$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft File: _oJu6bwS2q07GXRxsEE_HrIIJjU.mft (raw, json) Hash identifier: /v+0cUVxlAo4X3saqaiYZJVpf1sQNU0nb+9Ho0jKZwA= Subject key identifier: 94:7C:BE:2E:83:3F:4F:11:63:09:A7:36:CD:AE:E8:F6:E7:ED:D5:6C Authority key identifier: FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35 Certificate issuer: /CN=A91CEBCA/serialNumber=FE826EE9BC12DAAD3B197471B0413F1EB2082635 Certificate serial: 34BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft Manifest number: 34A8 Signing time: Mon 16 Jun 2025 14:29:58 +0000 Manifest this update: Mon 16 Jun 2025 14:29:57 +0000 Manifest next update: Mon 23 Jun 2025 14:29:57 +0000 Files and hashes: 1: _oJu6bwS2q07GXRxsEE_HrIIJjU.crl (hash: x2LLBuToUA9GhAFopAzhx71x53cWqS3Yn9qf+zYeU/8=) 2: 3BB279343A4C11F09EE4062EC4F9AE02.roa (hash: EUAq0b6vFZHqG0NFz8v3UvIwZhKTrOh+6DkoF6jgH7I=) 3: 9954B962F02D11EFBA26B94FC4F9AE02.roa (hash: ispiyRde3IxZPG0KNxY3BpmgVhlnDLIsiApuDlDjYFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.crl rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 14:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13499 (0x34bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEBCA, serialNumber=FE826EE9BC12DAAD3B197471B0413F1EB2082635 Validity Not Before: Jun 16 14:29:57 2025 GMT Not After : Jun 23 14:29:57 2025 GMT Subject: CN=68502a65-945d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:96:ec:86:23:d6:ef:a8:09:62:26:86:84:55: 9b:b1:3d:62:19:54:35:9d:da:35:80:63:94:d9:6f: bf:16:6b:c3:bc:2e:74:72:ab:73:ee:f2:7f:f6:b5: c5:ac:93:99:07:a3:be:f7:e7:b0:c1:12:58:da:6b: cd:6b:20:e8:c3:0d:74:65:67:53:3f:b9:a2:23:2e: a1:2a:2f:7a:13:be:79:a0:32:33:a5:70:47:0d:40: cb:37:e9:aa:7f:06:92:3a:3b:19:7c:3a:3c:8d:41: 52:1e:a1:47:f7:cc:1f:52:01:b9:c3:fc:36:e2:86: 97:1f:4e:66:0c:66:19:92:cd:04:fb:2b:fe:01:93: 36:21:63:2e:1a:b7:a9:c6:17:d4:05:6f:0c:7e:76: 6f:e9:c4:33:25:26:47:2f:69:9f:47:1f:80:80:33: 27:63:eb:da:e7:fd:d8:7d:66:b6:c8:4f:e1:f2:4b: f8:30:d7:a1:be:07:80:41:cb:88:e4:b5:cd:a5:e9: e6:7a:f7:89:a6:88:1c:ec:ae:f5:e6:90:66:88:74: 9c:b7:34:69:11:39:6b:57:9c:2c:72:ab:07:7e:ec: b6:a7:8e:49:2c:5b:c1:86:d6:c0:81:ec:e9:86:20: 28:86:e2:e8:45:99:e8:dc:7c:81:7f:9d:90:e9:49: 98:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:7C:BE:2E:83:3F:4F:11:63:09:A7:36:CD:AE:E8:F6:E7:ED:D5:6C X509v3 Authority Key Identifier: keyid:FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:c8:a7:95:43:89:d0:39:f1:f9:f9:ae:56:f6:b3:11:b1:1e: d4:7b:56:9b:6a:cc:bd:17:a1:da:60:76:75:b3:6e:4f:c8:45: 55:a9:02:a6:3b:73:23:89:92:cd:0d:c0:f5:4e:ea:c7:29:f8: cc:ff:16:f2:52:5b:27:54:98:1d:cc:df:ee:96:19:d5:f5:12: 6a:2a:64:bb:4b:3c:d7:cc:e8:8b:11:66:03:58:87:4a:86:c9: 11:9b:b5:06:c0:82:a9:67:01:14:69:cf:38:37:5a:36:8b:66: 4a:fc:2d:39:77:c4:f2:c0:5a:e8:5d:95:fc:57:25:53:56:49: 44:98:fa:94:57:ca:8d:6d:10:c3:ca:b0:dc:04:55:c8:d1:b2: ea:36:57:0d:67:28:e3:00:a1:dc:5a:39:f8:20:19:ea:fe:88: e2:a7:e9:a1:a0:98:8a:df:16:35:a3:8a:87:40:ec:da:ae:a6: 02:b9:d0:38:99:b7:a3:d0:43:73:00:b7:e8:12:57:00:e2:4b: 75:ac:3f:35:b0:09:f2:61:c8:20:10:39:ea:26:3b:b5:14:0f: 88:13:a8:01:e3:61:a5:e5:3c:ac:fc:84:bb:d6:53:a5:2c:cf: f0:f4:dc:e5:7f:92:ee:01:bd:4c:7c:00:c1:cf:3d:94:10:bb: 53:a2:90:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VCQ0ExMTAvBgNVBAUTKEZFODI2RUU5QkMxMkRBQUQzQjE5NzQ3MUIwNDEzRjFF QjIwODI2MzUwHhcNMjUwNjE2MTQyOTU3WhcNMjUwNjIzMTQyOTU3WjAYMRYwFAYD VQQDEw02ODUwMmE2NS05NDVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp5bshiPW76gJYiaGhFWbsT1iGVQ1ndo1gGOU2W+/FmvDvC50cqtz7vJ/9rXF rJOZB6O+9+ewwRJY2mvNayDoww10ZWdTP7miIy6hKi96E755oDIzpXBHDUDLN+mq fwaSOjsZfDo8jUFSHqFH98wfUgG5w/w24oaXH05mDGYZks0E+yv+AZM2IWMuGrep xhfUBW8MfnZv6cQzJSZHL2mfRx+AgDMnY+va5/3YfWa2yE/h8kv4MNehvgeAQcuI 5LXNpenmeveJpogc7K715pBmiHSctzRpETlrV5wscqsHfuy2p45JLFvBhtbAgezp hiAohuLoRZno3HyBf52Q6UmYiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJR8vi6D P08RYwmnNs2u6Pbn7dVsMB8GA1UdIwQYMBaAFP6Cbum8EtqtOxl0cbBBPx6yCCY1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUJDQS9CNTg4QjRBNjFE ODgxMUUyOENBRThGRTEwOEIwMkNEMi9fb0p1NmJ3UzJxMDdHWFJ4c0VFX0hySUlK alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19vSnU2YndTMnEwN0dYUnhzRUVfSHJJSUpqVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUJDQS9CNTg4QjRBNjFEODgxMUUyOENBRThGRTEwOEIwMkNEMi9fb0p1NmJ3UzJx MDdHWFJ4c0VFX0hySUlKalUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALyKeVQ4nQOfH5+a5W9rMRsR7Ue1abasy9F6HaYHZ1s25PyEVVqQKm O3MjiZLNDcD1TurHKfjM/xbyUlsnVJgdzN/ulhnV9RJqKmS7SzzXzOiLEWYDWIdK hskRm7UGwIKpZwEUac84N1o2i2ZK/C05d8TywFroXZX8VyVTVklEmPqUV8qNbRDD yrDcBFXI0bLqNlcNZyjjAKHcWjn4IBnq/ojip+mhoJiK3xY1o4qHQOzarqYCudA4 mbej0ENzALfoElcA4kt1rD81sAnyYcggEDnqJju1FA+IE6gB42Gl5Tys/IS71lOl LM/w9Nzlf5LuAb1MfADBzz2UELtTopBs -----END CERTIFICATE-----Generated at Wed Jun 18 02:35:45 2025 by rpki-client