$ rpki-client -vvf rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.mft File: 1OqUZPMism19ISjcN1LyKIgAFto.mft (raw, json) Hash identifier: FEBqiFgb307gV9AEf+glizJfr18eT9S9AggY7xgl0uY= Subject key identifier: 6B:5C:06:FD:85:4E:EE:4D:2E:67:B5:B7:4F:77:87:25:3D:6F:0D:B9 Authority key identifier: D4:EA:94:64:F3:22:B2:6D:7D:21:28:DC:37:52:F2:28:88:00:16:DA Certificate issuer: /CN=A913367F/serialNumber=D4EA9464F322B26D7D2128DC3752F228880016DA Certificate serial: 07A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OqUZPMism19ISjcN1LyKIgAFto.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.mft Manifest number: 0798 Signing time: Thu 12 Jun 2025 21:07:11 +0000 Manifest this update: Thu 12 Jun 2025 21:07:10 +0000 Manifest next update: Thu 19 Jun 2025 21:07:10 +0000 Files and hashes: 1: 1OqUZPMism19ISjcN1LyKIgAFto.crl (hash: ZGDFIEDA2mHEPWG4boonDttSyOZiABLrK2OEObLAGB8=) 2: BF13AB8C5D3311EFA43E0C6EC4F9AE02.roa (hash: w+svrnjAumlsgho2zJHotOA2YwQVmczAOvvR54Jd4tQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.crl rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OqUZPMism19ISjcN1LyKIgAFto.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 21:07:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1961 (0x7a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913367F, serialNumber=D4EA9464F322B26D7D2128DC3752F228880016DA Validity Not Before: Jun 12 21:07:10 2025 GMT Not After : Jun 19 21:07:10 2025 GMT Subject: CN=684b417f-1dfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f5:2a:80:a2:81:76:08:d1:e6:db:d7:c3:ba: 0b:77:a8:58:ac:d9:ab:d2:9b:ae:94:98:85:7b:79: 81:fc:13:ee:13:bd:42:e4:f0:7c:e5:95:f2:60:e5: 74:b1:7a:1e:d5:dc:81:af:7a:1d:42:76:61:18:11: 4b:54:60:b0:4b:77:2b:63:0e:60:67:d9:26:7f:98: 0c:c7:0a:2c:df:4d:ee:42:0f:17:61:10:da:65:4f: 9a:c3:c9:34:4d:ae:3b:8f:9d:63:6b:32:5e:47:0f: fd:c4:83:48:5e:97:b2:12:38:fb:3a:30:9c:0c:21: 73:e2:65:e0:b3:47:e1:34:7a:34:47:9e:18:05:90: 20:ec:25:71:2a:6c:4c:48:0b:3c:d0:38:51:64:39: 52:09:e9:17:04:c7:d0:d7:75:7f:9f:79:fd:b3:1a: d5:ef:e5:9f:0c:74:ff:5b:18:53:21:41:fa:96:36: ea:07:92:df:d6:49:cc:a7:71:0b:18:3b:cf:52:b9: 30:28:6a:00:93:39:2b:8f:a0:3d:64:42:3d:b1:66: 0b:6f:17:69:9f:a5:c0:8e:73:5f:51:41:47:4d:9b: a1:cd:30:de:3d:be:ab:bd:d4:67:ad:3f:ea:0f:01: c3:b2:90:dd:99:65:4c:72:20:1a:a9:f3:c4:41:03: ad:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:5C:06:FD:85:4E:EE:4D:2E:67:B5:B7:4F:77:87:25:3D:6F:0D:B9 X509v3 Authority Key Identifier: keyid:D4:EA:94:64:F3:22:B2:6D:7D:21:28:DC:37:52:F2:28:88:00:16:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OqUZPMism19ISjcN1LyKIgAFto.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:38:34:92:84:2d:54:f1:3e:44:da:38:b3:a9:6f:c1:88:fd: c5:43:fd:df:54:8c:f3:5a:bd:4b:b9:cb:78:45:f0:61:d8:c3: 3a:4d:66:25:ac:ba:3b:e2:f7:b3:7d:a4:03:f4:80:42:07:a6: 23:09:21:09:8d:71:a4:ea:68:9f:f0:dd:ac:05:2f:20:7b:f3: cf:d3:42:f7:3a:eb:4f:fa:2b:be:75:1b:78:ef:e0:ec:02:2d: 86:e2:45:c0:41:39:37:df:8b:96:9d:27:93:8f:c0:fa:77:b1: 4a:56:38:58:99:57:0a:c5:51:4a:58:b4:aa:3a:81:b7:60:bf: e6:ba:86:be:49:be:1d:6e:63:98:d0:d2:30:ba:c0:a6:cf:81: d5:95:0f:82:ac:9d:62:b2:02:22:d3:1d:cf:9e:8a:93:38:5c: 1d:7a:d7:42:35:d8:1e:42:06:18:b9:d7:97:48:36:0a:bd:8a: 30:38:f0:a4:6d:48:a8:64:a2:7b:b7:a8:58:dd:9a:f1:a7:2d: 7d:d6:e1:4a:b7:9e:e7:6e:09:48:6c:64:8b:81:74:10:e6:a8: 58:a5:22:a1:eb:ce:9e:41:e0:13:88:79:16:a7:f3:80:f7:36: 6c:ba:0f:87:04:5b:3d:b7:ed:96:a0:fc:09:24:10:19:76:c7: 0a:8e:9c:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM2N0YxMTAvBgNVBAUTKEQ0RUE5NDY0RjMyMkIyNkQ3RDIxMjhEQzM3NTJGMjI4 ODgwMDE2REEwHhcNMjUwNjEyMjEwNzEwWhcNMjUwNjE5MjEwNzEwWjAYMRYwFAYD VQQDEw02ODRiNDE3Zi0xZGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0/UqgKKBdgjR5tvXw7oLd6hYrNmr0puulJiFe3mB/BPuE71C5PB85ZXyYOV0 sXoe1dyBr3odQnZhGBFLVGCwS3crYw5gZ9kmf5gMxwos303uQg8XYRDaZU+aw8k0 Ta47j51jazJeRw/9xINIXpeyEjj7OjCcDCFz4mXgs0fhNHo0R54YBZAg7CVxKmxM SAs80DhRZDlSCekXBMfQ13V/n3n9sxrV7+WfDHT/WxhTIUH6ljbqB5Lf1knMp3EL GDvPUrkwKGoAkzkrj6A9ZEI9sWYLbxdpn6XAjnNfUUFHTZuhzTDePb6rvdRnrT/q DwHDspDdmWVMciAaqfPEQQOtdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGtcBv2F Tu5NLme1t093hyU9bw25MB8GA1UdIwQYMBaAFNTqlGTzIrJtfSEo3DdS8iiIABba MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzY3Ri9BMjIxOTA1ODEy OEIxMUVCQkZBMkM0N0VDNEY5QUUwMi8xT3FVWlBNaXNtMTlJU2pjTjFMeUtJZ0FG dG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFPcVVaUE1pc20xOUlTamNOMUx5S0lnQUZ0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzY3Ri9BMjIxOTA1ODEyOEIxMUVCQkZBMkM0N0VDNEY5QUUwMi8xT3FVWlBNaXNt MTlJU2pjTjFMeUtJZ0FGdG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXODSShC1U8T5E2jizqW/BiP3FQ/3fVIzzWr1Luct4RfBh2MM6TWYl rLo74vezfaQD9IBCB6YjCSEJjXGk6mif8N2sBS8ge/PP00L3OutP+iu+dRt47+Ds Ai2G4kXAQTk334uWnSeTj8D6d7FKVjhYmVcKxVFKWLSqOoG3YL/muoa+Sb4dbmOY 0NIwusCmz4HVlQ+CrJ1isgIi0x3PnoqTOFwdetdCNdgeQgYYudeXSDYKvYowOPCk bUioZKJ7t6hY3Zrxpy191uFKt57nbglIbGSLgXQQ5qhYpSKh686eQeATiHkWp/OA 9zZsug+HBFs9t+2WoPwJJBAZdscKjpxH -----END CERTIFICATE-----Generated at Sat Jun 14 19:35:19 2025 by rpki-client