$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.mft File: ogavyWamnnC0ibOPEEg9wfpdPiI.mft (raw, json) Hash identifier: YBm2U0z+7fCXpOFkTKCjV7Vj6HMgFAvOWgycy/g12Dc= Subject key identifier: 52:E1:72:E5:E3:16:53:6F:09:56:44:D2:09:65:B1:AD:28:5E:FC:84 Authority key identifier: A2:06:AF:C9:66:A6:9E:70:B4:89:B3:8F:10:48:3D:C1:FA:5D:3E:22 Certificate issuer: /CN=A91E4B6A/serialNumber=A206AFC966A69E70B489B38F10483DC1FA5D3E22 Certificate serial: 03E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogavyWamnnC0ibOPEEg9wfpdPiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.mft Manifest number: 03DC Signing time: Sun 15 Jun 2025 00:17:38 +0000 Manifest this update: Sun 15 Jun 2025 00:17:37 +0000 Manifest next update: Sun 22 Jun 2025 00:17:37 +0000 Files and hashes: 1: ogavyWamnnC0ibOPEEg9wfpdPiI.crl (hash: u06pkrKFuEUoA76mPNvjy+GwzFRV+CFqlU/cwJ/wyy8=) 2: F7335D9484D911EC89E5246EC4F9AE02.roa (hash: zIQCvO1cYT9GDGEyMPF0tBOYTt1JAajUXmcBSrFDxrs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.crl rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogavyWamnnC0ibOPEEg9wfpdPiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:17:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 992 (0x3e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4B6A, serialNumber=A206AFC966A69E70B489B38F10483DC1FA5D3E22 Validity Not Before: Jun 15 00:17:37 2025 GMT Not After : Jun 22 00:17:37 2025 GMT Subject: CN=684e1122-a3ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b2:19:5f:2a:12:3f:b6:8f:18:da:20:2e:be: cd:c1:55:3c:d0:0a:e9:0f:f8:7e:3c:bd:45:3b:64: ed:fd:63:9d:e7:c7:2a:dc:ca:e3:5e:11:7c:3e:f1: 14:cb:bc:a2:94:dd:0f:5e:7a:1d:bd:08:6b:c5:28: 2b:01:e0:70:5a:9f:1d:c4:3b:7b:ea:3f:83:3d:dc: 91:1e:c6:34:29:1b:8a:a8:66:0f:a5:98:b1:b2:4b: 17:d3:93:3e:38:e7:89:76:ef:23:37:ba:46:62:83: f3:8b:59:2a:99:0b:16:f7:a2:41:dc:2c:42:19:86: 26:cc:be:6c:fb:32:a8:15:e8:08:de:85:bb:a0:11: dc:5d:83:47:3c:7a:e5:2a:7e:d7:be:33:9e:67:e2: fb:4c:f0:88:21:86:84:5f:1d:87:72:5e:c1:7f:07: e0:e5:70:32:e6:da:78:e3:af:37:11:d5:19:d8:eb: 12:b6:18:8b:e4:b9:1e:d8:55:31:17:fe:16:39:8d: 67:fc:f5:9b:68:4a:27:c2:0c:e9:56:9b:01:a7:5f: 0b:d1:52:88:ca:98:d8:79:be:73:15:69:54:6d:39: 7c:72:47:1b:8c:d8:ad:16:08:19:17:45:4f:ff:71: fb:86:78:c3:3e:4c:6c:73:f8:e7:f7:b9:27:88:95: ce:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E1:72:E5:E3:16:53:6F:09:56:44:D2:09:65:B1:AD:28:5E:FC:84 X509v3 Authority Key Identifier: keyid:A2:06:AF:C9:66:A6:9E:70:B4:89:B3:8F:10:48:3D:C1:FA:5D:3E:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogavyWamnnC0ibOPEEg9wfpdPiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:4d:f0:21:55:46:36:5b:ac:9a:a1:98:2f:14:eb:68:7c:fd: 82:15:6f:4b:2a:4c:e6:e7:5f:14:21:3d:b0:ad:74:f2:1e:d8: 9e:cc:70:80:98:4f:2c:96:33:6b:c0:3a:1c:21:a7:8b:8f:1b: f2:68:d6:b2:b0:13:9d:79:64:d5:d3:cf:5b:79:d0:6c:42:0f: 4b:57:d8:a0:f6:36:0a:64:bb:13:7d:b1:d5:c8:25:50:09:78: bf:14:67:fa:2d:5e:9b:56:17:3e:da:91:55:2c:b8:5e:ac:93: 2a:49:b1:af:04:b9:8b:3f:6a:29:c2:16:b7:82:e0:00:88:b6: b3:97:f8:1e:ad:22:36:f4:df:6f:f7:e3:05:8a:43:55:c5:64: 51:27:4f:f8:04:1e:9d:1a:4e:18:af:56:98:fe:e9:09:34:fb: 24:9b:ee:9b:67:2e:92:f4:1b:26:eb:de:e3:71:58:2f:42:0b: 1f:cd:4c:72:7d:0f:f1:d5:26:48:9a:6f:da:93:ef:9f:a2:af: 0a:88:4f:39:b9:db:3f:83:12:be:f9:2e:08:24:cf:02:1b:ba: 32:24:ae:51:7c:c1:c7:c1:de:c9:ba:4c:4f:52:e2:2a:40:44: 4f:73:63:ee:4d:64:1c:6a:e5:1e:99:29:f7:68:ad:89:9a:87: f0:05:9d:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRCNkExMTAvBgNVBAUTKEEyMDZBRkM5NjZBNjlFNzBCNDg5QjM4RjEwNDgzREMx RkE1RDNFMjIwHhcNMjUwNjE1MDAxNzM3WhcNMjUwNjIyMDAxNzM3WjAYMRYwFAYD VQQDEw02ODRlMTEyMi1hM2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAprIZXyoSP7aPGNogLr7NwVU80ArpD/h+PL1FO2Tt/WOd58cq3MrjXhF8PvEU y7yilN0PXnodvQhrxSgrAeBwWp8dxDt76j+DPdyRHsY0KRuKqGYPpZixsksX05M+ OOeJdu8jN7pGYoPzi1kqmQsW96JB3CxCGYYmzL5s+zKoFegI3oW7oBHcXYNHPHrl Kn7XvjOeZ+L7TPCIIYaEXx2Hcl7Bfwfg5XAy5tp44683EdUZ2OsSthiL5Lke2FUx F/4WOY1n/PWbaEonwgzpVpsBp18L0VKIypjYeb5zFWlUbTl8ckcbjNitFggZF0VP /3H7hnjDPkxsc/jn97kniJXODQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFLhcuXj FlNvCVZE0gllsa0oXvyEMB8GA1UdIwQYMBaAFKIGr8lmpp5wtImzjxBIPcH6XT4i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEI2QS9CNDgxMzM0Mjg0 RDcxMUVDOEUwNzQxNkRDNEY5QUUwMi9vZ2F2eVdhbW5uQzBpYk9QRUVnOXdmcGRQ aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29nYXZ5V2Ftbm5DMGliT1BFRWc5d2ZwZFBpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEI2QS9CNDgxMzM0Mjg0RDcxMUVDOEUwNzQxNkRDNEY5QUUwMi9vZ2F2eVdhbW5u QzBpYk9QRUVnOXdmcGRQaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUTfAhVUY2W6yaoZgvFOtofP2CFW9LKkzm518UIT2wrXTyHtiezHCA mE8sljNrwDocIaeLjxvyaNaysBOdeWTV089bedBsQg9LV9ig9jYKZLsTfbHVyCVQ CXi/FGf6LV6bVhc+2pFVLLherJMqSbGvBLmLP2opwha3guAAiLazl/gerSI29N9v 9+MFikNVxWRRJ0/4BB6dGk4Yr1aY/ukJNPskm+6bZy6S9Bsm697jcVgvQgsfzUxy fQ/x1SZImm/ak++foq8KiE85uds/gxK++S4IJM8CG7oyJK5RfMHHwd7JukxPUuIq QERPc2PuTWQcauUemSn3aK2JmofwBZ1o -----END CERTIFICATE-----Generated at Sun Jun 15 08:45:25 2025 by rpki-client