$ rpki-client -vvf rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft File: rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft (raw, json) Hash identifier: 2pVPk4l27bl163/8rEPThv7+1VZqTak+1do3/VPca8I= Subject key identifier: 12:E0:75:95:4C:DC:0F:FB:27:05:9F:E7:7E:12:7D:7D:74:09:49:11 Authority key identifier: AC:E2:C4:CC:B0:89:D2:1B:37:04:54:B0:0E:6B:59:3A:F2:88:62:F6 Certificate issuer: /CN=A91702B9/serialNumber=ACE2C4CCB089D21B370454B00E6B593AF28862F6 Certificate serial: 0344 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft Manifest number: 033B Signing time: Sun 15 Jun 2025 00:47:39 +0000 Manifest this update: Sun 15 Jun 2025 00:47:39 +0000 Manifest next update: Sun 22 Jun 2025 00:47:39 +0000 Files and hashes: 1: rOLEzLCJ0hs3BFSwDmtZOvKIYvY.crl (hash: GwTdOIZmQhkNai7qKZvNlry9eh0deGFY/OKUl1ApPyM=) 2: FC159BECF4D911EFB4F5FC16C4F9AE02.roa (hash: SFUw1crOwEdM2KZGmzmI0Y/ekMkiUyOErHqNpQ3ZimY=) 3: A047A07AD56811EFB57A5D33C4F9AE02.roa (hash: hW5FiSV5239AbImQE/mYJwi40OATdFzGCdVUMZFhemo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.crl rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:47:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 836 (0x344) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91702B9, serialNumber=ACE2C4CCB089D21B370454B00E6B593AF28862F6 Validity Not Before: Jun 15 00:47:39 2025 GMT Not After : Jun 22 00:47:39 2025 GMT Subject: CN=684e182b-b4b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9b:f7:91:61:3c:58:ed:99:04:51:1c:83:c1: 4c:e9:ed:3e:91:8b:d3:33:6f:4d:3d:40:2c:d9:f9: bf:e6:ed:92:ae:43:f5:af:d2:e7:6d:f9:d0:d5:54: 7e:7a:48:4d:ce:0b:bf:51:68:e1:40:76:91:44:41: db:09:9f:df:74:47:fa:fd:af:69:77:23:36:a6:c6: 51:c0:8e:3d:5b:b1:87:f6:3a:b0:a0:1a:57:eb:9c: 79:28:ef:be:7f:29:43:30:a1:e7:a5:f8:43:d4:bb: 77:c5:fd:63:7a:bc:3b:2a:23:ab:39:71:af:68:47: dc:87:fa:65:d3:f5:e0:71:81:0e:18:6c:e4:17:3b: c0:a2:7d:62:88:0c:53:03:a2:7a:a5:6e:cf:10:0f: 5f:79:67:26:12:95:03:17:52:ae:4b:2c:56:b0:c1: 3c:fb:f9:2f:b1:34:a4:57:16:de:fb:1d:c6:93:2a: 7c:24:11:f5:d9:f2:4f:1e:c5:88:4a:73:6b:47:4c: f1:d7:1e:a5:e1:a1:e4:93:81:7c:72:31:ba:5b:c1: 4b:10:90:5d:9b:41:89:95:26:20:fd:eb:a8:ae:75: bc:29:36:cd:8c:20:21:2c:e5:f8:00:cc:a0:dc:2a: c5:8c:c9:de:e7:00:3a:97:fd:55:cf:84:22:5f:25: 9f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:E0:75:95:4C:DC:0F:FB:27:05:9F:E7:7E:12:7D:7D:74:09:49:11 X509v3 Authority Key Identifier: keyid:AC:E2:C4:CC:B0:89:D2:1B:37:04:54:B0:0E:6B:59:3A:F2:88:62:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:35:e1:b6:33:6e:fb:df:55:18:ec:17:5b:09:d9:56:59:a4: 37:46:82:1a:06:40:35:6a:88:ba:4d:94:d0:61:8a:2a:d4:ea: 18:3f:8b:63:e9:34:17:12:24:6f:c6:63:60:a3:a1:92:a6:7c: ae:a6:3f:4e:bf:98:56:e6:d4:63:33:86:13:68:68:14:2e:bc: fa:dc:67:59:73:1a:d2:a6:aa:20:ce:4c:4c:be:ca:30:89:b7: e2:c0:c2:cb:e6:94:7f:82:7b:0f:4e:07:20:60:88:7a:e8:41: 32:de:15:3c:8a:ac:5e:55:65:d8:73:69:89:06:c6:b9:a0:ac: e9:7a:91:d1:44:a6:cd:3d:16:ef:b7:46:71:da:bc:f3:cc:51: 5c:78:59:72:7d:55:a2:a2:d0:af:48:f5:bd:da:b8:f9:41:f3: b5:15:6e:61:5c:62:67:d2:26:8e:c0:5d:88:27:89:c7:8c:e9: 7c:0b:31:d9:ae:66:be:54:3a:1f:ae:49:2e:7b:9d:62:0a:55: 83:d4:3a:89:7c:d7:d9:79:12:3c:d8:2e:20:2b:e4:84:02:b4: 02:f3:f8:c8:f5:85:95:2e:95:bb:14:a1:83:28:87:31:a3:24: 29:2d:c6:f1:a6:5b:25:b6:31:2d:30:d1:ff:09:e4:c8:2b:9a: c8:e2:fa:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAyQjkxMTAvBgNVBAUTKEFDRTJDNENDQjA4OUQyMUIzNzA0NTRCMDBFNkI1OTNB RjI4ODYyRjYwHhcNMjUwNjE1MDA0NzM5WhcNMjUwNjIyMDA0NzM5WjAYMRYwFAYD VQQDEw02ODRlMTgyYi1iNGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArZv3kWE8WO2ZBFEcg8FM6e0+kYvTM29NPUAs2fm/5u2SrkP1r9LnbfnQ1VR+ ekhNzgu/UWjhQHaRREHbCZ/fdEf6/a9pdyM2psZRwI49W7GH9jqwoBpX65x5KO++ fylDMKHnpfhD1Lt3xf1jerw7KiOrOXGvaEfch/pl0/XgcYEOGGzkFzvAon1iiAxT A6J6pW7PEA9feWcmEpUDF1KuSyxWsME8+/kvsTSkVxbe+x3Gkyp8JBH12fJPHsWI SnNrR0zx1x6l4aHkk4F8cjG6W8FLEJBdm0GJlSYg/euornW8KTbNjCAhLOX4AMyg 3CrFjMne5wA6l/1Vz4QiXyWfmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBLgdZVM 3A/7JwWf534SfX10CUkRMB8GA1UdIwQYMBaAFKzixMywidIbNwRUsA5rWTryiGL2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDJCOS8zQjcyRUU5MEM2 MDUxMUVDQUI3NEQ5NjJDNEY5QUUwMi9yT0xFekxDSjBoczNCRlN3RG10Wk92S0lZ dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JPTEV6TENKMGhzM0JGU3dEbXRaT3ZLSVl2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDJCOS8zQjcyRUU5MEM2MDUxMUVDQUI3NEQ5NjJDNEY5QUUwMi9yT0xFekxDSjBo czNCRlN3RG10Wk92S0lZdlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWNeG2M27731UY7BdbCdlWWaQ3RoIaBkA1aoi6TZTQYYoq1OoYP4tj 6TQXEiRvxmNgo6GSpnyupj9Ov5hW5tRjM4YTaGgULrz63GdZcxrSpqogzkxMvsow ibfiwMLL5pR/gnsPTgcgYIh66EEy3hU8iqxeVWXYc2mJBsa5oKzpepHRRKbNPRbv t0Zx2rzzzFFceFlyfVWiotCvSPW92rj5QfO1FW5hXGJn0iaOwF2IJ4nHjOl8CzHZ rma+VDofrkkue51iClWD1DqJfNfZeRI82C4gK+SEArQC8/jI9YWVLpW7FKGDKIcx oyQpLcbxplsltjEtMNH/CeTIK5rI4vog -----END CERTIFICATE-----Generated at Sun Jun 15 09:41:56 2025 by rpki-client