$ rpki-client -vvf rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft File: 3obmXuoeCzDk_Y2SRYft9XI9UH0.mft (raw, json) Hash identifier: 5j768A8n80A6YY5AM3z5pk1Io9jChTHrfg4turUEWfo= Subject key identifier: E7:34:7B:EE:69:90:23:E7:01:A3:C2:F0:93:24:65:D6:69:8A:C6:0B Authority key identifier: DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D Certificate issuer: /CN=A91E00A5/serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft Manifest number: 88 Signing time: Fri 13 Jun 2025 05:28:08 +0000 Manifest this update: Fri 13 Jun 2025 05:28:08 +0000 Manifest next update: Fri 20 Jun 2025 05:28:08 +0000 Files and hashes: 1: 3obmXuoeCzDk_Y2SRYft9XI9UH0.crl (hash: dmefAcBHY8gqhEsydG2FNhAkF9rytW5REeSTi7Dv0HE=) 2: 1F63E4347ABC11EF9E53E753C4F9AE02.roa (hash: HKA4VosuvqKj93QksjNsBERDuKRgYc9/Nd6hWkYBCUw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:28:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E00A5, serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D Validity Not Before: Jun 13 05:28:08 2025 GMT Not After : Jun 20 05:28:08 2025 GMT Subject: CN=684bb6e8-61c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:39:b7:bb:f1:96:f3:11:f5:5f:d6:cc:44:5b: 88:c5:75:42:a9:3b:06:1d:79:88:be:6f:f7:79:13: d7:95:e0:af:31:d6:bd:c7:6e:17:04:e6:68:6b:e8: 82:65:51:28:ef:36:0a:b3:df:1b:5f:84:f8:1c:b3: ac:99:ab:0c:f4:3d:14:1e:e4:89:c5:72:5b:a2:9d: a1:c5:1f:c7:4f:61:eb:f9:c0:38:2e:a6:ad:4a:91: b9:05:dd:ff:a0:5b:a8:9a:12:a8:c2:1c:71:f3:49: 8b:3b:9f:5d:38:6e:89:46:ca:9b:b3:b7:0e:2f:8a: 4f:ce:e9:38:39:cb:72:de:10:b0:c1:4e:39:f2:05: 08:b7:bc:20:31:94:e6:1d:ef:e8:15:68:34:d3:56: 80:a4:9a:8d:db:43:d2:3d:55:7d:ca:de:38:69:c3: 41:5f:ea:6e:5e:7b:0d:b8:28:d3:f9:c1:13:76:bb: ff:5b:90:0e:bb:3e:d1:1f:c0:72:25:04:3f:dd:dd: 6c:e2:76:20:94:72:24:38:3d:84:f2:1f:d7:80:aa: a8:15:ba:29:a2:2d:c5:62:cc:6b:07:2b:cb:41:0c: d4:1e:7a:ad:dd:31:2e:82:0e:25:f7:8c:e2:bb:ca: be:c0:f2:e7:e9:fe:b0:cd:15:f5:9d:8f:5a:da:74: 30:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:34:7B:EE:69:90:23:E7:01:A3:C2:F0:93:24:65:D6:69:8A:C6:0B X509v3 Authority Key Identifier: keyid:DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:d7:12:04:d5:40:fe:9a:1d:d8:55:bc:31:8f:5f:7c:fb:38: 8f:8b:85:dd:b3:ec:ed:67:6b:5b:2c:20:97:6a:1e:a0:ba:df: 97:91:a7:cf:26:0c:ce:16:9d:92:03:18:69:33:65:a6:8a:08: 25:27:df:13:7e:fa:4c:e8:52:b2:c1:5d:e3:87:cf:02:82:4d: 92:e1:b6:f9:02:30:dc:88:32:d9:ed:35:aa:23:f9:43:1e:5e: ae:ce:e5:0d:1f:af:4a:67:55:d2:a7:af:bb:d1:5d:29:67:b6: 29:96:ec:61:4c:47:35:3a:26:71:11:10:db:ea:cd:fd:77:5c: 28:ef:65:69:9b:9e:c7:dc:84:81:aa:7d:aa:02:05:68:74:52: 12:a3:ab:6c:9f:1c:90:6c:83:50:90:87:0b:3e:73:9f:bd:a9: 7b:b1:fd:7c:9a:a0:a1:c8:dc:90:ea:a5:30:74:a0:f0:85:1d: 4e:c1:64:ca:b9:60:e3:e1:a5:9a:9a:25:4c:d9:5c:c5:66:47: 1d:f6:cd:0f:ba:d0:8b:bc:a6:19:52:66:9c:f2:55:ff:42:08: a9:66:d4:73:91:1d:6b:03:59:99:f1:5a:47:63:fd:77:5e:e9: 44:3c:01:3d:91:25:a0:26:5a:0e:dc:27:57:f9:93:a8:d6:7c: 35:45:37:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAwQTUxMTAvBgNVBAUTKERFODZFNjVFRUExRTBCMzBFNEZEOEQ5MjQ1ODdFREY1 NzIzRDUwN0QwHhcNMjUwNjEzMDUyODA4WhcNMjUwNjIwMDUyODA4WjAYMRYwFAYD VQQDEw02ODRiYjZlOC02MWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4zm3u/GW8xH1X9bMRFuIxXVCqTsGHXmIvm/3eRPXleCvMda9x24XBOZoa+iC ZVEo7zYKs98bX4T4HLOsmasM9D0UHuSJxXJbop2hxR/HT2Hr+cA4LqatSpG5Bd3/ oFuomhKowhxx80mLO59dOG6JRsqbs7cOL4pPzuk4Octy3hCwwU458gUIt7wgMZTm He/oFWg001aApJqN20PSPVV9yt44acNBX+puXnsNuCjT+cETdrv/W5AOuz7RH8By JQQ/3d1s4nYglHIkOD2E8h/XgKqoFbopoi3FYsxrByvLQQzUHnqt3TEugg4l94zi u8q+wPLn6f6wzRX1nY9a2nQwIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOc0e+5p kCPnAaPC8JMkZdZpisYLMB8GA1UdIwQYMBaAFN6G5l7qHgsw5P2NkkWH7fVyPVB9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDBBNS9BNjQ4M0EzQzdB QkIxMUVGOTM3OUFFNTJDNEY5QUUwMi8zb2JtWHVvZUN6RGtfWTJTUllmdDlYSTlV SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNvYm1YdW9lQ3pEa19ZMlNSWWZ0OVhJOVVIMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDBBNS9BNjQ4M0EzQzdBQkIxMUVGOTM3OUFFNTJDNEY5QUUwMi8zb2JtWHVvZUN6 RGtfWTJTUllmdDlYSTlVSDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAt1xIE1UD+mh3YVbwxj198+ziPi4Xds+ztZ2tbLCCXah6gut+XkafP JgzOFp2SAxhpM2WmigglJ98TfvpM6FKywV3jh88Cgk2S4bb5AjDciDLZ7TWqI/lD Hl6uzuUNH69KZ1XSp6+70V0pZ7YpluxhTEc1OiZxERDb6s39d1wo72Vpm57H3ISB qn2qAgVodFISo6tsnxyQbINQkIcLPnOfval7sf18mqChyNyQ6qUwdKDwhR1OwWTK uWDj4aWamiVM2VzFZkcd9s0PutCLvKYZUmac8lX/QgipZtRzkR1rA1mZ8VpHY/13 XulEPAE9kSWgJloO3CdX+ZOo1nw1RTeJ -----END CERTIFICATE-----Generated at Sat Jun 14 17:42:56 2025 by rpki-client