$ rpki-client -vvf rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft File: _OAw6zAgOlEM28-cfDpDADu9-mI.mft (raw, json) Hash identifier: 8j6/6wGW2fJAd85FVlnXTnrXJ1P4JzVQCt6D48shFws= Subject key identifier: 72:88:37:81:A8:8F:FA:F8:BF:9D:33:55:79:90:8D:F1:58:EC:7D:C5 Authority key identifier: FC:E0:30:EB:30:20:3A:51:0C:DB:CF:9C:7C:3A:43:00:3B:BD:FA:62 Certificate issuer: /CN=A9127E8D/serialNumber=FCE030EB30203A510CDBCF9C7C3A43003BBDFA62 Certificate serial: 0104 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_OAw6zAgOlEM28-cfDpDADu9-mI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft Manifest number: 0102 Signing time: Sun 15 Jun 2025 04:15:55 +0000 Manifest this update: Sun 15 Jun 2025 04:15:54 +0000 Manifest next update: Sun 22 Jun 2025 04:15:54 +0000 Files and hashes: 1: _OAw6zAgOlEM28-cfDpDADu9-mI.crl (hash: MlFlhG2a2wxxLqNr6s55WfoSXuPjeoJ2wrF9n4hCZEo=) 2: D13703C6BF4611EE9ECAAC65C4F9AE02.roa (hash: 9XQ8E57rDZy0hs4By4P58wDNjTR7DCt1F2KaYrqVcoc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.crl rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_OAw6zAgOlEM28-cfDpDADu9-mI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 260 (0x104) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127E8D, serialNumber=FCE030EB30203A510CDBCF9C7C3A43003BBDFA62 Validity Not Before: Jun 15 04:15:54 2025 GMT Not After : Jun 22 04:15:54 2025 GMT Subject: CN=684e48fa-b28e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:60:c5:52:6e:fd:91:e9:30:3c:72:15:05:b2: f1:13:34:46:09:6d:e2:ce:0a:ee:1c:5c:30:3e:67: fc:c5:1a:34:1d:7c:79:52:78:df:b7:de:18:e8:89: 05:33:15:ec:c5:31:51:a8:04:77:53:a6:3c:69:8f: a7:46:d8:ef:8f:1c:04:69:82:52:58:f0:3d:21:c1: 73:d2:ff:25:18:dd:27:e8:52:67:46:0a:38:7a:f0: 57:b4:45:45:25:32:4a:97:93:83:32:6e:12:41:1a: 00:9d:5f:ec:79:09:45:b8:1e:49:b6:bc:a2:e3:61: 1e:48:94:eb:61:15:f7:2c:81:88:06:cd:b3:bc:03: 4a:88:3d:9d:39:80:34:bb:71:ce:a1:03:84:c1:32: 87:c5:9c:b4:93:57:82:26:6a:0a:af:c2:b6:b0:6c: 50:01:3c:ba:5d:a1:86:2c:20:0e:03:34:d9:0a:6b: d9:e2:ba:7b:cd:0d:12:96:4f:a4:a2:f3:cf:e3:72: 79:37:9c:37:50:2d:27:69:7c:0f:5d:1c:75:52:74: 38:69:93:2d:78:8e:cc:95:67:1f:fd:a2:89:77:84: 69:87:4f:0b:b4:81:5b:97:76:27:36:1c:67:a0:6b: bf:08:2e:04:9f:e4:1f:48:14:08:e0:f6:5a:ba:0e: ce:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:88:37:81:A8:8F:FA:F8:BF:9D:33:55:79:90:8D:F1:58:EC:7D:C5 X509v3 Authority Key Identifier: keyid:FC:E0:30:EB:30:20:3A:51:0C:DB:CF:9C:7C:3A:43:00:3B:BD:FA:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_OAw6zAgOlEM28-cfDpDADu9-mI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:5c:02:88:c2:a2:a5:61:4a:d5:af:36:21:7e:b7:77:46:b1: df:e4:a6:ea:2a:fa:99:3d:4e:4b:f0:f6:48:51:73:3a:6f:fb: a4:35:ad:c6:66:d8:bc:1d:30:6c:64:da:b0:b6:84:e7:e7:59: 48:06:80:9b:17:07:35:ea:d1:4a:71:47:d0:19:f5:56:49:9b: 5f:a2:65:38:05:25:c2:9a:5c:24:9f:ef:25:82:90:1c:2d:e9: 15:1c:2c:d4:1b:3f:71:24:fe:84:34:ee:5b:4d:c9:32:21:61: 47:67:ea:4e:b9:90:a4:6f:cf:cf:06:f2:4e:91:75:4a:cf:4c: cb:38:30:78:2f:0e:0a:93:07:7a:ae:9e:f1:db:78:63:bb:27: 40:45:15:35:c0:a5:b5:b7:50:69:78:0e:2a:d6:0f:82:7c:19: ee:52:a3:98:49:10:e6:f1:0f:b5:95:e9:5b:3d:86:06:68:ef: 2e:7d:43:18:97:07:4f:50:c8:56:c6:c0:4d:1d:fd:97:d3:22: c7:78:fe:e1:9a:9a:1f:6e:5e:c1:45:0c:74:4c:dc:6b:ce:63: c5:a4:68:26:f6:c9:33:76:e7:df:44:7e:eb:96:36:ed:0e:85: 52:28:b7:67:6d:cc:e4:b7:46:cc:2a:5b:c3:3d:a1:53:51:9a: b2:fc:9c:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdFOEQxMTAvBgNVBAUTKEZDRTAzMEVCMzAyMDNBNTEwQ0RCQ0Y5QzdDM0E0MzAw M0JCREZBNjIwHhcNMjUwNjE1MDQxNTU0WhcNMjUwNjIyMDQxNTU0WjAYMRYwFAYD VQQDEw02ODRlNDhmYS1iMjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0mDFUm79kekwPHIVBbLxEzRGCW3izgruHFwwPmf8xRo0HXx5Unjft94Y6IkF MxXsxTFRqAR3U6Y8aY+nRtjvjxwEaYJSWPA9IcFz0v8lGN0n6FJnRgo4evBXtEVF JTJKl5ODMm4SQRoAnV/seQlFuB5Jtryi42EeSJTrYRX3LIGIBs2zvANKiD2dOYA0 u3HOoQOEwTKHxZy0k1eCJmoKr8K2sGxQATy6XaGGLCAOAzTZCmvZ4rp7zQ0Slk+k ovPP43J5N5w3UC0naXwPXRx1UnQ4aZMteI7MlWcf/aKJd4Rph08LtIFbl3YnNhxn oGu/CC4En+QfSBQI4PZaug7O9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHKIN4Go j/r4v50zVXmQjfFY7H3FMB8GA1UdIwQYMBaAFPzgMOswIDpRDNvPnHw6QwA7vfpi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0U4RC82NEIxNkE5OEJG NDYxMUVFQjFCM0Q3NjRDNEY5QUUwMi9fT0F3NnpBZ09sRU0yOC1jZkRwREFEdTkt bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19PQXc2ekFnT2xFTTI4LWNmRHBEQUR1OS1tSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0U4RC82NEIxNkE5OEJGNDYxMUVFQjFCM0Q3NjRDNEY5QUUwMi9fT0F3NnpBZ09s RU0yOC1jZkRwREFEdTktbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnXAKIwqKlYUrVrzYhfrd3RrHf5KbqKvqZPU5L8PZIUXM6b/ukNa3G Zti8HTBsZNqwtoTn51lIBoCbFwc16tFKcUfQGfVWSZtfomU4BSXCmlwkn+8lgpAc LekVHCzUGz9xJP6ENO5bTckyIWFHZ+pOuZCkb8/PBvJOkXVKz0zLODB4Lw4Kkwd6 rp7x23hjuydARRU1wKW1t1BpeA4q1g+CfBnuUqOYSRDm8Q+1lelbPYYGaO8ufUMY lwdPUMhWxsBNHf2X0yLHeP7hmpofbl7BRQx0TNxrzmPFpGgm9skzduffRH7rljbt DoVSKLdnbczkt0bMKlvDPaFTUZqy/Jw6 -----END CERTIFICATE-----Generated at Sun Jun 15 08:29:29 2025 by rpki-client