$ rpki-client -vvf rpki.apnic.net/member_repository/A91E60A4/6C7140EE829D11EAB78F8B3DC4F9AE02/oAONXyzMSsJeuvdxJC50MA_PeCw.mft File: oAONXyzMSsJeuvdxJC50MA_PeCw.mft (raw, json) Hash identifier: TBSut4X5+GJhhmzod8ThyPVP2sMzeh1lVbnXSKmaJQA= Subject key identifier: E2:BB:61:1F:5A:FB:4E:63:77:7B:E8:8C:CF:CA:EF:14:7A:A2:70:56 Authority key identifier: A0:03:8D:5F:2C:CC:4A:C2:5E:BA:F7:71:24:2E:74:30:0F:CF:78:2C Certificate issuer: /CN=A91E60A4/serialNumber=A0038D5F2CCC4AC25EBAF771242E74300FCF782C Certificate serial: 09D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oAONXyzMSsJeuvdxJC50MA_PeCw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E60A4/6C7140EE829D11EAB78F8B3DC4F9AE02/oAONXyzMSsJeuvdxJC50MA_PeCw.mft Manifest number: 09CB Signing time: Thu 12 Jun 2025 19:44:15 +0000 Manifest this update: Thu 12 Jun 2025 19:44:15 +0000 Manifest next update: Thu 19 Jun 2025 19:44:15 +0000 Files and hashes: 1: oAONXyzMSsJeuvdxJC50MA_PeCw.crl (hash: hDv4sC0WmMpsuAkWGsid2jUZidzHCkCYhBOU/tBx60c=) 2: 1D86F90A988D11EABE02F23DC4F9AE02.roa (hash: eXMB9dV7xihStPr0BmetBSssUWM8QZG3PMbHIo5WHpA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E60A4/6C7140EE829D11EAB78F8B3DC4F9AE02/oAONXyzMSsJeuvdxJC50MA_PeCw.crl rsync://rpki.apnic.net/member_repository/A91E60A4/6C7140EE829D11EAB78F8B3DC4F9AE02/oAONXyzMSsJeuvdxJC50MA_PeCw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oAONXyzMSsJeuvdxJC50MA_PeCw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 19:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2517 (0x9d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E60A4, serialNumber=A0038D5F2CCC4AC25EBAF771242E74300FCF782C Validity Not Before: Jun 12 19:44:15 2025 GMT Not After : Jun 19 19:44:15 2025 GMT Subject: CN=684b2e0f-e3ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:69:f0:bf:f6:43:d7:bd:5f:1a:cc:fb:78:50: 32:4b:64:70:5a:d7:48:83:85:81:02:5c:31:3e:b4: 7e:d4:d3:ec:28:30:2d:c9:b6:3a:4d:57:9d:71:f8: 0c:c2:38:67:01:13:91:58:ee:94:05:da:e0:f9:c9: 97:e8:82:f6:c6:50:e7:2d:03:9d:8b:a2:78:cf:a6: d2:da:a1:f3:99:af:e8:bd:80:3e:75:4c:d2:b5:e4: 72:75:5a:cd:12:26:3b:0d:3d:41:b7:3c:c8:49:52: 0e:c1:0f:05:f0:c2:5b:84:de:87:c8:a6:d0:00:e5: 28:1c:08:e7:1a:cc:02:95:7e:95:a4:33:ba:9f:1b: 45:8b:63:6e:e9:bd:85:2e:66:74:30:7a:64:36:91: bc:6b:07:8b:7a:f5:3e:f3:2a:b4:76:13:a3:56:b3: 0b:de:31:3e:f0:8d:4b:b0:34:aa:d6:12:bf:1f:a2: af:70:79:42:91:2f:3e:a3:c4:5f:4f:22:57:2b:96: 4c:b1:e6:55:57:0b:0b:16:c2:85:f6:43:85:de:50: 9d:e6:8d:fa:cd:94:80:3f:b1:98:82:1e:ed:2c:68: d7:a3:16:ff:04:f8:32:b4:c8:a4:74:ef:64:04:87: 6d:75:55:a1:72:40:77:bc:97:63:91:3b:4b:ae:e9: f1:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:BB:61:1F:5A:FB:4E:63:77:7B:E8:8C:CF:CA:EF:14:7A:A2:70:56 X509v3 Authority Key Identifier: keyid:A0:03:8D:5F:2C:CC:4A:C2:5E:BA:F7:71:24:2E:74:30:0F:CF:78:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E60A4/6C7140EE829D11EAB78F8B3DC4F9AE02/oAONXyzMSsJeuvdxJC50MA_PeCw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oAONXyzMSsJeuvdxJC50MA_PeCw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E60A4/6C7140EE829D11EAB78F8B3DC4F9AE02/oAONXyzMSsJeuvdxJC50MA_PeCw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:e7:5e:25:a4:a9:e7:9c:4f:e5:0c:46:d4:6e:4a:fa:4e:54: 97:63:48:a9:ec:d5:33:a6:95:ab:f8:c5:3f:f7:85:c7:15:36: a1:19:20:50:32:d1:ee:db:16:93:13:de:8a:68:92:e2:76:8e: 7f:52:5d:b0:2b:a8:a2:f3:63:c2:35:df:03:c3:85:c1:a0:21: 3b:fc:13:87:c6:35:45:c4:db:3a:47:53:3c:a2:53:52:e7:21: 6f:7b:76:9c:ae:a3:8e:4c:a9:39:b8:d6:94:c1:97:98:00:66: 7b:2f:c5:c1:95:99:e1:68:de:6e:49:e7:70:36:d5:67:e3:b8: 56:90:5b:06:79:52:25:83:ef:6b:7a:8b:0a:c9:05:7f:74:82: 18:6a:6d:a0:b7:8b:b5:10:cb:78:80:03:87:c2:e9:03:5b:64: 9b:34:56:51:d1:df:44:6f:9a:1c:d0:b4:57:29:3b:6f:03:3c: 34:cb:52:25:69:90:23:bf:08:3b:95:0e:ed:ad:88:23:84:92: af:dc:f1:99:9e:b3:9c:f5:25:a4:da:28:49:61:14:8c:7f:fc: 88:2b:7a:de:c8:e6:12:fb:b3:bc:4a:cf:03:0e:5b:e9:a0:03: 8c:54:6a:66:9b:d9:c6:13:e9:2c:63:89:f6:c1:a6:9f:43:c8: 73:e0:bd:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYwQTQxMTAvBgNVBAUTKEEwMDM4RDVGMkNDQzRBQzI1RUJBRjc3MTI0MkU3NDMw MEZDRjc4MkMwHhcNMjUwNjEyMTk0NDE1WhcNMjUwNjE5MTk0NDE1WjAYMRYwFAYD VQQDEw02ODRiMmUwZi1lM2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzGnwv/ZD171fGsz7eFAyS2RwWtdIg4WBAlwxPrR+1NPsKDAtybY6TVedcfgM wjhnARORWO6UBdrg+cmX6IL2xlDnLQOdi6J4z6bS2qHzma/ovYA+dUzSteRydVrN EiY7DT1BtzzISVIOwQ8F8MJbhN6HyKbQAOUoHAjnGswClX6VpDO6nxtFi2Nu6b2F LmZ0MHpkNpG8aweLevU+8yq0dhOjVrML3jE+8I1LsDSq1hK/H6KvcHlCkS8+o8Rf TyJXK5ZMseZVVwsLFsKF9kOF3lCd5o36zZSAP7GYgh7tLGjXoxb/BPgytMikdO9k BIdtdVWhckB3vJdjkTtLrunx0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOK7YR9a +05jd3vojM/K7xR6onBWMB8GA1UdIwQYMBaAFKADjV8szErCXrr3cSQudDAPz3gs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjBBNC82QzcxNDBFRTgy OUQxMUVBQjc4RjhCM0RDNEY5QUUwMi9vQU9OWHl6TVNzSmV1dmR4SkM1ME1BX1Bl Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29BT05YeXpNU3NKZXV2ZHhKQzUwTUFfUGVDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjBBNC82QzcxNDBFRTgyOUQxMUVBQjc4RjhCM0RDNEY5QUUwMi9vQU9OWHl6TVNz SmV1dmR4SkM1ME1BX1BlQ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBH514lpKnnnE/lDEbUbkr6TlSXY0ip7NUzppWr+MU/94XHFTahGSBQ MtHu2xaTE96KaJLido5/Ul2wK6ii82PCNd8Dw4XBoCE7/BOHxjVFxNs6R1M8olNS 5yFve3acrqOOTKk5uNaUwZeYAGZ7L8XBlZnhaN5uSedwNtVn47hWkFsGeVIlg+9r eosKyQV/dIIYam2gt4u1EMt4gAOHwukDW2SbNFZR0d9Eb5oc0LRXKTtvAzw0y1Il aZAjvwg7lQ7trYgjhJKv3PGZnrOc9SWk2ihJYRSMf/yIK3reyOYS+7O8Ss8DDlvp oAOMVGpmm9nGE+ksY4n2waafQ8hz4L1I -----END CERTIFICATE-----Generated at Sat Jun 14 19:25:57 2025 by rpki-client