$ rpki-client -vvf rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft File: oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft (raw, json) Hash identifier: G5QkFa8hBGADt2xtgdr0n05JdneDiSwi+YjQI4VILCM= Subject key identifier: 34:C2:FF:40:A8:8A:CB:AE:08:88:FA:9F:55:BA:0A:5E:24:FC:C9:8E Authority key identifier: A2:24:36:84:22:3D:2C:25:C6:AF:17:6A:5F:02:FA:02:B2:4F:68:0B Certificate issuer: /CN=A91E953B/serialNumber=A2243684223D2C25C6AF176A5F02FA02B24F680B Certificate serial: 0138 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft Manifest number: 0136 Signing time: Fri 13 Jun 2025 03:24:36 +0000 Manifest this update: Fri 13 Jun 2025 03:24:36 +0000 Manifest next update: Fri 20 Jun 2025 03:24:36 +0000 Files and hashes: 1: oiQ2hCI9LCXGrxdqXwL6ArJPaAs.crl (hash: Fw3i6rwTSEEDpxk0AyIriZZAevsy0/7hRDRnSXN3aiY=) 2: 12E1FD886C9C11EE9F3C5653C4F9AE02.roa (hash: QQ5QrwGTURdTMG/7o8+lIRwrf/ztbEh4ekM9cA/bz/4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.crl rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:24:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E953B, serialNumber=A2243684223D2C25C6AF176A5F02FA02B24F680B Validity Not Before: Jun 13 03:24:36 2025 GMT Not After : Jun 20 03:24:36 2025 GMT Subject: CN=684b99f4-5dd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:02:1f:d4:0b:52:06:0f:2d:ca:14:4e:1f:9e: 4a:30:05:96:e9:a5:9f:40:82:24:16:f9:a7:d8:64: 4d:6d:d9:7f:3c:d7:e2:c2:80:51:98:0a:2e:3a:5d: c1:43:ea:a2:08:0c:ab:b8:25:fb:cb:3c:92:f5:39: ac:2d:e8:8b:aa:49:8c:6c:52:b9:eb:42:8c:9e:4b: 1b:a7:7a:d6:24:d6:ff:d4:e3:5e:24:94:d1:d2:4f: 7a:a2:02:42:62:ac:99:2e:23:d2:d8:d9:6f:6f:dc: d9:63:fc:16:eb:17:e2:61:b7:8f:08:85:f8:3b:e5: 67:ae:2d:c8:34:a3:a4:df:41:3e:87:72:e2:47:6c: 83:e8:1c:df:d2:67:d1:5d:a4:b4:88:38:6d:12:7b: 2e:f0:92:e7:69:9e:92:81:4c:40:20:0d:e2:ac:a0: 70:c4:41:6c:d7:ba:06:1b:ef:57:58:88:02:f1:be: 51:34:62:e3:1b:a0:1c:ec:51:41:69:78:be:15:00: f1:9c:6b:16:b4:42:d1:ca:a4:08:07:43:db:17:ad: a6:53:3a:a8:80:13:46:f8:ee:46:fc:76:6d:28:10: 9f:d1:d2:cb:ec:45:28:65:47:34:ca:98:8f:46:b2: cc:d6:5a:ac:9a:2c:ce:b1:66:7f:f5:68:3e:2a:5b: 15:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:C2:FF:40:A8:8A:CB:AE:08:88:FA:9F:55:BA:0A:5E:24:FC:C9:8E X509v3 Authority Key Identifier: keyid:A2:24:36:84:22:3D:2C:25:C6:AF:17:6A:5F:02:FA:02:B2:4F:68:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:c2:4c:d6:54:0a:04:cd:de:5c:c7:bd:95:9e:c1:38:cd:45: 74:5f:95:6d:03:43:71:d8:9e:2d:5e:d5:db:9a:98:2c:ee:c5: 56:f3:0b:f0:32:db:ce:b3:f6:a6:0e:f1:61:0e:45:17:fb:11: b8:ca:e7:02:ec:18:04:96:21:5a:e6:bf:2b:ec:c5:f7:f9:51: 9e:54:06:0b:0f:f6:2e:06:3c:ca:b0:f2:6d:61:c1:3e:a8:e1: ab:71:9b:41:eb:c4:fa:98:37:4d:39:65:fe:95:24:90:46:a5: 8b:ed:20:e2:9a:92:f6:be:0c:5d:d5:50:91:f5:d8:c8:fd:84: 21:90:fb:86:b9:d2:fc:62:a5:58:49:45:c5:20:05:12:ee:c3: 9d:e6:a8:5b:c9:98:e6:db:63:b6:7c:b3:fa:b0:8e:02:47:45: b4:db:5a:ab:76:b9:f0:3e:f1:d4:08:50:ea:e7:42:7e:69:e0: 24:f0:e6:7b:20:a5:53:f6:e9:db:a4:e0:98:be:cd:f8:d3:26: a4:04:91:67:21:8d:23:0a:28:58:04:27:4f:b7:d9:43:d8:b4: 9f:9b:41:56:2b:f0:1c:db:16:66:27:49:71:81:38:c8:3f:23: be:20:5b:34:60:70:84:0e:db:c6:94:e7:7b:3c:92:33:1e:7a: b1:42:ba:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk1M0IxMTAvBgNVBAUTKEEyMjQzNjg0MjIzRDJDMjVDNkFGMTc2QTVGMDJGQTAy QjI0RjY4MEIwHhcNMjUwNjEzMDMyNDM2WhcNMjUwNjIwMDMyNDM2WjAYMRYwFAYD VQQDEw02ODRiOTlmNC01ZGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsAIf1AtSBg8tyhROH55KMAWW6aWfQIIkFvmn2GRNbdl/PNfiwoBRmAouOl3B Q+qiCAyruCX7yzyS9TmsLeiLqkmMbFK560KMnksbp3rWJNb/1ONeJJTR0k96ogJC YqyZLiPS2Nlvb9zZY/wW6xfiYbePCIX4O+Vnri3INKOk30E+h3LiR2yD6Bzf0mfR XaS0iDhtEnsu8JLnaZ6SgUxAIA3irKBwxEFs17oGG+9XWIgC8b5RNGLjG6Ac7FFB aXi+FQDxnGsWtELRyqQIB0PbF62mUzqogBNG+O5G/HZtKBCf0dLL7EUoZUc0ypiP RrLM1lqsmizOsWZ/9Wg+KlsVmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDTC/0Co isuuCIj6n1W6Cl4k/MmOMB8GA1UdIwQYMBaAFKIkNoQiPSwlxq8Xal8C+gKyT2gL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTUzQi9DOEQwMzkyMjZD OUExMUVFODVCRkRGNEZDNEY5QUUwMi9vaVEyaENJOUxDWEdyeGRxWHdMNkFySlBh QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29pUTJoQ0k5TENYR3J4ZHFYd0w2QXJKUGFBcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTUzQi9DOEQwMzkyMjZDOUExMUVFODVCRkRGNEZDNEY5QUUwMi9vaVEyaENJOUxD WEdyeGRxWHdMNkFySlBhQXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKwkzWVAoEzd5cx72VnsE4zUV0X5VtA0Nx2J4tXtXbmpgs7sVW8wvw MtvOs/amDvFhDkUX+xG4yucC7BgEliFa5r8r7MX3+VGeVAYLD/YuBjzKsPJtYcE+ qOGrcZtB68T6mDdNOWX+lSSQRqWL7SDimpL2vgxd1VCR9djI/YQhkPuGudL8YqVY SUXFIAUS7sOd5qhbyZjm22O2fLP6sI4CR0W021qrdrnwPvHUCFDq50J+aeAk8OZ7 IKVT9unbpOCYvs340yakBJFnIY0jCihYBCdPt9lD2LSfm0FWK/Ac2xZmJ0lxgTjI PyO+IFs0YHCEDtvGlOd7PJIzHnqxQrpg -----END CERTIFICATE-----Generated at Sun Jun 15 04:45:00 2025 by rpki-client