$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft File: pOaGeeZ7phon9Pib0JKu5cH3ITk.mft (raw, json) Hash identifier: 4C8RGThaIcpnusG+HJrBe22A2tNfuRnn4qVenKOjq5Y= Subject key identifier: 99:66:33:89:71:32:6D:2D:3C:7E:6E:19:A1:34:0D:E2:26:35:5B:FE Authority key identifier: A4:E6:86:79:E6:7B:A6:1A:27:F4:F8:9B:D0:92:AE:E5:C1:F7:21:39 Certificate issuer: /CN=A91E1B48/serialNumber=A4E68679E67BA61A27F4F89BD092AEE5C1F72139 Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft Manifest number: 78 Signing time: Sun 15 Jun 2025 05:52:34 +0000 Manifest this update: Sun 15 Jun 2025 05:52:33 +0000 Manifest next update: Sun 22 Jun 2025 05:52:33 +0000 Files and hashes: 1: pOaGeeZ7phon9Pib0JKu5cH3ITk.crl (hash: YsjO2h4ZVVqRmaEZ8b3OuSdsz/3AEAJtsTAflNyJT6k=) 2: FB03B42C927411EF870E655AC4F9AE02.roa (hash: u4w+Qp27Y9kvTk+tCZ+0s7VTT7TtAcdJXuu92GYJlRA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.crl rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1B48, serialNumber=A4E68679E67BA61A27F4F89BD092AEE5C1F72139 Validity Not Before: Jun 15 05:52:33 2025 GMT Not After : Jun 22 05:52:33 2025 GMT Subject: CN=684e5fa2-7249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a6:63:d7:1f:65:0a:e6:2d:10:bd:9e:4f:44: 48:d8:01:01:45:ea:cc:9f:70:6b:c5:cc:a3:19:c0: 2c:c1:e0:33:93:02:0e:7d:40:82:87:98:ae:68:7c: 73:0e:5b:e7:80:55:f8:7c:61:9b:44:d3:88:6a:5a: 60:31:26:60:82:c3:55:73:4d:ac:6a:d8:4f:c5:da: a0:61:3c:f7:c2:01:dc:17:8a:20:d8:df:08:5e:db: 4c:2f:59:d1:93:11:a2:d7:55:15:38:1c:53:af:2a: b8:71:3a:06:6c:b3:14:35:0a:d7:86:93:fe:1e:a5: 04:68:31:0b:25:e9:fc:c3:01:7f:65:56:fe:48:88: c9:43:58:45:3f:e8:f9:79:62:ca:d6:33:8f:a3:fd: 14:1a:8e:65:96:05:f7:2e:66:c6:27:ea:87:44:ae: 2d:50:c0:43:1c:96:2b:af:d1:e9:ad:b2:13:73:2b: bd:91:dc:e0:4c:a8:22:5d:79:98:28:73:4c:34:b3: c9:ec:69:90:27:1c:6a:96:be:c3:cd:be:22:58:33: 25:30:61:08:8e:0b:32:ce:3f:b6:31:ee:16:51:21: 98:98:c6:4d:a5:a6:9b:76:e0:cf:e1:bd:a6:65:5e: 93:d8:36:91:5d:5f:6f:fb:3f:9b:12:4d:c4:f3:04: bf:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:66:33:89:71:32:6D:2D:3C:7E:6E:19:A1:34:0D:E2:26:35:5B:FE X509v3 Authority Key Identifier: keyid:A4:E6:86:79:E6:7B:A6:1A:27:F4:F8:9B:D0:92:AE:E5:C1:F7:21:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:ae:72:b0:c5:a4:0a:25:1f:97:cd:45:93:06:0e:29:3e:09: 4c:6f:41:2f:88:88:af:88:b7:79:9e:25:a9:23:8f:92:57:c6: ae:e3:e9:55:b7:61:3c:f4:49:7d:78:05:4f:0c:51:4d:9d:98: 51:9c:d1:1c:1e:a0:dd:5c:9f:2d:e1:9e:ca:af:ea:6d:65:82: d2:2c:d9:6b:a7:aa:e6:91:89:cf:25:10:76:cf:16:1e:55:db: c2:8d:58:5d:91:69:cc:13:27:fc:4c:a2:21:f7:83:5c:21:42: a8:df:4e:4e:58:71:e2:dc:ed:0e:c4:df:10:ec:f2:24:3e:28: c7:98:66:b3:35:b2:d1:94:c5:e0:e2:24:44:e9:7a:f0:17:53: f2:9a:f8:2f:33:54:9e:0e:36:9a:36:5b:22:e9:df:3c:3d:e4: f5:c2:8f:1b:ab:e4:26:7a:7d:0f:d5:4c:22:db:9c:4f:fd:35: 4a:17:75:94:7f:9f:91:12:ea:0f:d9:d1:69:28:1f:c2:2a:57: 7d:0f:76:83:a1:dd:53:cd:96:17:34:fa:56:8a:11:f3:ee:20: 8f:a0:30:6f:a2:da:cf:b1:0f:c8:c3:58:9b:8a:dc:c2:51:3b: 40:ce:1f:8e:23:ea:eb:98:4b:c6:98:28:d2:3d:47:7d:6e:34: 02:21:54:c0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MUI0ODExMC8GA1UEBRMoQTRFNjg2NzlFNjdCQTYxQTI3RjRGODlCRDA5MkFFRTVD MUY3MjEzOTAeFw0yNTA2MTUwNTUyMzNaFw0yNTA2MjIwNTUyMzNaMBgxFjAUBgNV BAMTDTY4NGU1ZmEyLTcyNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxpmPXH2UK5i0QvZ5PREjYAQFF6syfcGvFzKMZwCzB4DOTAg59QIKHmK5ofHMO W+eAVfh8YZtE04hqWmAxJmCCw1VzTaxq2E/F2qBhPPfCAdwXiiDY3whe20wvWdGT EaLXVRU4HFOvKrhxOgZssxQ1CteGk/4epQRoMQsl6fzDAX9lVv5IiMlDWEU/6Pl5 YsrWM4+j/RQajmWWBfcuZsYn6odEri1QwEMcliuv0emtshNzK72R3OBMqCJdeZgo c0w0s8nsaZAnHGqWvsPNviJYMyUwYQiOCzLOP7Yx7hZRIZiYxk2lppt24M/hvaZl XpPYNpFdX2/7P5sSTcTzBL8nAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmWYziXEy bS08fm4ZoTQN4iY1W/4wHwYDVR0jBBgwFoAUpOaGeeZ7phon9Pib0JKu5cH3ITkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxQjQ4LzY2RjU3NjQ0OTI3 NDExRUZCRjg2NEEzREM0RjlBRTAyL3BPYUdlZVo3cGhvbjlQaWIwSkt1NWNIM0lU ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcE9hR2VlWjdwaG9uOVBpYjBKS3U1Y0gzSVRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx QjQ4LzY2RjU3NjQ0OTI3NDExRUZCRjg2NEEzREM0RjlBRTAyL3BPYUdlZVo3cGhv bjlQaWIwSkt1NWNIM0lUay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH6ucrDFpAolH5fNRZMGDik+CUxvQS+IiK+It3meJakjj5JXxq7j6VW3 YTz0SX14BU8MUU2dmFGc0RweoN1cny3hnsqv6m1lgtIs2WunquaRic8lEHbPFh5V 28KNWF2RacwTJ/xMoiH3g1whQqjfTk5YceLc7Q7E3xDs8iQ+KMeYZrM1stGUxeDi JETpevAXU/Ka+C8zVJ4ONpo2WyLp3zw95PXCjxur5CZ6fQ/VTCLbnE/9NUoXdZR/ n5ES6g/Z0WkoH8IqV30PdoOh3VPNlhc0+laKEfPuII+gMG+i2s+xD8jDWJuK3MJR O0DOH44j6uuYS8aYKNI9R31uNAIhVMA= -----END CERTIFICATE-----Generated at Sun Jun 15 09:29:24 2025 by rpki-client