$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft File: OdCbSlNggIIFqdaRRxnguYnPVgs.mft (raw, json) Hash identifier: Hab5fnaJ7/G1NNuu39NmKywnk2qIkjJ10ACcUcF6HV0= Subject key identifier: 89:F1:FE:44:3D:8A:45:15:9F:40:8B:9D:3A:47:C5:70:D1:9B:3C:26 Authority key identifier: 39:D0:9B:4A:53:60:80:82:05:A9:D6:91:47:19:E0:B9:89:CF:56:0B Certificate issuer: /CN=A91FDCF0/serialNumber=39D09B4A5360808205A9D6914719E0B989CF560B Certificate serial: 179A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdCbSlNggIIFqdaRRxnguYnPVgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft Manifest number: 1791 Signing time: Thu 12 Jun 2025 16:32:56 +0000 Manifest this update: Thu 12 Jun 2025 16:32:55 +0000 Manifest next update: Thu 19 Jun 2025 16:32:55 +0000 Files and hashes: 1: OdCbSlNggIIFqdaRRxnguYnPVgs.crl (hash: MjQmTCwPtnreWWHlxOD0l3AkSb8nmVG36cSBWSXs8zo=) 2: D8D34E92100411EE9849087AC4F9AE02.roa (hash: NYe/OwRHgWBG4n1tEVTichlRmY2tFDrc7PdcIFXXIB4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.crl rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdCbSlNggIIFqdaRRxnguYnPVgs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 16:32:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6042 (0x179a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDCF0, serialNumber=39D09B4A5360808205A9D6914719E0B989CF560B Validity Not Before: Jun 12 16:32:55 2025 GMT Not After : Jun 19 16:32:55 2025 GMT Subject: CN=684b0137-2836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:70:3d:2e:fd:3f:b5:04:0c:38:50:43:19:9d: 34:e3:f2:97:ef:4c:e5:b3:3b:c4:01:6f:e9:f7:56: 81:58:90:7f:2f:7c:d5:e1:39:0b:98:42:0d:ef:0b: 89:50:1a:13:25:d9:81:29:b0:55:c3:2a:f6:b8:87: 89:c2:75:65:cc:6d:3b:79:d8:e6:ed:7e:cc:0e:1b: 26:41:63:55:25:ea:84:d3:a1:27:b2:af:dc:4c:68: f0:72:36:52:ae:7a:80:e7:42:54:33:4d:2e:6f:aa: 57:85:51:a0:28:8d:0d:97:2b:9c:6f:03:7f:6d:2d: e8:0d:fb:d5:c6:98:0e:8f:c9:5d:3d:b7:c7:b0:3b: 8d:d4:b8:34:f5:16:1c:fd:9e:97:02:70:7e:c6:75: d8:f6:23:fd:03:2c:e8:23:e6:d7:57:f9:c2:5e:5e: 35:87:4a:f7:c7:37:6a:bf:f2:bf:fc:a5:d9:9b:53: 98:4a:1f:03:9d:03:fb:24:2f:70:18:56:dd:18:22: 6e:98:e6:12:e5:2d:6c:f3:47:d5:be:fe:f1:52:71: d8:72:72:81:cd:2a:6a:28:f0:16:3d:23:72:f4:fd: 51:c3:19:aa:b3:5f:0a:d3:e6:45:b4:97:0c:d5:3e: c3:19:a9:74:b0:6f:a8:2e:2c:03:da:35:4f:ae:86: dd:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F1:FE:44:3D:8A:45:15:9F:40:8B:9D:3A:47:C5:70:D1:9B:3C:26 X509v3 Authority Key Identifier: keyid:39:D0:9B:4A:53:60:80:82:05:A9:D6:91:47:19:E0:B9:89:CF:56:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdCbSlNggIIFqdaRRxnguYnPVgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:31:cb:56:3d:9a:35:15:cb:e0:46:e5:6e:21:57:39:cf:dc: 2f:cf:bd:89:fc:bf:0d:c5:ce:72:df:9e:42:1d:cf:b5:71:aa: 26:3e:ef:96:b7:bd:8f:4a:e1:4c:3c:a7:d3:66:fc:1b:f6:36: 4a:03:54:82:d5:03:34:7c:1b:1d:55:98:64:af:99:ac:e7:e3: 2f:b5:0f:72:5d:a2:5a:5d:fa:70:06:2b:68:5c:2d:4c:b5:5d: c5:6e:d7:43:69:f2:67:b5:8d:69:f3:9d:eb:5f:35:ea:82:f2: 43:3f:90:cb:fe:22:08:6f:e7:96:82:4f:a2:fb:b9:61:f0:0e: b0:64:30:d8:16:d2:71:a6:8c:17:08:1f:55:a2:4f:91:b7:b0: e3:f8:6c:8f:01:c4:1b:f5:04:7e:85:3f:04:ca:f5:b2:84:10: f7:aa:ae:0b:3c:aa:40:3b:aa:54:6f:d4:05:a1:45:e8:26:19: 10:a7:96:fe:81:88:b7:2c:2f:45:c2:46:a1:2d:66:e7:64:d4: 06:5e:ce:3d:db:63:f2:bd:f4:23:ee:81:06:7b:90:80:51:ec: f5:e2:8c:a2:6e:fe:b8:a1:71:30:63:bc:1d:d4:8a:aa:c4:a5: 24:f1:b2:5c:78:ba:7e:03:a2:9b:37:ae:c3:2e:6a:60:b4:47: 9b:cc:18:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF5owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRDRjAxMTAvBgNVBAUTKDM5RDA5QjRBNTM2MDgwODIwNUE5RDY5MTQ3MTlFMEI5 ODlDRjU2MEIwHhcNMjUwNjEyMTYzMjU1WhcNMjUwNjE5MTYzMjU1WjAYMRYwFAYD VQQDEw02ODRiMDEzNy0yODM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3A9Lv0/tQQMOFBDGZ004/KX70zlszvEAW/p91aBWJB/L3zV4TkLmEIN7wuJ UBoTJdmBKbBVwyr2uIeJwnVlzG07edjm7X7MDhsmQWNVJeqE06Ensq/cTGjwcjZS rnqA50JUM00ub6pXhVGgKI0NlyucbwN/bS3oDfvVxpgOj8ldPbfHsDuN1Lg09RYc /Z6XAnB+xnXY9iP9AyzoI+bXV/nCXl41h0r3xzdqv/K//KXZm1OYSh8DnQP7JC9w GFbdGCJumOYS5S1s80fVvv7xUnHYcnKBzSpqKPAWPSNy9P1Rwxmqs18K0+ZFtJcM 1T7DGal0sG+oLiwD2jVProbdbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFInx/kQ9 ikUVn0CLnTpHxXDRmzwmMB8GA1UdIwQYMBaAFDnQm0pTYICCBanWkUcZ4LmJz1YL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRENGMC8zMTI3QjAxOENF QUUxMUU3ODk3ODQ4MjVDNEY5QUUwMi9PZENiU2xOZ2dJSUZxZGFSUnhuZ3VZblBW Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09kQ2JTbE5nZ0lJRnFkYVJSeG5ndVluUFZncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RENGMC8zMTI3QjAxOENFQUUxMUU3ODk3ODQ4MjVDNEY5QUUwMi9PZENiU2xOZ2dJ SUZxZGFSUnhuZ3VZblBWZ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCMctWPZo1FcvgRuVuIVc5z9wvz72J/L8Nxc5y355CHc+1caomPu+W t72PSuFMPKfTZvwb9jZKA1SC1QM0fBsdVZhkr5ms5+MvtQ9yXaJaXfpwBitoXC1M tV3FbtdDafJntY1p853rXzXqgvJDP5DL/iIIb+eWgk+i+7lh8A6wZDDYFtJxpowX CB9Vok+Rt7Dj+GyPAcQb9QR+hT8EyvWyhBD3qq4LPKpAO6pUb9QFoUXoJhkQp5b+ gYi3LC9FwkahLWbnZNQGXs4922PyvfQj7oEGe5CAUez14oyibv64oXEwY7wd1Iqq xKUk8bJceLp+A6KbN67DLmpgtEebzBg/ -----END CERTIFICATE-----Generated at Sat Jun 14 17:42:20 2025 by rpki-client