$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft File: oE50OtMfT4PwncXS9-9Pq-HvaHs.mft (raw, json) Hash identifier: 2rDeY0E0muYDo2nO4LCqHsoApcGUheRPHHmc8np/H1g= Subject key identifier: A8:75:CA:33:83:47:F4:5F:9B:18:4D:78:83:06:07:E3:93:E4:C4:D3 Authority key identifier: A0:4E:74:3A:D3:1F:4F:83:F0:9D:C5:D2:F7:EF:4F:AB:E1:EF:68:7B Certificate issuer: /CN=A91E0EF8/serialNumber=A04E743AD31F4F83F09DC5D2F7EF4FABE1EF687B Certificate serial: 05B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft Manifest number: 059D Signing time: Thu 24 Apr 2025 23:01:06 +0000 Manifest this update: Thu 24 Apr 2025 23:01:05 +0000 Manifest next update: Thu 01 May 2025 23:01:05 +0000 Files and hashes: 1: oE50OtMfT4PwncXS9-9Pq-HvaHs.crl (hash: 7D45lTHX6Gar1jp+12GO+SwJFBcmlVTDnBg0HQb4svQ=) 2: 2F581CEA33F311EEABFC7410C4F9AE02.roa (hash: 0O6TcMZ7cyiTOQX6a4lo9IW8lZvmQl+TflI94IQBsXg=) 3: 180DF9BE93C711EDB3D8A867C4F9AE02.roa (hash: QypSaOJWNZPEYJNaUp+tgMHOgSp9cYSc6zUXtXVCQpg=) 4: 1767CE4A93C711EDB3D8A867C4F9AE02.roa (hash: 5EMVY+mr8MeziaFmHYoIUZ8HY+OW0Ux+vJdDqNYyM+A=) 5: 16A4DFE893C711EDB3D8A867C4F9AE02.roa (hash: BMRoArOkK6XKfXiCgVXjRFI7Ts9ZVPZguMrIduSzckU=) 6: 1614034C93C711EDB3D8A867C4F9AE02.roa (hash: o0PMmxNvCxGi4Ma1i/XdkAnkuomNueTn7pJoxsJKzxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.crl rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1457 (0x5b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0EF8, serialNumber=A04E743AD31F4F83F09DC5D2F7EF4FABE1EF687B Validity Not Before: Apr 24 23:01:05 2025 GMT Not After : May 1 23:01:05 2025 GMT Subject: CN=680ac2b1-4c31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3c:c0:e1:d8:68:f0:89:dd:a8:4e:8c:e6:4d: 1f:07:79:63:b4:96:97:d9:b6:d6:ee:f8:a8:23:c2: 67:75:a7:6a:12:40:68:c5:3e:28:38:12:a2:76:1e: eb:ac:f3:39:8c:36:7b:5e:41:24:0a:b5:aa:b3:e4: 6f:6e:53:50:c6:5d:81:9f:4f:af:b4:4e:38:b4:c5: 0e:ff:94:54:06:22:90:da:64:12:08:a8:2c:8f:59: e2:f4:20:31:e1:c2:74:8d:da:a5:6a:7c:fb:b3:4e: a1:da:f2:4e:61:ba:eb:6f:22:00:e5:29:79:e9:93: fd:ba:07:b4:51:85:f7:5f:66:6d:e9:36:a9:f4:c3: 4b:7f:79:b5:74:56:85:02:6e:4b:50:ed:5d:d3:97: 8d:c9:ed:fc:43:a3:81:16:65:a7:64:53:86:45:fe: bf:9d:b1:eb:a7:05:5d:43:74:bc:db:15:2c:7b:c7: 03:3b:b2:71:0a:27:6d:2f:96:70:60:e7:fc:47:9d: 16:f5:29:cd:d5:56:52:0a:e6:8a:1d:be:3c:12:e8: ac:77:be:b0:fb:a5:32:49:ab:82:e9:46:ef:bc:66: 68:96:fb:de:72:03:87:b1:f0:5c:2b:62:1f:2f:de: ca:1a:22:27:2d:60:20:3a:8e:32:4b:f7:e3:68:a0: b2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:75:CA:33:83:47:F4:5F:9B:18:4D:78:83:06:07:E3:93:E4:C4:D3 X509v3 Authority Key Identifier: keyid:A0:4E:74:3A:D3:1F:4F:83:F0:9D:C5:D2:F7:EF:4F:AB:E1:EF:68:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:04:dd:cf:2e:67:31:2f:56:ca:c8:dc:40:8f:c4:b0:20:13: f8:8f:67:6a:b0:53:30:13:60:a5:26:a4:b3:5e:ec:76:15:c3: b7:bd:50:31:e0:a9:d0:6d:2c:8d:80:00:a6:60:6e:15:c4:36: 0f:00:60:97:8e:27:8d:07:68:9b:bd:5d:24:c0:dd:dc:f8:ff: 3f:21:d0:8b:3a:d7:84:02:26:cb:99:f9:6d:5c:72:33:19:ea: 89:c5:cc:a0:ea:2e:47:40:fd:92:37:97:5f:3a:8a:9c:80:6b: 6a:65:23:14:47:f2:e8:c4:7c:45:8f:f1:77:12:69:72:ac:3f: 8b:91:de:51:52:e8:56:93:29:c9:e0:df:57:b9:12:38:b9:eb: 44:61:60:b5:9a:9f:0b:16:ef:ef:ef:2a:43:8c:9d:c0:65:13: 8f:83:ac:60:de:68:47:3c:99:62:f6:64:d3:f7:e7:37:50:e0: b2:41:5f:92:66:c2:31:ff:f8:c5:67:0a:35:f9:f2:22:57:82: 2b:e2:dd:ac:9c:a7:d2:f7:fa:61:1e:46:3a:be:a2:1c:8a:92: d4:35:fb:8b:ea:c5:1b:2a:5d:4e:39:51:09:f6:d3:75:a7:7f: c5:87:0b:84:21:07:20:16:47:0b:1f:72:06:d6:88:f1:e9:c6: 29:cc:88:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBFRjgxMTAvBgNVBAUTKEEwNEU3NDNBRDMxRjRGODNGMDlEQzVEMkY3RUY0RkFC RTFFRjY4N0IwHhcNMjUwNDI0MjMwMTA1WhcNMjUwNTAxMjMwMTA1WjAYMRYwFAYD VQQDEw02ODBhYzJiMS00YzMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyTzA4dho8IndqE6M5k0fB3ljtJaX2bbW7vioI8JndadqEkBoxT4oOBKidh7r rPM5jDZ7XkEkCrWqs+RvblNQxl2Bn0+vtE44tMUO/5RUBiKQ2mQSCKgsj1ni9CAx 4cJ0jdqlanz7s06h2vJOYbrrbyIA5Sl56ZP9uge0UYX3X2Zt6Tap9MNLf3m1dFaF Am5LUO1d05eNye38Q6OBFmWnZFOGRf6/nbHrpwVdQ3S82xUse8cDO7JxCidtL5Zw YOf8R50W9SnN1VZSCuaKHb48Euisd76w+6UySauC6UbvvGZolvvecgOHsfBcK2If L97KGiInLWAgOo4yS/fjaKCyUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKh1yjOD R/RfmxhNeIMGB+OT5MTTMB8GA1UdIwQYMBaAFKBOdDrTH0+D8J3F0vfvT6vh72h7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEVGOC9DOTM4RDEwNkNC NTQxMUVCQTNEMzZDNUJDNEY5QUUwMi9vRTUwT3RNZlQ0UHduY1hTOS05UHEtSHZh SHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29FNTBPdE1mVDRQd25jWFM5LTlQcS1IdmFIcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEVGOC9DOTM4RDEwNkNCNTQxMUVCQTNEMzZDNUJDNEY5QUUwMi9vRTUwT3RNZlQ0 UHduY1hTOS05UHEtSHZhSHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHBN3PLmcxL1bKyNxAj8SwIBP4j2dqsFMwE2ClJqSzXux2FcO3vVAx 4KnQbSyNgACmYG4VxDYPAGCXjieNB2ibvV0kwN3c+P8/IdCLOteEAibLmfltXHIz GeqJxcyg6i5HQP2SN5dfOoqcgGtqZSMUR/LoxHxFj/F3EmlyrD+Lkd5RUuhWkynJ 4N9XuRI4uetEYWC1mp8LFu/v7ypDjJ3AZROPg6xg3mhHPJli9mTT9+c3UOCyQV+S ZsIx//jFZwo1+fIiV4Ir4t2snKfS9/phHkY6vqIcipLUNfuL6sUbKl1OOVEJ9tN1 p3/FhwuEIQcgFkcLH3IG1ojx6cYpzIjr -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:58 2025 by rpki-client