$ rpki-client -vvf rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft File: o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft (raw, json) Hash identifier: 0In5UaR/LGznBXcWYlHP+vc/gSUDvIEiHKs00lobOcE= Subject key identifier: E1:3B:F1:78:57:4D:8D:12:7E:DD:16:6C:65:63:07:0A:4F:7A:5D:58 Authority key identifier: A3:47:1C:31:53:3B:88:D1:BF:8A:40:A3:2A:7D:DE:3B:A0:BB:1C:BF Certificate issuer: /CN=A91C913E/serialNumber=A3471C31533B88D1BF8A40A32A7DDE3BA0BB1CBF Certificate serial: 033B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft Manifest number: 0336 Signing time: Thu 19 Jun 2025 00:55:03 +0000 Manifest this update: Thu 19 Jun 2025 00:55:02 +0000 Manifest next update: Thu 26 Jun 2025 00:55:02 +0000 Files and hashes: 1: o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl (hash: 0PdOVWzHvccC+4Mc8Fo2noNpf9ohr6TXS5i9OuMNl/8=) 2: 24578ECED56A11EFB764F716C4F9AE02.roa (hash: t5WMcFCD2OO+gp845WzQi07gNbar1uWW5UXsijptYhw=) 3: 1445557CC6C011EC9D09EF1DC4F9AE02.roa (hash: JL3deikXqirsZKv5Pglr4MkJVud4y4Ww4HTgjluu/lA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 00:55:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 827 (0x33b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C913E, serialNumber=A3471C31533B88D1BF8A40A32A7DDE3BA0BB1CBF Validity Not Before: Jun 19 00:55:02 2025 GMT Not After : Jun 26 00:55:02 2025 GMT Subject: CN=68535fe7-248c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:fd:53:4f:3f:3b:8d:82:f4:bb:b8:c3:61:2e: e1:2c:df:a1:6c:59:5d:06:c8:12:f2:18:f1:65:de: ba:8e:15:2d:b9:51:f8:88:a1:05:81:c9:8b:51:8f: 02:05:f1:17:63:e2:11:a7:85:f2:13:16:f0:9d:f1: 79:b2:94:e5:90:d1:d1:a9:79:2d:71:f3:d2:1c:85: 91:57:e3:64:22:e2:32:98:62:c2:1f:3b:72:6e:24: b7:36:50:a4:c4:5b:60:0b:d8:6d:71:c4:2d:11:16: 79:6b:2f:b3:e2:9b:0e:0b:1a:fc:6e:44:36:5e:9f: ae:b8:58:0a:0b:4e:3c:fb:19:1e:be:80:ed:ff:58: bf:2a:11:f6:51:0e:59:8c:06:d8:4f:10:24:6b:1a: d9:f6:fe:0c:00:b5:5e:d8:5b:25:8c:f8:95:9d:b3: 95:f3:64:df:9b:35:2f:1a:45:fc:2f:e2:66:30:dc: 20:a4:30:51:e1:93:ae:17:6b:d4:46:04:b4:60:1d: 40:77:98:12:f4:3e:b1:72:0e:78:25:18:86:94:94: db:f3:24:45:90:c2:ee:9a:60:15:65:d0:9e:fe:a6: 59:0c:e8:44:3c:87:72:41:90:68:95:73:a1:11:a4: 22:dc:df:48:14:88:d9:a1:1b:9b:71:aa:8e:54:12: e9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:3B:F1:78:57:4D:8D:12:7E:DD:16:6C:65:63:07:0A:4F:7A:5D:58 X509v3 Authority Key Identifier: keyid:A3:47:1C:31:53:3B:88:D1:BF:8A:40:A3:2A:7D:DE:3B:A0:BB:1C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:84:d9:4d:c9:72:71:83:eb:74:ed:c6:57:c0:88:ad:ca:90: b2:4f:53:60:a5:c2:40:af:4b:d3:98:00:4f:d6:9d:63:b5:4f: 71:01:96:f3:0b:bf:05:6a:80:73:95:cd:0c:20:38:d5:ad:28: ac:62:43:f8:b3:41:c6:34:18:5f:df:ff:cc:06:ec:cb:d0:d4: e7:36:66:08:d7:7d:a2:e4:60:03:dc:4c:c7:ad:b8:76:e1:90: 08:64:47:3e:4c:41:7e:d3:01:46:88:40:23:82:7f:67:20:a3: 94:39:7d:9a:1e:41:84:1c:83:20:76:77:05:61:b5:c3:29:2a: db:0b:f6:bc:1b:69:68:58:d2:5c:9c:8f:fa:04:9d:40:ed:a8: df:48:67:2d:0c:05:6e:51:c7:32:ef:8d:d3:51:b8:ac:45:f6: aa:67:f2:a3:6c:58:ad:cd:c8:62:cc:b7:7e:3e:40:a5:a8:db: c7:0a:c2:2b:d9:8e:fa:46:15:92:9d:d3:ae:0d:04:6a:4e:4c: e3:3c:a3:19:2d:ef:d5:10:7e:d7:ff:ab:a4:c2:6a:0b:51:00: 04:d4:b5:8a:4d:ba:e8:42:4d:b2:e6:94:ee:00:b2:72:21:14: 5f:c7:9a:a4:7d:66:71:dd:10:b5:97:54:da:42:75:62:1e:ee: 93:52:ef:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkxM0UxMTAvBgNVBAUTKEEzNDcxQzMxNTMzQjg4RDFCRjhBNDBBMzJBN0RERTNC QTBCQjFDQkYwHhcNMjUwNjE5MDA1NTAyWhcNMjUwNjI2MDA1NTAyWjAYMRYwFAYD VQQDEw02ODUzNWZlNy0yNDhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn/1TTz87jYL0u7jDYS7hLN+hbFldBsgS8hjxZd66jhUtuVH4iKEFgcmLUY8C BfEXY+IRp4XyExbwnfF5spTlkNHRqXktcfPSHIWRV+NkIuIymGLCHztybiS3NlCk xFtgC9htccQtERZ5ay+z4psOCxr8bkQ2Xp+uuFgKC048+xkevoDt/1i/KhH2UQ5Z jAbYTxAkaxrZ9v4MALVe2FsljPiVnbOV82TfmzUvGkX8L+JmMNwgpDBR4ZOuF2vU RgS0YB1Ad5gS9D6xcg54JRiGlJTb8yRFkMLummAVZdCe/qZZDOhEPIdyQZBolXOh EaQi3N9IFIjZoRubcaqOVBLpBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOE78XhX TY0Sft0WbGVjBwpPel1YMB8GA1UdIwQYMBaAFKNHHDFTO4jRv4pAoyp93juguxy/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTEzRS9ERDA4OThGMEM2 QkQxMUVDODk2Mzc0MURDNEY5QUUwMi9vMGNjTVZNN2lOR19pa0NqS24zZU82QzdI TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28wY2NNVk03aU5HX2lrQ2pLbjNlTzZDN0hMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTEzRS9ERDA4OThGMEM2QkQxMUVDODk2Mzc0MURDNEY5QUUwMi9vMGNjTVZNN2lO R19pa0NqS24zZU82QzdITDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGhNlNyXJxg+t07cZXwIitypCyT1NgpcJAr0vTmABP1p1jtU9xAZbz C78FaoBzlc0MIDjVrSisYkP4s0HGNBhf3//MBuzL0NTnNmYI132i5GAD3EzHrbh2 4ZAIZEc+TEF+0wFGiEAjgn9nIKOUOX2aHkGEHIMgdncFYbXDKSrbC/a8G2loWNJc nI/6BJ1A7ajfSGctDAVuUccy743TUbisRfaqZ/KjbFitzchizLd+PkClqNvHCsIr 2Y76RhWSndOuDQRqTkzjPKMZLe/VEH7X/6ukwmoLUQAE1LWKTbroQk2y5pTuALJy IRRfx5qkfWZx3RC1l1TaQnViHu6TUu+V -----END CERTIFICATE-----Generated at Thu Jun 19 19:32:24 2025 by rpki-client