$ rpki-client -vvf rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft File: OUPUJhV5zeDoKgXKKrVLOHulGTM.mft (raw, json) Hash identifier: mHFyxkUkCkiBaH/YDj2EMIFvvw7Vsr0MMsx0JBJbYbw= Subject key identifier: 21:FB:B4:23:E8:DB:15:06:CB:4B:D0:63:A4:AB:6F:7B:02:B7:EF:33 Authority key identifier: 39:43:D4:26:15:79:CD:E0:E8:2A:05:CA:2A:B5:4B:38:7B:A5:19:33 Certificate issuer: /CN=A919D88F/serialNumber=3943D4261579CDE0E82A05CA2AB54B387BA51933 Certificate serial: 7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUPUJhV5zeDoKgXKKrVLOHulGTM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft Manifest number: 7B Signing time: Sun 15 Jun 2025 05:50:40 +0000 Manifest this update: Sun 15 Jun 2025 05:50:39 +0000 Manifest next update: Sun 22 Jun 2025 05:50:39 +0000 Files and hashes: 1: OUPUJhV5zeDoKgXKKrVLOHulGTM.crl (hash: Xiutt1oii+2YEkK+hLwLY3KPe+kjVjqlzLO1DNkEOx0=) 2: 31C36B64905F11EFAF49EB6BC4F9AE02.roa (hash: L+MQl2N4HWMJyowT/sQLapWMqlpwpjacwTEIlXHA4EM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.crl rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUPUJhV5zeDoKgXKKrVLOHulGTM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 124 (0x7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D88F, serialNumber=3943D4261579CDE0E82A05CA2AB54B387BA51933 Validity Not Before: Jun 15 05:50:39 2025 GMT Not After : Jun 22 05:50:39 2025 GMT Subject: CN=684e5f2f-0abe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:32:94:06:b5:d7:3f:68:11:b8:66:83:c0:a3: 99:5a:ee:d2:cf:ab:f3:4e:3e:ea:07:f0:b1:1d:5d: fa:87:b1:e1:9e:fe:a8:47:4f:5f:3c:f3:c7:94:20: 1a:75:32:4e:4c:39:e6:44:aa:c9:5b:fc:d9:ef:8c: 67:ec:fa:f4:a1:37:22:d0:f2:3a:ab:59:0d:40:10: 91:04:2a:df:6c:47:fd:6b:c8:bd:c9:a2:4c:33:00: d8:42:34:ce:bf:ea:fe:2d:cc:6c:2c:2e:e7:41:e0: 53:74:45:6d:12:cd:d3:d5:8a:cf:8a:ad:ef:5b:86: c1:ef:2e:fd:5c:01:c4:73:4c:d4:5a:52:a1:42:32: 4f:f5:87:d7:20:60:db:49:58:d5:10:53:e3:a5:b4: a5:4c:5a:07:41:10:8e:79:a8:48:50:46:bc:9e:24: 4e:11:8d:a5:5b:10:cc:4b:2a:27:a9:99:b7:d8:2c: ce:df:1a:5a:33:1f:27:ec:3a:be:6c:96:f1:65:99: e2:57:b5:22:39:ff:c4:1b:01:0f:25:3b:17:41:d9: 6e:36:91:d9:84:86:2c:f2:01:7e:01:ad:02:fc:8a: fb:a0:ba:36:54:ed:11:98:bf:6a:ea:1a:9e:5b:ec: 7c:c3:e4:34:de:33:e9:98:b7:f4:8f:9b:0e:4d:ed: bf:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:FB:B4:23:E8:DB:15:06:CB:4B:D0:63:A4:AB:6F:7B:02:B7:EF:33 X509v3 Authority Key Identifier: keyid:39:43:D4:26:15:79:CD:E0:E8:2A:05:CA:2A:B5:4B:38:7B:A5:19:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUPUJhV5zeDoKgXKKrVLOHulGTM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:6a:15:9d:1b:38:09:5f:2a:7e:3c:77:df:19:42:3f:a6:3e: 87:5f:5f:6b:b0:8f:b8:c7:eb:d8:9f:e9:f9:04:77:99:d9:9c: e6:2e:67:9a:00:45:18:9b:fb:ad:15:27:72:1a:0e:77:bc:dd: a9:d2:98:c5:43:ef:ea:0a:18:f3:63:05:0e:51:c3:9e:51:ff: b2:2d:d4:fd:47:d7:ea:f6:6e:76:f3:9c:25:e7:12:b3:76:66: e8:19:ab:58:f7:da:57:a5:61:04:8c:20:a6:21:a7:9e:bd:22: 70:21:be:8e:77:59:60:76:f4:c5:9e:26:db:e7:6a:99:48:fe: a8:1f:29:e0:d0:7f:4b:e1:59:d2:e8:6d:5f:be:ed:5f:55:db: fa:ea:0c:61:3f:65:2f:b3:80:9b:ab:d6:26:2c:47:f1:ac:91: be:f7:f9:d9:66:a5:ac:9a:0e:e9:cf:0a:fe:b0:5c:d3:19:2f: f5:87:d0:31:9a:ae:81:6c:58:41:63:34:14:0a:bf:4f:70:b7: 26:77:63:c6:3a:be:e8:4a:4f:38:6c:c9:f3:2b:ac:d5:72:e8: 1d:86:26:6d:c3:58:4a:a8:1c:6b:3b:79:1d:42:51:30:bc:6b: a5:a3:dc:8a:9c:91:7e:e8:59:46:6d:2a:a8:61:1e:ca:4e:38: 5f:b7:fd:2a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RDg4RjExMC8GA1UEBRMoMzk0M0Q0MjYxNTc5Q0RFMEU4MkEwNUNBMkFCNTRCMzg3 QkE1MTkzMzAeFw0yNTA2MTUwNTUwMzlaFw0yNTA2MjIwNTUwMzlaMBgxFjAUBgNV BAMTDTY4NGU1ZjJmLTBhYmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0MpQGtdc/aBG4ZoPAo5la7tLPq/NOPuoH8LEdXfqHseGe/qhHT18888eUIBp1 Mk5MOeZEqslb/NnvjGfs+vShNyLQ8jqrWQ1AEJEEKt9sR/1ryL3JokwzANhCNM6/ 6v4tzGwsLudB4FN0RW0SzdPVis+Kre9bhsHvLv1cAcRzTNRaUqFCMk/1h9cgYNtJ WNUQU+OltKVMWgdBEI55qEhQRryeJE4RjaVbEMxLKiepmbfYLM7fGlozHyfsOr5s lvFlmeJXtSI5/8QbAQ8lOxdB2W42kdmEhizyAX4BrQL8ivugujZU7RGYv2rqGp5b 7HzD5DTeM+mYt/SPmw5N7b8NAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIfu0I+jb FQbLS9BjpKtvewK37zMwHwYDVR0jBBgwFoAUOUPUJhV5zeDoKgXKKrVLOHulGTMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlEODhGLzg0QTVCQzgwOTA1 RDExRUZBNEYzMUQyRUM0RjlBRTAyL09VUFVKaFY1emVEb0tnWEtLclZMT0h1bEdU TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT1VQVUpoVjV6ZURvS2dYS0tyVkxPSHVsR1RNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlE ODhGLzg0QTVCQzgwOTA1RDExRUZBNEYzMUQyRUM0RjlBRTAyL09VUFVKaFY1emVE b0tnWEtLclZMT0h1bEdUTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFFqFZ0bOAlfKn48d98ZQj+mPodfX2uwj7jH69if6fkEd5nZnOYuZ5oA RRib+60VJ3IaDne83anSmMVD7+oKGPNjBQ5Rw55R/7It1P1H1+r2bnbznCXnErN2 ZugZq1j32lelYQSMIKYhp569InAhvo53WWB29MWeJtvnaplI/qgfKeDQf0vhWdLo bV++7V9V2/rqDGE/ZS+zgJur1iYsR/Gskb73+dlmpayaDunPCv6wXNMZL/WH0DGa roFsWEFjNBQKv09wtyZ3Y8Y6vuhKTzhsyfMrrNVy6B2GJm3DWEqoHGs7eR1CUTC8 a6Wj3IqckX7oWUZtKqhhHspOOF+3/So= -----END CERTIFICATE-----Generated at Sun Jun 15 10:09:06 2025 by rpki-client