$ rpki-client -vvf rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft File: O2jmA9GPVutmXvcukmQF8MEL4-c.mft (raw, json) Hash identifier: RmO9zT3B9SFB6bMhZg8WuZKZdYA9Yko2brCLi8hig6Y= Subject key identifier: 64:D9:F8:EA:6A:F6:45:3A:6E:4C:33:1E:F1:4F:A5:16:E1:90:55:6F Authority key identifier: 3B:68:E6:03:D1:8F:56:EB:66:5E:F7:2E:92:64:05:F0:C1:0B:E3:E7 Certificate issuer: /CN=A912D1D1/serialNumber=3B68E603D18F56EB665EF72E926405F0C10BE3E7 Certificate serial: 0887 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft Manifest number: 0881 Signing time: Sat 14 Jun 2025 20:25:08 +0000 Manifest this update: Sat 14 Jun 2025 20:25:08 +0000 Manifest next update: Sat 21 Jun 2025 20:25:08 +0000 Files and hashes: 1: O2jmA9GPVutmXvcukmQF8MEL4-c.crl (hash: jz4PRo0POjlvZ3ooMaPas7AnMV+LTGuEAPmBpFi0iSE=) 2: 30CB037EC18E11EA8BF4FB68C4F9AE02.roa (hash: d1mOeGTfFGoxO3FpLGtyELB1KUYkFiEXG3WDXupnmMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.crl rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 20:25:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2183 (0x887) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D1D1, serialNumber=3B68E603D18F56EB665EF72E926405F0C10BE3E7 Validity Not Before: Jun 14 20:25:08 2025 GMT Not After : Jun 21 20:25:08 2025 GMT Subject: CN=684ddaa4-8c83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d9:0e:55:3e:37:80:54:e7:f1:62:08:12:91: 88:de:e2:da:66:cc:35:99:e9:00:37:f3:10:a0:c5: 8c:72:dd:10:e9:a5:f8:3a:2c:b5:1c:2b:aa:d6:57: a7:3e:11:32:7d:53:d2:b6:37:ca:cf:dc:7b:00:c5: be:8e:89:24:66:45:1c:02:c2:ae:7a:20:b9:9c:43: 7e:36:7f:e1:25:4c:ba:3c:6f:04:96:a2:ea:52:84: f1:5d:0f:11:e9:d2:e3:9b:f2:d3:85:b4:9a:a3:a7: 76:8b:cb:25:e9:29:6d:fb:d1:be:cd:5f:5a:24:3d: 7f:f6:6b:b6:df:2a:6d:3d:04:fe:f1:18:0b:b3:d5: 86:d0:f5:37:78:78:2a:f7:9c:dd:1f:56:e5:ee:3d: fa:a4:7b:cc:3a:17:43:1d:df:5a:63:7a:64:16:4f: 9a:8f:88:12:39:e0:0f:9f:01:7c:92:4c:c5:e5:05: 29:a6:11:7d:8f:13:54:0b:75:75:d9:76:23:c3:08: b4:d3:5f:8c:ec:1b:da:88:6b:a5:7b:08:11:e7:88: 49:e4:e5:43:54:5d:33:99:81:aa:35:fe:e8:37:e9: f9:e7:47:0c:10:1a:cd:b6:1e:9e:70:4b:c1:c9:21: 7f:6c:f4:e7:da:22:47:73:0c:e2:8a:15:3a:04:b6: 12:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:D9:F8:EA:6A:F6:45:3A:6E:4C:33:1E:F1:4F:A5:16:E1:90:55:6F X509v3 Authority Key Identifier: keyid:3B:68:E6:03:D1:8F:56:EB:66:5E:F7:2E:92:64:05:F0:C1:0B:E3:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:a0:23:3f:ef:5b:49:ae:10:e8:7c:ca:51:af:7b:5a:64:8c: 07:53:4c:65:c4:33:ff:9e:85:7d:50:fa:63:b2:d6:a9:f2:a5: f6:45:01:e0:c6:25:b2:75:71:5a:e5:63:10:cc:73:58:7c:7d: 93:a5:13:8c:70:db:0b:78:0c:e9:9c:97:d6:2b:70:7b:94:b5: 2f:ec:39:bc:36:ce:14:4f:30:7c:35:c3:61:42:a8:94:38:74: 38:b5:18:a2:ec:33:22:50:02:ff:71:fd:9c:9f:a6:cd:6b:d6: 2c:ce:15:87:43:dd:b4:db:5f:f8:a7:06:de:1d:9f:6f:9c:98: 92:78:92:f8:bb:a3:b4:3f:6e:03:54:22:e7:d3:29:74:d3:bd: 93:40:08:f0:e4:e2:dc:d0:a0:9a:7b:91:9a:19:9a:a8:f8:68: 04:7a:69:99:89:47:86:67:cc:b3:21:3b:d1:67:46:c3:15:41: 44:41:3e:12:76:71:5c:f5:cb:34:e0:2a:5d:b3:6d:b0:a0:57: e1:87:e2:4f:a9:5a:90:a7:08:b9:00:a4:94:f2:7b:94:d2:3d: 6e:b7:20:98:db:de:52:9b:2b:d5:88:fc:72:b7:66:93:f3:6a: 19:fd:15:94:e8:55:85:f4:e0:c8:85:75:b8:d0:09:48:01:03: d4:9c:42:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQxRDExMTAvBgNVBAUTKDNCNjhFNjAzRDE4RjU2RUI2NjVFRjcyRTkyNjQwNUYw QzEwQkUzRTcwHhcNMjUwNjE0MjAyNTA4WhcNMjUwNjIxMjAyNTA4WjAYMRYwFAYD VQQDEw02ODRkZGFhNC04YzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0tkOVT43gFTn8WIIEpGI3uLaZsw1mekAN/MQoMWMct0Q6aX4Oiy1HCuq1len PhEyfVPStjfKz9x7AMW+jokkZkUcAsKueiC5nEN+Nn/hJUy6PG8ElqLqUoTxXQ8R 6dLjm/LThbSao6d2i8sl6Slt+9G+zV9aJD1/9mu23yptPQT+8RgLs9WG0PU3eHgq 95zdH1bl7j36pHvMOhdDHd9aY3pkFk+aj4gSOeAPnwF8kkzF5QUpphF9jxNUC3V1 2XYjwwi001+M7BvaiGulewgR54hJ5OVDVF0zmYGqNf7oN+n550cMEBrNth6ecEvB ySF/bPTn2iJHcwziihU6BLYSQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGTZ+Opq 9kU6bkwzHvFPpRbhkFVvMB8GA1UdIwQYMBaAFDto5gPRj1brZl73LpJkBfDBC+Pn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDFEMS9DMTYwMDZGQ0Mx OEMxMUVBOEYzNjQxNjZDNEY5QUUwMi9PMmptQTlHUFZ1dG1YdmN1a21RRjhNRUw0 LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL08yam1BOUdQVnV0bVh2Y3VrbVFGOE1FTDQtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDFEMS9DMTYwMDZGQ0MxOEMxMUVBOEYzNjQxNjZDNEY5QUUwMi9PMmptQTlHUFZ1 dG1YdmN1a21RRjhNRUw0LWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABoCM/71tJrhDofMpRr3taZIwHU0xlxDP/noV9UPpjstap8qX2RQHg xiWydXFa5WMQzHNYfH2TpROMcNsLeAzpnJfWK3B7lLUv7Dm8Ns4UTzB8NcNhQqiU OHQ4tRii7DMiUAL/cf2cn6bNa9YszhWHQ92021/4pwbeHZ9vnJiSeJL4u6O0P24D VCLn0yl0072TQAjw5OLc0KCae5GaGZqo+GgEemmZiUeGZ8yzITvRZ0bDFUFEQT4S dnFc9cs04Cpds22woFfhh+JPqVqQpwi5AKSU8nuU0j1utyCY295SmyvViPxyt2aT 82oZ/RWU6FWF9ODIhXW40AlIAQPUnEJp -----END CERTIFICATE-----Generated at Sun Jun 15 23:09:43 2025 by rpki-client