$ rpki-client -vvf rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/OG6s-qYbi0A33DiqKAhd4xh48eM.mft File: OG6s-qYbi0A33DiqKAhd4xh48eM.mft (raw, json) Hash identifier: tfQmHBvZrfYBDVWwdlKJwWGqftVrtWHYvTjPr5eAAq8= Subject key identifier: C2:5E:CF:23:49:57:BA:F4:1C:82:4A:DB:54:8A:F0:5E:6C:34:77:29 Authority key identifier: 38:6E:AC:FA:A6:1B:8B:40:37:DC:38:AA:28:08:5D:E3:18:78:F1:E3 Certificate issuer: /CN=A9118422/serialNumber=386EACFAA61B8B4037DC38AA28085DE31878F1E3 Certificate serial: 030D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG6s-qYbi0A33DiqKAhd4xh48eM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/OG6s-qYbi0A33DiqKAhd4xh48eM.mft Manifest number: 0309 Signing time: Thu 03 Jul 2025 01:36:23 +0000 Manifest this update: Thu 03 Jul 2025 01:36:22 +0000 Manifest next update: Thu 10 Jul 2025 01:36:22 +0000 Files and hashes: 1: OG6s-qYbi0A33DiqKAhd4xh48eM.crl (hash: HwBGrqOXVGsO+aR7tmYTsw/v1UZffIEolEv4Sey39Aw=) 2: 09AA16F8DB0011ECA67DA10BC4F9AE02.roa (hash: Xjk4IJVT0rrTOdheIi6ydLmAybVHV5BPXXklNZ4Q0SQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/OG6s-qYbi0A33DiqKAhd4xh48eM.crl rsync://rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/OG6s-qYbi0A33DiqKAhd4xh48eM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG6s-qYbi0A33DiqKAhd4xh48eM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:36:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 781 (0x30d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118422, serialNumber=386EACFAA61B8B4037DC38AA28085DE31878F1E3 Validity Not Before: Jul 3 01:36:22 2025 GMT Not After : Jul 10 01:36:22 2025 GMT Subject: CN=6865de97-74e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:46:3b:51:04:8c:ee:c8:b0:31:f0:56:6d:79: 6a:52:c4:1d:48:f5:d6:e8:71:f3:ce:e2:c9:77:0a: a9:95:39:a9:62:db:e2:31:23:e0:71:c3:6c:90:81: cb:56:c2:b5:b9:80:25:d8:6f:ef:32:d6:59:47:8f: 21:42:c6:e6:d8:0b:0f:1f:61:71:3c:1a:95:da:42: f7:45:6a:4c:6a:9b:59:66:37:c7:37:92:6c:a5:44: db:c3:7b:cc:38:3f:09:a4:74:ba:90:3c:fd:41:f6: cc:bf:66:cf:ae:75:76:33:3b:0c:d4:dc:30:74:ae: 99:c8:a7:cf:9d:b9:43:f8:eb:91:b7:23:15:42:4e: 75:af:70:72:a2:8b:53:ac:fe:27:d7:ac:70:9a:dc: c7:c0:99:82:fa:8b:18:b0:ae:4c:f7:d8:41:bc:d1: 52:10:b5:10:24:60:7f:e2:d3:52:0f:3a:34:2a:a4: 35:4c:ce:9c:2c:14:d5:eb:71:3d:66:96:1d:d6:ec: 8d:43:89:4d:9b:c3:5e:26:1c:70:63:fc:d2:7b:c7: 31:a9:50:41:0d:d1:15:9a:d9:fa:db:79:85:5b:f3: 40:a4:16:e3:1d:a6:92:fa:9c:8c:55:71:db:98:ac: 6e:e5:69:12:58:67:f0:8f:96:f3:5a:3e:74:c6:8a: 6d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:5E:CF:23:49:57:BA:F4:1C:82:4A:DB:54:8A:F0:5E:6C:34:77:29 X509v3 Authority Key Identifier: keyid:38:6E:AC:FA:A6:1B:8B:40:37:DC:38:AA:28:08:5D:E3:18:78:F1:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/OG6s-qYbi0A33DiqKAhd4xh48eM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG6s-qYbi0A33DiqKAhd4xh48eM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/OG6s-qYbi0A33DiqKAhd4xh48eM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:0c:62:8d:74:0e:44:76:d4:ba:0d:3e:cc:1a:d8:2c:f2:54: 13:ea:6a:04:5a:bb:44:85:4e:f3:9f:3c:ef:5b:c4:da:18:7e: c3:9a:01:c3:f3:be:d7:d9:65:30:a8:14:f8:3a:59:bb:76:98: c9:1e:4b:7e:c1:ca:d8:6b:3e:2b:71:ed:e6:f2:1c:83:3d:fd: 63:a4:2e:ee:43:65:7e:05:0e:ac:d9:dc:29:89:5d:fc:58:17: 21:79:63:4d:89:f2:e6:b7:df:28:30:2a:59:4f:bb:c8:11:8f: b5:8f:1f:62:99:fe:e0:66:b2:fd:4b:92:0f:0d:2b:e8:13:54: 42:95:3a:54:b7:93:9b:22:3d:d6:70:b2:e5:d9:e1:fe:e4:35: fb:80:31:2e:f0:78:55:c6:92:d1:c4:e1:b4:da:e9:82:2a:bf: 81:2f:b1:09:94:15:7d:8e:4d:5a:30:84:14:ae:52:08:d2:0e: 3e:06:a3:83:47:0a:9c:78:60:28:ed:53:3c:ce:0d:17:3b:56: e6:b6:fc:f0:60:62:c8:3e:d7:94:26:99:2f:c4:21:51:1f:39: 9a:4a:2e:02:fd:81:46:7c:28:11:65:0d:a3:97:86:e9:9f:f1: fb:be:dc:ce:9f:7e:22:32:a5:02:6e:df:48:29:e2:61:4b:f5: 11:c6:23:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAw0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg0MjIxMTAvBgNVBAUTKDM4NkVBQ0ZBQTYxQjhCNDAzN0RDMzhBQTI4MDg1REUz MTg3OEYxRTMwHhcNMjUwNzAzMDEzNjIyWhcNMjUwNzEwMDEzNjIyWjAYMRYwFAYD VQQDEw02ODY1ZGU5Ny03NGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz0Y7UQSM7siwMfBWbXlqUsQdSPXW6HHzzuLJdwqplTmpYtviMSPgccNskIHL VsK1uYAl2G/vMtZZR48hQsbm2AsPH2FxPBqV2kL3RWpMaptZZjfHN5JspUTbw3vM OD8JpHS6kDz9QfbMv2bPrnV2MzsM1NwwdK6ZyKfPnblD+OuRtyMVQk51r3ByootT rP4n16xwmtzHwJmC+osYsK5M99hBvNFSELUQJGB/4tNSDzo0KqQ1TM6cLBTV63E9 ZpYd1uyNQ4lNm8NeJhxwY/zSe8cxqVBBDdEVmtn623mFW/NApBbjHaaS+pyMVXHb mKxu5WkSWGfwj5bzWj50xoptUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMJezyNJ V7r0HIJK21SK8F5sNHcpMB8GA1UdIwQYMBaAFDhurPqmG4tAN9w4qigIXeMYePHj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODQyMi8zMTgwRkUyQURB RkMxMUVDQkJENTM3ODZDNEY5QUUwMi9PRzZzLXFZYmkwQTMzRGlxS0FoZDR4aDQ4 ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09HNnMtcVliaTBBMzNEaXFLQWhkNHhoNDhlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODQyMi8zMTgwRkUyQURBRkMxMUVDQkJENTM3ODZDNEY5QUUwMi9PRzZzLXFZYmkw QTMzRGlxS0FoZDR4aDQ4ZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtDGKNdA5EdtS6DT7MGtgs8lQT6moEWrtEhU7znzzvW8TaGH7DmgHD 877X2WUwqBT4Olm7dpjJHkt+wcrYaz4rce3m8hyDPf1jpC7uQ2V+BQ6s2dwpiV38 WBcheWNNifLmt98oMCpZT7vIEY+1jx9imf7gZrL9S5IPDSvoE1RClTpUt5ObIj3W cLLl2eH+5DX7gDEu8HhVxpLRxOG02umCKr+BL7EJlBV9jk1aMIQUrlII0g4+BqOD RwqceGAo7VM8zg0XO1bmtvzwYGLIPteUJpkvxCFRHzmaSi4C/YFGfCgRZQ2jl4bp n/H7vtzOn34iMqUCbt9IKeJhS/URxiNd -----END CERTIFICATE-----Generated at Thu Jul 3 11:03:00 2025 by rpki-client