$ rpki-client -vvf rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft File: OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft (raw, json) Hash identifier: 097oea8QpoeE6kPPlGxy2yk3mAQodzidgGV5QM/ut68= Subject key identifier: 5A:6B:CB:6A:57:86:09:67:CE:BA:0F:4E:10:E6:C5:B4:09:E6:43:F7 Authority key identifier: 3A:5C:08:13:C0:FE:D0:A8:3B:3D:D0:1B:7A:5A:E1:A1:30:82:70:28 Certificate issuer: /CN=A91592B3/serialNumber=3A5C0813C0FED0A83B3DD01B7A5AE1A130827028 Certificate serial: 240F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft Manifest number: 23F9 Signing time: Thu 24 Apr 2025 15:49:51 +0000 Manifest this update: Thu 24 Apr 2025 15:49:51 +0000 Manifest next update: Thu 01 May 2025 15:49:51 +0000 Files and hashes: 1: OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl (hash: UupGrdxEGsUsyZIAQ/O1pEU4pWhXgM379IV2U/kkuGI=) 2: 9876A6C025B211ECB5356475C4F9AE02.roa (hash: DNBT8zhDN25f9UDGQ5nfWBA6s2lB80HUpbXVqjHmAQM=) 3: D8D3FB6414F111F08EE5E32DC4F9AE02.roa (hash: tOvAiPhxRE202cumPZpJeSLK5i3uUM9dNppjhBHTGzA=) 4: 54EE8F7615FE11ECAF541012C4F9AE02.roa (hash: IA4iHCGoqRIo6kbssAA01N8/wPFo68lHVDwSEc9PASs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9231 (0x240f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91592B3, serialNumber=3A5C0813C0FED0A83B3DD01B7A5AE1A130827028 Validity Not Before: Apr 24 15:49:51 2025 GMT Not After : May 1 15:49:51 2025 GMT Subject: CN=680a5d9f-aa1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:71:1a:d2:82:ee:9d:01:29:5b:41:72:06:54: da:3b:ea:87:29:bc:59:f4:44:d9:3d:09:6f:83:a5: 95:b3:e4:bd:b0:a3:79:7b:e1:06:da:2b:b6:bb:9d: be:5d:01:6b:22:54:a3:da:0d:05:79:b2:78:d6:41: a3:84:f0:01:74:7b:e1:eb:d6:02:76:1c:f8:d5:fa: 9b:72:79:41:66:21:41:3b:c8:6a:76:39:aa:a8:8d: 1c:22:e3:ec:6e:03:93:60:0c:23:b0:30:a4:4c:44: 17:70:47:ff:95:ef:44:77:91:0f:3a:84:62:c7:3b: bc:a4:29:55:c3:70:b7:44:c1:bc:da:06:dc:74:19: f2:2b:30:88:82:27:c1:5e:d2:21:35:51:9e:38:ef: bf:c4:72:f1:3b:92:7c:83:69:d7:ce:99:1d:a7:ef: 4a:5d:fa:cf:c2:e7:a4:b2:f1:30:e1:c9:9c:96:a4: 85:20:da:33:dd:cf:2f:71:8d:73:96:1c:1c:d8:45: 0f:9d:35:27:6c:d7:cc:2d:1a:a2:81:50:4b:90:9f: 63:43:ff:9d:d9:45:bb:bf:1d:b5:d8:64:44:8e:89: 7c:16:4b:03:d8:f2:46:11:b6:6c:c9:be:9c:46:7a: d1:ed:f6:f9:c1:99:ae:3e:09:61:39:56:70:e0:ca: 43:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:6B:CB:6A:57:86:09:67:CE:BA:0F:4E:10:E6:C5:B4:09:E6:43:F7 X509v3 Authority Key Identifier: keyid:3A:5C:08:13:C0:FE:D0:A8:3B:3D:D0:1B:7A:5A:E1:A1:30:82:70:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:cb:5d:63:b0:3a:25:55:de:79:ab:4e:bd:5c:94:6a:1c:69: 72:4d:af:94:33:52:dc:b7:a2:3e:cc:ca:f2:3e:78:90:35:f3: 3e:a3:31:06:60:d8:7f:09:ad:ac:fc:52:7d:50:29:87:5c:99: d5:23:e6:74:2d:b3:93:1c:00:2d:88:8c:f6:f9:8a:2c:54:57: 1e:ad:74:0f:3d:24:fd:9d:27:6c:af:3b:85:39:e8:7e:22:5c: a4:99:1d:bd:c3:a3:89:a6:18:be:f3:35:99:c8:90:1a:27:43: fe:2f:3e:1a:d5:83:68:9f:e0:cc:63:22:d5:39:85:3d:98:bd: 18:02:5d:9f:25:48:4d:b3:2a:48:aa:21:e3:5f:d1:80:2d:da: 47:7b:35:15:d9:b5:ae:fa:b2:27:53:2b:27:af:7c:0e:af:c2: e7:fa:b0:3d:45:84:61:ab:35:9e:18:3d:18:40:45:7f:c1:91: 78:f5:d5:3b:f2:0c:2b:6b:1c:3a:85:30:53:a4:02:05:b7:14: fb:6c:7d:9d:63:b5:27:7a:b1:a0:40:9d:1c:57:8d:cf:42:c0: f0:8c:82:d2:99:44:24:90:ca:28:e9:84:90:02:db:dd:e5:fd: 42:76:20:2b:c6:7b:62:8b:17:fa:99:20:da:ac:04:a9:bc:e9: 86:f6:84:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJA8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkyQjMxMTAvBgNVBAUTKDNBNUMwODEzQzBGRUQwQTgzQjNERDAxQjdBNUFFMUEx MzA4MjcwMjgwHhcNMjUwNDI0MTU0OTUxWhcNMjUwNTAxMTU0OTUxWjAYMRYwFAYD VQQDEw02ODBhNWQ5Zi1hYTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3Ea0oLunQEpW0FyBlTaO+qHKbxZ9ETZPQlvg6WVs+S9sKN5e+EG2iu2u52+ XQFrIlSj2g0FebJ41kGjhPABdHvh69YCdhz41fqbcnlBZiFBO8hqdjmqqI0cIuPs bgOTYAwjsDCkTEQXcEf/le9Ed5EPOoRixzu8pClVw3C3RMG82gbcdBnyKzCIgifB XtIhNVGeOO+/xHLxO5J8g2nXzpkdp+9KXfrPwueksvEw4cmclqSFINoz3c8vcY1z lhwc2EUPnTUnbNfMLRqigVBLkJ9jQ/+d2UW7vx212GREjol8FksD2PJGEbZsyb6c RnrR7fb5wZmuPglhOVZw4MpDzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFpry2pX hglnzroPThDmxbQJ5kP3MB8GA1UdIwQYMBaAFDpcCBPA/tCoOz3QG3pa4aEwgnAo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTJCMy84OTE3RkIyQTVE MEUxMUU1QjNCRUFENTdDNEY5QUUwMi9PbHdJRThELTBLZzdQZEFiZWxyaG9UQ0Nj Q2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09sd0lFOEQtMEtnN1BkQWJlbHJob1RDQ2NDZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTJCMy84OTE3RkIyQTVEMEUxMUU1QjNCRUFENTdDNEY5QUUwMi9PbHdJRThELTBL ZzdQZEFiZWxyaG9UQ0NjQ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBay11jsDolVd55q069XJRqHGlyTa+UM1Lct6I+zMryPniQNfM+ozEG YNh/Ca2s/FJ9UCmHXJnVI+Z0LbOTHAAtiIz2+YosVFcerXQPPST9nSdsrzuFOeh+ IlykmR29w6OJphi+8zWZyJAaJ0P+Lz4a1YNon+DMYyLVOYU9mL0YAl2fJUhNsypI qiHjX9GALdpHezUV2bWu+rInUysnr3wOr8Ln+rA9RYRhqzWeGD0YQEV/wZF49dU7 8gwraxw6hTBTpAIFtxT7bH2dY7UnerGgQJ0cV43PQsDwjILSmUQkkMoo6YSQAtvd 5f1CdiArxntiixf6mSDarASpvOmG9oQv -----END CERTIFICATE-----Generated at Sat Apr 26 17:13:06 2025 by rpki-client