$ rpki-client -vvf rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft File: 0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft (raw, json) Hash identifier: s99qsRBWIU821vwSSoNr2ZxvYAplrQgMMR4UdMIEWF4= Subject key identifier: 23:C5:0A:DB:D2:2B:94:DB:9B:07:1B:04:9A:77:4B:78:C9:19:A8:85 Authority key identifier: D0:E5:44:05:B0:3D:3D:12:34:59:DE:01:BB:40:0F:4D:7A:83:29:D0 Certificate issuer: /CN=A91B834D/serialNumber=D0E54405B03D3D123459DE01BB400F4D7A8329D0 Certificate serial: 01C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft Manifest number: 01B8 Signing time: Fri 13 Jun 2025 02:10:13 +0000 Manifest this update: Fri 13 Jun 2025 02:10:12 +0000 Manifest next update: Fri 20 Jun 2025 02:10:12 +0000 Files and hashes: 1: 0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl (hash: hWVsvpodSgorYo6wm1BLc3xd5hrUXUFYVOxRNgv2fJA=) 2: F9B10D46ADAA11ED810C6C45C4F9AE02.roa (hash: 9uR9cVnp9mE1i5KXBSkkfpXEwSfx3/BMoE6xrI/LuMM=) 3: 61883292ADA511EDB2C68947C4F9AE02.roa (hash: jVsOkESQWaLXR1oAo7YvVLXTH7CGZNa6Fnq6GGFvuF4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 02:10:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 449 (0x1c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B834D, serialNumber=D0E54405B03D3D123459DE01BB400F4D7A8329D0 Validity Not Before: Jun 13 02:10:12 2025 GMT Not After : Jun 20 02:10:12 2025 GMT Subject: CN=684b8884-ed26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5f:1e:60:ba:3c:bb:fc:32:40:1c:5b:4c:fb: f7:ea:7a:4c:75:2b:3b:d0:86:3d:97:e3:b7:48:c8: d9:df:6d:2a:ef:53:ae:20:05:ac:9d:19:db:81:05: 7e:23:35:04:11:0a:cd:0d:0a:cb:05:15:f2:f5:f8: ce:56:b9:26:df:d5:eb:49:9d:29:05:7e:de:f0:0b: 22:49:a3:b7:0c:f9:ef:f8:9a:13:ef:f5:3e:86:d5: 3b:f3:41:d0:c3:f9:2a:0a:e6:c1:ac:49:1c:30:fb: b5:c0:c5:62:2c:cd:f2:86:59:3d:1e:53:67:ef:9f: 72:0c:ed:1d:31:34:da:1d:b9:e4:57:9f:c1:ab:44: 23:c5:89:4b:9d:2c:30:02:e6:37:27:ff:32:c5:33: 5b:27:80:87:fc:1c:7f:34:6e:c2:02:c5:2d:4a:f9: 27:6b:31:df:09:c9:e2:c7:18:e7:db:2b:e4:26:64: 27:06:df:94:23:8f:95:17:7f:96:26:db:25:ec:53: db:87:7d:49:90:d3:0f:68:70:c5:02:0e:f4:72:89: 2b:7d:6a:60:41:e8:b1:7f:80:65:50:cc:06:00:c9: dc:81:fd:e7:f6:b1:8b:46:c7:ef:32:b7:33:0a:46: 59:95:a0:06:45:22:8d:44:ab:20:14:da:e2:d7:81: 21:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:C5:0A:DB:D2:2B:94:DB:9B:07:1B:04:9A:77:4B:78:C9:19:A8:85 X509v3 Authority Key Identifier: keyid:D0:E5:44:05:B0:3D:3D:12:34:59:DE:01:BB:40:0F:4D:7A:83:29:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:5a:08:85:25:45:41:b1:ea:7f:46:95:bf:5d:5f:73:21:1d: 3d:66:a1:68:cd:33:24:3f:fe:be:e5:ba:4e:22:1d:3b:2c:b0: 43:32:85:02:4e:a8:c9:ff:7e:77:65:16:22:73:dc:17:85:8f: 9b:22:a9:dc:d7:04:f2:5b:67:f2:b2:33:e5:92:be:42:c1:e8: 3a:4c:14:fb:77:7b:47:e3:60:55:43:74:aa:86:55:42:5b:68: 17:a0:88:d3:62:13:67:a8:19:ba:64:14:d9:8d:ef:64:76:85: be:5d:90:a9:86:09:4c:95:26:01:b2:31:75:32:02:c2:b0:d9: 2f:74:35:17:9f:fe:4d:b9:a7:df:4f:c7:46:7c:f1:b8:fd:f1: 34:4c:72:19:39:a2:9e:1c:19:d0:94:fb:fe:66:f7:72:31:a1: d5:cc:e6:d7:cf:25:56:37:09:5f:91:14:14:48:a5:ce:b8:13: e4:74:db:74:a4:5c:4b:40:f6:ae:03:6d:cd:51:46:a3:44:86: 24:be:05:97:6a:8b:47:b1:fc:96:24:eb:b7:8b:ea:bf:3d:bf: ca:76:ab:ef:2f:04:6a:3f:4e:ab:a0:d2:07:09:ba:d2:1d:83: ee:03:8e:b2:e6:97:b1:0c:5f:6b:3c:40:19:dc:4b:23:5e:4e: 56:b3:41:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgzNEQxMTAvBgNVBAUTKEQwRTU0NDA1QjAzRDNEMTIzNDU5REUwMUJCNDAwRjRE N0E4MzI5RDAwHhcNMjUwNjEzMDIxMDEyWhcNMjUwNjIwMDIxMDEyWjAYMRYwFAYD VQQDEw02ODRiODg4NC1lZDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA018eYLo8u/wyQBxbTPv36npMdSs70IY9l+O3SMjZ320q71OuIAWsnRnbgQV+ IzUEEQrNDQrLBRXy9fjOVrkm39XrSZ0pBX7e8AsiSaO3DPnv+JoT7/U+htU780HQ w/kqCubBrEkcMPu1wMViLM3yhlk9HlNn759yDO0dMTTaHbnkV5/Bq0QjxYlLnSww AuY3J/8yxTNbJ4CH/Bx/NG7CAsUtSvknazHfCcnixxjn2yvkJmQnBt+UI4+VF3+W Jtsl7FPbh31JkNMPaHDFAg70cokrfWpgQeixf4BlUMwGAMncgf3n9rGLRsfvMrcz CkZZlaAGRSKNRKsgFNri14Eh5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCPFCtvS K5TbmwcbBJp3S3jJGaiFMB8GA1UdIwQYMBaAFNDlRAWwPT0SNFneAbtAD016gynQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODM0RC8zQTJDNTE5NkFE QTExMUVEQUI2REY0MkRDNEY5QUUwMi8wT1ZFQmJBOVBSSTBXZDRCdTBBUFRYcURL ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBPVkVCYkE5UFJJMFdkNEJ1MEFQVFhxREtkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODM0RC8zQTJDNTE5NkFEQTExMUVEQUI2REY0MkRDNEY5QUUwMi8wT1ZFQmJBOVBS STBXZDRCdTBBUFRYcURLZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4WgiFJUVBsep/RpW/XV9zIR09ZqFozTMkP/6+5bpOIh07LLBDMoUC TqjJ/353ZRYic9wXhY+bIqnc1wTyW2fysjPlkr5Cweg6TBT7d3tH42BVQ3SqhlVC W2gXoIjTYhNnqBm6ZBTZje9kdoW+XZCphglMlSYBsjF1MgLCsNkvdDUXn/5Nuaff T8dGfPG4/fE0THIZOaKeHBnQlPv+ZvdyMaHVzObXzyVWNwlfkRQUSKXOuBPkdNt0 pFxLQPauA23NUUajRIYkvgWXaotHsfyWJOu3i+q/Pb/KdqvvLwRqP06roNIHCbrS HYPuA46y5pexDF9rPEAZ3EsjXk5Ws0ER -----END CERTIFICATE-----Generated at Sat Jun 14 18:47:37 2025 by rpki-client