$ rpki-client -vvf rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft File: OVr1eRN2M5r53uVtah4TtHq1xGY.mft (raw, json) Hash identifier: 38jKPlNeRcz6AO8zuwgddT6l7+P7TUb1NVVAuIDWPSg= Subject key identifier: B2:82:3A:03:6D:51:28:21:25:6E:64:66:C8:59:D7:24:6E:63:43:26 Authority key identifier: 39:5A:F5:79:13:76:33:9A:F9:DE:E5:6D:6A:1E:13:B4:7A:B5:C4:66 Certificate issuer: /CN=A91316B0/serialNumber=395AF5791376339AF9DEE56D6A1E13B47AB5C466 Certificate serial: D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVr1eRN2M5r53uVtah4TtHq1xGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft Manifest number: 0525 Signing time: Sun 15 Jun 2025 00:01:16 +0000 Manifest this update: Sun 15 Jun 2025 00:01:15 +0000 Manifest next update: Sun 22 Jun 2025 00:01:15 +0000 Files and hashes: 1: OVr1eRN2M5r53uVtah4TtHq1xGY.crl (hash: zJUf2BOv/jZXqmoEShKPxe0ii2Iml841vH/wzari/3A=) 2: C6EFDF5C0C3311EFB37BD03FC4F9AE02.roa (hash: +baf+FBOvTO91WyGSxfLgP4c75Re+v5ehq0gcaeZq1U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.crl rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVr1eRN2M5r53uVtah4TtHq1xGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91316B0, serialNumber=395AF5791376339AF9DEE56D6A1E13B47AB5C466 Validity Not Before: Jun 15 00:01:15 2025 GMT Not After : Jun 22 00:01:15 2025 GMT Subject: CN=684e0d4b-5dc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7c:d3:b9:73:9e:f5:a1:35:0e:16:5a:0d:4b: d2:5c:3b:b9:b9:68:8e:03:8f:3b:2d:9b:16:33:24: cc:c1:30:1f:42:1e:c2:cf:f3:bf:3e:64:5f:fd:08: 5a:7c:1d:85:a0:43:37:cf:51:6b:88:37:ff:42:b2: 9c:c6:ac:53:41:91:1c:70:8a:92:03:e9:92:ee:21: 20:d9:6f:ba:89:56:a4:e6:72:21:fa:70:7a:7b:61: 7c:0f:fe:22:71:31:f0:21:66:bf:b0:8b:bd:97:be: 72:f5:90:1e:32:18:59:66:16:6e:1c:65:20:12:4b: 64:4c:f1:ec:71:bc:61:dc:2a:f0:7c:61:a6:38:b0: bf:f2:21:96:20:f6:58:61:98:ab:b4:5d:43:aa:68: ea:0e:49:84:e2:c4:e7:d5:65:eb:71:38:70:3d:87: 22:f5:bc:40:45:d6:bf:3b:2d:b6:ba:38:f9:10:c5: 88:c6:d9:6f:db:ef:8b:04:b4:0a:24:0d:18:df:bf: cf:98:e1:78:2b:0c:3c:cf:d3:56:67:c2:85:a3:a6: 50:bb:1b:a1:3d:22:3b:88:de:a7:0a:6c:10:19:bb: 31:e9:61:ac:00:96:ee:9b:d0:da:51:11:58:fe:c4: 59:bc:64:09:dc:c8:cd:b3:8c:09:73:6b:2d:7d:6e: ea:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:82:3A:03:6D:51:28:21:25:6E:64:66:C8:59:D7:24:6E:63:43:26 X509v3 Authority Key Identifier: keyid:39:5A:F5:79:13:76:33:9A:F9:DE:E5:6D:6A:1E:13:B4:7A:B5:C4:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVr1eRN2M5r53uVtah4TtHq1xGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:0d:64:96:b0:6b:23:54:e6:2a:2b:98:43:5f:4b:68:f5:48: a8:6c:67:24:57:8c:fd:59:ea:60:8e:88:3f:02:30:88:fd:ed: 43:47:ce:1c:d5:5f:ac:4c:f3:80:c9:86:40:5a:47:52:e4:58: 9e:14:06:8c:43:85:ce:0e:1b:69:0f:a4:7a:fc:53:3f:8c:d0: 81:1b:86:01:c0:72:21:90:33:3f:9c:5b:1d:20:21:31:25:8f: 02:ae:5c:31:70:13:bf:1a:c6:06:27:1c:a3:62:9e:83:aa:c2: 2a:e8:34:81:9d:c3:bd:90:10:7a:07:a5:cf:7c:0d:57:17:70: 94:4d:f7:4b:5b:b0:c7:a3:75:b8:5f:ea:1d:4f:e6:fc:7b:c3: d6:36:61:b4:8a:f3:50:97:f0:99:d9:14:60:9a:b3:ec:84:06: 1e:04:7c:f3:ee:a3:0d:06:6c:9e:cf:d2:46:9b:16:67:be:1c: 69:e1:f1:6f:df:3a:1d:e7:37:cb:18:ac:b1:8e:e8:d9:29:9d: 3a:5b:a1:b0:2a:79:b7:56:b2:30:bf:3c:13:48:36:6a:b6:ed: f8:53:43:aa:58:8c:6e:47:e6:68:cb:7e:38:9c:91:24:c1:95: 83:eb:82:b6:c9:59:5e:26:a7:bd:bb:12:d6:aa:b5:5a:6c:47: 22:41:6d:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE2QjAxMTAvBgNVBAUTKDM5NUFGNTc5MTM3NjMzOUFGOURFRTU2RDZBMUUxM0I0 N0FCNUM0NjYwHhcNMjUwNjE1MDAwMTE1WhcNMjUwNjIyMDAwMTE1WjAYMRYwFAYD VQQDEw02ODRlMGQ0Yi01ZGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu3zTuXOe9aE1DhZaDUvSXDu5uWiOA487LZsWMyTMwTAfQh7Cz/O/PmRf/Qha fB2FoEM3z1FriDf/QrKcxqxTQZEccIqSA+mS7iEg2W+6iVak5nIh+nB6e2F8D/4i cTHwIWa/sIu9l75y9ZAeMhhZZhZuHGUgEktkTPHscbxh3CrwfGGmOLC/8iGWIPZY YZirtF1DqmjqDkmE4sTn1WXrcThwPYci9bxARda/Oy22ujj5EMWIxtlv2++LBLQK JA0Y37/PmOF4Kww8z9NWZ8KFo6ZQuxuhPSI7iN6nCmwQGbsx6WGsAJbum9DaURFY /sRZvGQJ3MjNs4wJc2stfW7qRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLKCOgNt USghJW5kZshZ1yRuY0MmMB8GA1UdIwQYMBaAFDla9XkTdjOa+d7lbWoeE7R6tcRm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTZCMC8yMzM3RjIzMjVF M0UxMUVDQTFGRkVCNENDNEY5QUUwMi9PVnIxZVJOMk01cjUzdVZ0YWg0VHRIcTF4 R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09WcjFlUk4yTTVyNTN1VnRhaDRUdEhxMXhHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTZCMC8yMzM3RjIzMjVFM0UxMUVDQTFGRkVCNENDNEY5QUUwMi9PVnIxZVJOMk01 cjUzdVZ0YWg0VHRIcTF4R1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkDWSWsGsjVOYqK5hDX0to9UiobGckV4z9Wepgjog/AjCI/e1DR84c 1V+sTPOAyYZAWkdS5FieFAaMQ4XODhtpD6R6/FM/jNCBG4YBwHIhkDM/nFsdICEx JY8CrlwxcBO/GsYGJxyjYp6DqsIq6DSBncO9kBB6B6XPfA1XF3CUTfdLW7DHo3W4 X+odT+b8e8PWNmG0ivNQl/CZ2RRgmrPshAYeBHzz7qMNBmyez9JGmxZnvhxp4fFv 3zod5zfLGKyxjujZKZ06W6GwKnm3VrIwvzwTSDZqtu34U0OqWIxuR+Zoy344nJEk wZWD64K2yVleJqe9uxLWqrVabEciQW20 -----END CERTIFICATE-----Generated at Sun Jun 15 08:25:07 2025 by rpki-client