$ rpki-client -vvf rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.mft File: oPnraYHccqJ4sYUomQbB4RwLNfE.mft (raw, json) Hash identifier: zNM28kuWqjUMFTsoIG92Pa4J6kAjQAagFt5e1m1I5qk= Subject key identifier: 34:54:3A:3A:AB:52:EB:06:11:14:9C:43:10:CA:B2:17:E3:34:72:12 Authority key identifier: A0:F9:EB:69:81:DC:72:A2:78:B1:85:28:99:06:C1:E1:1C:0B:35:F1 Certificate issuer: /CN=A91A05A0/serialNumber=A0F9EB6981DC72A278B185289906C1E11C0B35F1 Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPnraYHccqJ4sYUomQbB4RwLNfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.mft Manifest number: 10 Signing time: Fri 13 Jun 2025 06:54:48 +0000 Manifest this update: Fri 13 Jun 2025 06:54:47 +0000 Manifest next update: Fri 20 Jun 2025 06:54:47 +0000 Files and hashes: 1: oPnraYHccqJ4sYUomQbB4RwLNfE.crl (hash: QFac9Y55hKzodTuuG3rSe8TmnzoeIh4wtI3rzmkVvjA=) 2: 25E96E4C2F6511F0A4430347C4F9AE02.roa (hash: 1Yct3nRJtVY9HiL2zSbCvIf02xNnDEaRtj5Z7mWSdjk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.crl rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPnraYHccqJ4sYUomQbB4RwLNfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:54:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A05A0, serialNumber=A0F9EB6981DC72A278B185289906C1E11C0B35F1 Validity Not Before: Jun 13 06:54:47 2025 GMT Not After : Jun 20 06:54:47 2025 GMT Subject: CN=684bcb38-0b50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:40:ef:70:32:c3:43:3e:32:00:c0:99:d5:5f: 85:7c:84:ec:c3:54:8b:61:6c:52:75:e0:9a:58:ad: 92:d2:00:74:ef:07:78:f2:66:d6:b6:f6:34:0a:53: 0d:2c:88:e0:a4:ac:42:18:d7:c8:b6:20:e6:51:77: cd:ca:af:a9:11:9f:9a:14:27:7b:86:07:6d:54:f2: 0c:ac:0d:58:4c:13:36:cb:e1:25:6e:fc:4f:08:7a: af:32:d5:b7:84:61:bb:75:71:ba:9e:74:37:20:2d: ec:0c:60:b1:98:47:07:b4:28:07:87:09:f0:e2:c5: e6:b7:fc:e4:7c:9e:49:b0:65:66:7b:76:c1:67:fb: 46:53:63:93:be:53:53:d5:7f:c3:44:ab:a2:a8:86: 5d:2a:aa:8c:ba:86:f4:2d:9d:44:03:58:03:5e:15: ed:8e:e5:69:36:86:91:3f:7b:bf:03:fa:38:5d:08: c9:f1:9d:63:62:25:99:30:26:a1:ea:c5:53:a5:16: e5:fa:fd:51:77:db:ce:68:8f:c9:fa:6f:c5:b8:71: 10:ce:5b:86:ec:79:76:87:10:55:6c:60:b0:af:8b: b2:8f:e1:55:a1:3a:07:8d:7f:9b:b0:5a:ff:b5:09: fb:21:3b:d8:14:49:42:ef:f9:62:bd:bb:59:96:39: 0b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:54:3A:3A:AB:52:EB:06:11:14:9C:43:10:CA:B2:17:E3:34:72:12 X509v3 Authority Key Identifier: keyid:A0:F9:EB:69:81:DC:72:A2:78:B1:85:28:99:06:C1:E1:1C:0B:35:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPnraYHccqJ4sYUomQbB4RwLNfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:18:3f:cf:35:a7:95:03:75:25:7b:08:43:13:1c:96:44:99: 26:16:1d:e8:3a:e9:e1:3d:79:06:46:2f:23:cf:91:7c:4d:ca: 51:0b:c6:9f:55:a0:c3:cf:06:ed:c7:05:a2:8f:15:af:17:d1: bf:69:88:f3:f8:3d:05:33:5f:12:d1:a2:1a:f1:1d:19:f5:ed: 99:dc:25:fa:e6:d6:be:57:53:44:6c:50:62:63:86:cb:65:31: 4a:a3:fb:c8:dd:30:45:a3:c4:21:52:78:50:72:86:63:cc:2a: f3:44:a5:60:05:93:ea:a1:f0:67:de:de:39:54:03:34:ba:96: 6f:ea:76:a5:b4:44:09:94:40:93:ff:c1:f3:e0:f1:05:b2:61: b6:53:a6:c9:db:48:6b:14:7e:3d:67:77:03:06:77:db:5f:04: 11:0e:2e:98:eb:0a:fe:80:10:be:d3:8b:52:72:0b:3f:be:37: a2:92:e3:18:6d:00:e1:f0:e2:e7:95:86:c8:ad:6e:b1:d6:6d: a4:77:cd:97:31:a7:0d:17:fe:00:17:31:ff:96:79:92:bc:46: 95:7c:0b:c4:68:35:ec:fa:43:91:b1:1e:db:c2:25:30:87:52: 48:6f:c4:30:6c:2a:f8:6a:26:63:04:aa:97:a9:c9:c0:85:a3: cd:66:be:9b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MDVBMDExMC8GA1UEBRMoQTBGOUVCNjk4MURDNzJBMjc4QjE4NTI4OTkwNkMxRTEx QzBCMzVGMTAeFw0yNTA2MTMwNjU0NDdaFw0yNTA2MjAwNjU0NDdaMBgxFjAUBgNV BAMTDTY4NGJjYjM4LTBiNTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5QO9wMsNDPjIAwJnVX4V8hOzDVIthbFJ14JpYrZLSAHTvB3jyZta29jQKUw0s iOCkrEIY18i2IOZRd83Kr6kRn5oUJ3uGB21U8gysDVhMEzbL4SVu/E8Ieq8y1beE Ybt1cbqedDcgLewMYLGYRwe0KAeHCfDixea3/OR8nkmwZWZ7dsFn+0ZTY5O+U1PV f8NEq6Kohl0qqoy6hvQtnUQDWANeFe2O5Wk2hpE/e78D+jhdCMnxnWNiJZkwJqHq xVOlFuX6/VF3285oj8n6b8W4cRDOW4bseXaHEFVsYLCvi7KP4VWhOgeNf5uwWv+1 CfshO9gUSULv+WK9u1mWOQvJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNFQ6OqtS 6wYRFJxDEMqyF+M0chIwHwYDVR0jBBgwFoAUoPnraYHccqJ4sYUomQbB4RwLNfEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEwNUEwLzlDNTM3MTc4MkY2 NDExRjBCNEYyQTI0NUM0RjlBRTAyL29QbnJhWUhjY3FKNHNZVW9tUWJCNFJ3TE5m RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb1BucmFZSGNjcUo0c1lVb21RYkI0UndMTmZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEw NUEwLzlDNTM3MTc4MkY2NDExRjBCNEYyQTI0NUM0RjlBRTAyL29QbnJhWUhjY3FK NHNZVW9tUWJCNFJ3TE5mRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMEYP881p5UDdSV7CEMTHJZEmSYWHeg66eE9eQZGLyPPkXxNylELxp9V oMPPBu3HBaKPFa8X0b9piPP4PQUzXxLRohrxHRn17ZncJfrm1r5XU0RsUGJjhstl MUqj+8jdMEWjxCFSeFByhmPMKvNEpWAFk+qh8Gfe3jlUAzS6lm/qdqW0RAmUQJP/ wfPg8QWyYbZTpsnbSGsUfj1ndwMGd9tfBBEOLpjrCv6AEL7Ti1JyCz++N6KS4xht AOHw4ueVhsitbrHWbaR3zZcxpw0X/gAXMf+WeZK8RpV8C8RoNez6Q5GxHtvCJTCH UkhvxDBsKvhqJmMEqpepycCFo81mvps= -----END CERTIFICATE-----Generated at Sat Jun 14 19:28:17 2025 by rpki-client