$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft File: mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft (raw, json) Hash identifier: uwdM4lavF7upMKumk7l0v5Dfj79AlHUOlJ2CVDMexF0= Subject key identifier: 1C:86:29:6A:5D:0E:7D:41:07:EF:E1:2A:AD:99:F2:D7:BF:AB:2B:0E Authority key identifier: 98:E8:63:E4:4B:59:7B:64:CA:8C:81:FE:3F:6D:CB:CD:DF:E1:F6:55 Certificate issuer: /CN=A91A4707/serialNumber=98E863E44B597B64CA8C81FE3F6DCBCDDFE1F655 Certificate serial: 050C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhj5EtZe2TKjIH-P23Lzd_h9lU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft Manifest number: 0501 Signing time: Sat 14 Jun 2025 23:23:32 +0000 Manifest this update: Sat 14 Jun 2025 23:23:32 +0000 Manifest next update: Sat 21 Jun 2025 23:23:32 +0000 Files and hashes: 1: mOhj5EtZe2TKjIH-P23Lzd_h9lU.crl (hash: 8wTx61oCXwni7mADIbxzfF9xKrztrD7dyjBFIRmqUUY=) 2: 52B59ED2108D11ECA2542150C4F9AE02.roa (hash: YHM2Ry9OqK4ZQ8qnXB/9z3rSEtR8bDIhVl02jmEtILs=) 3: 5202131C108D11ECA2542150C4F9AE02.roa (hash: f0fj2CiJrQsqOvPb5aCJ72sWUs4weqyglPKr75EglVo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.crl rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhj5EtZe2TKjIH-P23Lzd_h9lU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 23:23:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1292 (0x50c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4707, serialNumber=98E863E44B597B64CA8C81FE3F6DCBCDDFE1F655 Validity Not Before: Jun 14 23:23:32 2025 GMT Not After : Jun 21 23:23:32 2025 GMT Subject: CN=684e0474-0d36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:6e:d1:08:09:15:52:b9:dd:37:90:16:6c:c8: 82:32:1a:f1:8b:e4:dc:3a:0c:58:a9:2b:83:bd:81: 3b:ae:70:cf:23:dc:d4:f5:2e:ab:e7:06:63:64:a5: 91:02:16:16:db:8b:c1:13:bc:7c:c3:5b:8c:e5:ce: a3:3f:a4:ec:f8:74:09:8f:1d:96:c8:30:d8:50:4e: e8:c9:f7:51:ff:28:d7:3d:62:ca:c4:77:a3:4e:a0: 53:1a:48:53:d4:ca:8e:e9:d1:c5:93:98:31:14:cb: ee:46:e4:94:da:c0:f3:95:41:6a:95:62:7b:df:dd: b2:4c:37:04:ac:c3:2f:e3:8a:45:01:ee:41:bd:9d: 2f:10:a3:0e:25:b3:5f:55:a7:db:57:30:e7:8d:2d: b5:0c:aa:f0:71:f9:a7:81:06:b3:35:b5:06:4b:4d: b0:a8:8a:04:56:a3:b9:99:2a:79:a1:3b:27:22:4a: 4d:4a:29:13:69:96:cb:eb:38:be:1e:65:43:72:81: 0f:94:da:81:63:12:a4:40:c8:c0:13:a4:e8:88:a9: 82:2c:c7:03:93:67:4a:05:29:d4:44:2f:22:2e:75: 0f:c0:ed:eb:3e:c3:26:de:40:50:76:d7:7a:a0:0e: c8:a7:e5:72:8b:32:b2:66:86:8c:eb:e0:b9:2e:75: fb:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:86:29:6A:5D:0E:7D:41:07:EF:E1:2A:AD:99:F2:D7:BF:AB:2B:0E X509v3 Authority Key Identifier: keyid:98:E8:63:E4:4B:59:7B:64:CA:8C:81:FE:3F:6D:CB:CD:DF:E1:F6:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhj5EtZe2TKjIH-P23Lzd_h9lU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:f8:9c:f3:e5:98:8b:93:e0:9b:ea:6e:1a:a1:a7:8a:75:53: a3:68:a6:e9:ed:04:3c:33:da:b2:3f:b1:1c:73:87:fa:bd:43: d0:ce:df:dc:a1:db:65:fa:d7:80:17:fb:56:76:da:63:60:0e: 53:3a:f8:ff:b7:d7:cc:cd:95:d0:f2:fc:14:34:eb:8a:33:3d: 32:e8:b1:87:0a:9a:49:0c:fb:03:e4:85:63:fb:42:3b:f4:bf: 61:c8:d3:02:15:35:e5:97:ff:f2:23:de:aa:c5:0a:48:2e:b7: 4a:64:3b:20:8d:12:ac:40:45:33:0b:5e:4a:85:63:48:42:4e: 83:16:77:46:63:97:37:b6:e3:70:fc:e4:c6:cb:74:e3:a3:4a: 72:9e:8c:6a:14:2f:dc:fa:98:55:7a:f8:fc:51:fb:c2:65:c5: 0f:db:0a:a5:64:5b:80:fd:01:ab:c8:dc:b1:2a:24:7a:89:ef: d5:4a:ca:7a:9c:ac:9a:98:4a:65:61:c6:3a:b7:24:bf:a5:0b: 1b:dc:25:78:a0:3f:d4:6d:88:0a:96:e9:96:60:29:71:54:40: 08:26:8f:82:d8:14:c4:bf:1c:f9:7d:07:95:40:2f:93:35:28: 84:32:49:8b:f9:68:4a:bc:91:65:4b:b0:0a:b1:52:23:eb:35: fa:1d:ee:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ3MDcxMTAvBgNVBAUTKDk4RTg2M0U0NEI1OTdCNjRDQThDODFGRTNGNkRDQkNE REZFMUY2NTUwHhcNMjUwNjE0MjMyMzMyWhcNMjUwNjIxMjMyMzMyWjAYMRYwFAYD VQQDEw02ODRlMDQ3NC0wZDM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2W7RCAkVUrndN5AWbMiCMhrxi+TcOgxYqSuDvYE7rnDPI9zU9S6r5wZjZKWR AhYW24vBE7x8w1uM5c6jP6Ts+HQJjx2WyDDYUE7oyfdR/yjXPWLKxHejTqBTGkhT 1MqO6dHFk5gxFMvuRuSU2sDzlUFqlWJ7392yTDcErMMv44pFAe5BvZ0vEKMOJbNf VafbVzDnjS21DKrwcfmngQazNbUGS02wqIoEVqO5mSp5oTsnIkpNSikTaZbL6zi+ HmVDcoEPlNqBYxKkQMjAE6ToiKmCLMcDk2dKBSnURC8iLnUPwO3rPsMm3kBQdtd6 oA7Ip+VyizKyZoaM6+C5LnX7bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFByGKWpd Dn1BB+/hKq2Z8te/qysOMB8GA1UdIwQYMBaAFJjoY+RLWXtkyoyB/j9ty83f4fZV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDcwNy8yODY2QzIzNDEw OEIxMUVDODc4RjFCNEZDNEY5QUUwMi9tT2hqNUV0WmUyVEtqSUgtUDIzTHpkX2g5 bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21PaGo1RXRaZTJUS2pJSC1QMjNMemRfaDlsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDcwNy8yODY2QzIzNDEwOEIxMUVDODc4RjFCNEZDNEY5QUUwMi9tT2hqNUV0WmUy VEtqSUgtUDIzTHpkX2g5bFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2+Jzz5ZiLk+Cb6m4aoaeKdVOjaKbp7QQ8M9qyP7Ecc4f6vUPQzt/c odtl+teAF/tWdtpjYA5TOvj/t9fMzZXQ8vwUNOuKMz0y6LGHCppJDPsD5IVj+0I7 9L9hyNMCFTXll//yI96qxQpILrdKZDsgjRKsQEUzC15KhWNIQk6DFndGY5c3tuNw /OTGy3Tjo0pynoxqFC/c+phVevj8UfvCZcUP2wqlZFuA/QGryNyxKiR6ie/VSsp6 nKyamEplYcY6tyS/pQsb3CV4oD/UbYgKlumWYClxVEAIJo+C2BTEvxz5fQeVQC+T NSiEMkmL+WhKvJFlS7AKsVIj6zX6He5U -----END CERTIFICATE-----Generated at Sun Jun 15 10:25:56 2025 by rpki-client