$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft File: o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft (raw, json) Hash identifier: d0qguuOy88xb7wYIaRod8azhPEZlTRVVNs//BBkV6g4= Subject key identifier: 4C:39:6A:08:9E:BE:9E:8C:6C:64:95:FC:34:79:4B:65:B4:39:4E:B3 Authority key identifier: A3:55:61:DA:45:A9:55:F0:2D:12:2A:0D:88:E8:C7:62:39:ED:F9:20 Certificate issuer: /CN=A91AFB4B/serialNumber=A35561DA45A955F02D122A0D88E8C76239EDF920 Certificate serial: 0336 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1Vh2kWpVfAtEioNiOjHYjnt-SA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft Manifest number: 0332 Signing time: Sun 15 Jun 2025 00:48:42 +0000 Manifest this update: Sun 15 Jun 2025 00:48:42 +0000 Manifest next update: Sun 22 Jun 2025 00:48:42 +0000 Files and hashes: 1: o1Vh2kWpVfAtEioNiOjHYjnt-SA.crl (hash: Fy4DzUnxEWRTY1r/CFa4yKhOtvNkXh07VxS9NS/wYIA=) 2: E2F2A470C76411EC85896F5EC4F9AE02.roa (hash: hSEOk4wSvcqkKWJUmunbhE8NC6T2P49jnE2eWh8/b4M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.crl rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1Vh2kWpVfAtEioNiOjHYjnt-SA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:48:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 822 (0x336) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFB4B, serialNumber=A35561DA45A955F02D122A0D88E8C76239EDF920 Validity Not Before: Jun 15 00:48:42 2025 GMT Not After : Jun 22 00:48:42 2025 GMT Subject: CN=684e186a-d362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b7:57:19:2d:08:86:3b:cd:6a:28:1a:26:1f: 6c:78:83:a4:72:6b:c8:6f:b8:e7:5f:6d:44:ee:6b: 53:8b:c7:79:13:05:88:f8:db:8e:25:86:8d:be:3a: c5:7b:26:86:32:59:cd:0b:30:b7:b7:a2:ac:52:73: 16:40:81:94:c8:71:c7:94:1d:4d:f7:a9:80:d2:7b: 26:28:b9:41:38:9d:8c:e5:0d:d7:90:81:8e:bf:bd: 2a:e4:64:09:80:72:dc:b9:04:44:0c:d4:5a:9e:02: 27:67:22:3e:db:ad:e8:7f:96:df:2e:ef:a9:b9:94: 00:af:84:83:57:13:e1:b1:7b:b3:24:cd:03:10:ba: 64:b8:46:7f:15:ab:2a:b3:4a:53:08:8d:26:94:ec: df:c1:f6:7d:05:3a:36:70:db:2b:53:60:b5:d5:05: d3:16:91:77:5b:1b:20:8f:4a:47:8c:b7:1f:99:af: b8:3f:1c:80:e0:f2:db:0a:9a:b0:e7:23:a2:09:da: 5a:ee:1c:81:6e:af:22:f3:42:e9:84:ad:64:5f:e7: 21:28:b3:68:78:ff:e0:9f:0c:7c:26:44:fb:56:b0: fa:70:64:c5:8f:aa:c7:c2:80:97:f0:85:9a:37:94: a1:1d:b1:8a:c1:8c:87:53:e3:d2:bc:9b:7b:48:69: 7e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:39:6A:08:9E:BE:9E:8C:6C:64:95:FC:34:79:4B:65:B4:39:4E:B3 X509v3 Authority Key Identifier: keyid:A3:55:61:DA:45:A9:55:F0:2D:12:2A:0D:88:E8:C7:62:39:ED:F9:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1Vh2kWpVfAtEioNiOjHYjnt-SA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:3a:10:c4:4e:79:a3:31:c7:f2:4e:88:9e:2d:51:e9:d9:50: 13:bc:11:a2:6b:de:c9:cd:7e:2a:79:0d:21:e7:cc:62:c6:c3: 6b:81:8c:51:af:f7:c3:6d:f6:97:8e:98:82:b9:46:dc:01:31: a3:2e:b7:02:91:81:95:e4:13:8a:32:fc:ed:bf:f0:5d:5e:1c: ab:e9:99:3f:c9:89:a6:e2:a4:f8:30:c5:f5:f7:dc:c5:cf:d6: 1d:0e:52:10:61:d3:14:0c:5c:23:72:80:d2:0b:62:4c:f2:50: ad:e9:b7:cd:c8:9e:94:f4:48:d2:ac:ac:82:13:e2:25:63:25: fe:ae:6a:ab:94:6d:17:63:b4:29:39:48:83:74:0b:65:d5:7f: d4:e2:7d:8f:2f:ff:80:b5:17:d2:e9:e8:51:94:1c:f9:c5:64: ed:a8:52:9a:df:07:a8:57:de:8e:09:8b:5f:57:54:38:2e:2a: 65:9d:97:58:2f:38:8f:66:49:1d:e8:9a:19:2f:a2:08:d4:71: 10:e3:4a:24:e5:4f:58:1e:4b:3b:34:c2:e6:28:1f:d8:5d:e1: 70:93:66:9a:f8:58:f9:cc:5d:d4:37:16:b3:3e:87:ef:e3:28: c7:21:7f:40:89:2d:9b:c7:ab:07:4c:cd:67:1e:5b:d3:53:eb: e3:55:b1:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUZCNEIxMTAvBgNVBAUTKEEzNTU2MURBNDVBOTU1RjAyRDEyMkEwRDg4RThDNzYy MzlFREY5MjAwHhcNMjUwNjE1MDA0ODQyWhcNMjUwNjIyMDA0ODQyWjAYMRYwFAYD VQQDEw02ODRlMTg2YS1kMzYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn7dXGS0IhjvNaigaJh9seIOkcmvIb7jnX21E7mtTi8d5EwWI+NuOJYaNvjrF eyaGMlnNCzC3t6KsUnMWQIGUyHHHlB1N96mA0nsmKLlBOJ2M5Q3XkIGOv70q5GQJ gHLcuQREDNRangInZyI+263of5bfLu+puZQAr4SDVxPhsXuzJM0DELpkuEZ/Fasq s0pTCI0mlOzfwfZ9BTo2cNsrU2C11QXTFpF3Wxsgj0pHjLcfma+4PxyA4PLbCpqw 5yOiCdpa7hyBbq8i80LphK1kX+chKLNoeP/gnwx8JkT7VrD6cGTFj6rHwoCX8IWa N5ShHbGKwYyHU+PSvJt7SGl+tQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEw5agie vp6MbGSV/DR5S2W0OU6zMB8GA1UdIwQYMBaAFKNVYdpFqVXwLRIqDYjox2I57fkg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkI0Qi84RTE2MjQzMEM3 NjAxMUVDOEU3RDk2MjlDNEY5QUUwMi9vMVZoMmtXcFZmQXRFaW9OaU9qSFlqbnQt U0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28xVmgya1dwVmZBdEVpb05pT2pIWWpudC1TQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RkI0Qi84RTE2MjQzMEM3NjAxMUVDOEU3RDk2MjlDNEY5QUUwMi9vMVZoMmtXcFZm QXRFaW9OaU9qSFlqbnQtU0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgOhDETnmjMcfyToieLVHp2VATvBGia97JzX4qeQ0h58xixsNrgYxR r/fDbfaXjpiCuUbcATGjLrcCkYGV5BOKMvztv/BdXhyr6Zk/yYmm4qT4MMX199zF z9YdDlIQYdMUDFwjcoDSC2JM8lCt6bfNyJ6U9EjSrKyCE+IlYyX+rmqrlG0XY7Qp OUiDdAtl1X/U4n2PL/+AtRfS6ehRlBz5xWTtqFKa3weoV96OCYtfV1Q4LiplnZdY LziPZkkd6JoZL6II1HEQ40ok5U9YHks7NMLmKB/YXeFwk2aa+Fj5zF3UNxazPofv 4yjHIX9AiS2bx6sHTM1nHlvTU+vjVbHu -----END CERTIFICATE-----Generated at Sun Jun 15 09:58:34 2025 by rpki-client