$ rpki-client -vvf rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft File: OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft (raw, json) Hash identifier: fAuKBsCRSglpTB75WoxunvRJieucopapFALFXO8S7fw= Subject key identifier: B9:F7:3B:45:82:53:F9:4F:23:94:2A:8F:D7:5A:F1:F8:65:00:45:B1 Authority key identifier: 3A:5C:08:13:C0:FE:D0:A8:3B:3D:D0:1B:7A:5A:E1:A1:30:82:70:28 Certificate issuer: /CN=A91592B3/serialNumber=3A5C0813C0FED0A83B3DD01B7A5AE1A130827028 Certificate serial: 242C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft Manifest number: 2416 Signing time: Fri 20 Jun 2025 15:50:30 +0000 Manifest this update: Fri 20 Jun 2025 15:50:29 +0000 Manifest next update: Fri 27 Jun 2025 15:50:29 +0000 Files and hashes: 1: OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl (hash: mRKa74V9HyyXXSjqt+qm90TVrdr3/gVKaHfHCkiZqzM=) 2: 9876A6C025B211ECB5356475C4F9AE02.roa (hash: DNBT8zhDN25f9UDGQ5nfWBA6s2lB80HUpbXVqjHmAQM=) 3: D8D3FB6414F111F08EE5E32DC4F9AE02.roa (hash: tOvAiPhxRE202cumPZpJeSLK5i3uUM9dNppjhBHTGzA=) 4: 54EE8F7615FE11ECAF541012C4F9AE02.roa (hash: IA4iHCGoqRIo6kbssAA01N8/wPFo68lHVDwSEc9PASs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 15:50:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9260 (0x242c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91592B3, serialNumber=3A5C0813C0FED0A83B3DD01B7A5AE1A130827028 Validity Not Before: Jun 20 15:50:29 2025 GMT Not After : Jun 27 15:50:29 2025 GMT Subject: CN=68558346-8895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:bf:7c:f4:22:ec:a7:ea:96:1a:a6:d0:ab:f5: af:c2:d5:dc:29:4a:3f:30:5e:a5:da:26:b0:10:4a: f7:34:ab:e2:f7:42:ca:89:9e:29:d5:04:d5:66:91: 97:57:47:11:f2:9f:70:8d:96:a7:5b:e8:88:81:6a: 3c:f3:24:fb:a1:16:3e:b9:7e:ca:42:8d:17:94:37: 7e:b2:13:f6:68:cb:23:ad:34:df:50:c8:39:e4:9e: e4:be:6f:3f:64:b8:cd:36:84:42:6c:ac:f7:b2:05: c4:8b:0b:2f:df:7f:82:81:de:72:b6:c9:23:f4:71: bc:83:d1:8a:51:ec:91:d6:81:19:4e:ac:e3:d9:57: 60:af:25:54:f8:4d:bf:e4:3b:10:86:cb:c2:80:fd: 4c:1a:7e:fa:ba:3c:3a:37:72:d8:3c:a9:72:a0:35: ca:cc:a4:b3:91:ea:8d:97:00:55:f3:1f:1c:27:f6: 39:6d:7b:7b:01:3e:35:77:82:c9:32:b9:9a:2e:83: 3d:2d:b3:a1:1b:e5:f2:86:25:52:22:c2:5c:8f:14: ce:05:1c:3a:28:ba:4e:b5:ab:45:fa:52:57:39:e4: c9:8f:a4:f9:f7:cd:ce:ba:99:df:03:38:ee:83:6b: fd:62:bb:2c:e5:62:78:0f:37:bb:24:02:b8:4e:15: b0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F7:3B:45:82:53:F9:4F:23:94:2A:8F:D7:5A:F1:F8:65:00:45:B1 X509v3 Authority Key Identifier: keyid:3A:5C:08:13:C0:FE:D0:A8:3B:3D:D0:1B:7A:5A:E1:A1:30:82:70:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:51:88:29:09:b5:20:6a:04:cf:66:aa:5f:4e:df:f3:06:cf: 37:c5:7d:b9:a2:43:f4:48:e1:51:be:df:84:d3:d0:97:01:a2: ce:3b:89:3b:a7:48:39:ea:c7:26:a8:b6:7d:2f:85:90:49:9d: 57:fb:89:e4:64:1f:b9:e9:f4:04:0e:d5:47:a6:6a:f6:cb:e9: ba:51:cd:2b:89:bf:c7:f9:25:db:32:be:be:de:c4:e0:ee:e0: ad:2e:e6:de:25:9b:a0:f9:f0:25:4b:df:c2:45:8e:eb:8a:e3: b1:dc:c7:5b:25:dc:7e:40:e4:05:ca:00:1d:45:e6:5d:50:cb: 69:65:b2:16:3c:c9:cf:ec:08:6e:a2:c1:34:f7:39:3e:db:53: 3b:c6:12:39:ad:2d:bf:7c:30:41:4c:89:c8:c6:0e:f9:a6:73: fe:6b:64:7c:34:28:05:78:11:0a:8f:12:fc:54:61:11:e2:11: 99:05:44:06:83:9f:87:c9:ea:00:49:b5:37:1a:c0:2c:f9:ec: e7:11:a4:26:d5:28:b8:b7:f7:00:08:82:ff:42:46:6a:91:ca: 29:4e:65:63:81:14:a3:c7:3b:4e:ad:78:ef:65:b9:a3:59:c9: 0c:e3:be:40:3a:89:b5:25:83:1c:6d:47:fd:b8:cd:01:7c:c8: d6:9b:cb:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkyQjMxMTAvBgNVBAUTKDNBNUMwODEzQzBGRUQwQTgzQjNERDAxQjdBNUFFMUEx MzA4MjcwMjgwHhcNMjUwNjIwMTU1MDI5WhcNMjUwNjI3MTU1MDI5WjAYMRYwFAYD VQQDEw02ODU1ODM0Ni04ODk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7b989CLsp+qWGqbQq/WvwtXcKUo/MF6l2iawEEr3NKvi90LKiZ4p1QTVZpGX V0cR8p9wjZanW+iIgWo88yT7oRY+uX7KQo0XlDd+shP2aMsjrTTfUMg55J7kvm8/ ZLjNNoRCbKz3sgXEiwsv33+Cgd5ytskj9HG8g9GKUeyR1oEZTqzj2VdgryVU+E2/ 5DsQhsvCgP1MGn76ujw6N3LYPKlyoDXKzKSzkeqNlwBV8x8cJ/Y5bXt7AT41d4LJ MrmaLoM9LbOhG+XyhiVSIsJcjxTOBRw6KLpOtatF+lJXOeTJj6T5983OupnfAzju g2v9Yrss5WJ4Dze7JAK4ThWw3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLn3O0WC U/lPI5Qqj9da8fhlAEWxMB8GA1UdIwQYMBaAFDpcCBPA/tCoOz3QG3pa4aEwgnAo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTJCMy84OTE3RkIyQTVE MEUxMUU1QjNCRUFENTdDNEY5QUUwMi9PbHdJRThELTBLZzdQZEFiZWxyaG9UQ0Nj Q2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09sd0lFOEQtMEtnN1BkQWJlbHJob1RDQ2NDZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTJCMy84OTE3RkIyQTVEMEUxMUU1QjNCRUFENTdDNEY5QUUwMi9PbHdJRThELTBL ZzdQZEFiZWxyaG9UQ0NjQ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwUYgpCbUgagTPZqpfTt/zBs83xX25okP0SOFRvt+E09CXAaLOO4k7 p0g56scmqLZ9L4WQSZ1X+4nkZB+56fQEDtVHpmr2y+m6Uc0rib/H+SXbMr6+3sTg 7uCtLubeJZug+fAlS9/CRY7riuOx3MdbJdx+QOQFygAdReZdUMtpZbIWPMnP7Ahu osE09zk+21M7xhI5rS2/fDBBTInIxg75pnP+a2R8NCgFeBEKjxL8VGER4hGZBUQG g5+HyeoASbU3GsAs+eznEaQm1Si4t/cACIL/QkZqkcopTmVjgRSjxztOrXjvZbmj WckM475AOom1JYMcbUf9uM0BfMjWm8sv -----END CERTIFICATE-----Generated at Sat Jun 21 00:04:51 2025 by rpki-client