$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft File: 40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft (raw, json) Hash identifier: 6auSQ7RVqhBoDdIeGXGyEEBK/2u02nDi1KwjUlelTi4= Subject key identifier: 75:42:57:F3:0D:99:EB:56:D6:2B:17:6A:32:05:D0:8F:B9:57:A2:6A Authority key identifier: E3:43:84:05:47:64:02:A3:AA:8F:98:7C:3A:FA:06:90:D9:6E:D4:74 Certificate issuer: /CN=A91E9406/serialNumber=E3438405476402A3AA8F987C3AFA0690D96ED474 Certificate serial: 026B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OEBUdkAqOqj5h8OvoGkNlu1HQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft Manifest number: 0266 Signing time: Sun 15 Jun 2025 01:27:53 +0000 Manifest this update: Sun 15 Jun 2025 01:27:52 +0000 Manifest next update: Sun 22 Jun 2025 01:27:52 +0000 Files and hashes: 1: 40OEBUdkAqOqj5h8OvoGkNlu1HQ.crl (hash: 9IoEblhnB+M8zF8+ZWKWe7iWfugE1K7X3ghRLVZTkCs=) 2: F76D8A5C170D11EDA7EC2F87C4F9AE02.roa (hash: bEQWXluQGkjHtzXhhM0LUOXQhLNvUEvMyEXkpICCpAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.crl rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OEBUdkAqOqj5h8OvoGkNlu1HQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:27:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 619 (0x26b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9406, serialNumber=E3438405476402A3AA8F987C3AFA0690D96ED474 Validity Not Before: Jun 15 01:27:52 2025 GMT Not After : Jun 22 01:27:52 2025 GMT Subject: CN=684e2199-ee30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1d:fa:52:1d:82:ad:15:6a:e0:b8:37:41:ea: 5d:5b:70:38:d9:7c:12:a3:b7:08:f6:04:28:1d:02: ff:71:ee:b3:47:72:e6:e8:08:7d:de:cc:c3:95:f4: 33:80:e5:aa:7b:7b:f5:cd:3e:13:ac:57:f4:04:cb: 2c:9a:84:6b:71:16:3d:03:03:38:09:30:a0:d9:3f: 92:f9:35:be:bb:94:e8:1d:6f:6e:96:c3:1d:83:fd: 29:12:01:27:66:02:ca:ae:26:51:1e:52:95:51:e4: f3:f0:4c:5b:84:6d:b8:87:40:d9:c1:03:86:3e:6c: 98:1e:b9:0c:15:3c:6f:58:91:d7:95:a3:22:65:6d: 64:e8:2f:b7:66:48:b6:da:b0:84:02:ca:8b:ca:df: 23:d0:d5:7e:b1:dc:b3:6e:04:00:a9:9e:f8:32:b6: 99:1b:8d:72:1b:66:cd:f2:18:bb:5c:d8:37:ea:3d: 80:b4:f0:69:04:0b:92:2b:06:51:c7:3c:cd:1b:d7: be:cc:5c:ab:b3:f0:4d:21:d5:25:88:e2:04:c8:86: de:f2:31:24:b2:a4:4f:ed:b6:53:0b:85:cb:23:4d: 5c:48:c8:2a:7b:ce:cf:36:13:2f:01:b2:62:73:ca: d1:ee:88:7f:23:36:39:0c:8b:28:d1:5e:43:c4:4f: 72:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:42:57:F3:0D:99:EB:56:D6:2B:17:6A:32:05:D0:8F:B9:57:A2:6A X509v3 Authority Key Identifier: keyid:E3:43:84:05:47:64:02:A3:AA:8F:98:7C:3A:FA:06:90:D9:6E:D4:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OEBUdkAqOqj5h8OvoGkNlu1HQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:9a:1d:94:a8:e0:e2:ee:52:09:63:18:d5:01:88:24:24:e2: bf:17:e3:36:3d:56:a3:85:bc:e2:95:e2:9e:27:0b:92:9c:01: 72:71:bc:5d:64:be:42:28:5d:ac:10:62:92:7a:8e:f0:ab:b4: 18:08:7a:65:ac:6e:f9:83:d1:4d:85:69:3c:ce:bc:b1:19:8e: 98:ec:b3:02:06:35:1f:2e:13:79:7f:61:01:5e:a5:fc:e2:37: 77:68:55:e2:d9:52:fb:10:b4:e0:47:81:93:dd:3a:fc:ab:ab: c1:0c:d5:4d:9c:8e:1a:a5:00:ae:2f:6f:51:ed:f3:63:a4:d1: 36:09:82:51:28:19:59:45:44:6a:d9:dc:51:ac:e7:c9:f6:fe: b3:66:b6:ea:17:3c:50:e9:28:a6:1d:b9:9b:a9:21:0f:c3:38: 38:cc:53:de:f1:07:c4:e4:a5:67:fc:cb:2d:42:c8:89:44:86: f2:0d:42:7b:0c:08:8f:74:2c:8d:df:1b:aa:bd:fe:29:f9:d7: 4f:71:fd:73:b7:ab:e0:2c:23:bc:b0:f7:81:97:c0:5f:b4:1a: d9:83:eb:01:58:52:fc:12:0c:22:b2:50:13:c1:59:67:93:dd: 33:21:41:cd:9b:4e:45:eb:4a:e0:5f:15:11:e1:a0:39:eb:53: 56:5d:52:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk0MDYxMTAvBgNVBAUTKEUzNDM4NDA1NDc2NDAyQTNBQThGOTg3QzNBRkEwNjkw RDk2RUQ0NzQwHhcNMjUwNjE1MDEyNzUyWhcNMjUwNjIyMDEyNzUyWjAYMRYwFAYD VQQDEw02ODRlMjE5OS1lZTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2B36Uh2CrRVq4Lg3QepdW3A42XwSo7cI9gQoHQL/ce6zR3Lm6Ah93szDlfQz gOWqe3v1zT4TrFf0BMssmoRrcRY9AwM4CTCg2T+S+TW+u5ToHW9ulsMdg/0pEgEn ZgLKriZRHlKVUeTz8ExbhG24h0DZwQOGPmyYHrkMFTxvWJHXlaMiZW1k6C+3Zki2 2rCEAsqLyt8j0NV+sdyzbgQAqZ74MraZG41yG2bN8hi7XNg36j2AtPBpBAuSKwZR xzzNG9e+zFyrs/BNIdUliOIEyIbe8jEksqRP7bZTC4XLI01cSMgqe87PNhMvAbJi c8rR7oh/IzY5DIso0V5DxE9ybwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHVCV/MN metW1isXajIF0I+5V6JqMB8GA1UdIwQYMBaAFONDhAVHZAKjqo+YfDr6BpDZbtR0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTQwNi85ODY4QTlGMDE3 MDkxMUVEQjZGODA4NjhDNEY5QUUwMi80ME9FQlVka0FxT3FqNWg4T3ZvR2tObHUx SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQwT0VCVWRrQXFPcWo1aDhPdm9Ha05sdTFIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTQwNi85ODY4QTlGMDE3MDkxMUVEQjZGODA4NjhDNEY5QUUwMi80ME9FQlVka0Fx T3FqNWg4T3ZvR2tObHUxSFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/mh2UqODi7lIJYxjVAYgkJOK/F+M2PVajhbzileKeJwuSnAFycbxd ZL5CKF2sEGKSeo7wq7QYCHplrG75g9FNhWk8zryxGY6Y7LMCBjUfLhN5f2EBXqX8 4jd3aFXi2VL7ELTgR4GT3Tr8q6vBDNVNnI4apQCuL29R7fNjpNE2CYJRKBlZRURq 2dxRrOfJ9v6zZrbqFzxQ6SimHbmbqSEPwzg4zFPe8QfE5KVn/MstQsiJRIbyDUJ7 DAiPdCyN3xuqvf4p+ddPcf1zt6vgLCO8sPeBl8BftBrZg+sBWFL8EgwislATwVln k90zIUHNm05F60rgXxUR4aA561NWXVJI -----END CERTIFICATE-----Generated at Sun Jun 15 08:44:00 2025 by rpki-client