$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft File: OvCdKMpIepMmYxpr6b2b26oY2nU.mft (raw, json) Hash identifier: T84eTC3kEK2wGKhSSh7zbd/pZT8Gjqaz5uz2syL4HJM= Subject key identifier: 8E:4A:3D:12:27:08:9D:7F:F9:21:04:97:8F:EA:53:64:F3:67:17:4A Authority key identifier: 3A:F0:9D:28:CA:48:7A:93:26:63:1A:6B:E9:BD:9B:DB:AA:18:DA:75 Certificate issuer: /CN=A91AB74D/serialNumber=3AF09D28CA487A9326631A6BE9BD9BDBAA18DA75 Certificate serial: 061B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OvCdKMpIepMmYxpr6b2b26oY2nU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft Manifest number: 0610 Signing time: Sat 14 Jun 2025 22:33:15 +0000 Manifest this update: Sat 14 Jun 2025 22:33:14 +0000 Manifest next update: Sat 21 Jun 2025 22:33:14 +0000 Files and hashes: 1: OvCdKMpIepMmYxpr6b2b26oY2nU.crl (hash: GMsHzD9CPz3w7oScW6+EMYVaKb7MFJR5yVL5xp+dgAg=) 2: 1A704D8CADB511EBB5CFE734C4F9AE02.roa (hash: vcP/S0izUQbA7Z/0jbMqfJjGpHZIaNp2jddGsZhjHPI=) 3: 1B16F1A0ADB511EBB5CFE734C4F9AE02.roa (hash: EoEXlCI1GOehyvV1dOn2OebjZ7e0VJ5M5h2oFDhhyXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.crl rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OvCdKMpIepMmYxpr6b2b26oY2nU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 22:33:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1563 (0x61b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB74D, serialNumber=3AF09D28CA487A9326631A6BE9BD9BDBAA18DA75 Validity Not Before: Jun 14 22:33:14 2025 GMT Not After : Jun 21 22:33:14 2025 GMT Subject: CN=684df8aa-d8a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4a:c2:9f:c7:fd:a4:ab:44:4c:e4:49:23:a5: 91:a4:3e:66:3e:aa:bf:1b:ff:20:43:c1:5a:67:2e: 51:34:e8:62:5c:2a:d0:17:3d:d0:5f:f1:8d:11:35: 6e:87:b0:85:33:a7:86:a4:32:c1:e4:4b:48:1b:7e: b0:48:03:be:4b:35:62:22:b3:4d:1c:1b:e2:1f:dc: dc:a7:e9:90:d9:86:44:7f:ea:44:c6:fb:cd:84:8b: 4e:f9:05:f0:4a:84:a5:48:b2:45:f8:12:8b:30:f6: 87:ed:7e:47:47:6c:d1:c2:81:f1:52:f7:a0:51:92: a5:5e:91:56:19:9c:f6:a2:0e:d1:c2:0c:ff:2d:e2: 1e:9d:de:25:3e:ad:c6:b7:26:77:3d:c0:1b:97:da: 6a:fc:76:55:97:2c:f5:a0:0d:17:75:61:58:c0:ba: a9:ea:d9:14:10:be:d2:a5:2f:29:45:a0:c1:57:0a: bd:e5:cb:0e:60:6f:d4:41:68:23:f9:3d:3f:9a:2d: 0b:2d:1d:49:e9:15:f1:37:38:e0:e5:a0:d1:b4:2d: 2a:89:31:54:92:ed:9c:65:ae:5c:27:c7:58:a8:a0: da:50:41:5a:f1:fa:67:8c:a3:3e:6c:f4:9d:02:9e: df:2c:c2:f2:2d:c6:a5:0d:ba:ac:f4:b3:c0:ef:7a: 10:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:4A:3D:12:27:08:9D:7F:F9:21:04:97:8F:EA:53:64:F3:67:17:4A X509v3 Authority Key Identifier: keyid:3A:F0:9D:28:CA:48:7A:93:26:63:1A:6B:E9:BD:9B:DB:AA:18:DA:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OvCdKMpIepMmYxpr6b2b26oY2nU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:86:09:53:1e:fb:4a:60:57:ba:ea:c8:ba:49:11:21:e3:be: 19:a1:56:ad:fa:d0:9a:ba:3d:49:76:8e:b1:88:36:af:bd:b3: 16:d0:75:13:33:20:81:b4:58:86:9c:3e:c5:83:b6:7b:e8:22: 03:a3:27:a1:8a:76:cf:07:04:55:bd:fa:39:17:a3:d2:e9:d3: d0:bf:c4:56:8e:a8:ec:ee:f8:40:20:20:38:eb:a9:35:80:27: 70:96:fc:79:c8:e0:37:ee:62:6c:5e:2a:b3:5e:14:ec:d1:57: 74:c7:c8:6d:7a:0a:fa:20:1a:3e:2b:35:00:79:f3:96:0c:94: 5b:04:b9:ca:44:74:82:97:7c:4f:57:49:25:af:9d:9c:fe:af: 14:69:28:d4:90:16:4f:31:66:b6:e0:0c:4a:99:bb:b5:0d:4c: d4:13:93:9d:a8:d9:a3:f6:81:ea:fa:24:58:8f:1d:5a:5d:97: 02:5b:ba:0f:25:30:8b:8b:51:fd:e2:b4:26:58:a4:01:5d:a2: 17:8c:ad:84:ac:6e:2d:75:89:42:c1:d4:9b:74:5f:90:7f:57: e4:11:19:71:cb:9f:9d:cb:69:ec:97:d9:ce:5c:ec:10:83:bf: 2a:93:b3:e6:5a:6f:49:e7:bb:3e:f4:4a:9c:a9:c0:8b:b8:72: fe:18:68:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI3NEQxMTAvBgNVBAUTKDNBRjA5RDI4Q0E0ODdBOTMyNjYzMUE2QkU5QkQ5QkRC QUExOERBNzUwHhcNMjUwNjE0MjIzMzE0WhcNMjUwNjIxMjIzMzE0WjAYMRYwFAYD VQQDEw02ODRkZjhhYS1kOGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtkrCn8f9pKtETORJI6WRpD5mPqq/G/8gQ8FaZy5RNOhiXCrQFz3QX/GNETVu h7CFM6eGpDLB5EtIG36wSAO+SzViIrNNHBviH9zcp+mQ2YZEf+pExvvNhItO+QXw SoSlSLJF+BKLMPaH7X5HR2zRwoHxUvegUZKlXpFWGZz2og7Rwgz/LeIend4lPq3G tyZ3PcAbl9pq/HZVlyz1oA0XdWFYwLqp6tkUEL7SpS8pRaDBVwq95csOYG/UQWgj +T0/mi0LLR1J6RXxNzjg5aDRtC0qiTFUku2cZa5cJ8dYqKDaUEFa8fpnjKM+bPSd Ap7fLMLyLcalDbqs9LPA73oQUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI5KPRIn CJ1/+SEEl4/qU2TzZxdKMB8GA1UdIwQYMBaAFDrwnSjKSHqTJmMaa+m9m9uqGNp1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjc0RC9EMzU5NTY4Q0E4 REMxMUVCOTc5REE1MEVDNEY5QUUwMi9PdkNkS01wSWVwTW1ZeHByNmIyYjI2b1ky blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL092Q2RLTXBJZXBNbVl4cHI2YjJiMjZvWTJuVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Qjc0RC9EMzU5NTY4Q0E4REMxMUVCOTc5REE1MEVDNEY5QUUwMi9PdkNkS01wSWVw TW1ZeHByNmIyYjI2b1kyblUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrhglTHvtKYFe66si6SREh474ZoVat+tCauj1Jdo6xiDavvbMW0HUT MyCBtFiGnD7Fg7Z76CIDoyehinbPBwRVvfo5F6PS6dPQv8RWjqjs7vhAICA466k1 gCdwlvx5yOA37mJsXiqzXhTs0Vd0x8htegr6IBo+KzUAefOWDJRbBLnKRHSCl3xP V0klr52c/q8UaSjUkBZPMWa24AxKmbu1DUzUE5OdqNmj9oHq+iRYjx1aXZcCW7oP JTCLi1H94rQmWKQBXaIXjK2ErG4tdYlCwdSbdF+Qf1fkERlxy5+dy2nsl9nOXOwQ g78qk7PmWm9J57s+9EqcqcCLuHL+GGjR -----END CERTIFICATE-----Generated at Mon Jun 16 18:17:06 2025 by rpki-client