$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.mft File: oqIX1KQS-1OPXJGjSzbOcYed22U.mft (raw, json) Hash identifier: Mp/qCld3xpypEP/oHC4XO6qHn+VMiRsbVsYnLlL++Ug= Subject key identifier: 8F:55:3D:54:72:8E:C2:83:52:E0:8D:0D:D3:07:CB:EB:5D:D2:39:3F Authority key identifier: A2:A2:17:D4:A4:12:FB:53:8F:5C:91:A3:4B:36:CE:71:87:9D:DB:65 Certificate issuer: /CN=A91CF9B0/serialNumber=A2A217D4A412FB538F5C91A34B36CE71879DDB65 Certificate serial: 0138 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oqIX1KQS-1OPXJGjSzbOcYed22U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.mft Manifest number: 0129 Signing time: Thu 19 Jun 2025 04:13:28 +0000 Manifest this update: Thu 19 Jun 2025 04:13:28 +0000 Manifest next update: Thu 26 Jun 2025 04:13:28 +0000 Files and hashes: 1: oqIX1KQS-1OPXJGjSzbOcYed22U.crl (hash: e23YIYrUMegcIWDqidXesGde3uHBNBk44KR0vDy9wYk=) 2: 84D917FC9F4911EEA0C5C856C4F9AE02.roa (hash: NmyQHlBil47JzTSCPQYz/6ZBa9AnAtiDqsHIcZPO3dA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.crl rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oqIX1KQS-1OPXJGjSzbOcYed22U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 04:13:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF9B0, serialNumber=A2A217D4A412FB538F5C91A34B36CE71879DDB65 Validity Not Before: Jun 19 04:13:28 2025 GMT Not After : Jun 26 04:13:28 2025 GMT Subject: CN=68538e68-e12f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f4:ae:07:4c:3f:18:6e:ad:62:a8:01:c4:9a: 72:d5:02:9a:d5:6d:16:92:f9:a8:38:c7:20:7d:de: b5:c2:92:32:63:31:b8:ab:9f:a2:7d:26:22:d0:37: 23:3f:2f:66:ee:95:63:e0:3f:74:16:6b:54:3b:49: f7:57:da:98:ec:8b:89:0e:6c:3a:7e:7f:66:3b:40: 86:da:3c:3e:4e:45:b4:37:9d:97:7a:75:d4:5e:92: 2a:09:42:fc:63:52:22:54:10:08:22:1d:c4:7e:a9: a7:0a:8f:71:79:0a:47:4d:51:53:b5:38:fb:09:56: 60:aa:43:16:11:bd:d2:de:2f:dc:be:f7:8d:06:cf: a3:4d:d5:2e:9a:1b:59:76:6d:15:d5:ad:b3:44:75: 06:3c:a6:cc:d6:16:68:0f:55:32:a7:1a:51:64:ca: ad:e3:6a:c7:00:c6:12:24:1a:3a:49:9f:07:8f:bf: 21:a4:61:7f:99:6c:ff:2d:68:aa:51:06:30:b8:93: bb:fd:ed:54:6a:44:4e:14:da:3c:b5:d8:7a:c6:7d: 29:87:58:b0:bc:96:e3:f1:b5:0a:dc:a4:75:32:30: c6:df:75:ce:a5:54:a5:ee:a9:94:77:da:00:d0:10: 7f:5a:5b:28:ba:6c:28:cb:71:29:5e:d3:cd:f2:78: 01:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:55:3D:54:72:8E:C2:83:52:E0:8D:0D:D3:07:CB:EB:5D:D2:39:3F X509v3 Authority Key Identifier: keyid:A2:A2:17:D4:A4:12:FB:53:8F:5C:91:A3:4B:36:CE:71:87:9D:DB:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oqIX1KQS-1OPXJGjSzbOcYed22U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:57:5a:fd:bd:fd:5a:a0:dd:8d:ca:33:84:38:f8:80:a9:48: bd:e2:77:ad:4c:df:13:b7:0f:50:f1:2d:06:db:76:19:85:7b: a0:24:73:e3:b9:05:9d:36:87:39:8d:0a:26:1f:15:bf:1c:d8: eb:8c:43:7e:b0:4f:06:cc:96:e7:59:0b:ff:0f:a2:e6:52:7b: 70:17:98:4b:1e:e7:43:b4:06:c8:ef:41:4b:91:8c:fe:02:58: 92:9f:e5:fa:6a:ae:7d:18:8c:5e:20:60:1c:86:24:22:16:51: 78:d6:86:e8:6f:a4:bc:05:39:46:11:a6:7b:b2:02:c1:ee:e3: 88:c7:90:fb:5b:4c:ee:33:cb:0f:90:5b:bc:a9:11:2e:a6:74: 64:4f:72:9d:73:7a:4c:69:e2:30:ec:6b:61:53:02:1f:eb:ba: c1:58:69:c1:f3:ec:35:a7:a1:73:16:77:51:7c:6f:52:c7:ff: e9:ef:83:0b:84:10:ec:49:b1:dc:b9:48:2f:a4:6d:d5:4f:5f: 23:84:80:e2:5e:0e:f4:34:2c:b2:5e:1c:61:de:c8:18:84:0f: d5:99:71:82:8b:12:7a:bc:25:46:ac:33:6b:aa:39:bf:cf:b3: a4:58:fa:71:ce:46:67:d9:d7:63:7c:25:3a:38:92:c5:7e:0e: 59:02:a1:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y5QjAxMTAvBgNVBAUTKEEyQTIxN0Q0QTQxMkZCNTM4RjVDOTFBMzRCMzZDRTcx ODc5RERCNjUwHhcNMjUwNjE5MDQxMzI4WhcNMjUwNjI2MDQxMzI4WjAYMRYwFAYD VQQDEw02ODUzOGU2OC1lMTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/SuB0w/GG6tYqgBxJpy1QKa1W0WkvmoOMcgfd61wpIyYzG4q5+ifSYi0Dcj Py9m7pVj4D90FmtUO0n3V9qY7IuJDmw6fn9mO0CG2jw+TkW0N52XenXUXpIqCUL8 Y1IiVBAIIh3EfqmnCo9xeQpHTVFTtTj7CVZgqkMWEb3S3i/cvveNBs+jTdUumhtZ dm0V1a2zRHUGPKbM1hZoD1UypxpRZMqt42rHAMYSJBo6SZ8Hj78hpGF/mWz/LWiq UQYwuJO7/e1UakROFNo8tdh6xn0ph1iwvJbj8bUK3KR1MjDG33XOpVSl7qmUd9oA 0BB/Wlsoumwoy3EpXtPN8ngB+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI9VPVRy jsKDUuCNDdMHy+td0jk/MB8GA1UdIwQYMBaAFKKiF9SkEvtTj1yRo0s2znGHndtl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjlCMC8xNEM5NDk2RTlG M0YxMUVFODAxQjFENjJDNEY5QUUwMi9vcUlYMUtRUy0xT1BYSkdqU3piT2NZZWQy MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29xSVgxS1FTLTFPUFhKR2pTemJPY1llZDIyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjlCMC8xNEM5NDk2RTlGM0YxMUVFODAxQjFENjJDNEY5QUUwMi9vcUlYMUtRUy0x T1BYSkdqU3piT2NZZWQyMlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXV1r9vf1aoN2NyjOEOPiAqUi94netTN8Ttw9Q8S0G23YZhXugJHPj uQWdNoc5jQomHxW/HNjrjEN+sE8GzJbnWQv/D6LmUntwF5hLHudDtAbI70FLkYz+ AliSn+X6aq59GIxeIGAchiQiFlF41obob6S8BTlGEaZ7sgLB7uOIx5D7W0zuM8sP kFu8qREupnRkT3Kdc3pMaeIw7GthUwIf67rBWGnB8+w1p6FzFndRfG9Sx//p74ML hBDsSbHcuUgvpG3VT18jhIDiXg70NCyyXhxh3sgYhA/VmXGCixJ6vCVGrDNrqjm/ z7OkWPpxzkZn2ddjfCU6OJLFfg5ZAqHb -----END CERTIFICATE-----Generated at Fri Jun 20 06:46:47 2025 by rpki-client