$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.mft File: MO7z6BnpmwANZl9r1ZSvpMYiai4.mft (raw, json) Hash identifier: ES8p2+M43sGW6fxDGC+Yu+YFCr8/qR30P5ApOeqK1tU= Subject key identifier: 08:D6:C2:4B:3C:26:9B:C9:50:2D:EF:5D:FE:CE:6F:F4:DE:7C:C8:BD Authority key identifier: 30:EE:F3:E8:19:E9:9B:00:0D:66:5F:6B:D5:94:AF:A4:C6:22:6A:2E Certificate issuer: /CN=A91D5D9F/serialNumber=30EEF3E819E99B000D665F6BD594AFA4C6226A2E Certificate serial: 0214 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MO7z6BnpmwANZl9r1ZSvpMYiai4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.mft Manifest number: 020F Signing time: Sun 15 Jun 2025 01:41:10 +0000 Manifest this update: Sun 15 Jun 2025 01:41:09 +0000 Manifest next update: Sun 22 Jun 2025 01:41:09 +0000 Files and hashes: 1: MO7z6BnpmwANZl9r1ZSvpMYiai4.crl (hash: hZbeZ5hD4NePWF7QAzT8Cesp+flsjaxVbeEa1r9Abe0=) 2: D7803F3A3A5511EDB9410C50C4F9AE02.roa (hash: 5RvSp27bzJLpaJnE9Vp9OHr3zH1Dq7i1O2ke5dqvusQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.crl rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MO7z6BnpmwANZl9r1ZSvpMYiai4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 532 (0x214) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5D9F, serialNumber=30EEF3E819E99B000D665F6BD594AFA4C6226A2E Validity Not Before: Jun 15 01:41:09 2025 GMT Not After : Jun 22 01:41:09 2025 GMT Subject: CN=684e24b6-5d7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d6:a0:fa:3e:b1:49:8e:cc:73:5f:1e:68:8d: 4e:55:d1:ac:3e:ed:a3:4b:0a:a2:09:e7:2c:d7:6a: 9d:b2:52:46:4d:33:ef:ab:8a:99:c3:91:b5:c3:41: e0:a6:ec:39:43:1f:87:8a:6a:b7:34:cd:eb:06:87: 20:91:fc:cb:87:75:b7:f2:2f:2f:b5:16:6e:95:f7: 08:0e:a9:49:8e:02:90:1b:aa:53:a3:11:0e:4a:6e: a6:d2:23:93:61:88:b7:77:46:75:53:07:ea:c3:ce: 6d:ea:72:04:d4:b6:51:49:02:27:77:8a:e0:9d:40: 83:6c:74:31:8d:5e:e9:10:d3:11:c0:78:bf:a8:cb: 89:9a:b9:6d:96:d9:8d:cb:e7:ca:2e:c3:35:b6:4d: bb:a8:8e:bf:18:61:b5:d1:b8:f9:90:78:f5:9f:68: 80:cf:74:c0:17:a6:32:00:e1:7a:12:4c:c0:a8:29: 65:b3:ca:66:cf:36:76:64:19:16:5c:94:73:49:21: ad:31:03:66:6b:63:3f:fc:a7:68:e0:85:3b:f1:f9: 8b:b4:16:93:77:95:7d:5a:04:75:cb:81:5c:20:af: 64:da:df:b7:e0:e8:f3:9b:fd:96:de:a3:22:fe:0f: 95:d9:fc:54:c3:76:07:e2:0f:dd:31:a0:aa:2e:fa: 10:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:D6:C2:4B:3C:26:9B:C9:50:2D:EF:5D:FE:CE:6F:F4:DE:7C:C8:BD X509v3 Authority Key Identifier: keyid:30:EE:F3:E8:19:E9:9B:00:0D:66:5F:6B:D5:94:AF:A4:C6:22:6A:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MO7z6BnpmwANZl9r1ZSvpMYiai4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:41:42:20:2e:13:5c:40:68:42:98:eb:8a:50:ce:47:f8:ab: f4:96:67:81:6f:2c:48:9f:00:df:7d:df:68:aa:5c:f5:7e:a9: 62:2e:92:d7:0b:ff:1e:26:e2:86:1f:dc:03:61:51:3e:7b:8c: eb:61:e7:25:4f:47:0a:98:8f:69:33:b7:7f:9e:ed:89:53:a2: 78:da:a5:00:57:0c:17:9f:8e:9a:1a:9d:96:18:b1:87:48:90: ea:e6:21:29:43:d7:62:bc:39:44:d6:73:c4:82:db:9e:c3:2a: 9d:9e:a3:f7:74:15:55:ea:1f:86:2b:d3:ec:78:8d:2b:a8:12: 83:a4:0c:77:cc:49:b9:2d:2f:40:9e:d7:29:89:9a:d6:6d:f7: d9:60:ec:97:55:a2:dd:a2:3e:83:3d:9d:ef:a4:f8:d7:ca:22: 59:6f:05:5b:32:73:ed:6f:fd:1f:f3:1b:8c:a3:66:ba:e5:e5: 4e:2c:fe:14:4f:09:a2:1a:61:22:df:e0:e4:bd:48:3e:9a:19: 83:22:8e:3c:ac:d4:e5:fd:4d:b2:39:45:bd:01:7f:14:e8:c4: fc:b6:21:e2:16:d4:d1:48:61:c8:de:db:58:45:18:77:2f:3b: 2f:05:b1:76:55:36:b2:73:56:5f:59:33:d7:9c:2a:eb:26:30: 53:23:6c:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVEOUYxMTAvBgNVBAUTKDMwRUVGM0U4MTlFOTlCMDAwRDY2NUY2QkQ1OTRBRkE0 QzYyMjZBMkUwHhcNMjUwNjE1MDE0MTA5WhcNMjUwNjIyMDE0MTA5WjAYMRYwFAYD VQQDEw02ODRlMjRiNi01ZDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1dag+j6xSY7Mc18eaI1OVdGsPu2jSwqiCecs12qdslJGTTPvq4qZw5G1w0Hg puw5Qx+Himq3NM3rBocgkfzLh3W38i8vtRZulfcIDqlJjgKQG6pToxEOSm6m0iOT YYi3d0Z1Uwfqw85t6nIE1LZRSQInd4rgnUCDbHQxjV7pENMRwHi/qMuJmrltltmN y+fKLsM1tk27qI6/GGG10bj5kHj1n2iAz3TAF6YyAOF6EkzAqClls8pmzzZ2ZBkW XJRzSSGtMQNma2M//Kdo4IU78fmLtBaTd5V9WgR1y4FcIK9k2t+34Ojzm/2W3qMi /g+V2fxUw3YH4g/dMaCqLvoQ2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAjWwks8 JpvJUC3vXf7Ob/TefMi9MB8GA1UdIwQYMBaAFDDu8+gZ6ZsADWZfa9WUr6TGImou MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUQ5Ri85MjZGMzMzRTNB NEYxMUVEQjdCNkFFMjBDNEY5QUUwMi9NTzd6NkJucG13QU5abDlyMVpTdnBNWWlh aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01PN3o2Qm5wbXdBTlpsOXIxWlN2cE1ZaWFpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUQ5Ri85MjZGMzMzRTNBNEYxMUVEQjdCNkFFMjBDNEY5QUUwMi9NTzd6NkJucG13 QU5abDlyMVpTdnBNWWlhaTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/QUIgLhNcQGhCmOuKUM5H+Kv0lmeBbyxInwDffd9oqlz1fqliLpLX C/8eJuKGH9wDYVE+e4zrYeclT0cKmI9pM7d/nu2JU6J42qUAVwwXn46aGp2WGLGH SJDq5iEpQ9divDlE1nPEgtuewyqdnqP3dBVV6h+GK9PseI0rqBKDpAx3zEm5LS9A ntcpiZrWbffZYOyXVaLdoj6DPZ3vpPjXyiJZbwVbMnPtb/0f8xuMo2a65eVOLP4U TwmiGmEi3+DkvUg+mhmDIo48rNTl/U2yOUW9AX8U6MT8tiHiFtTRSGHI3ttYRRh3 LzsvBbF2VTayc1ZfWTPXnCrrJjBTI2xp -----END CERTIFICATE-----Generated at Sun Jun 15 04:57:37 2025 by rpki-client