$ rpki-client -vvf rpki.apnic.net/member_repository/A91620E0/D964B482310E11EA9C3CE72FC4F9AE02/dOW7m208x_jCmoO9yEkrllnw7hc.mft File: dOW7m208x_jCmoO9yEkrllnw7hc.mft (raw, json) Hash identifier: TyOFtrSqwQmG3YcOzHlOS6TYUjBgMINVGPDfsRvhLKo= Subject key identifier: 47:76:07:25:18:4D:6F:6F:19:A2:2A:91:D1:C2:E3:42:47:42:2A:C3 Authority key identifier: 74:E5:BB:9B:6D:3C:C7:F8:C2:9A:83:BD:C8:49:2B:96:59:F0:EE:17 Certificate issuer: /CN=A91620E0/serialNumber=74E5BB9B6D3CC7F8C29A83BDC8492B9659F0EE17 Certificate serial: 0E96 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dOW7m208x_jCmoO9yEkrllnw7hc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91620E0/D964B482310E11EA9C3CE72FC4F9AE02/dOW7m208x_jCmoO9yEkrllnw7hc.mft Manifest number: 0D5B Signing time: Fri 20 Jun 2025 19:00:45 +0000 Manifest this update: Fri 20 Jun 2025 19:00:45 +0000 Manifest next update: Fri 27 Jun 2025 19:00:45 +0000 Files and hashes: 1: dOW7m208x_jCmoO9yEkrllnw7hc.crl (hash: mHfzOxkChkgco/Oj5/FxrxdS4h5Ml8LDDDJA+sOYa1I=) 2: 1CC3EA9EF83911EF9736296CC4F9AE02.roa (hash: H6FHCCgVtgSgm4NIEiO6++O/KzFJj7YIS4H8YlzIBZs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91620E0/D964B482310E11EA9C3CE72FC4F9AE02/dOW7m208x_jCmoO9yEkrllnw7hc.crl rsync://rpki.apnic.net/member_repository/A91620E0/D964B482310E11EA9C3CE72FC4F9AE02/dOW7m208x_jCmoO9yEkrllnw7hc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dOW7m208x_jCmoO9yEkrllnw7hc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 19:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3734 (0xe96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91620E0, serialNumber=74E5BB9B6D3CC7F8C29A83BDC8492B9659F0EE17 Validity Not Before: Jun 20 19:00:45 2025 GMT Not After : Jun 27 19:00:45 2025 GMT Subject: CN=6855afdd-63f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4a:ba:08:e1:5f:11:e0:b1:ce:57:56:5b:62: 96:b1:90:1c:43:97:44:0c:ca:a6:7e:b2:cb:30:2f: fd:2b:2e:dc:8e:44:a7:2d:75:e8:74:6a:2c:78:84: 84:8c:a5:2c:39:a8:91:fe:9e:fe:97:b4:32:2e:94: bb:ce:ad:fc:c0:5a:92:2d:6c:dd:75:4c:d4:42:20: cf:40:6d:25:ae:c5:75:89:12:0e:78:95:b3:d0:4d: e6:46:00:85:3e:44:89:7b:ac:f8:b5:6a:23:4c:6b: f3:51:1a:ec:db:54:6d:bd:e2:bf:38:95:53:a4:e8: a2:15:0f:c2:13:fe:b0:8c:55:e4:86:fc:54:ea:26: b3:04:8a:d7:01:b0:f2:96:2e:af:e2:52:6e:88:32: 2a:68:f3:54:7e:d9:2b:30:c2:10:60:9e:36:e7:9a: 68:10:5e:35:c2:91:fa:14:72:c5:0f:d3:cc:04:b3: 91:38:73:58:f2:b5:31:e1:93:54:b5:cb:a7:f1:7e: 04:0c:34:4f:e5:5d:bc:0f:25:5d:7c:45:23:c0:17: a6:36:ea:b2:d3:ac:60:87:58:8b:62:12:a6:5e:de: 31:11:48:e1:a4:79:d8:10:b9:0e:25:59:81:94:41: d7:d6:68:11:3d:ac:cc:b9:5a:b0:d8:a7:b4:a1:09: bd:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:76:07:25:18:4D:6F:6F:19:A2:2A:91:D1:C2:E3:42:47:42:2A:C3 X509v3 Authority Key Identifier: keyid:74:E5:BB:9B:6D:3C:C7:F8:C2:9A:83:BD:C8:49:2B:96:59:F0:EE:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91620E0/D964B482310E11EA9C3CE72FC4F9AE02/dOW7m208x_jCmoO9yEkrllnw7hc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dOW7m208x_jCmoO9yEkrllnw7hc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91620E0/D964B482310E11EA9C3CE72FC4F9AE02/dOW7m208x_jCmoO9yEkrllnw7hc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:6c:3f:6d:7f:53:32:ea:d7:3e:f1:08:be:cb:8a:6f:91:ce: 60:0f:8a:e7:61:1b:c4:d2:a2:d5:7f:e1:84:04:17:2b:c9:d0: ca:3f:aa:45:f0:f5:c8:aa:dc:f0:45:05:22:fa:e8:12:76:39: 8f:99:83:55:26:b2:00:1f:3d:60:98:3e:a6:8c:69:c0:e0:5f: 60:76:fb:3a:cc:05:fe:93:00:eb:f6:e0:e7:06:50:d2:68:3c: 09:81:bd:62:c1:f2:1c:d1:4d:56:9f:d7:d0:24:5e:10:3c:e5: 69:c9:88:84:51:a7:f4:3b:f3:fc:d5:99:95:a6:6d:33:b6:e4: c3:98:c5:d3:7e:7a:72:0d:a8:11:4b:81:97:fd:11:40:33:28: 1f:3e:11:c4:13:fa:18:18:21:f6:82:dd:84:1e:6e:ce:3c:66: 30:37:2f:a1:c8:86:a9:ef:f7:c5:6d:b7:4c:93:26:9a:eb:4d: 98:2e:fd:a6:cc:65:82:7f:99:fb:38:a8:24:12:3d:f7:68:c3: 07:d7:8d:3d:12:75:a8:97:63:6e:42:b7:82:be:1b:ee:56:db: 07:bc:20:26:3b:79:af:96:10:eb:97:aa:10:59:c6:67:83:a5: d3:74:d9:17:88:d8:a9:6d:10:29:68:8f:92:9e:dd:89:92:e5: 2f:8e:8b:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDpYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIwRTAxMTAvBgNVBAUTKDc0RTVCQjlCNkQzQ0M3RjhDMjlBODNCREM4NDkyQjk2 NTlGMEVFMTcwHhcNMjUwNjIwMTkwMDQ1WhcNMjUwNjI3MTkwMDQ1WjAYMRYwFAYD VQQDEw02ODU1YWZkZC02M2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoUq6COFfEeCxzldWW2KWsZAcQ5dEDMqmfrLLMC/9Ky7cjkSnLXXodGoseISE jKUsOaiR/p7+l7QyLpS7zq38wFqSLWzddUzUQiDPQG0lrsV1iRIOeJWz0E3mRgCF PkSJe6z4tWojTGvzURrs21RtveK/OJVTpOiiFQ/CE/6wjFXkhvxU6iazBIrXAbDy li6v4lJuiDIqaPNUftkrMMIQYJ4255poEF41wpH6FHLFD9PMBLOROHNY8rUx4ZNU tcun8X4EDDRP5V28DyVdfEUjwBemNuqy06xgh1iLYhKmXt4xEUjhpHnYELkOJVmB lEHX1mgRPazMuVqw2Ke0oQm9qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEd2ByUY TW9vGaIqkdHC40JHQirDMB8GA1UdIwQYMBaAFHTlu5ttPMf4wpqDvchJK5ZZ8O4X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjBFMC9EOTY0QjQ4MjMx MEUxMUVBOUMzQ0U3MkZDNEY5QUUwMi9kT1c3bTIwOHhfakNtb085eUVrcmxsbnc3 aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RPVzdtMjA4eF9qQ21vTzl5RWtybGxudzdoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjBFMC9EOTY0QjQ4MjMxMEUxMUVBOUMzQ0U3MkZDNEY5QUUwMi9kT1c3bTIwOHhf akNtb085eUVrcmxsbnc3aGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCabD9tf1My6tc+8Qi+y4pvkc5gD4rnYRvE0qLVf+GEBBcrydDKP6pF 8PXIqtzwRQUi+ugSdjmPmYNVJrIAHz1gmD6mjGnA4F9gdvs6zAX+kwDr9uDnBlDS aDwJgb1iwfIc0U1Wn9fQJF4QPOVpyYiEUaf0O/P81ZmVpm0ztuTDmMXTfnpyDagR S4GX/RFAMygfPhHEE/oYGCH2gt2EHm7OPGYwNy+hyIap7/fFbbdMkyaa602YLv2m zGWCf5n7OKgkEj33aMMH1409EnWol2NuQreCvhvuVtsHvCAmO3mvlhDrl6oQWcZn g6XTdNkXiNipbRApaI+Snt2JkuUvjovQ -----END CERTIFICATE-----Generated at Sun Jun 22 13:07:42 2025 by rpki-client