$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft File: oNGf1mnyVeFici98GdiGS7Brc5k.mft (raw, json) Hash identifier: RpdEbeBJGtmF0Lu07yECW5890HmvTfceNAC8+kOc6C8= Subject key identifier: 89:EE:2B:84:55:6D:35:E0:2F:8F:15:C4:E9:F7:C3:8B:77:F4:67:01 Authority key identifier: A0:D1:9F:D6:69:F2:55:E1:62:72:2F:7C:19:D8:86:4B:B0:6B:73:99 Certificate issuer: /CN=A91DEC72/serialNumber=A0D19FD669F255E162722F7C19D8864BB06B7399 Certificate serial: 015A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNGf1mnyVeFici98GdiGS7Brc5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft Manifest number: 0159 Signing time: Tue 17 Jun 2025 03:08:08 +0000 Manifest this update: Tue 17 Jun 2025 03:08:08 +0000 Manifest next update: Tue 24 Jun 2025 03:08:08 +0000 Files and hashes: 1: oNGf1mnyVeFici98GdiGS7Brc5k.crl (hash: EztY7PiS3Tja5Bs0TB2bOXIuZuGRZK6AVbo85+xsXtQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.crl rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNGf1mnyVeFici98GdiGS7Brc5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 03:08:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 346 (0x15a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEC72, serialNumber=A0D19FD669F255E162722F7C19D8864BB06B7399 Validity Not Before: Jun 17 03:08:08 2025 GMT Not After : Jun 24 03:08:08 2025 GMT Subject: CN=6850dc18-0b8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d8:7a:5b:ef:6f:d5:f3:04:35:7e:ac:24:4a: 35:ef:13:2c:69:33:3b:18:1a:15:d5:a6:b2:0e:ff: 38:2f:9f:6c:b8:ac:d8:c3:70:45:ee:a2:ee:ed:5a: c4:87:ab:41:b3:a6:e8:26:7f:73:c2:99:30:e1:46: 38:b0:b2:b2:2d:2f:36:cd:1f:b4:a0:fd:85:8f:4a: f8:12:79:ea:4e:37:c4:bb:d0:2c:50:31:a7:7b:b4: 7a:f2:a2:40:84:60:ff:a2:8a:5b:42:ac:27:81:a5: a8:75:e9:f7:fb:c2:9b:98:0c:67:a1:a0:97:df:c5: e8:ab:5d:d9:fe:96:74:ea:55:d7:f0:ef:91:1f:cb: 8a:9f:95:70:a2:31:71:30:89:4e:ab:41:62:f4:09: 42:cf:ed:96:bd:a7:5a:04:f6:c8:a2:14:be:10:9f: 14:a8:96:00:39:21:ef:1c:dd:bb:37:9d:8a:21:ea: b3:7a:c0:66:58:08:aa:fc:db:c1:25:b7:b9:a4:da: f8:32:b9:54:d3:9c:1b:86:cf:05:83:a9:0b:f8:2a: f5:7f:17:56:48:a3:b8:90:55:a6:52:8e:71:da:c7: e6:9b:0b:ad:0e:70:c9:3d:9d:61:0f:db:0c:c3:39: 1c:ca:1f:7d:3f:7f:14:b7:ab:06:af:1e:f1:6b:5c: 28:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:EE:2B:84:55:6D:35:E0:2F:8F:15:C4:E9:F7:C3:8B:77:F4:67:01 X509v3 Authority Key Identifier: keyid:A0:D1:9F:D6:69:F2:55:E1:62:72:2F:7C:19:D8:86:4B:B0:6B:73:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNGf1mnyVeFici98GdiGS7Brc5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:9f:1b:bd:46:14:bf:65:59:16:6f:e0:41:52:99:49:c3:66: 1d:86:14:3e:e1:cd:39:05:22:9b:82:a5:f4:63:a7:d4:04:96: 37:46:09:2b:4c:32:ff:e4:70:06:a4:95:8b:da:ba:16:ec:25: 33:dc:69:eb:38:dc:fd:b0:c3:b0:50:c6:87:74:06:1f:d3:48: c3:46:18:28:ec:b6:40:81:23:c4:d2:36:ae:83:9f:c3:53:a1: 83:a8:80:2c:8c:97:5f:b3:e3:46:2c:aa:f4:5b:19:a3:d6:7f: b3:07:8f:a4:be:6a:cb:4c:a0:27:d7:d5:c3:ce:48:55:58:19: 5a:07:9f:b6:a1:e5:61:00:d6:73:a8:e5:06:47:75:1b:b6:4d: 86:b4:69:b6:b1:ca:58:53:66:3f:32:e6:f7:05:7e:0b:6f:c8: 4d:25:c7:4c:41:c5:13:22:19:a9:c5:ae:c7:e0:20:fd:6f:2b: b4:45:f5:b8:93:00:5a:50:06:97:2f:0a:db:c7:da:5e:d8:1a: 63:4b:48:26:02:65:ec:81:b2:36:be:81:fb:58:85:00:c3:1c: 26:e6:25:d3:46:f6:55:ef:4d:15:a3:3e:45:c7:17:d9:48:93: bf:fa:d6:c5:51:1c:03:ee:8e:e1:6b:24:f4:1f:52:87:56:06: 26:b6:b2:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVDNzIxMTAvBgNVBAUTKEEwRDE5RkQ2NjlGMjU1RTE2MjcyMkY3QzE5RDg4NjRC QjA2QjczOTkwHhcNMjUwNjE3MDMwODA4WhcNMjUwNjI0MDMwODA4WjAYMRYwFAYD VQQDEw02ODUwZGMxOC0wYjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzNh6W+9v1fMENX6sJEo17xMsaTM7GBoV1aayDv84L59suKzYw3BF7qLu7VrE h6tBs6boJn9zwpkw4UY4sLKyLS82zR+0oP2Fj0r4EnnqTjfEu9AsUDGne7R68qJA hGD/oopbQqwngaWoden3+8KbmAxnoaCX38Xoq13Z/pZ06lXX8O+RH8uKn5VwojFx MIlOq0Fi9AlCz+2WvadaBPbIohS+EJ8UqJYAOSHvHN27N52KIeqzesBmWAiq/NvB Jbe5pNr4MrlU05wbhs8Fg6kL+Cr1fxdWSKO4kFWmUo5x2sfmmwutDnDJPZ1hD9sM wzkcyh99P38Ut6sGrx7xa1wopQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFInuK4RV bTXgL48VxOn3w4t39GcBMB8GA1UdIwQYMBaAFKDRn9Zp8lXhYnIvfBnYhkuwa3OZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUM3Mi8zRjcxRkY4ODNC OTExMUVFQUM2MTdFNkFDNEY5QUUwMi9vTkdmMW1ueVZlRmljaTk4R2RpR1M3QnJj NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29OR2YxbW55VmVGaWNpOThHZGlHUzdCcmM1ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUM3Mi8zRjcxRkY4ODNCOTExMUVFQUM2MTdFNkFDNEY5QUUwMi9vTkdmMW1ueVZl RmljaTk4R2RpR1M3QnJjNWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhnxu9RhS/ZVkWb+BBUplJw2YdhhQ+4c05BSKbgqX0Y6fUBJY3Rgkr TDL/5HAGpJWL2roW7CUz3GnrONz9sMOwUMaHdAYf00jDRhgo7LZAgSPE0jaug5/D U6GDqIAsjJdfs+NGLKr0Wxmj1n+zB4+kvmrLTKAn19XDzkhVWBlaB5+2oeVhANZz qOUGR3Ubtk2GtGm2scpYU2Y/Mub3BX4Lb8hNJcdMQcUTIhmpxa7H4CD9byu0RfW4 kwBaUAaXLwrbx9pe2BpjS0gmAmXsgbI2voH7WIUAwxwm5iXTRvZV700Voz5FxxfZ SJO/+tbFURwD7o7hayT0H1KHVgYmtrKu -----END CERTIFICATE-----Generated at Wed Jun 18 06:44:25 2025 by rpki-client