$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.mft File: oAM_SUNjDclOLd9fKmuI6GZGGuc.mft (raw, json) Hash identifier: ycfZCefvZT8y5LrGkOF4DxLY6n3RgDWYDxCPlc2A1Dc= Subject key identifier: BF:D6:A9:79:8C:98:53:55:D0:27:C8:09:4A:31:35:FB:43:B4:4A:BC Authority key identifier: A0:03:3F:49:43:63:0D:C9:4E:2D:DF:5F:2A:6B:88:E8:66:46:1A:E7 Certificate issuer: /CN=A91DC0F2/serialNumber=A0033F4943630DC94E2DDF5F2A6B88E866461AE7 Certificate serial: DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oAM_SUNjDclOLd9fKmuI6GZGGuc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.mft Manifest number: DB Signing time: Fri 13 Jun 2025 04:32:44 +0000 Manifest this update: Fri 13 Jun 2025 04:32:44 +0000 Manifest next update: Fri 20 Jun 2025 04:32:44 +0000 Files and hashes: 1: oAM_SUNjDclOLd9fKmuI6GZGGuc.crl (hash: OOoyQ1LhRu9+LB4TtsEDi1EcHOyK34ALf09Le/8MEzo=) 2: EE647C1418A411EFBA690F60C4F9AE02.roa (hash: 1sKQhDe4XE+z/iEwFOdjuVVtLfzSNo7ytvziBnxPEOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.crl rsync://rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oAM_SUNjDclOLd9fKmuI6GZGGuc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 04:32:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223 (0xdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC0F2, serialNumber=A0033F4943630DC94E2DDF5F2A6B88E866461AE7 Validity Not Before: Jun 13 04:32:44 2025 GMT Not After : Jun 20 04:32:44 2025 GMT Subject: CN=684ba9ec-8140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:91:15:04:75:9f:b2:72:b0:f3:6c:46:62:31: 6a:43:cb:65:20:01:95:e1:97:fb:61:93:81:37:93: 1b:7d:c1:96:46:d7:53:3d:90:cf:45:72:14:77:36: 99:3e:0a:ac:ca:be:06:0b:eb:0e:50:2c:1e:b3:e1: 1c:79:ac:92:26:24:4b:dd:57:e2:61:80:80:22:74: 55:5a:86:da:30:ae:36:85:f1:17:44:9b:ff:a7:1e: f8:a7:7d:f1:c2:d2:f0:51:be:c9:aa:5a:5d:ec:7b: 42:71:84:22:21:24:43:51:10:05:8f:a6:05:42:d1: f8:7c:15:ca:24:9d:fc:61:92:c7:87:38:92:18:45: ad:21:36:5a:44:bd:cc:be:fe:6d:7e:a7:95:ad:cf: 0a:db:00:a2:0a:18:8f:6f:74:28:ad:da:2d:1e:54: 29:98:b9:30:32:53:50:ae:31:5b:02:0a:cd:74:30: 6d:8e:e8:61:80:6c:47:4b:4c:38:6f:ea:6d:1b:86: 23:f9:d4:02:8a:73:ce:dd:1b:87:81:09:a0:f1:50: e3:16:5b:f1:cf:2b:a2:e1:49:b9:d9:f2:2e:df:47: 7b:3c:f1:38:b8:68:97:de:16:59:fe:14:a5:68:aa: d7:2a:fb:ea:9d:38:3e:d4:6c:1b:98:ec:c6:87:cc: b9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:D6:A9:79:8C:98:53:55:D0:27:C8:09:4A:31:35:FB:43:B4:4A:BC X509v3 Authority Key Identifier: keyid:A0:03:3F:49:43:63:0D:C9:4E:2D:DF:5F:2A:6B:88:E8:66:46:1A:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oAM_SUNjDclOLd9fKmuI6GZGGuc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:ee:67:5a:b6:8d:ee:5b:d3:2b:58:56:76:92:78:ce:4c:01: f7:63:60:79:b5:9f:ee:20:e4:81:ca:3b:fc:88:b0:20:02:93: 96:2d:14:09:8b:f1:e9:f1:1c:63:08:37:dc:11:63:4e:bc:a0: d4:d5:f7:e2:93:a3:eb:03:95:cb:a6:0a:ee:46:ff:f7:b7:5d: c6:fd:0d:f6:6b:41:6a:cb:70:26:dd:65:3f:94:61:9d:c2:41: f3:99:b4:10:05:14:23:09:e2:97:ef:f0:0b:70:a4:eb:a5:18: a3:bd:70:91:d9:dc:53:e5:c8:e2:b8:04:24:18:d1:2e:f1:88: 42:bd:57:8c:39:29:5c:80:ed:3e:24:ca:36:91:71:ba:cc:98: e4:34:93:d3:d7:42:ed:87:cd:5e:6a:17:70:09:e5:82:f6:82: a2:e8:6d:3c:ad:7a:76:a2:49:be:ac:88:0f:e5:57:c3:90:31: fb:f5:ae:b2:e7:e3:94:83:ee:dd:a1:b3:9a:22:38:84:03:8e: 84:8e:8a:87:a5:42:14:13:2f:8c:d5:ae:c5:ba:fc:8d:52:fa: 9a:9b:49:6f:16:86:12:be:7e:86:2c:48:2c:0b:ef:2a:54:78: 9d:b4:ac:2c:1e:45:08:ee:6b:f7:eb:92:c3:43:24:a6:69:5f: cc:a7:2e:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwRjIxMTAvBgNVBAUTKEEwMDMzRjQ5NDM2MzBEQzk0RTJEREY1RjJBNkI4OEU4 NjY0NjFBRTcwHhcNMjUwNjEzMDQzMjQ0WhcNMjUwNjIwMDQzMjQ0WjAYMRYwFAYD VQQDEw02ODRiYTllYy04MTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZEVBHWfsnKw82xGYjFqQ8tlIAGV4Zf7YZOBN5MbfcGWRtdTPZDPRXIUdzaZ Pgqsyr4GC+sOUCwes+EceaySJiRL3VfiYYCAInRVWobaMK42hfEXRJv/px74p33x wtLwUb7Jqlpd7HtCcYQiISRDURAFj6YFQtH4fBXKJJ38YZLHhziSGEWtITZaRL3M vv5tfqeVrc8K2wCiChiPb3QordotHlQpmLkwMlNQrjFbAgrNdDBtjuhhgGxHS0w4 b+ptG4Yj+dQCinPO3RuHgQmg8VDjFlvxzyui4Um52fIu30d7PPE4uGiX3hZZ/hSl aKrXKvvqnTg+1GwbmOzGh8y5DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL/WqXmM mFNV0CfICUoxNftDtEq8MB8GA1UdIwQYMBaAFKADP0lDYw3JTi3fXypriOhmRhrn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzBGMi83RjMzRUUyNEZE N0UxMUVFQTFCMzUzNUNDNEY5QUUwMi9vQU1fU1VOakRjbE9MZDlmS211STZHWkdH dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29BTV9TVU5qRGNsT0xkOWZLbXVJNkdaR0d1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzBGMi83RjMzRUUyNEZEN0UxMUVFQTFCMzUzNUNDNEY5QUUwMi9vQU1fU1VOakRj bE9MZDlmS211STZHWkdHdWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBj7mdato3uW9MrWFZ2knjOTAH3Y2B5tZ/uIOSByjv8iLAgApOWLRQJ i/Hp8RxjCDfcEWNOvKDU1ffik6PrA5XLpgruRv/3t13G/Q32a0Fqy3Am3WU/lGGd wkHzmbQQBRQjCeKX7/ALcKTrpRijvXCR2dxT5cjiuAQkGNEu8YhCvVeMOSlcgO0+ JMo2kXG6zJjkNJPT10Lth81eahdwCeWC9oKi6G08rXp2okm+rIgP5VfDkDH79a6y 5+OUg+7dobOaIjiEA46EjoqHpUIUEy+M1a7FuvyNUvqam0lvFoYSvn6GLEgsC+8q VHidtKwsHkUI7mv365LDQySmaV/Mpy7o -----END CERTIFICATE-----Generated at Sat Jun 14 18:48:06 2025 by rpki-client