$ rpki-client -vvf rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft File: Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft (raw, json) Hash identifier: n3d37O53SJyY+GMvT/Lspv9wYIOiNEIcjXOkTZm3BIo= Subject key identifier: 33:5D:13:68:AB:C7:C4:60:48:1E:9F:4B:27:F8:12:C1:5D:55:52:31 Authority key identifier: 3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60 Certificate issuer: /CN=A91188EE/serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360 Certificate serial: E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft Manifest number: E0 Signing time: Sun 15 Jun 2025 04:40:54 +0000 Manifest this update: Sun 15 Jun 2025 04:40:54 +0000 Manifest next update: Sun 22 Jun 2025 04:40:54 +0000 Files and hashes: 1: Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl (hash: dX1dkoIho0SspR69vQfOu1ZnbXrlIy94rPpwtSl5MOc=) 2: 6313E67C8D5711EFB5214A3AC4F9AE02.roa (hash: H9y99bkQAenZ+5dQW/QgFhQvNtXIL5GTmQ8MEBG2Zlw=) 3: 9EE9468811FB11EFB73CB561C4F9AE02.roa (hash: wQPQHggW2pcWJJTTCEnG8wZ6ChbePlicDoKqF+XySGc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 232 (0xe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91188EE, serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360 Validity Not Before: Jun 15 04:40:54 2025 GMT Not After : Jun 22 04:40:54 2025 GMT Subject: CN=684e4ed6-363d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b7:a1:90:09:ba:6b:27:2f:da:56:30:54:34: 1b:ec:e9:61:4a:9c:56:94:ff:e8:86:d6:aa:ad:8d: a6:b1:b6:eb:d1:56:9e:a5:04:04:0f:04:0a:1d:b5: 86:5d:5a:d4:e9:0f:8a:a2:91:e3:0c:aa:26:f8:a9: f6:71:dd:91:bd:7e:d1:8c:4a:1f:23:fb:52:70:50: 57:f7:96:3e:b0:af:72:5b:9c:6e:79:34:85:1d:0b: b1:9c:10:e4:30:82:a8:09:6e:0a:4d:37:58:3a:e5: 4f:30:7a:a3:04:59:1f:93:97:c0:a0:c2:3a:ae:11: e2:21:38:2e:70:f1:07:79:fa:a4:43:73:65:98:6e: 75:0a:41:49:f7:89:0e:2d:d3:03:2a:0a:8e:b3:ac: 3b:63:13:20:62:8a:31:4d:5f:1d:36:9d:a5:54:b4: e0:e6:b8:32:7c:05:29:dc:11:e1:be:8c:70:f1:5d: 66:8e:ef:36:22:16:86:c8:81:4f:94:6f:aa:aa:b4: 37:10:09:8c:62:2f:1b:44:2a:1c:40:17:bb:44:de: d8:24:7a:3d:ce:da:a9:d6:91:30:fe:ff:34:a6:9d: 9f:72:5b:d0:21:a0:9b:a5:d5:d7:be:b8:f0:5f:4d: 0d:46:c1:95:a9:04:06:7d:7d:c9:89:48:41:d4:6c: b9:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:5D:13:68:AB:C7:C4:60:48:1E:9F:4B:27:F8:12:C1:5D:55:52:31 X509v3 Authority Key Identifier: keyid:3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:26:4f:a5:4c:ab:af:4b:a8:fd:a8:27:b6:de:25:5d:37:39: 90:53:84:c8:4d:41:17:2e:47:f9:ee:f8:2c:67:10:d4:62:da: 1c:4b:8d:af:89:20:7c:5f:19:51:db:17:16:32:06:27:11:ff: 8a:ae:48:5f:4c:0c:1e:92:54:32:85:88:4c:a2:72:87:7b:64: fc:00:06:b1:45:02:8d:a2:b5:a4:05:49:74:cd:bf:9d:08:be: 24:8a:eb:56:22:7e:c4:68:53:eb:12:60:d6:22:1f:a7:fc:b5: 8c:56:26:17:22:6f:bf:53:20:df:11:5f:a7:ba:4b:bc:35:52: 0d:ab:e3:41:32:24:bd:dc:45:71:01:f1:9f:4f:ef:9e:cf:ff: 9c:44:30:67:3d:7f:9e:42:84:f2:2d:ec:78:45:e7:f8:32:aa: e5:6d:b5:67:c2:86:38:d1:17:b6:6d:b2:ee:20:c2:95:6e:8a: 87:c6:a3:12:55:3c:65:52:b2:b3:ac:d1:95:e3:8a:d6:bf:07: 92:97:e1:04:6b:12:5b:0e:35:7d:6d:cb:df:f0:3e:5f:19:03: 3d:87:ae:85:21:88:b6:eb:98:0f:36:52:e5:16:a2:d6:04:63: 7e:24:46:d5:18:75:5b:c9:ef:1a:6f:5a:e5:37:70:18:c7:08: 32:97:99:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg4RUUxMTAvBgNVBAUTKDNBRURBODA0MDdENzdCQjUyODQ4QUJEOUY3MjU5QkQ4 MDdBNUQzNjAwHhcNMjUwNjE1MDQ0MDU0WhcNMjUwNjIyMDQ0MDU0WjAYMRYwFAYD VQQDEw02ODRlNGVkNi0zNjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3rehkAm6aycv2lYwVDQb7OlhSpxWlP/ohtaqrY2msbbr0VaepQQEDwQKHbWG XVrU6Q+KopHjDKom+Kn2cd2RvX7RjEofI/tScFBX95Y+sK9yW5xueTSFHQuxnBDk MIKoCW4KTTdYOuVPMHqjBFkfk5fAoMI6rhHiITgucPEHefqkQ3NlmG51CkFJ94kO LdMDKgqOs6w7YxMgYooxTV8dNp2lVLTg5rgyfAUp3BHhvoxw8V1mju82IhaGyIFP lG+qqrQ3EAmMYi8bRCocQBe7RN7YJHo9ztqp1pEw/v80pp2fclvQIaCbpdXXvrjw X00NRsGVqQQGfX3JiUhB1Gy5rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDNdE2ir x8RgSB6fSyf4EsFdVVIxMB8GA1UdIwQYMBaAFDrtqAQH13u1KEir2fclm9gHpdNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODhFRS8zMjA5NzMxQUZC QUYxMUVFQTZCQzM5NTJDNEY5QUUwMi9PdTJvQkFmWGU3VW9TS3ZaOXlXYjJBZWww MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL091Mm9CQWZYZTdVb1NLdlo5eVdiMkFlbDAyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODhFRS8zMjA5NzMxQUZCQUYxMUVFQTZCQzM5NTJDNEY5QUUwMi9PdTJvQkFmWGU3 VW9TS3ZaOXlXYjJBZWwwMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCJk+lTKuvS6j9qCe23iVdNzmQU4TITUEXLkf57vgsZxDUYtocS42v iSB8XxlR2xcWMgYnEf+KrkhfTAweklQyhYhMonKHe2T8AAaxRQKNorWkBUl0zb+d CL4kiutWIn7EaFPrEmDWIh+n/LWMViYXIm+/UyDfEV+nuku8NVINq+NBMiS93EVx AfGfT++ez/+cRDBnPX+eQoTyLex4Ref4MqrlbbVnwoY40Re2bbLuIMKVboqHxqMS VTxlUrKzrNGV44rWvweSl+EEaxJbDjV9bcvf8D5fGQM9h66FIYi265gPNlLlFqLW BGN+JEbVGHVbye8ab1rlN3AYxwgyl5lC -----END CERTIFICATE-----Generated at Sun Jun 15 09:33:24 2025 by rpki-client