$ rpki-client -vvf rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft File: U-OPHbJadp7S9ONa2_fqxILGEaU.mft (raw, json) Hash identifier: 2XdQa14yi33FUX6XNtlDl6dmQjZ7Gcj12XlXweldGjc= Subject key identifier: 1E:18:F5:25:1D:CE:2F:88:69:33:84:5E:71:68:2E:A4:D6:B0:8A:83 Authority key identifier: 53:E3:8F:1D:B2:5A:76:9E:D2:F4:E3:5A:DB:F7:EA:C4:82:C6:11:A5 Certificate issuer: /CN=A91449DF/serialNumber=53E38F1DB25A769ED2F4E35ADBF7EAC482C611A5 Certificate serial: 07E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-OPHbJadp7S9ONa2_fqxILGEaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft Manifest number: 07D8 Signing time: Sat 14 Jun 2025 20:52:39 +0000 Manifest this update: Sat 14 Jun 2025 20:52:39 +0000 Manifest next update: Sat 21 Jun 2025 20:52:39 +0000 Files and hashes: 1: U-OPHbJadp7S9ONa2_fqxILGEaU.crl (hash: uIfqtvW38RTEJZRmkuQXGwnZN+2zo389Y+J+irLqcr8=) 2: E5ADB5CAF73A11EAB074A016C4F9AE02.roa (hash: dLHVUNtLIV41+zRNY3QMkvAZyxZkYsTbNoR5dSniJzY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.crl rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-OPHbJadp7S9ONa2_fqxILGEaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 20:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2021 (0x7e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91449DF, serialNumber=53E38F1DB25A769ED2F4E35ADBF7EAC482C611A5 Validity Not Before: Jun 14 20:52:39 2025 GMT Not After : Jun 21 20:52:39 2025 GMT Subject: CN=684de117-c34b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:4c:61:06:40:e8:5a:13:4e:4b:51:1c:04:2f: 34:1e:f4:2a:55:c5:35:49:ce:ad:82:18:50:c7:46: fa:75:50:2f:f8:4e:d5:69:8c:c8:31:68:bc:39:e7: 33:3a:2f:dc:08:aa:bf:7d:86:be:d3:16:26:94:b3: 37:6a:7b:7f:15:a1:b3:2b:a9:46:38:4e:b9:3e:f2: d8:7f:f8:e6:84:0a:d2:94:09:b1:03:f5:21:52:92: 27:6a:ba:cc:f2:66:77:99:37:d1:25:5e:b6:4b:f0: 1b:79:cd:02:c4:19:96:c5:02:3b:b3:87:32:6f:52: ca:9c:e0:c6:b8:47:97:25:ea:2c:fb:a7:5b:e1:da: 46:d6:a4:5c:8d:2f:e0:7e:33:45:b3:03:f5:4e:da: 30:fc:d8:e1:77:fb:ed:e4:a8:bf:f2:46:95:e1:ee: 60:4d:e6:db:08:f4:bc:22:25:46:76:33:ae:30:f2: a2:08:3b:ff:b4:8f:99:7f:07:cd:2e:94:49:ef:06: 17:78:59:ea:35:73:b6:09:d3:92:98:ed:ec:0d:52: 0c:de:c4:69:7f:60:03:43:8f:ee:07:10:fb:4c:a4: 8a:be:59:3a:6d:f4:e2:a7:68:af:8b:c4:43:df:b8: eb:df:f3:bb:ae:4f:5a:39:78:e3:7e:c9:c6:0b:63: a7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:18:F5:25:1D:CE:2F:88:69:33:84:5E:71:68:2E:A4:D6:B0:8A:83 X509v3 Authority Key Identifier: keyid:53:E3:8F:1D:B2:5A:76:9E:D2:F4:E3:5A:DB:F7:EA:C4:82:C6:11:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-OPHbJadp7S9ONa2_fqxILGEaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:75:7c:eb:ff:12:93:79:c4:70:44:46:1f:21:cb:12:b6:87: 90:55:e6:ff:5f:f8:9a:80:00:da:80:58:29:81:46:50:2d:49: 60:ae:7e:22:0a:32:f9:5c:cf:06:82:b6:10:61:6e:ba:e6:f8: 6c:c8:ee:c6:ac:1a:3d:76:49:55:3a:58:3b:6e:3b:0e:a8:00: f0:99:d8:ad:81:52:f2:da:58:c2:23:8c:99:df:e3:e7:2a:d2: 37:8f:e0:84:49:4d:3b:f9:a8:5a:79:4b:aa:df:d9:66:3a:af: 9c:f7:85:e0:a6:ab:47:56:5a:1a:91:bb:4a:80:53:0c:9d:15: c7:83:03:cf:48:9e:96:f6:f4:b4:45:79:4f:58:d5:be:cd:27: a3:86:08:22:ed:47:3b:30:b0:01:8e:ad:28:70:aa:2d:b9:d7: 76:30:06:a5:d9:57:46:a5:45:83:e6:ba:0a:42:d7:ad:01:11: 4d:04:f1:21:ef:59:4b:1f:d2:73:f0:f8:43:e4:72:f7:11:58: 13:a6:d3:1f:3e:be:9e:bb:86:27:1e:07:79:6e:a2:89:d7:6a: ff:86:e2:11:2c:98:af:74:b1:55:20:3c:58:b6:3f:8b:32:25: f8:60:3a:7a:ba:47:6b:de:47:a0:52:e7:c0:cd:e6:84:03:52: 9e:61:51:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ5REYxMTAvBgNVBAUTKDUzRTM4RjFEQjI1QTc2OUVEMkY0RTM1QURCRjdFQUM0 ODJDNjExQTUwHhcNMjUwNjE0MjA1MjM5WhcNMjUwNjIxMjA1MjM5WjAYMRYwFAYD VQQDEw02ODRkZTExNy1jMzRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA60xhBkDoWhNOS1EcBC80HvQqVcU1Sc6tghhQx0b6dVAv+E7VaYzIMWi8Oecz Oi/cCKq/fYa+0xYmlLM3ant/FaGzK6lGOE65PvLYf/jmhArSlAmxA/UhUpInarrM 8mZ3mTfRJV62S/Abec0CxBmWxQI7s4cyb1LKnODGuEeXJeos+6db4dpG1qRcjS/g fjNFswP1Ttow/Njhd/vt5Ki/8kaV4e5gTebbCPS8IiVGdjOuMPKiCDv/tI+ZfwfN LpRJ7wYXeFnqNXO2CdOSmO3sDVIM3sRpf2ADQ4/uBxD7TKSKvlk6bfTip2ivi8RD 37jr3/O7rk9aOXjjfsnGC2OnsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB4Y9SUd zi+IaTOEXnFoLqTWsIqDMB8GA1UdIwQYMBaAFFPjjx2yWnae0vTjWtv36sSCxhGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDlERi8wNEI3Q0Y3NEY3 M0ExMUVBODE1QTEzMTZDNEY5QUUwMi9VLU9QSGJKYWRwN1M5T05hMl9mcXhJTEdF YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UtT1BIYkphZHA3UzlPTmEyX2ZxeElMR0VhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDlERi8wNEI3Q0Y3NEY3M0ExMUVBODE1QTEzMTZDNEY5QUUwMi9VLU9QSGJKYWRw N1M5T05hMl9mcXhJTEdFYVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEdXzr/xKTecRwREYfIcsStoeQVeb/X/iagADagFgpgUZQLUlgrn4i CjL5XM8GgrYQYW665vhsyO7GrBo9dklVOlg7bjsOqADwmditgVLy2ljCI4yZ3+Pn KtI3j+CESU07+ahaeUuq39lmOq+c94XgpqtHVloakbtKgFMMnRXHgwPPSJ6W9vS0 RXlPWNW+zSejhggi7Uc7MLABjq0ocKotudd2MAal2VdGpUWD5roKQtetARFNBPEh 71lLH9Jz8PhD5HL3EVgTptMfPr6eu4YnHgd5bqKJ12r/huIRLJivdLFVIDxYtj+L MiX4YDp6ukdr3kegUufAzeaEA1KeYVHg -----END CERTIFICATE-----Generated at Sun Jun 15 10:11:35 2025 by rpki-client