$ rpki-client -vvf rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft File: OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft (raw, json) Hash identifier: t5SEtLBSvMfeTM7LeCOqVb84Lt86V9n3F9j5Z5/hpSo= Subject key identifier: D2:BE:98:CD:B3:7D:39:D0:F0:06:52:D3:CA:B5:9D:38:DC:D1:9D:8B Authority key identifier: 39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38 Certificate issuer: /CN=A91613AB/serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838 Certificate serial: 01F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft Manifest number: 01E8 Signing time: Tue 17 Jun 2025 01:51:46 +0000 Manifest this update: Tue 17 Jun 2025 01:51:46 +0000 Manifest next update: Tue 24 Jun 2025 01:51:46 +0000 Files and hashes: 1: OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl (hash: ift5f2g+GpBktyVzDMJqAVCVUnvXI2HFB3Dsix5T52s=) 2: 65AFE18C91DB11EFBC4C2A3EC4F9AE02.roa (hash: LqvEH1o9qv1Spv16C52zEqgMsWnx5LeCvM7wNncYwmQ=) 3: A50FD050DA7911EDB0D3866BC4F9AE02.roa (hash: sq3CtUxJWk/lwN1trxwIddBHXPOdGnUuNzRlPvsNflY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 01:51:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 500 (0x1f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91613AB, serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838 Validity Not Before: Jun 17 01:51:46 2025 GMT Not After : Jun 24 01:51:46 2025 GMT Subject: CN=6850ca32-95a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a3:e7:55:76:e3:73:1b:44:74:a3:97:2d:87: 44:2e:d4:77:10:a3:8c:f0:ac:24:f0:a3:68:e3:0a: e5:c7:bc:24:17:26:d1:89:ce:26:30:31:af:3e:a1: b0:17:a4:31:69:e2:f8:fd:fe:52:38:e1:9d:2a:a2: c4:75:b2:b3:35:c5:b7:87:a3:6b:9a:89:90:a7:20: 70:14:9c:55:4a:8c:15:32:ab:e5:2d:03:94:58:84: 5f:3e:3d:8e:09:45:0b:af:13:c0:36:b1:5f:ee:12: 70:b0:ef:34:ed:72:b4:4b:19:52:8d:64:a0:87:a5: de:e9:df:fb:89:a7:f1:d5:31:f0:93:7e:e8:24:18: c9:75:f2:0c:84:ce:68:10:3f:af:62:ae:a4:7c:23: 0c:e2:ef:50:9b:db:cd:66:46:07:76:eb:6e:bb:20: 47:18:33:c4:56:18:01:a4:a8:4c:24:58:b7:4c:10: 5d:8a:67:38:17:d1:9d:69:3e:1f:ba:78:e0:65:36: b1:d2:7f:e1:1c:dd:ae:2b:ee:65:fc:c1:d7:89:9b: b5:eb:0a:c4:90:a2:7d:d4:9d:d5:82:07:95:5e:45: 3b:9d:e8:78:4a:a4:e0:3e:b1:1e:ab:af:65:79:51: 01:8c:d8:2d:1e:79:13:99:f8:6b:64:78:e2:f5:82: fc:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:BE:98:CD:B3:7D:39:D0:F0:06:52:D3:CA:B5:9D:38:DC:D1:9D:8B X509v3 Authority Key Identifier: keyid:39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:75:87:71:20:f1:28:f8:b5:37:d1:e4:22:30:71:be:7e:e2: c7:f5:98:cc:58:ae:35:c6:af:98:05:9c:9a:43:6d:58:07:d1: 6a:a1:87:cd:df:01:75:c0:47:de:d0:89:32:1a:cd:5c:d3:28: a4:0e:1d:12:90:f9:a5:e8:7d:5d:04:df:ef:54:7b:af:53:a4: 5d:7d:7e:60:5d:11:fc:0d:5e:50:97:d3:92:2a:d7:37:49:db: 8b:10:d0:eb:ad:e1:8e:09:4b:e8:13:c3:fd:14:9e:73:a7:6d: 17:45:75:d2:6d:5d:67:ea:fc:0f:60:81:69:31:82:0c:58:17: ca:9e:d0:4e:36:5f:7a:ce:fe:ec:bf:d6:f3:0f:21:d2:28:80: 83:14:98:53:20:66:53:31:d5:b7:83:8a:62:0b:a7:ec:4d:b5: c6:77:eb:3b:b1:23:8a:9f:3e:35:26:56:8d:99:21:7a:4b:7e: e3:a6:b2:54:fe:bc:c0:cf:7a:62:1d:ec:11:8f:3a:35:4a:63: f9:fa:cb:c4:9d:9f:72:85:c2:0c:ab:d5:77:33:76:82:45:34: 45:49:f2:bd:3b:30:30:9a:b1:26:12:c9:0c:95:d3:1c:57:4c: b8:1f:55:28:f1:a9:b1:bb:1a:84:da:e7:80:4c:76:a2:f2:69: 40:80:2c:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEzQUIxMTAvBgNVBAUTKDM5MDFBRjRBOTNGRUZBQUVCODc5Q0M5RjU5OTRFNEU3 RjAxQUY4MzgwHhcNMjUwNjE3MDE1MTQ2WhcNMjUwNjI0MDE1MTQ2WjAYMRYwFAYD VQQDEw02ODUwY2EzMi05NWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy6PnVXbjcxtEdKOXLYdELtR3EKOM8Kwk8KNo4wrlx7wkFybRic4mMDGvPqGw F6QxaeL4/f5SOOGdKqLEdbKzNcW3h6NrmomQpyBwFJxVSowVMqvlLQOUWIRfPj2O CUULrxPANrFf7hJwsO807XK0SxlSjWSgh6Xe6d/7iafx1THwk37oJBjJdfIMhM5o ED+vYq6kfCMM4u9Qm9vNZkYHdutuuyBHGDPEVhgBpKhMJFi3TBBdimc4F9GdaT4f unjgZTax0n/hHN2uK+5l/MHXiZu16wrEkKJ91J3VggeVXkU7neh4SqTgPrEeq69l eVEBjNgtHnkTmfhrZHji9YL83wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNK+mM2z fTnQ8AZS08q1nTjc0Z2LMB8GA1UdIwQYMBaAFDkBr0qT/vquuHnMn1mU5OfwGvg4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTNBQi85Q0Y3RUNEQTZG OEIxMUVEOEZBRTNDMTFDNEY5QUUwMi9PUUd2U3BQLS1xNjRlY3lmV1pUazVfQWEt RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09RR3ZTcFAtLXE2NGVjeWZXWlRrNV9BYS1EZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTNBQi85Q0Y3RUNEQTZGOEIxMUVEOEZBRTNDMTFDNEY5QUUwMi9PUUd2U3BQLS1x NjRlY3lmV1pUazVfQWEtRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrdYdxIPEo+LU30eQiMHG+fuLH9ZjMWK41xq+YBZyaQ21YB9FqoYfN 3wF1wEfe0IkyGs1c0yikDh0SkPml6H1dBN/vVHuvU6RdfX5gXRH8DV5Ql9OSKtc3 SduLENDrreGOCUvoE8P9FJ5zp20XRXXSbV1n6vwPYIFpMYIMWBfKntBONl96zv7s v9bzDyHSKICDFJhTIGZTMdW3g4piC6fsTbXGd+s7sSOKnz41JlaNmSF6S37jprJU /rzAz3piHewRjzo1SmP5+svEnZ9yhcIMq9V3M3aCRTRFSfK9OzAwmrEmEskMldMc V0y4H1Uo8amxuxqE2ueATHai8mlAgCzi -----END CERTIFICATE-----Generated at Tue Jun 17 16:12:09 2025 by rpki-client