$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.mft File: uOlsag2VSKKgQMvnGZdFun2x7Sg.mft (raw, json) Hash identifier: /vdt9Ygqr/N1Zhf11wphG9CRTBiWu54F4SF83EISa1E= Subject key identifier: 19:75:72:3D:CD:4E:E8:5C:F2:80:30:58:A8:C9:E8:F3:4F:94:72:57 Authority key identifier: B8:E9:6C:6A:0D:95:48:A2:A0:40:CB:E7:19:97:45:BA:7D:B1:ED:28 Certificate issuer: /CN=A91B2D29/serialNumber=B8E96C6A0D9548A2A040CBE7199745BA7DB1ED28 Certificate serial: 09BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOlsag2VSKKgQMvnGZdFun2x7Sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.mft Manifest number: 4691 Signing time: Sat 14 Jun 2025 15:46:29 +0000 Manifest this update: Sat 14 Jun 2025 15:46:28 +0000 Manifest next update: Sat 21 Jun 2025 15:46:28 +0000 Files and hashes: 1: uOlsag2VSKKgQMvnGZdFun2x7Sg.crl (hash: kgx73IW9XNXA4OWUIorzeDECDFluHyg2HJS29656LIg=) 2: 7CEC1452E17E11ECAB421316C4F9AE02.roa (hash: HQMuxFH+p0cd5TxCsDJ5OnEAYnLT5yZN5O7uVIpfgdA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.crl rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOlsag2VSKKgQMvnGZdFun2x7Sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:46:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2490 (0x9ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D29, serialNumber=B8E96C6A0D9548A2A040CBE7199745BA7DB1ED28 Validity Not Before: Jun 14 15:46:28 2025 GMT Not After : Jun 21 15:46:28 2025 GMT Subject: CN=684d9954-74a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b3:92:bd:db:ac:0f:e4:a4:9a:50:1f:d6:62: 9f:00:54:3b:70:da:e9:bd:db:69:e1:67:23:83:6a: 87:87:9b:e2:cf:1c:d5:5b:9b:e6:e3:e2:7b:58:f7: b1:d6:e0:33:a4:02:06:f0:1b:db:db:18:c7:63:d3: 85:01:df:c0:16:26:de:3d:57:ab:10:07:ed:58:16: b8:9f:6c:a9:d3:62:d4:a2:1f:bd:03:08:ab:b2:13: 64:2d:14:27:bd:0d:0e:bd:2c:ff:fa:cd:9a:76:f0: ed:44:b1:78:a4:a1:57:67:29:e5:93:94:d4:63:59: 3f:d4:e4:08:fe:3b:49:91:c8:e1:dc:87:07:e9:16: 34:2a:88:8c:19:a8:16:6f:46:2f:61:47:f3:d3:8f: b8:48:59:43:cb:5b:4d:c9:f5:6c:24:fd:ce:f3:fc: 37:68:5b:ba:eb:7a:53:d4:59:d8:10:68:9f:3a:80: 6b:3c:eb:59:44:d1:f0:73:0f:c9:0f:6f:bf:02:dc: ae:e0:f0:75:89:3e:47:87:54:49:44:b5:bc:80:83: 67:d6:55:f1:1d:15:3c:80:26:5f:02:d7:03:25:f2: cb:39:b8:89:1c:06:5f:76:92:ce:42:b8:af:f6:a1: ed:ad:22:5a:ea:57:bd:03:12:d9:5f:55:c6:af:43: d7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:75:72:3D:CD:4E:E8:5C:F2:80:30:58:A8:C9:E8:F3:4F:94:72:57 X509v3 Authority Key Identifier: keyid:B8:E9:6C:6A:0D:95:48:A2:A0:40:CB:E7:19:97:45:BA:7D:B1:ED:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOlsag2VSKKgQMvnGZdFun2x7Sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:a1:33:f9:77:c5:14:ef:7c:03:b2:d4:c0:a4:ea:5c:b9:fc: 82:8f:e6:06:a5:a5:6b:ba:02:6b:0d:a4:79:4c:8e:03:66:eb: 51:99:25:56:91:b3:07:8f:53:f4:dc:d7:42:6b:c2:03:ee:cc: dd:d0:81:02:80:f7:fc:33:fa:c1:87:fa:37:c4:81:d4:0b:4d: 20:70:71:c3:86:25:1f:7a:fe:36:26:fe:e6:90:e0:dd:10:18: 8b:1f:a3:cb:68:a1:f7:3c:af:bc:07:55:72:bb:4f:ed:1b:be: 7a:f6:8f:b0:1f:21:3a:77:f4:d8:09:de:4b:29:7d:14:38:8c: 21:c2:bd:37:f8:5a:aa:57:7d:b0:9a:a0:5a:a9:ef:ce:3d:81: 57:42:cb:dd:42:c7:77:6d:f0:41:f5:e1:ac:b8:3f:fd:73:b1: d8:38:64:e7:67:1d:51:ee:e7:f2:2b:c4:c5:71:b6:18:75:4e: 74:8b:d8:28:83:68:b2:4e:b7:4f:ff:4d:fb:35:4a:59:2f:2d: 60:8f:eb:ce:81:a3:34:77:1f:b3:c4:51:5b:04:35:49:ff:18: 1e:a4:72:1d:49:3d:c4:54:52:4f:3d:86:3e:bd:fc:62:8b:4a: 73:7f:c4:71:69:27:52:5e:8d:93:47:82:b0:42:48:6c:1c:44: 53:95:6c:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJEMjkxMTAvBgNVBAUTKEI4RTk2QzZBMEQ5NTQ4QTJBMDQwQ0JFNzE5OTc0NUJB N0RCMUVEMjgwHhcNMjUwNjE0MTU0NjI4WhcNMjUwNjIxMTU0NjI4WjAYMRYwFAYD VQQDEw02ODRkOTk1NC03NGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvLOSvdusD+SkmlAf1mKfAFQ7cNrpvdtp4Wcjg2qHh5vizxzVW5vm4+J7WPex 1uAzpAIG8Bvb2xjHY9OFAd/AFibePVerEAftWBa4n2yp02LUoh+9AwirshNkLRQn vQ0OvSz/+s2advDtRLF4pKFXZynlk5TUY1k/1OQI/jtJkcjh3IcH6RY0KoiMGagW b0YvYUfz04+4SFlDy1tNyfVsJP3O8/w3aFu663pT1FnYEGifOoBrPOtZRNHwcw/J D2+/Atyu4PB1iT5Hh1RJRLW8gINn1lXxHRU8gCZfAtcDJfLLObiJHAZfdpLOQriv 9qHtrSJa6le9AxLZX1XGr0PXdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBl1cj3N Tuhc8oAwWKjJ6PNPlHJXMB8GA1UdIwQYMBaAFLjpbGoNlUiioEDL5xmXRbp9se0o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkQyOS9GNzFFNzE2NjU1 MjExMUU1QURCMjA5MkFDNEY5QUUwMi91T2xzYWcyVlNLS2dRTXZuR1pkRnVuMng3 U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VPbHNhZzJWU0tLZ1FNdm5HWmRGdW4yeDdTZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkQyOS9GNzFFNzE2NjU1MjExMUU1QURCMjA5MkFDNEY5QUUwMi91T2xzYWcyVlNL S2dRTXZuR1pkRnVuMng3U2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhoTP5d8UU73wDstTApOpcufyCj+YGpaVrugJrDaR5TI4DZutRmSVW kbMHj1P03NdCa8ID7szd0IECgPf8M/rBh/o3xIHUC00gcHHDhiUfev42Jv7mkODd EBiLH6PLaKH3PK+8B1Vyu0/tG7569o+wHyE6d/TYCd5LKX0UOIwhwr03+FqqV32w mqBaqe/OPYFXQsvdQsd3bfBB9eGsuD/9c7HYOGTnZx1R7ufyK8TFcbYYdU50i9go g2iyTrdP/037NUpZLy1gj+vOgaM0dx+zxFFbBDVJ/xgepHIdST3EVFJPPYY+vfxi i0pzf8RxaSdSXo2TR4KwQkhsHERTlWwe -----END CERTIFICATE-----Generated at Sun Jun 15 04:43:08 2025 by rpki-client