$ rpki-client -vvf rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft File: oPv941FZcJK2h-zGQOyF3CnyAXM.mft (raw, json) Hash identifier: EQOjW5N343dfHlu2ommsq7R1BKehbC65EXmJcTqBlfM= Subject key identifier: 03:E3:D6:C0:24:59:12:FA:5B:AE:DE:78:01:6D:C8:CA:1F:94:23:3B Authority key identifier: A0:FB:FD:E3:51:59:70:92:B6:87:EC:C6:40:EC:85:DC:29:F2:01:73 Certificate issuer: /CN=A9140B3F/serialNumber=A0FBFDE351597092B687ECC640EC85DC29F20173 Certificate serial: 01A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft Manifest number: 019F Signing time: Fri 13 Jun 2025 02:24:51 +0000 Manifest this update: Fri 13 Jun 2025 02:24:51 +0000 Manifest next update: Fri 20 Jun 2025 02:24:51 +0000 Files and hashes: 1: oPv941FZcJK2h-zGQOyF3CnyAXM.crl (hash: Y++WYrGRA8IJoGYa2EA9NVJVr7p4ZDgyG3MbcfNecYw=) 2: 1F63D776D29011EDA849876CC4F9AE02.roa (hash: caa9vs5q3NzKdsCc37MTwoPPA4zep6D+Ht0arsk9wtA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.crl rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 02:24:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 420 (0x1a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140B3F, serialNumber=A0FBFDE351597092B687ECC640EC85DC29F20173 Validity Not Before: Jun 13 02:24:51 2025 GMT Not After : Jun 20 02:24:51 2025 GMT Subject: CN=684b8bf3-5b7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:29:e7:b7:47:1f:f3:18:c2:77:7e:72:db:95: 1d:16:df:bf:d4:f0:e3:30:88:14:aa:c5:1d:e4:16: ab:9f:02:d7:68:35:d9:27:dd:7f:f4:68:ed:73:fc: a7:3b:22:a7:88:1e:56:f0:c0:b2:ab:3b:cd:87:5e: d8:b4:03:c4:06:24:aa:82:53:19:61:88:c4:c3:0b: 26:4b:f9:47:80:6b:c4:b4:db:d6:fc:86:4d:68:44: 9c:37:30:98:a2:45:20:61:d4:91:d6:fc:d7:65:d7: e7:3c:4f:3c:6e:9c:e3:90:73:dd:8e:eb:60:1b:4c: dc:4d:d2:c5:a0:d6:60:e6:1a:cb:61:28:c3:7a:f5: f8:fd:51:51:65:d4:62:dc:c8:dd:9f:bb:80:fd:73: 7c:8e:cd:7d:44:e2:b0:dd:64:95:38:6f:dd:fb:4f: b0:6b:e2:13:e5:f8:42:e3:06:16:29:d8:ee:b8:f8: f7:ee:b2:09:1c:e0:c2:f7:aa:27:6f:61:cf:22:aa: fc:2b:96:06:5c:d7:7c:7d:1e:0b:64:60:97:fa:82: 3f:ef:5e:4c:3e:2f:5f:bc:1b:c2:1c:02:b5:36:1d: 61:df:01:f1:76:6f:24:53:27:f6:14:32:33:eb:a9: e6:c2:7d:5d:48:77:e7:e5:da:39:08:91:43:67:d1: 95:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:E3:D6:C0:24:59:12:FA:5B:AE:DE:78:01:6D:C8:CA:1F:94:23:3B X509v3 Authority Key Identifier: keyid:A0:FB:FD:E3:51:59:70:92:B6:87:EC:C6:40:EC:85:DC:29:F2:01:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:f4:8a:fb:b3:5f:75:a2:20:3a:25:f9:01:01:33:28:12:23: 1f:f4:45:3b:1a:3a:42:b6:4f:00:ce:54:1a:83:a4:05:c4:a2: 92:dd:1f:27:13:a0:d0:5d:64:12:ae:38:2a:fb:81:dc:19:54: 88:83:6a:47:1f:35:9a:f7:01:81:d9:16:47:16:b6:74:61:cb: 67:93:14:a6:87:df:c0:23:5c:1a:ab:18:63:94:9d:a2:de:41: 7f:2f:96:52:db:f8:75:f2:95:45:0e:4b:7b:22:0f:c7:b5:fb: c5:e3:32:21:b3:92:f7:73:38:f4:96:19:af:88:09:f0:f6:6f: 42:e3:2a:65:f7:0b:c0:a3:e1:fb:dd:10:09:0e:d0:f2:75:7d: 66:0b:99:31:4a:bd:f5:9a:33:5b:9b:0d:ca:15:2b:f2:29:1b: f9:5c:86:50:17:d2:00:14:4b:e2:6a:08:c8:dc:ba:2b:57:5d: 58:6d:60:7e:84:1a:03:a5:cf:8e:76:64:24:b4:4c:e7:c3:2b: 6e:6b:51:3f:79:3a:3b:97:1b:0b:51:59:5b:29:ed:4f:fe:d3: d3:f8:ac:b6:02:f3:23:6b:c0:89:de:48:ac:2e:e3:39:79:97: de:37:85:ba:95:83:ed:0e:2e:19:c5:de:49:fd:78:7b:43:55: 52:73:b0:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBCM0YxMTAvBgNVBAUTKEEwRkJGREUzNTE1OTcwOTJCNjg3RUNDNjQwRUM4NURD MjlGMjAxNzMwHhcNMjUwNjEzMDIyNDUxWhcNMjUwNjIwMDIyNDUxWjAYMRYwFAYD VQQDEw02ODRiOGJmMy01YjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtSnnt0cf8xjCd35y25UdFt+/1PDjMIgUqsUd5BarnwLXaDXZJ91/9Gjtc/yn OyKniB5W8MCyqzvNh17YtAPEBiSqglMZYYjEwwsmS/lHgGvEtNvW/IZNaEScNzCY okUgYdSR1vzXZdfnPE88bpzjkHPdjutgG0zcTdLFoNZg5hrLYSjDevX4/VFRZdRi 3Mjdn7uA/XN8js19ROKw3WSVOG/d+0+wa+IT5fhC4wYWKdjuuPj37rIJHODC96on b2HPIqr8K5YGXNd8fR4LZGCX+oI/715MPi9fvBvCHAK1Nh1h3wHxdm8kUyf2FDIz 66nmwn1dSHfn5do5CJFDZ9GVdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAPj1sAk WRL6W67eeAFtyMoflCM7MB8GA1UdIwQYMBaAFKD7/eNRWXCStofsxkDshdwp8gFz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEIzRi9GOEQ3MkNEQ0Qy OEMxMUVEQkFFOUVFNkFDNEY5QUUwMi9vUHY5NDFGWmNKSzJoLXpHUU95RjNDbnlB WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Qdjk0MUZaY0pLMmgtekdRT3lGM0NueUFYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEIzRi9GOEQ3MkNEQ0QyOEMxMUVEQkFFOUVFNkFDNEY5QUUwMi9vUHY5NDFGWmNK SzJoLXpHUU95RjNDbnlBWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBm9Ir7s191oiA6JfkBATMoEiMf9EU7GjpCtk8AzlQag6QFxKKS3R8n E6DQXWQSrjgq+4HcGVSIg2pHHzWa9wGB2RZHFrZ0YctnkxSmh9/AI1waqxhjlJ2i 3kF/L5ZS2/h18pVFDkt7Ig/HtfvF4zIhs5L3czj0lhmviAnw9m9C4ypl9wvAo+H7 3RAJDtDydX1mC5kxSr31mjNbmw3KFSvyKRv5XIZQF9IAFEviagjI3LorV11YbWB+ hBoDpc+OdmQktEznwytua1E/eTo7lxsLUVlbKe1P/tPT+Ky2AvMja8CJ3kisLuM5 eZfeN4W6lYPtDi4Zxd5J/Xh7Q1VSc7A3 -----END CERTIFICATE-----Generated at Sat Jun 14 19:05:33 2025 by rpki-client