$ rpki-client -vvf rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft File: oUygeMheRlNdkgQ4K4SXTxOwyTw.mft (raw, json) Hash identifier: WgWvmccMN5t26Ka2LKZj731n/xah6SbM3FyR3bxTe5Q= Subject key identifier: 84:58:DE:39:EC:E8:D2:7E:B7:E6:DF:CA:46:E3:3C:5F:5F:8F:79:2C Authority key identifier: A1:4C:A0:78:C8:5E:46:53:5D:92:04:38:2B:84:97:4F:13:B0:C9:3C Certificate issuer: /CN=A91E83FE/serialNumber=A14CA078C85E46535D9204382B84974F13B0C93C Certificate serial: 04F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft Manifest number: 04E9 Signing time: Sat 14 Jun 2025 23:28:36 +0000 Manifest this update: Sat 14 Jun 2025 23:28:36 +0000 Manifest next update: Sat 21 Jun 2025 23:28:36 +0000 Files and hashes: 1: oUygeMheRlNdkgQ4K4SXTxOwyTw.crl (hash: U33Uyyy4kGAdJJTcDGHhNxul/Vvh9cA6ojdnMkZe/Do=) 2: B90B58FCD97211ED8C2F1263C4F9AE02.roa (hash: Uv/DIuVOqvX05vXkqfaNSYJYxyqVmNJFQQZ426t0Ang=) 3: B9D90E00606311EE8844F941C4F9AE02.roa (hash: X2R7fBr7byP7M3KR3cBhw+xawX2t49iSaQy5emSoxD4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.crl rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 23:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1268 (0x4f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E83FE, serialNumber=A14CA078C85E46535D9204382B84974F13B0C93C Validity Not Before: Jun 14 23:28:36 2025 GMT Not After : Jun 21 23:28:36 2025 GMT Subject: CN=684e05a4-bcec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c2:cc:52:35:ee:f4:b8:31:d1:9b:cb:46:ad: 1c:10:74:d3:96:68:7e:05:1d:62:2d:08:16:50:63: 77:b1:f5:5c:86:14:df:0e:ff:ce:50:5c:94:2f:75: 18:96:4f:0e:d8:98:48:26:f5:c6:2b:8e:6b:19:90: 19:6a:59:9e:dd:96:88:57:d8:fe:77:a8:d5:b5:50: b9:2f:94:de:58:b3:b9:37:20:e7:d1:34:fc:e3:00: c0:dc:9c:28:18:81:1b:a8:73:9e:c1:9f:0f:46:9a: f5:fb:92:fd:0a:84:cb:77:ae:b3:90:fc:1d:72:62: 3c:aa:47:df:77:f1:d2:2d:0d:3b:e9:f2:37:f5:ac: 33:1e:50:ec:b8:3c:cf:1c:4d:4c:11:31:c0:49:be: 4e:54:02:df:00:fc:4f:ff:9f:22:ba:0d:75:ab:3a: 13:29:8b:39:c7:24:f4:30:9f:e7:ec:66:32:a5:25: 97:ae:c5:96:21:3a:c6:a5:e8:e8:91:f1:3c:c3:f0: 3f:96:ac:f3:9c:c9:78:49:72:3c:a8:e8:ce:f3:49: fc:70:46:ff:2c:68:20:5d:8d:6c:f7:bd:5c:d7:c4: bc:41:8f:74:84:f5:e6:96:cc:9d:27:b1:19:09:32: 26:38:ed:8b:cf:ea:af:20:eb:4b:1c:89:c8:15:e9: 2a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:58:DE:39:EC:E8:D2:7E:B7:E6:DF:CA:46:E3:3C:5F:5F:8F:79:2C X509v3 Authority Key Identifier: keyid:A1:4C:A0:78:C8:5E:46:53:5D:92:04:38:2B:84:97:4F:13:B0:C9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:15:28:89:3f:19:bf:6f:ef:e1:2a:3d:c0:e4:8f:17:6c:96: a0:40:c5:13:3d:d5:b5:78:fa:ee:1f:f6:0f:45:74:d8:32:c7: b5:6d:c7:35:f5:15:e4:e2:b4:ea:e2:a7:2b:51:5d:5b:ab:50: 11:2f:53:5e:a8:b0:c4:84:ab:74:b7:23:76:de:ea:22:3e:a4: f8:9d:20:7c:8b:a2:77:ad:87:90:49:15:8c:6e:95:fe:f7:87: a5:2c:41:93:48:59:9b:ca:d3:bf:a4:da:24:79:b6:1e:9c:d3: 7a:ba:c2:fb:a3:0e:d7:0e:6d:f6:c1:53:f3:77:37:25:b8:13: 9f:15:b2:e8:2a:78:b3:b9:d4:9d:53:3a:c6:26:72:bc:3b:44: 31:11:93:0c:61:3f:4c:f2:22:d4:36:f9:41:00:d3:19:00:d3: ac:c3:24:bc:fb:14:63:18:28:5e:02:22:6d:0e:25:56:5c:c6: 89:2a:0a:b6:52:7b:61:fe:d7:d8:fa:ac:8d:0d:73:4c:46:e4: 12:7d:c6:ff:c5:1f:7b:86:c7:64:17:7b:71:19:a2:e4:b5:b2: bc:38:34:88:50:c7:eb:c2:de:43:04:00:3d:d6:87:80:57:a8: 15:50:96:a3:33:c5:d1:7c:04:e3:95:ec:87:22:4d:ac:4f:dc: 10:60:71:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgzRkUxMTAvBgNVBAUTKEExNENBMDc4Qzg1RTQ2NTM1RDkyMDQzODJCODQ5NzRG MTNCMEM5M0MwHhcNMjUwNjE0MjMyODM2WhcNMjUwNjIxMjMyODM2WjAYMRYwFAYD VQQDEw02ODRlMDVhNC1iY2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtcLMUjXu9Lgx0ZvLRq0cEHTTlmh+BR1iLQgWUGN3sfVchhTfDv/OUFyUL3UY lk8O2JhIJvXGK45rGZAZalme3ZaIV9j+d6jVtVC5L5TeWLO5NyDn0TT84wDA3Jwo GIEbqHOewZ8PRpr1+5L9CoTLd66zkPwdcmI8qkffd/HSLQ076fI39awzHlDsuDzP HE1METHASb5OVALfAPxP/58iug11qzoTKYs5xyT0MJ/n7GYypSWXrsWWITrGpejo kfE8w/A/lqzznMl4SXI8qOjO80n8cEb/LGggXY1s971c18S8QY90hPXmlsydJ7EZ CTImOO2Lz+qvIOtLHInIFekqsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIRY3jns 6NJ+t+bfykbjPF9fj3ksMB8GA1UdIwQYMBaAFKFMoHjIXkZTXZIEOCuEl08TsMk8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODNGRS8zMjk1RjkwMjFE QjMxMUVDODZFMDg2M0VDNEY5QUUwMi9vVXlnZU1oZVJsTmRrZ1E0SzRTWFR4T3d5 VHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29VeWdlTWhlUmxOZGtnUTRLNFNYVHhPd3lUdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODNGRS8zMjk1RjkwMjFEQjMxMUVDODZFMDg2M0VDNEY5QUUwMi9vVXlnZU1oZVJs TmRrZ1E0SzRTWFR4T3d5VHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4FSiJPxm/b+/hKj3A5I8XbJagQMUTPdW1ePruH/YPRXTYMse1bcc1 9RXk4rTq4qcrUV1bq1ARL1NeqLDEhKt0tyN23uoiPqT4nSB8i6J3rYeQSRWMbpX+ 94elLEGTSFmbytO/pNokebYenNN6usL7ow7XDm32wVPzdzcluBOfFbLoKnizudSd UzrGJnK8O0QxEZMMYT9M8iLUNvlBANMZANOswyS8+xRjGCheAiJtDiVWXMaJKgq2 Unth/tfY+qyNDXNMRuQSfcb/xR97hsdkF3txGaLktbK8ODSIUMfrwt5DBAA91oeA V6gVUJajM8XRfATjleyHIk2sT9wQYHHX -----END CERTIFICATE-----Generated at Sun Jun 15 08:49:06 2025 by rpki-client