$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.mft File: oWMO_rVmVc-hMzMLmNs2GS3evfw.mft (raw, json) Hash identifier: zkaZS9VZHKDPc7WCC/iLfgE8y07t/Zx1AmNn8T7wnDQ= Subject key identifier: B6:10:7A:BC:4A:B8:AD:82:4D:DD:6B:B4:E9:C2:6D:CC:65:15:DF:03 Authority key identifier: A1:63:0E:FE:B5:66:55:CF:A1:33:33:0B:98:DB:36:19:2D:DE:BD:FC Certificate issuer: /CN=A91E7672/serialNumber=A1630EFEB56655CFA133330B98DB36192DDEBDFC Certificate serial: 03CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWMO_rVmVc-hMzMLmNs2GS3evfw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.mft Manifest number: 03C8 Signing time: Fri 13 Jun 2025 00:11:34 +0000 Manifest this update: Fri 13 Jun 2025 00:11:34 +0000 Manifest next update: Fri 20 Jun 2025 00:11:34 +0000 Files and hashes: 1: oWMO_rVmVc-hMzMLmNs2GS3evfw.crl (hash: ZR+7VFoMr0oo1VJ/ScNCAQ5vqN4021KdHL9XsIhkQhk=) 2: A87755B68BCD11ECAF9D1512C4F9AE02.roa (hash: C6Zw9H9pNGGZB/RXCN/WX9ohjV5fQUJIiw4vkNV68w0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.crl rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWMO_rVmVc-hMzMLmNs2GS3evfw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 00:11:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 972 (0x3cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7672, serialNumber=A1630EFEB56655CFA133330B98DB36192DDEBDFC Validity Not Before: Jun 13 00:11:34 2025 GMT Not After : Jun 20 00:11:34 2025 GMT Subject: CN=684b6cb6-aff8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fc:0a:52:5a:ee:3c:22:72:34:d5:16:91:1a: d5:6c:3c:ff:87:9f:8f:12:bc:b8:be:34:d5:bc:68: 48:49:06:1d:d1:c9:fc:33:30:4b:c5:87:81:ba:93: c1:26:85:4c:ba:37:8d:12:b3:e5:92:62:73:2d:e9: d5:3f:3b:12:e4:6b:ae:24:5c:6d:6c:10:18:b6:63: e8:6c:d5:a1:9f:8e:5a:f1:53:38:02:5d:95:99:0a: 16:26:08:b7:11:16:4b:a5:18:c0:d7:44:ce:dc:f3: 62:03:6c:22:9f:cf:05:37:9e:d9:4a:0e:fa:d7:5d: 8d:95:83:69:5c:2a:d2:c7:95:78:95:70:67:52:fb: ab:ff:e3:fc:2b:ac:2d:f9:f3:4a:08:b6:c1:cd:65: 08:5a:86:c9:73:2a:5e:a4:9b:3b:9c:c6:79:c5:9b: f6:0b:41:22:e7:7d:50:13:46:32:b9:ac:3a:5b:3d: 6b:51:35:22:42:4c:2d:3f:de:27:7c:e0:46:4c:e6: a7:bf:4a:bf:8f:04:25:36:55:8e:f9:9b:85:56:0e: 2c:32:63:d0:85:66:2a:b3:3b:ec:33:01:93:74:45: 3f:7f:a0:54:dc:e2:b5:91:9e:6a:0b:f0:3c:34:7f: 98:9b:28:92:11:64:a1:71:21:d0:5d:83:de:b9:1e: 28:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:10:7A:BC:4A:B8:AD:82:4D:DD:6B:B4:E9:C2:6D:CC:65:15:DF:03 X509v3 Authority Key Identifier: keyid:A1:63:0E:FE:B5:66:55:CF:A1:33:33:0B:98:DB:36:19:2D:DE:BD:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWMO_rVmVc-hMzMLmNs2GS3evfw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:e0:e7:07:de:b4:c0:a8:7b:32:fa:48:6c:60:1e:40:44:d2: 89:67:d9:99:dc:33:bd:79:23:1d:ae:19:f9:f5:19:a7:0c:d6: 7a:50:9c:10:40:de:bf:3d:29:1f:c0:dd:c6:09:ff:e1:b2:53: 80:5e:3b:5b:81:14:74:0f:6a:0a:be:0b:86:bf:ac:7a:d6:d4: 0c:a9:3d:19:28:01:f1:e5:1e:9b:e9:d0:36:f1:62:f1:c8:8a: e9:2d:c6:89:14:3d:19:37:b0:ae:cb:7e:7c:25:b6:81:4f:2e: 20:b7:ea:63:34:88:25:55:12:24:5e:d4:f7:a7:8a:e4:c5:0f: 27:9c:5c:3f:65:24:0f:4e:40:af:d0:d2:12:17:40:89:5f:90: 3e:c1:13:a1:9a:9d:0d:0e:7e:a0:40:b3:e9:45:f7:7a:59:da: 50:1d:47:96:25:a1:fb:2f:63:42:b0:0e:a2:6d:1a:68:01:28: 43:36:62:c3:9c:d2:fa:a7:17:09:f5:45:37:d3:70:69:a7:64: a3:2f:4c:1d:31:78:a2:d9:53:7f:57:e5:9c:97:33:80:f1:5c: 63:14:89:80:61:6d:27:1d:9a:b3:5d:d9:9d:bb:96:7f:8f:11: ee:17:a2:04:ae:3f:c2:5e:9d:f6:00:96:0d:0a:28:1f:a4:75: c2:25:fb:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc2NzIxMTAvBgNVBAUTKEExNjMwRUZFQjU2NjU1Q0ZBMTMzMzMwQjk4REIzNjE5 MkRERUJERkMwHhcNMjUwNjEzMDAxMTM0WhcNMjUwNjIwMDAxMTM0WjAYMRYwFAYD VQQDEw02ODRiNmNiNi1hZmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwvwKUlruPCJyNNUWkRrVbDz/h5+PEry4vjTVvGhISQYd0cn8MzBLxYeBupPB JoVMujeNErPlkmJzLenVPzsS5GuuJFxtbBAYtmPobNWhn45a8VM4Al2VmQoWJgi3 ERZLpRjA10TO3PNiA2win88FN57ZSg76112NlYNpXCrSx5V4lXBnUvur/+P8K6wt +fNKCLbBzWUIWobJcypepJs7nMZ5xZv2C0Ei531QE0Yyuaw6Wz1rUTUiQkwtP94n fOBGTOanv0q/jwQlNlWO+ZuFVg4sMmPQhWYqszvsMwGTdEU/f6BU3OK1kZ5qC/A8 NH+YmyiSEWShcSHQXYPeuR4o1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLYQerxK uK2CTd1rtOnCbcxlFd8DMB8GA1UdIwQYMBaAFKFjDv61ZlXPoTMzC5jbNhkt3r38 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzY3Mi83QzVEM0ZERThC Q0ExMUVDQUM1REU1NjdDNEY5QUUwMi9vV01PX3JWbVZjLWhNek1MbU5zMkdTM2V2 ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29XTU9fclZtVmMtaE16TUxtTnMyR1MzZXZmdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzY3Mi83QzVEM0ZERThCQ0ExMUVDQUM1REU1NjdDNEY5QUUwMi9vV01PX3JWbVZj LWhNek1MbU5zMkdTM2V2ZncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA34OcH3rTAqHsy+khsYB5ARNKJZ9mZ3DO9eSMdrhn59RmnDNZ6UJwQ QN6/PSkfwN3GCf/hslOAXjtbgRR0D2oKvguGv6x61tQMqT0ZKAHx5R6b6dA28WLx yIrpLcaJFD0ZN7Cuy358JbaBTy4gt+pjNIglVRIkXtT3p4rkxQ8nnFw/ZSQPTkCv 0NISF0CJX5A+wROhmp0NDn6gQLPpRfd6WdpQHUeWJaH7L2NCsA6ibRpoAShDNmLD nNL6pxcJ9UU303Bpp2SjL0wdMXii2VN/V+WclzOA8VxjFImAYW0nHZqzXdmdu5Z/ jxHuF6IErj/CXp32AJYNCigfpHXCJfvL -----END CERTIFICATE-----Generated at Sat Jun 14 17:56:52 2025 by rpki-client