$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft File: Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft (raw, json) Hash identifier: 5GFN2qVXfrJjtUW4agR+mincU/PXwTNESL7QwKYCcIg= Subject key identifier: 10:64:BF:41:63:6C:AE:87:67:B3:B7:75:91:62:6F:D9:AC:2D:5A:69 Authority key identifier: 3A:46:FB:0F:40:F6:9D:5E:1D:B7:5D:28:51:F0:40:C1:9F:66:F2:2C Certificate issuer: /CN=A91ACD4D/serialNumber=3A46FB0F40F69D5E1DB75D2851F040C19F66F22C Certificate serial: 163C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Okb7D0D2nV4dt10oUfBAwZ9m8iw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft Manifest number: 162C Signing time: Wed 18 Jun 2025 16:43:00 +0000 Manifest this update: Wed 18 Jun 2025 16:43:00 +0000 Manifest next update: Wed 25 Jun 2025 16:43:00 +0000 Files and hashes: 1: Okb7D0D2nV4dt10oUfBAwZ9m8iw.crl (hash: a6KkZUXSIkjbpKbxWJ2IKt3Oqa+A973O0HjEGEcQePc=) 2: 268ECB3ED5BD11E894FFC250C4F9AE02.roa (hash: w3oachy62b9vS7wqwD6D3HohJubENRLKhLvYOw/CqsQ=) 3: 3DE1DBC4D81011EC892E8A79C4F9AE02.roa (hash: P/jVLVKJm35tcLY3WNaJuQCIeip3WppGMETv/Tz90FE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.crl rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Okb7D0D2nV4dt10oUfBAwZ9m8iw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 16:42:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5692 (0x163c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACD4D, serialNumber=3A46FB0F40F69D5E1DB75D2851F040C19F66F22C Validity Not Before: Jun 18 16:43:00 2025 GMT Not After : Jun 25 16:43:00 2025 GMT Subject: CN=6852ec94-d8f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:0b:8a:b2:3b:44:22:be:17:e7:0c:a7:69:be: 41:12:11:5b:f2:8d:06:de:d9:98:da:a2:d8:e3:31: ff:f0:27:d1:23:4a:5a:4c:b5:a6:bd:3d:01:03:09: ea:8f:a2:c6:5c:3d:65:f9:70:76:4b:2a:7b:38:52: af:3d:d6:1c:23:b8:58:c4:c2:99:4a:b6:8f:18:81: 09:98:eb:63:29:6c:ee:d6:d3:cd:72:d2:35:8f:d0: c0:3f:2f:28:62:2c:8f:00:de:52:f1:0e:68:9d:11: 2f:8a:40:06:05:6b:04:2f:02:9e:dc:61:c1:a6:94: 08:df:d6:46:d5:ab:10:9d:ff:f1:f9:e5:31:9d:bd: c7:80:c9:1a:4c:41:76:91:8a:58:0c:7b:92:e4:10: bf:2b:b1:d3:c2:0c:40:a9:3d:84:b8:f8:1c:40:6a: 28:e2:6e:34:83:34:a7:3c:b6:94:b9:4a:9e:66:52: 30:ca:37:29:4a:3f:3f:c7:0d:28:c1:b8:26:ae:96: 36:d0:d8:1b:6f:c5:6c:ff:91:b2:8e:10:7d:c5:77: 07:3b:b6:69:4f:2b:8b:2f:78:34:7f:3a:b6:72:a0: 1b:c9:b8:7f:ee:70:4d:ef:99:61:99:72:45:8a:03: ae:20:a1:05:f3:27:e9:5b:40:fc:f6:07:c0:d1:05: 96:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:64:BF:41:63:6C:AE:87:67:B3:B7:75:91:62:6F:D9:AC:2D:5A:69 X509v3 Authority Key Identifier: keyid:3A:46:FB:0F:40:F6:9D:5E:1D:B7:5D:28:51:F0:40:C1:9F:66:F2:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Okb7D0D2nV4dt10oUfBAwZ9m8iw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:30:9d:05:21:ca:2a:06:67:3c:b2:f9:83:15:fa:2a:e9:d2: 6d:d0:f1:99:ac:64:e1:40:07:67:9d:94:b4:35:62:28:d9:06: 3b:9e:6a:ec:71:00:0b:4c:de:f4:c0:ce:62:a2:e7:c4:93:b4: 96:66:3d:1b:79:b8:c7:8c:71:67:d3:e2:82:13:9f:3e:2a:19: bd:df:c4:82:16:2d:b3:eb:69:1c:84:6f:37:c3:64:62:66:1d: 52:b2:d5:fd:77:6a:d1:d7:43:6f:9d:9f:c7:b3:4b:b1:15:51: 60:60:ca:bf:4d:1b:0d:30:00:64:6e:58:06:8d:98:e8:3d:dd: 31:b3:c4:27:57:40:66:97:6d:ed:d2:9f:2c:d7:46:6f:37:a6: bb:57:df:d2:f0:ce:4d:75:46:8d:b0:d0:f9:6c:69:65:c9:5b: 4b:74:32:d6:99:ca:ad:3e:59:f8:86:7b:0a:63:fc:2c:73:52: 99:42:05:30:d2:84:a7:46:b9:56:61:4c:35:b5:57:24:b2:b6: ed:30:36:a8:1a:b1:a0:e7:51:96:22:69:4b:3d:ce:46:23:f9: bc:ce:75:7c:59:77:5f:fd:c7:07:fa:06:5d:ce:91:d9:a8:ce: 94:e9:57:af:c1:df:7e:a1:b1:ee:9a:a9:c8:7f:7b:62:82:18: f4:52:5a:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNENEQxMTAvBgNVBAUTKDNBNDZGQjBGNDBGNjlENUUxREI3NUQyODUxRjA0MEMx OUY2NkYyMkMwHhcNMjUwNjE4MTY0MzAwWhcNMjUwNjI1MTY0MzAwWjAYMRYwFAYD VQQDEw02ODUyZWM5NC1kOGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9guKsjtEIr4X5wynab5BEhFb8o0G3tmY2qLY4zH/8CfRI0paTLWmvT0BAwnq j6LGXD1l+XB2Syp7OFKvPdYcI7hYxMKZSraPGIEJmOtjKWzu1tPNctI1j9DAPy8o YiyPAN5S8Q5onREvikAGBWsELwKe3GHBppQI39ZG1asQnf/x+eUxnb3HgMkaTEF2 kYpYDHuS5BC/K7HTwgxAqT2EuPgcQGoo4m40gzSnPLaUuUqeZlIwyjcpSj8/xw0o wbgmrpY20Ngbb8Vs/5GyjhB9xXcHO7ZpTyuLL3g0fzq2cqAbybh/7nBN75lhmXJF igOuIKEF8yfpW0D89gfA0QWWuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBBkv0Fj bK6HZ7O3dZFib9msLVppMB8GA1UdIwQYMBaAFDpG+w9A9p1eHbddKFHwQMGfZvIs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0Q0RC8xMzdEMDBENDE2 MEUxMUU4ODUyQzQzN0VDNEY5QUUwMi9Pa2I3RDBEMm5WNGR0MTBvVWZCQXdaOW04 aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09rYjdEMEQyblY0ZHQxMG9VZkJBd1o5bThpdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0Q0RC8xMzdEMDBENDE2MEUxMUU4ODUyQzQzN0VDNEY5QUUwMi9Pa2I3RDBEMm5W NGR0MTBvVWZCQXdaOW04aXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJMJ0FIcoqBmc8svmDFfoq6dJt0PGZrGThQAdnnZS0NWIo2QY7nmrs cQALTN70wM5ioufEk7SWZj0bebjHjHFn0+KCE58+Khm938SCFi2z62kchG83w2Ri Zh1SstX9d2rR10NvnZ/Hs0uxFVFgYMq/TRsNMABkblgGjZjoPd0xs8QnV0Bml23t 0p8s10ZvN6a7V9/S8M5NdUaNsND5bGllyVtLdDLWmcqtPln4hnsKY/wsc1KZQgUw 0oSnRrlWYUw1tVcksrbtMDaoGrGg51GWImlLPc5GI/m8znV8WXdf/ccH+gZdzpHZ qM6U6Vevwd9+obHumqnIf3tighj0Ulr1 -----END CERTIFICATE-----Generated at Thu Jun 19 05:35:27 2025 by rpki-client