$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft File: OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft (raw, json) Hash identifier: RNspidVhiayj8pyoXZjUPN9R8COpAl+dqy0QO3v1Op0= Subject key identifier: 2D:DC:D6:DD:D6:94:D2:4E:AC:3F:CB:59:AA:6F:6A:C3:36:6E:3B:F9 Authority key identifier: 3A:83:0D:43:F3:59:44:FF:B2:86:01:D3:33:30:20:AC:3C:31:92:41 Certificate issuer: /CN=A919F0DA/serialNumber=3A830D43F35944FFB28601D3333020AC3C319241 Certificate serial: 23F1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft Manifest number: 600B Signing time: Mon 16 Jun 2025 14:15:20 +0000 Manifest this update: Mon 16 Jun 2025 14:15:19 +0000 Manifest next update: Mon 23 Jun 2025 14:15:19 +0000 Files and hashes: 1: OoMNQ_NZRP-yhgHTMzAgrDwxkkE.crl (hash: ZuSXB76M7qEdva8xvTM2b9Fj262K5J4LK1nWCMe7x0s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.crl rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 14:15:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9201 (0x23f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F0DA, serialNumber=3A830D43F35944FFB28601D3333020AC3C319241 Validity Not Before: Jun 16 14:15:19 2025 GMT Not After : Jun 23 14:15:19 2025 GMT Subject: CN=685026f7-6c15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:78:09:2f:d9:e8:ab:b0:92:9d:df:5e:e7:f0: b8:22:61:3c:e1:bc:9f:5f:7d:75:84:33:fc:5e:5c: a9:7c:66:71:55:94:8d:5b:3e:e2:7a:9b:da:86:fa: ed:14:06:c3:1b:26:cd:cc:d0:56:92:43:b5:c1:8d: 2f:5f:09:04:ff:bc:c8:f9:6d:06:22:72:a3:45:7c: a3:17:2d:99:f2:df:0d:7b:cc:1a:a4:c4:41:cd:3e: 6b:93:f1:58:1f:79:61:ab:dc:05:9e:79:ac:5d:e1: e5:e5:b5:be:80:94:72:e2:fc:8f:1b:fe:44:35:ed: d2:76:68:04:ad:20:07:98:e0:12:69:06:f3:04:54: a5:b1:48:1d:51:58:2d:0b:2c:b6:b9:0d:29:b0:c7: b6:16:86:ca:6a:a4:74:fa:47:6d:87:4a:b0:4a:82: e0:fb:cb:e3:04:3c:e0:b3:71:f0:c0:23:33:7c:36: 7e:36:cc:ec:2d:b1:e6:c8:1d:01:b7:02:3e:fa:c7: 75:de:c5:1e:5f:b7:40:86:ff:99:7a:f9:47:d9:a0: 56:ec:f5:75:92:da:72:33:74:31:4d:36:71:6e:86: a2:79:6b:90:a1:6d:a5:13:cf:d9:e0:ed:61:6b:d9: a7:b0:05:75:36:6e:69:da:70:14:11:48:49:3d:f5: 93:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:DC:D6:DD:D6:94:D2:4E:AC:3F:CB:59:AA:6F:6A:C3:36:6E:3B:F9 X509v3 Authority Key Identifier: keyid:3A:83:0D:43:F3:59:44:FF:B2:86:01:D3:33:30:20:AC:3C:31:92:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:97:5e:ab:fe:55:b3:77:b7:05:a9:4c:dd:65:d4:a5:90:ba: 82:f1:bf:d4:41:7b:1b:0a:de:32:87:01:1a:96:18:1e:e8:e5: 97:35:12:dc:29:90:97:6e:da:fb:47:68:f1:d4:67:00:88:00: c0:f2:64:4e:52:07:2c:d1:2e:37:7e:cc:c1:1f:26:43:fa:24: d2:bf:9f:56:2c:e7:e1:30:43:86:1b:10:18:a4:43:3d:40:81: 43:80:fe:6a:b6:81:2a:0c:14:ee:79:66:4e:cd:00:f9:ca:6a: c2:6b:cd:83:1b:5e:bb:3e:b2:cb:52:38:f9:e3:a2:a4:6d:fc: 8a:15:50:fb:f6:e1:c4:b8:0b:2a:98:9c:ee:49:00:83:96:7d: ec:4c:2c:fe:54:c7:c6:24:ce:a2:98:7e:7c:d0:71:7c:94:a0: ff:36:8d:63:2e:cf:ca:04:72:1a:85:73:8f:99:f6:81:12:72: 09:c5:a5:ed:a9:58:e4:78:7f:4e:9c:45:97:6f:d8:e7:9c:4d: 09:25:51:74:d7:e6:13:a6:18:70:ae:45:23:6a:2c:c1:12:f6: 40:9c:90:6b:df:7b:59:fc:0b:08:43:42:d6:2c:b2:04:01:88: 22:bb:70:bd:ff:a1:1d:2a:80:be:54:93:b2:f7:36:82:07:8b: be:38:0b:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYwREExMTAvBgNVBAUTKDNBODMwRDQzRjM1OTQ0RkZCMjg2MDFEMzMzMzAyMEFD M0MzMTkyNDEwHhcNMjUwNjE2MTQxNTE5WhcNMjUwNjIzMTQxNTE5WjAYMRYwFAYD VQQDEw02ODUwMjZmNy02YzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAungJL9noq7CSnd9e5/C4ImE84byfX311hDP8XlypfGZxVZSNWz7iepvahvrt FAbDGybNzNBWkkO1wY0vXwkE/7zI+W0GInKjRXyjFy2Z8t8Ne8wapMRBzT5rk/FY H3lhq9wFnnmsXeHl5bW+gJRy4vyPG/5ENe3SdmgErSAHmOASaQbzBFSlsUgdUVgt Cyy2uQ0psMe2FobKaqR0+kdth0qwSoLg+8vjBDzgs3HwwCMzfDZ+NszsLbHmyB0B twI++sd13sUeX7dAhv+ZevlH2aBW7PV1ktpyM3QxTTZxboaieWuQoW2lE8/Z4O1h a9mnsAV1Nm5p2nAUEUhJPfWTaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC3c1t3W lNJOrD/LWapvasM2bjv5MB8GA1UdIwQYMBaAFDqDDUPzWUT/soYB0zMwIKw8MZJB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjBEQS9GQzYxRTAwODFE NjcxMUUyOEMxODI4QTQwOEIwMkNEMi9Pb01OUV9OWlJQLXloZ0hUTXpBZ3JEd3hr a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09vTU5RX05aUlAteWhnSFRNekFnckR3eGtrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjBEQS9GQzYxRTAwODFENjcxMUUyOEMxODI4QTQwOEIwMkNEMi9Pb01OUV9OWlJQ LXloZ0hUTXpBZ3JEd3hra0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkl16r/lWzd7cFqUzdZdSlkLqC8b/UQXsbCt4yhwEalhge6OWXNRLc KZCXbtr7R2jx1GcAiADA8mROUgcs0S43fszBHyZD+iTSv59WLOfhMEOGGxAYpEM9 QIFDgP5qtoEqDBTueWZOzQD5ymrCa82DG167PrLLUjj546KkbfyKFVD79uHEuAsq mJzuSQCDln3sTCz+VMfGJM6imH580HF8lKD/No1jLs/KBHIahXOPmfaBEnIJxaXt qVjkeH9OnEWXb9jnnE0JJVF01+YTphhwrkUjaizBEvZAnJBr33tZ/AsIQ0LWLLIE AYgiu3C9/6EdKoC+VJOy9zaCB4u+OAts -----END CERTIFICATE-----Generated at Tue Jun 17 10:03:38 2025 by rpki-client