$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.mft File: DOBgwuQw3YUYEMnyD-wbohGZ49Y.mft (raw, json) Hash identifier: b5kcX88VaaYEKVR081NvzuLI3sZ22Rd5U5qPbnB+/y0= Subject key identifier: 9F:21:AD:1B:0F:62:A1:EA:CA:C2:57:FB:3F:E1:F2:17:12:03:25:8B Authority key identifier: 0C:E0:60:C2:E4:30:DD:85:18:10:C9:F2:0F:EC:1B:A2:11:99:E3:D6 Certificate issuer: /CN=A91F2C07/serialNumber=0CE060C2E430DD851810C9F20FEC1BA21199E3D6 Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOBgwuQw3YUYEMnyD-wbohGZ49Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.mft Manifest number: 1B Signing time: Fri 13 Jun 2025 06:48:30 +0000 Manifest this update: Fri 13 Jun 2025 06:48:29 +0000 Manifest next update: Fri 20 Jun 2025 06:48:29 +0000 Files and hashes: 1: DOBgwuQw3YUYEMnyD-wbohGZ49Y.crl (hash: Zzki6CVCV5gwjnsjMXmJ16XRRQNbQWF7j2Zols535/Y=) 2: FDD4FA341E6111F0B8D45B79C4F9AE02.roa (hash: 7JB/cgKUwfUR4YGlIPTezqpMMVQ3OA1LBmpMpECbKmQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.crl rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOBgwuQw3YUYEMnyD-wbohGZ49Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2C07, serialNumber=0CE060C2E430DD851810C9F20FEC1BA21199E3D6 Validity Not Before: Jun 13 06:48:29 2025 GMT Not After : Jun 20 06:48:29 2025 GMT Subject: CN=684bc9be-3d80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:eb:a2:d7:52:ad:0d:05:af:38:37:35:cb:a7: 77:7a:af:b5:a5:4a:0c:41:de:25:71:3a:32:ca:6a: 5f:df:ed:05:36:eb:6c:46:f1:e0:54:27:31:a5:8f: 97:6e:c6:15:48:02:a0:41:f6:02:66:43:27:6d:a2: ba:04:78:cc:9c:fc:c3:a2:5f:d7:37:d1:3d:de:60: ab:16:5a:97:5d:9a:db:4b:8f:c5:d0:6c:ec:48:a6: 02:21:95:1a:2d:ef:01:29:e3:30:de:b9:16:b9:e1: a5:1a:0f:25:15:27:73:77:d2:e8:ef:6d:28:ff:30: b9:90:4c:2d:92:e9:a4:61:ca:62:ba:3b:9c:cb:04: 65:6f:f1:53:a8:79:70:fd:ae:0d:b3:bf:0d:bd:db: 68:f1:70:2b:9d:7c:36:c5:df:0d:7e:c3:4b:b9:fe: dc:1b:5e:74:cd:2c:4c:fa:c8:cf:d6:f2:f9:84:8e: d0:51:5e:e3:e8:97:76:14:89:d5:bb:57:88:fa:a4: 73:16:b9:75:b2:aa:9f:49:0e:32:7a:5b:4a:be:c0: f2:db:33:04:2d:23:a0:d0:82:e2:bc:54:98:99:95: 10:9c:f0:4c:e7:2c:2e:82:9f:de:a5:b3:ae:ef:06: a5:2d:b2:0f:59:0e:c9:d2:e7:e7:9e:e4:62:a8:a6: 18:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:21:AD:1B:0F:62:A1:EA:CA:C2:57:FB:3F:E1:F2:17:12:03:25:8B X509v3 Authority Key Identifier: keyid:0C:E0:60:C2:E4:30:DD:85:18:10:C9:F2:0F:EC:1B:A2:11:99:E3:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOBgwuQw3YUYEMnyD-wbohGZ49Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:26:77:d8:23:86:43:24:d4:35:19:f8:54:2e:3f:3e:50:04: e9:e7:11:ea:90:c9:bc:2a:b2:4a:b8:45:ca:0d:e3:d1:78:d9: 46:c7:10:cd:1b:c4:22:ad:e8:23:91:fa:02:f3:fd:f4:1b:5f: 8c:0b:ff:89:a1:19:e2:1d:42:a8:a1:3c:fb:80:3c:64:d5:e7: 43:e2:5c:84:1c:7b:1e:80:7f:0f:f0:49:36:15:73:27:66:18: 67:36:d4:b0:db:e6:f2:6d:e1:ca:ac:e8:21:d2:13:12:73:7d: 49:5c:2f:05:67:e5:b0:29:8a:76:be:4a:7a:91:94:4a:22:e9: 00:1e:62:b2:75:f0:42:9e:de:5b:a7:e1:c9:be:e6:3a:64:a9: 45:8e:7d:52:72:0b:e6:af:c8:0a:ad:84:f5:4f:3d:d2:32:51: de:75:54:11:d6:49:42:e3:1f:e6:b5:df:09:09:2e:d9:d3:b6: 5d:30:61:32:be:c3:5e:c2:85:56:1c:53:40:43:df:06:c7:5e: c5:9c:05:5e:45:56:3e:ca:e8:99:c7:09:25:82:d4:d8:58:fa: 9f:ae:a5:6c:8f:8e:80:0f:b9:f5:10:dc:e3:b3:69:3e:dd:8a: 83:6c:d1:60:1d:f0:aa:ae:10:88:13:09:24:48:91:e1:d2:2e: 1c:5c:7f:f9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MkMwNzExMC8GA1UEBRMoMENFMDYwQzJFNDMwREQ4NTE4MTBDOUYyMEZFQzFCQTIx MTk5RTNENjAeFw0yNTA2MTMwNjQ4MjlaFw0yNTA2MjAwNjQ4MjlaMBgxFjAUBgNV BAMTDTY4NGJjOWJlLTNkODAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDx66LXUq0NBa84NzXLp3d6r7WlSgxB3iVxOjLKal/f7QU262xG8eBUJzGlj5du xhVIAqBB9gJmQydtoroEeMyc/MOiX9c30T3eYKsWWpddmttLj8XQbOxIpgIhlRot 7wEp4zDeuRa54aUaDyUVJ3N30ujvbSj/MLmQTC2S6aRhymK6O5zLBGVv8VOoeXD9 rg2zvw2922jxcCudfDbF3w1+w0u5/twbXnTNLEz6yM/W8vmEjtBRXuPol3YUidW7 V4j6pHMWuXWyqp9JDjJ6W0q+wPLbMwQtI6DQguK8VJiZlRCc8EznLC6Cn96ls67v BqUtsg9ZDsnS5+ee5GKophhtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnyGtGw9i oerKwlf7P+HyFxIDJYswHwYDVR0jBBgwFoAUDOBgwuQw3YUYEMnyD+wbohGZ49Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYyQzA3L0E3NzRBOUNFMUU2 MDExRjBCN0RDNzY1NEM0RjlBRTAyL0RPQmd3dVF3M1lVWUVNbnlELXdib2hHWjQ5 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRE9CZ3d1UXczWVVZRU1ueUQtd2JvaEdaNDlZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYy QzA3L0E3NzRBOUNFMUU2MDExRjBCN0RDNzY1NEM0RjlBRTAyL0RPQmd3dVF3M1lV WUVNbnlELXdib2hHWjQ5WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKMmd9gjhkMk1DUZ+FQuPz5QBOnnEeqQybwqskq4RcoN49F42UbHEM0b xCKt6COR+gLz/fQbX4wL/4mhGeIdQqihPPuAPGTV50PiXIQcex6Afw/wSTYVcydm GGc21LDb5vJt4cqs6CHSExJzfUlcLwVn5bApina+SnqRlEoi6QAeYrJ18EKe3lun 4cm+5jpkqUWOfVJyC+avyAqthPVPPdIyUd51VBHWSULjH+a13wkJLtnTtl0wYTK+ w17ChVYcU0BD3wbHXsWcBV5FVj7K6JnHCSWC1NhY+p+upWyPjoAPufUQ3OOzaT7d ioNs0WAd8KquEIgTCSRIkeHSLhxcf/k= -----END CERTIFICATE-----Generated at Sat Jun 14 19:33:57 2025 by rpki-client