$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.mft File: oUnn_U15BvwaY0EphlXagYXykBQ.mft (raw, json) Hash identifier: 30XdZTWygtw+kPFSmyC9yQr6KUaDCAIVoK6yCPDKWkI= Subject key identifier: 08:E2:77:3C:9E:07:0E:D6:FF:04:D7:FF:0B:B7:07:9B:9B:CE:BA:25 Authority key identifier: A1:49:E7:FD:4D:79:06:FC:1A:63:41:29:86:55:DA:81:85:F2:90:14 Certificate issuer: /CN=A91FF639/serialNumber=A149E7FD4D7906FC1A6341298655DA8185F29014 Certificate serial: 13BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUnn_U15BvwaY0EphlXagYXykBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.mft Manifest number: 13B3 Signing time: Wed 18 Jun 2025 16:56:40 +0000 Manifest this update: Wed 18 Jun 2025 16:56:40 +0000 Manifest next update: Wed 25 Jun 2025 16:56:40 +0000 Files and hashes: 1: oUnn_U15BvwaY0EphlXagYXykBQ.crl (hash: 45fYsZNhI1UKEL2Xpwr5ZY00XtbQPKV82XIo28ixMb0=) 2: 9D1CF15E90EE11E8960E8480C4F9AE02.roa (hash: M9FXaqMN3xRXkYSG9XQqHpw6Lro8+iU9Ajk3i3+nJw4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.crl rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUnn_U15BvwaY0EphlXagYXykBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 16:56:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5054 (0x13be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF639, serialNumber=A149E7FD4D7906FC1A6341298655DA8185F29014 Validity Not Before: Jun 18 16:56:40 2025 GMT Not After : Jun 25 16:56:40 2025 GMT Subject: CN=6852efc8-dcee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:04:43:d9:b1:2a:32:7d:47:bd:ee:5c:58:6e: e3:ae:b3:82:47:b8:f2:a6:01:7f:18:54:51:dc:a1: 75:7a:31:98:dd:88:3c:c0:24:b1:81:a9:57:23:90: 27:83:0f:4b:18:ce:19:cf:09:f3:fb:7e:d0:c2:49: 31:cf:44:9c:8d:4f:de:9f:87:95:03:1a:16:62:82: 27:52:53:f6:fc:72:51:b4:9f:21:9e:da:de:fc:11: c0:6e:4f:11:9b:ae:2b:a2:a9:74:0f:5c:aa:48:8c: 42:d6:8c:91:ce:f5:13:08:5c:27:36:48:36:e0:df: 85:f4:a6:85:02:3b:c2:7d:16:5c:8c:46:1d:34:6a: 0c:01:1d:1f:93:e1:9c:68:99:90:4c:51:a0:fa:02: aa:2d:79:5d:6f:b5:c1:85:ae:a8:2c:7b:60:8c:b0: 46:68:25:2b:19:3d:c1:67:0f:3e:68:3d:41:a8:82: ec:18:66:2b:09:d8:e8:50:da:6f:13:e1:14:6e:2f: 0b:bd:cb:b1:d2:0e:40:ec:7f:50:bf:33:1d:62:f0: f0:e8:76:e5:76:ad:5f:ba:12:cf:01:28:b2:c2:9d: 46:35:9d:b4:72:ad:3a:e2:d8:13:fb:90:0c:2e:23: fa:50:8f:7d:90:10:e4:0e:0d:7f:f7:22:67:72:e7: 03:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:E2:77:3C:9E:07:0E:D6:FF:04:D7:FF:0B:B7:07:9B:9B:CE:BA:25 X509v3 Authority Key Identifier: keyid:A1:49:E7:FD:4D:79:06:FC:1A:63:41:29:86:55:DA:81:85:F2:90:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUnn_U15BvwaY0EphlXagYXykBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:18:1b:cd:a3:ae:d2:7c:f9:e8:0d:2e:a6:1c:f2:51:a5:0e: b3:32:e5:1b:e2:2e:99:cc:79:8a:45:33:c4:96:45:c7:15:80: 10:96:f4:60:69:f2:75:17:a6:c7:db:e6:f1:d0:30:65:f6:87: 5b:f2:0d:28:ee:a6:cd:b2:2e:1a:2d:c1:e4:21:64:92:04:d8: 70:65:83:17:90:2c:4f:f6:01:14:15:2a:e5:40:89:dc:89:fe: 1b:70:90:96:74:c7:f3:d9:b9:08:bb:77:ae:97:24:05:38:c7: 6d:54:98:72:91:06:53:12:1c:6f:6b:56:a5:bd:2e:ae:31:da: ad:76:5f:ea:ba:2d:df:ac:22:4b:6c:18:33:9a:9c:54:a9:cd: e5:52:d4:19:a1:84:64:ab:7c:07:e9:11:91:8b:d8:e5:d9:10: 63:bd:93:50:71:c7:76:a0:8a:ee:8d:7f:64:93:d5:d4:19:c2: f0:eb:b2:c3:be:c0:a0:f1:52:d3:d5:4d:02:95:a5:b6:a9:8e: 3e:94:1c:db:11:f1:57:a9:95:ce:db:6f:40:4e:50:48:d1:63: 9f:e2:b1:c5:b6:28:16:de:7d:3a:fb:7e:56:48:c8:91:4d:9d: 67:10:85:86:4e:11:8b:90:eb:0b:53:b8:7b:ac:fb:b1:e3:2c: 4a:49:fe:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE74wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY2MzkxMTAvBgNVBAUTKEExNDlFN0ZENEQ3OTA2RkMxQTYzNDEyOTg2NTVEQTgx ODVGMjkwMTQwHhcNMjUwNjE4MTY1NjQwWhcNMjUwNjI1MTY1NjQwWjAYMRYwFAYD VQQDEw02ODUyZWZjOC1kY2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQRD2bEqMn1Hve5cWG7jrrOCR7jypgF/GFRR3KF1ejGY3Yg8wCSxgalXI5An gw9LGM4Zzwnz+37Qwkkxz0ScjU/en4eVAxoWYoInUlP2/HJRtJ8hntre/BHAbk8R m64roql0D1yqSIxC1oyRzvUTCFwnNkg24N+F9KaFAjvCfRZcjEYdNGoMAR0fk+Gc aJmQTFGg+gKqLXldb7XBha6oLHtgjLBGaCUrGT3BZw8+aD1BqILsGGYrCdjoUNpv E+EUbi8Lvcux0g5A7H9QvzMdYvDw6Hbldq1fuhLPASiywp1GNZ20cq064tgT+5AM LiP6UI99kBDkDg1/9yJncucDGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAjidzye Bw7W/wTX/wu3B5ubzrolMB8GA1UdIwQYMBaAFKFJ5/1NeQb8GmNBKYZV2oGF8pAU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjYzOS9BRUYwNjhCODkw RUMxMUU4ODNDM0Q0N0JDNEY5QUUwMi9vVW5uX1UxNUJ2d2FZMEVwaGxYYWdZWHlr QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Vbm5fVTE1QnZ3YVkwRXBobFhhZ1lYeWtCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjYzOS9BRUYwNjhCODkwRUMxMUU4ODNDM0Q0N0JDNEY5QUUwMi9vVW5uX1UxNUJ2 d2FZMEVwaGxYYWdZWHlrQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALGBvNo67SfPnoDS6mHPJRpQ6zMuUb4i6ZzHmKRTPElkXHFYAQlvRg afJ1F6bH2+bx0DBl9odb8g0o7qbNsi4aLcHkIWSSBNhwZYMXkCxP9gEUFSrlQInc if4bcJCWdMfz2bkIu3eulyQFOMdtVJhykQZTEhxva1alvS6uMdqtdl/qui3frCJL bBgzmpxUqc3lUtQZoYRkq3wH6RGRi9jl2RBjvZNQccd2oIrujX9kk9XUGcLw67LD vsCg8VLT1U0ClaW2qY4+lBzbEfFXqZXO229ATlBI0WOf4rHFtigW3n06+35WSMiR TZ1nEIWGThGLkOsLU7h7rPux4yxKSf6H -----END CERTIFICATE-----Generated at Thu Jun 19 20:05:25 2025 by rpki-client