$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft File: oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft (raw, json) Hash identifier: mEW13XGJLYCrma7hS2IYp6yNGGNs7m/tcxLSqpgRWOM= Subject key identifier: 5A:CB:4D:4F:94:3F:87:84:42:45:29:71:37:FE:8A:C7:66:36:92:DF Authority key identifier: A0:9C:A2:D3:1B:16:BF:A5:84:A7:58:C3:A7:D5:1F:AC:D2:15:1B:02 Certificate issuer: /CN=A91A4ED0/serialNumber=A09CA2D31B16BFA584A758C3A7D51FACD2151B02 Certificate serial: 0AAA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJyi0xsWv6WEp1jDp9UfrNIVGwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft Manifest number: 0AA0 Signing time: Sat 14 Jun 2025 19:23:33 +0000 Manifest this update: Sat 14 Jun 2025 19:23:32 +0000 Manifest next update: Sat 21 Jun 2025 19:23:32 +0000 Files and hashes: 1: oJyi0xsWv6WEp1jDp9UfrNIVGwI.crl (hash: VhNRXdxXPxDuOhLBfGH1jyCMih+oPToEfvwnvPe5EVE=) 2: 52F59E403B4111ECABFD2186C4F9AE02.roa (hash: iGeCqjea5TKx5w3j1RMFWZOzP6n/8IBkqpNhUcYz96Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.crl rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJyi0xsWv6WEp1jDp9UfrNIVGwI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 19:23:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2730 (0xaaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4ED0, serialNumber=A09CA2D31B16BFA584A758C3A7D51FACD2151B02 Validity Not Before: Jun 14 19:23:32 2025 GMT Not After : Jun 21 19:23:32 2025 GMT Subject: CN=684dcc35-178f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:b0:fa:cc:e1:6f:82:2c:d5:70:a6:ad:75:ce: 08:86:e4:8a:c7:d5:86:cd:bb:f4:08:9d:b0:5a:ac: ad:73:ea:08:54:a1:13:a0:1f:21:2b:b9:94:dc:59: 11:69:0d:c2:10:28:59:49:f2:62:a1:a1:bb:d4:ee: 55:0c:4b:d8:be:57:8e:ad:ce:05:b9:f3:3e:b2:1f: f7:2b:45:65:73:ac:32:00:24:85:18:ac:1e:e1:4b: 95:b1:2b:89:d4:8d:39:ed:80:36:88:98:a8:a1:af: 6c:9c:1a:82:d8:0e:d7:a4:75:4e:41:2b:f6:18:50: 9f:ed:5a:cf:ad:d8:a1:3a:43:27:b0:aa:8c:63:d8: 62:fb:51:ed:6c:8d:44:d7:c2:6b:5a:79:26:9b:32: a5:cf:6d:01:12:d1:be:2c:68:7b:d2:eb:b1:b7:33: 18:9d:64:fc:04:1a:e8:b4:87:0c:b2:fb:bc:85:93: 1d:98:e7:89:ac:3b:71:0f:a4:74:12:02:a6:3e:03: ce:4d:80:6b:58:5e:b1:7f:da:f5:79:31:26:be:81: df:98:e9:99:ab:94:de:36:da:ec:90:1d:99:21:b2: 7e:e6:06:44:c9:bf:02:7c:1c:61:d2:e8:a7:8f:21: 2b:ea:d4:9e:d1:b3:6b:59:7c:ae:7a:df:37:01:16: 63:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:CB:4D:4F:94:3F:87:84:42:45:29:71:37:FE:8A:C7:66:36:92:DF X509v3 Authority Key Identifier: keyid:A0:9C:A2:D3:1B:16:BF:A5:84:A7:58:C3:A7:D5:1F:AC:D2:15:1B:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJyi0xsWv6WEp1jDp9UfrNIVGwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:0c:cf:3d:4f:2a:f8:9c:b2:bf:dd:ae:5a:7e:2a:48:90:eb: ef:d7:54:67:d1:2e:20:49:4f:0d:a0:ee:ea:df:be:df:da:58: b7:c8:54:a3:03:19:7f:02:84:c9:6d:18:f0:17:b8:4b:73:46: 86:e0:e0:44:d4:6b:83:9b:e1:74:a1:b5:e8:24:16:7f:3e:a7: f3:72:eb:cd:ff:d3:db:c4:ab:28:09:97:8e:e3:5d:30:99:a7: 82:0c:24:61:7a:60:03:d0:ac:a5:68:08:05:78:b7:e2:01:e4: d5:3e:c8:14:f6:c8:41:49:7e:ba:73:21:10:dc:98:98:d9:e1: 83:06:ab:ab:06:ee:8a:30:1f:5d:92:d0:32:21:c1:ce:09:eb: c1:e3:ee:b4:e1:5d:96:e5:b8:5d:6b:a1:14:a4:04:cb:b3:02: 8a:73:4c:95:d2:fb:00:3b:ee:c5:5f:2b:c4:7b:d5:29:ea:d1: 27:93:85:a7:a0:a2:80:d0:d9:63:1c:07:a8:fd:9c:17:83:77: 3f:ee:13:91:fc:8f:49:84:44:a8:45:68:e7:9c:dc:c5:63:44: bd:7b:0d:c7:e3:12:02:72:a5:15:cc:c9:6c:62:84:9f:06:23: 6a:f9:32:a9:5a:84:1e:39:6f:75:d1:55:60:e1:9d:c9:a0:77: bf:44:f4:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRFRDAxMTAvBgNVBAUTKEEwOUNBMkQzMUIxNkJGQTU4NEE3NThDM0E3RDUxRkFD RDIxNTFCMDIwHhcNMjUwNjE0MTkyMzMyWhcNMjUwNjIxMTkyMzMyWjAYMRYwFAYD VQQDEw02ODRkY2MzNS0xNzhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6bD6zOFvgizVcKatdc4IhuSKx9WGzbv0CJ2wWqytc+oIVKEToB8hK7mU3FkR aQ3CEChZSfJioaG71O5VDEvYvleOrc4FufM+sh/3K0Vlc6wyACSFGKwe4UuVsSuJ 1I057YA2iJiooa9snBqC2A7XpHVOQSv2GFCf7VrPrdihOkMnsKqMY9hi+1HtbI1E 18JrWnkmmzKlz20BEtG+LGh70uuxtzMYnWT8BBrotIcMsvu8hZMdmOeJrDtxD6R0 EgKmPgPOTYBrWF6xf9r1eTEmvoHfmOmZq5TeNtrskB2ZIbJ+5gZEyb8CfBxh0uin jyEr6tSe0bNrWXyuet83ARZjpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFrLTU+U P4eEQkUpcTf+isdmNpLfMB8GA1UdIwQYMBaAFKCcotMbFr+lhKdYw6fVH6zSFRsC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEVEMC85MkIzQ0Q1QTU4 Q0YxMUVBODVFODU5NERDNEY5QUUwMi9vSnlpMHhzV3Y2V0VwMWpEcDlVZnJOSVZH d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29KeWkweHNXdjZXRXAxakRwOVVmck5JVkd3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEVEMC85MkIzQ0Q1QTU4Q0YxMUVBODVFODU5NERDNEY5QUUwMi9vSnlpMHhzV3Y2 V0VwMWpEcDlVZnJOSVZHd0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCDM89Tyr4nLK/3a5afipIkOvv11Rn0S4gSU8NoO7q377f2li3yFSj Axl/AoTJbRjwF7hLc0aG4OBE1GuDm+F0obXoJBZ/PqfzcuvN/9PbxKsoCZeO410w maeCDCRhemAD0KylaAgFeLfiAeTVPsgU9shBSX66cyEQ3JiY2eGDBqurBu6KMB9d ktAyIcHOCevB4+604V2W5bhda6EUpATLswKKc0yV0vsAO+7FXyvEe9Up6tEnk4Wn oKKA0NljHAeo/ZwXg3c/7hOR/I9JhESoRWjnnNzFY0S9ew3H4xICcqUVzMlsYoSf BiNq+TKpWoQeOW910VVg4Z3JoHe/RPRm -----END CERTIFICATE-----Generated at Sun Jun 15 09:38:59 2025 by rpki-client