$ rpki-client -vvf rpki.apnic.net/member_repository/A91498A4/ECF30A9E905311EB9CA8721DC4F9AE02/OjOl2tw3NyZBfd1W5GeQ_4S7ztE.mft File: OjOl2tw3NyZBfd1W5GeQ_4S7ztE.mft (raw, json) Hash identifier: 4eqp3+psjtOtH9aSRzkOhUmkX8yB0QWvgJIAWbFeSFg= Subject key identifier: 7A:D9:6F:EE:E6:13:10:47:1D:AE:19:19:37:32:0D:9E:4E:05:50:3E Authority key identifier: 3A:33:A5:DA:DC:37:37:26:41:7D:DD:56:E4:67:90:FF:84:BB:CE:D1 Certificate issuer: /CN=A91498A4/serialNumber=3A33A5DADC373726417DDD56E46790FF84BBCED1 Certificate serial: 064A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OjOl2tw3NyZBfd1W5GeQ_4S7ztE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91498A4/ECF30A9E905311EB9CA8721DC4F9AE02/OjOl2tw3NyZBfd1W5GeQ_4S7ztE.mft Manifest number: 0645 Signing time: Sat 14 Jun 2025 22:19:49 +0000 Manifest this update: Sat 14 Jun 2025 22:19:49 +0000 Manifest next update: Sat 21 Jun 2025 22:19:48 +0000 Files and hashes: 1: OjOl2tw3NyZBfd1W5GeQ_4S7ztE.crl (hash: OWkvvmaW0bwOsJJJq4eQJVaZH2GxsGYEuSJcXzYO2wM=) 2: A7A77B96911111EBA69D2641C4F9AE02.roa (hash: GeZswpwVwmpN5JkYUADU3m9LKzzMiHleESILy/kILG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91498A4/ECF30A9E905311EB9CA8721DC4F9AE02/OjOl2tw3NyZBfd1W5GeQ_4S7ztE.crl rsync://rpki.apnic.net/member_repository/A91498A4/ECF30A9E905311EB9CA8721DC4F9AE02/OjOl2tw3NyZBfd1W5GeQ_4S7ztE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OjOl2tw3NyZBfd1W5GeQ_4S7ztE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 22:19:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1610 (0x64a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91498A4, serialNumber=3A33A5DADC373726417DDD56E46790FF84BBCED1 Validity Not Before: Jun 14 22:19:49 2025 GMT Not After : Jun 21 22:19:48 2025 GMT Subject: CN=684df585-5611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:22:12:56:cf:c9:4f:e4:11:6a:2d:00:c0:39: d2:9c:3d:de:79:b2:69:4b:bd:07:18:ba:28:dc:41: 26:54:5d:b9:44:b1:33:e9:f4:e0:02:1c:ed:da:95: 78:44:66:eb:11:2e:a7:10:97:8d:9f:72:3b:cd:40: 67:78:33:7f:8a:66:46:54:7b:a1:a1:6c:0c:83:1a: 7d:89:0e:7f:e8:5e:f4:1d:11:23:e5:f2:f0:4c:a3: 25:a2:db:bc:c8:9e:22:8f:83:0a:c0:0c:ef:64:73: b5:94:a5:76:45:65:89:84:e9:ba:33:a4:6c:75:84: 4a:46:23:19:76:6b:a6:5f:a6:ee:a5:c2:6e:f9:d9: ee:b9:e1:eb:c3:df:96:8c:88:9f:f9:eb:d3:60:3b: 88:6c:4c:49:a4:b5:62:c5:fe:f6:4e:e7:90:e3:f2: 37:70:e0:6e:cc:91:e9:f8:a5:7b:52:9f:77:5c:ac: f9:b9:8c:28:73:c7:bb:15:62:c8:df:0c:be:96:67: dc:1a:41:bf:c1:af:b8:ec:4e:17:2c:7d:71:86:bf: ab:db:6e:93:d0:79:48:03:4e:dc:db:92:51:df:fb: b1:97:13:98:12:90:4d:fd:17:67:b8:d3:da:37:01: 88:2b:45:8e:2e:89:cf:cd:99:33:01:22:ac:ac:65: 3a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:D9:6F:EE:E6:13:10:47:1D:AE:19:19:37:32:0D:9E:4E:05:50:3E X509v3 Authority Key Identifier: keyid:3A:33:A5:DA:DC:37:37:26:41:7D:DD:56:E4:67:90:FF:84:BB:CE:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91498A4/ECF30A9E905311EB9CA8721DC4F9AE02/OjOl2tw3NyZBfd1W5GeQ_4S7ztE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OjOl2tw3NyZBfd1W5GeQ_4S7ztE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91498A4/ECF30A9E905311EB9CA8721DC4F9AE02/OjOl2tw3NyZBfd1W5GeQ_4S7ztE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:28:85:0d:2f:b7:b5:8b:ab:4b:97:33:d0:c5:25:09:02:f9: 28:07:ab:0d:0c:93:ce:ae:4d:67:93:0f:ca:8d:ce:ce:33:22: 19:68:1b:66:0e:d4:ed:49:a1:a2:cf:5b:44:a4:67:89:81:99: 96:01:2c:8d:1f:db:35:74:c9:52:46:b6:1d:e2:4a:0c:8e:73: 56:5f:27:5d:e2:51:09:b6:26:30:ae:cd:84:f7:00:f6:97:bb: 92:6e:11:3d:c6:0c:2d:29:d5:52:ee:4b:be:61:5c:25:59:ea: 20:c9:5b:95:3e:4d:c5:d5:a4:e5:29:ee:87:28:a7:03:36:9a: 3e:c5:e6:4d:af:d2:93:b5:cb:d6:c3:75:ac:3c:1f:ee:2b:b7: f1:ac:a3:e6:a9:f2:5a:17:bf:27:9a:58:df:c7:41:34:0c:91: ba:0d:c7:65:6e:44:89:40:52:a6:44:1d:63:70:3d:fd:9e:37: 62:8c:c9:c3:7e:81:04:cd:3e:07:23:26:a3:b0:8e:01:de:f8: 81:23:d7:50:22:54:14:57:fc:c6:54:2f:4e:bc:6a:1a:69:aa: b2:15:c1:9e:19:44:f8:e4:bf:bc:16:59:25:81:e9:7e:0f:0c: 4e:34:e6:28:0f:19:83:2f:6d:12:e8:3f:07:2a:53:e5:63:8f: 50:eb:62:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk4QTQxMTAvBgNVBAUTKDNBMzNBNURBREMzNzM3MjY0MTdEREQ1NkU0Njc5MEZG ODRCQkNFRDEwHhcNMjUwNjE0MjIxOTQ5WhcNMjUwNjIxMjIxOTQ4WjAYMRYwFAYD VQQDEw02ODRkZjU4NS01NjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArCISVs/JT+QRai0AwDnSnD3eebJpS70HGLoo3EEmVF25RLEz6fTgAhzt2pV4 RGbrES6nEJeNn3I7zUBneDN/imZGVHuhoWwMgxp9iQ5/6F70HREj5fLwTKMlotu8 yJ4ij4MKwAzvZHO1lKV2RWWJhOm6M6RsdYRKRiMZdmumX6bupcJu+dnuueHrw9+W jIif+evTYDuIbExJpLVixf72TueQ4/I3cOBuzJHp+KV7Up93XKz5uYwoc8e7FWLI 3wy+lmfcGkG/wa+47E4XLH1xhr+r226T0HlIA07c25JR3/uxlxOYEpBN/RdnuNPa NwGIK0WOLonPzZkzASKsrGU6UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHrZb+7m ExBHHa4ZGTcyDZ5OBVA+MB8GA1UdIwQYMBaAFDozpdrcNzcmQX3dVuRnkP+Eu87R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OThBNC9FQ0YzMEE5RTkw NTMxMUVCOUNBODcyMURDNEY5QUUwMi9Pak9sMnR3M055WkJmZDFXNUdlUV80Uzd6 dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09qT2wydHczTnlaQmZkMVc1R2VRXzRTN3p0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OThBNC9FQ0YzMEE5RTkwNTMxMUVCOUNBODcyMURDNEY5QUUwMi9Pak9sMnR3M055 WkJmZDFXNUdlUV80Uzd6dEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5KIUNL7e1i6tLlzPQxSUJAvkoB6sNDJPOrk1nkw/Kjc7OMyIZaBtm DtTtSaGiz1tEpGeJgZmWASyNH9s1dMlSRrYd4koMjnNWXydd4lEJtiYwrs2E9wD2 l7uSbhE9xgwtKdVS7ku+YVwlWeogyVuVPk3F1aTlKe6HKKcDNpo+xeZNr9KTtcvW w3WsPB/uK7fxrKPmqfJaF78nmljfx0E0DJG6DcdlbkSJQFKmRB1jcD39njdijMnD foEEzT4HIyajsI4B3viBI9dQIlQUV/zGVC9OvGoaaaqyFcGeGUT45L+8Flklgel+ DwxONOYoDxmDL20S6D8HKlPlY49Q62J5 -----END CERTIFICATE-----Generated at Sun Jun 15 08:39:06 2025 by rpki-client