$ rpki-client -vvf rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.mft File: OochbBWSc79Rk0f8H-5wYZXMKuY.mft (raw, json) Hash identifier: DIPY41oRMR/+5/kTABLCRFDpjecjqP9wXPvoG8ZD5xA= Subject key identifier: AF:5A:7D:F9:3B:22:F3:E5:EA:D4:97:6E:D7:B4:0E:32:7B:D2:D2:67 Authority key identifier: 3A:87:21:6C:15:92:73:BF:51:93:47:FC:1F:EE:70:61:95:CC:2A:E6 Certificate issuer: /CN=A91C661C/serialNumber=3A87216C159273BF519347FC1FEE706195CC2AE6 Certificate serial: 06A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OochbBWSc79Rk0f8H-5wYZXMKuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.mft Manifest number: 0699 Signing time: Mon 16 Jun 2025 21:55:32 +0000 Manifest this update: Mon 16 Jun 2025 21:55:32 +0000 Manifest next update: Mon 23 Jun 2025 21:55:32 +0000 Files and hashes: 1: OochbBWSc79Rk0f8H-5wYZXMKuY.crl (hash: jdiZ68bQZFtnW3jXhiG+SGdIejgewm3OiNW1t4TYLRM=) 2: AABC79100EC411EF858B5255C4F9AE02.roa (hash: xd+kZGDM6lidBL503M6KRPrbZpmB555muvLLsOdJRog=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.crl rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OochbBWSc79Rk0f8H-5wYZXMKuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 21:55:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1700 (0x6a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C661C, serialNumber=3A87216C159273BF519347FC1FEE706195CC2AE6 Validity Not Before: Jun 16 21:55:32 2025 GMT Not After : Jun 23 21:55:32 2025 GMT Subject: CN=685092d4-613c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:4c:16:94:74:02:dc:1c:28:cd:d6:f2:50:f4: 19:b1:08:36:61:b3:1f:57:68:53:36:15:3a:d4:87: 73:ae:e6:7d:6e:0c:2c:ad:98:23:c7:e7:53:dd:13: 28:d5:3d:74:b4:0c:0f:ae:81:8e:ec:eb:b3:29:6b: 01:cf:7c:1f:06:3a:78:de:f3:c9:ab:7b:8c:f7:5f: 73:e3:11:2c:13:a6:b4:6d:13:d0:55:4e:c2:be:9f: 03:be:37:41:e2:8e:4b:e0:1d:b8:2f:04:53:ed:cf: 28:a9:7a:d9:c7:d0:a1:66:34:70:c3:e4:45:53:90: ad:ef:f2:3a:bc:10:bc:3a:0d:f8:83:a7:20:53:bf: de:ce:e6:22:23:6d:b8:d5:d1:3f:b6:88:3f:b5:5d: e3:3c:9f:e2:33:4f:38:cf:43:8c:04:62:f5:86:04: 6b:45:1b:fa:29:67:48:11:48:c0:64:17:26:34:c3: 3f:99:84:6e:53:2d:93:35:b2:13:f2:4e:5f:9b:bc: df:d1:99:7d:0f:94:67:43:ff:7f:85:e2:3c:5b:29: 9b:10:e4:dc:33:51:f0:a5:64:22:70:ab:38:c9:21: d7:0e:f0:74:68:d4:2b:1d:7e:7d:60:86:9d:cd:c8: d3:07:97:ad:7e:1f:ae:ec:a1:b8:0a:cd:6b:f0:ed: ad:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:5A:7D:F9:3B:22:F3:E5:EA:D4:97:6E:D7:B4:0E:32:7B:D2:D2:67 X509v3 Authority Key Identifier: keyid:3A:87:21:6C:15:92:73:BF:51:93:47:FC:1F:EE:70:61:95:CC:2A:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OochbBWSc79Rk0f8H-5wYZXMKuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:80:00:ac:46:35:2a:26:02:48:e0:61:14:7a:35:ba:b4:41: 6f:69:9a:04:15:78:3d:87:3d:71:f3:6e:d8:86:60:bb:27:55: 6e:22:f6:ff:12:9d:e4:e4:cc:f9:75:c4:50:de:99:95:d1:57: f9:8a:78:36:41:ac:04:76:7d:2a:4b:39:1b:b7:2d:69:07:2f: 13:f5:2d:56:ef:8f:50:f7:ff:c6:61:37:ca:b6:4e:44:34:70: 69:de:ac:f7:45:9d:4d:05:c3:19:15:73:df:c2:96:a5:96:8d: c0:a3:e7:f8:a2:6a:14:d1:c8:da:a0:06:66:69:6f:2c:c1:e0: 56:ad:ef:65:e8:22:71:a9:27:ca:d6:be:78:0d:45:5c:29:5a: f4:b7:8b:2e:dc:97:9d:f0:aa:e2:3a:92:aa:84:75:3a:28:c6: f9:e0:2a:14:08:8c:4b:70:e6:5c:59:a1:cf:52:7a:5a:fa:87: 02:44:b3:1b:30:ec:7b:a0:70:6f:f7:06:d8:29:62:c0:77:1b: cf:f7:87:0d:43:ef:d9:1d:d0:2b:47:06:fd:99:d1:b5:89:70: 37:2b:0d:5d:49:ae:32:9c:c2:d5:21:de:78:f6:52:2f:bc:b1: 5b:38:86:cd:66:54:52:1e:33:23:c3:03:e1:3c:13:d9:cb:37: bb:5e:c4:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY2MUMxMTAvBgNVBAUTKDNBODcyMTZDMTU5MjczQkY1MTkzNDdGQzFGRUU3MDYx OTVDQzJBRTYwHhcNMjUwNjE2MjE1NTMyWhcNMjUwNjIzMjE1NTMyWjAYMRYwFAYD VQQDEw02ODUwOTJkNC02MTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6EwWlHQC3BwozdbyUPQZsQg2YbMfV2hTNhU61IdzruZ9bgwsrZgjx+dT3RMo 1T10tAwProGO7OuzKWsBz3wfBjp43vPJq3uM919z4xEsE6a0bRPQVU7Cvp8DvjdB 4o5L4B24LwRT7c8oqXrZx9ChZjRww+RFU5Ct7/I6vBC8Og34g6cgU7/ezuYiI224 1dE/tog/tV3jPJ/iM084z0OMBGL1hgRrRRv6KWdIEUjAZBcmNMM/mYRuUy2TNbIT 8k5fm7zf0Zl9D5RnQ/9/heI8WymbEOTcM1HwpWQicKs4ySHXDvB0aNQrHX59YIad zcjTB5etfh+u7KG4Cs1r8O2tnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK9affk7 IvPl6tSXbte0DjJ70tJnMB8GA1UdIwQYMBaAFDqHIWwVknO/UZNH/B/ucGGVzCrm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjYxQy9GNDU5Mjk5Mjcz NzIxMUVCOTQ3NUNBNURDNEY5QUUwMi9Pb2NoYkJXU2M3OVJrMGY4SC01d1laWE1L dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09vY2hiQldTYzc5UmswZjhILTV3WVpYTUt1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjYxQy9GNDU5Mjk5MjczNzIxMUVCOTQ3NUNBNURDNEY5QUUwMi9Pb2NoYkJXU2M3 OVJrMGY4SC01d1laWE1LdVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5gACsRjUqJgJI4GEUejW6tEFvaZoEFXg9hz1x827YhmC7J1VuIvb/ Ep3k5Mz5dcRQ3pmV0Vf5ing2QawEdn0qSzkbty1pBy8T9S1W749Q9//GYTfKtk5E NHBp3qz3RZ1NBcMZFXPfwpallo3Ao+f4omoU0cjaoAZmaW8sweBWre9l6CJxqSfK 1r54DUVcKVr0t4su3Jed8KriOpKqhHU6KMb54CoUCIxLcOZcWaHPUnpa+ocCRLMb MOx7oHBv9wbYKWLAdxvP94cNQ+/ZHdArRwb9mdG1iXA3Kw1dSa4ynMLVId549lIv vLFbOIbNZlRSHjMjwwPhPBPZyze7XsRi -----END CERTIFICATE-----Generated at Wed Jun 18 23:43:15 2025 by rpki-client