:93:61:55:7c:99:da:59:35:03:14:83:e8:1a:1c: 7c:e6:38:5a:a6:ca:db:ae:80:46:b6:4c:23:ab:0f:aa:db:3c: 3c:1e:d2:29:a9:fb:8e:ad:01:3a:d6:69:ba:f6:db:b2:e9:16: ee:78:cd:5e:1f:e9:88:7d:39:25:36:3b:c5:95:59:0d:b1:a6: f9:86:db:38:67:7a:f7:7f:20:5a:d4:01:d9:98:a8:49:c9:18: 4b:9d:b0:39:e3:9d:84:fc:5b:ee:48:d5:0a:a4:90:ec:2f:16: 9d:ff:ca:f5:fe:c8:be:0f:38:8a:fc:9f:6c:ad:55:99:41:e5: 2a:7c:bd:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYxN0UxMTAvBgNVBAUTKEQyOEM1MkVEMDkwQzUzOUMxMEYyMjJERUVDRDlBNzND NDlBMTY4MDQwHhcNMjUwNDI0MTc1NjA1WhcNMjUwNTAxMTc1NjA1WjAYMRYwFAYD VQQDEw02ODBhN2IzNS1hYzI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwlU9eoA4X1rD4JXTzeglUid7XKVb/FhjZ7YXc24plFRgl9+GqnLmbvkIIuf2 k921gFda3oWxwjZ4PUDxV5jq7xIwYli7G1CuDjtgeueYUz1pYphmFjAn7C1DUi7R tRS5x3hvHpWXvkK0Yjyg185KYvuwBWG8axOb7Z26HxT9N+B1esr57oS00/MOxB4L 4daHGOUIifGehd0xI8keCYXMiZX59CIGbyoCATZbgpdUAEuKtdCxednPBZK5euqG rvz+LM88LT/DzDMwEsU+s9SWmrlrqMdFAC0Me0YKxT1TZBy/8kxYhKCBvX3Bk3Kt gSeFrzskkCo+nkow9hLUYIF5rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBLz6LyW 9PCxupSlhI8vwF4sGrubMB8GA1UdIwQYMBaAFNKMUu0JDFOcEPIi3uzZpzxJoWgE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjE3RS9FMUFEQjc0NkM5 OTUxMUU5QkFBQUIxNzRDNEY5QUUwMi8wb3hTN1FrTVU1d1E4aUxlN05tblBFbWhh QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBveFM3UWtNVTV3UThpTGU3Tm1uUEVtaGFBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjE3RS9FMUFEQjc0NkM5OTUxMUU5QkFBQUIxNzRDNEY5QUUwMi8wb3hTN1FrTVU1 d1E4aUxlN05tblBFbWhhQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBF/xYQeZnnTnN6q0OEl0+uhmwxYH/ilkPWTVbZxjxTCa9NBxjekj68 sZtOO2UIn+G8TUfDOcBdJ5pX3LkGgoqYHlu97hr9Oc0+MfgqxqKlfJX97mUSze44 udHIr/yGZ/tmAbm8+bth+A9AoVD8KwKrxoYCVF93Xn1nD5+ZkQ0UqgJMk2FVfJna WTUDFIPoGhx85jhapsrbroBGtkwjqw+q2zw8HtIpqfuOrQE61mm69tuy6RbueM1e H+mIfTklNjvFlVkNsab5hts4Z3r3fyBa1AHZmKhJyRhLnbA5452E/FvuSNUKpJDs Lxad/8r1/si+DziK/J9srVWZQeUqfL2u -----END CERTIFICATE-----Generated at Sat Apr 26 15:25:11 2025 by rpki-client