$ rpki-client -vvf rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft File: Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft (raw, json) Hash identifier: YD48+ddaq2JqQukECobF921GwXm275z2xtiTIlO1tLs= Subject key identifier: 2B:2D:69:0B:13:7A:C6:9B:C4:42:A2:38:BC:7E:45:B8:DB:8E:30:15 Authority key identifier: 3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60 Certificate issuer: /CN=A91188EE/serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360 Certificate serial: F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft Manifest number: E9 Signing time: Thu 03 Jul 2025 05:36:51 +0000 Manifest this update: Thu 03 Jul 2025 05:36:51 +0000 Manifest next update: Thu 10 Jul 2025 05:36:51 +0000 Files and hashes: 1: Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl (hash: Qo0U9kjL+n/n71cKolV4Qkb/vmTNMquGUBcxcXwW/4A=) 2: 6313E67C8D5711EFB5214A3AC4F9AE02.roa (hash: H9y99bkQAenZ+5dQW/QgFhQvNtXIL5GTmQ8MEBG2Zlw=) 3: 9EE9468811FB11EFB73CB561C4F9AE02.roa (hash: wQPQHggW2pcWJJTTCEnG8wZ6ChbePlicDoKqF+XySGc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 241 (0xf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91188EE, serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360 Validity Not Before: Jul 3 05:36:51 2025 GMT Not After : Jul 10 05:36:51 2025 GMT Subject: CN=686616f3-9125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cb:20:fe:da:32:19:10:c7:4f:0b:54:48:98: a4:1a:c4:5c:b4:8a:02:d5:db:e7:70:5d:5d:3f:b0: f9:b0:08:03:38:4c:5a:cf:06:55:9c:2f:e7:09:99: 93:e9:59:16:5c:c9:14:b4:c6:b5:77:74:b0:f1:cc: e6:fb:11:37:84:72:41:37:82:07:6c:71:3c:a0:0f: cc:0e:15:ac:85:46:0f:f2:74:0d:5b:d6:5d:98:c3: 52:9b:a4:f3:8d:1d:fb:6b:c2:7e:39:26:49:88:67: 3d:4c:ad:df:fe:0e:7a:c5:b4:66:16:c4:72:17:fd: 16:8d:c3:cd:45:81:7f:58:7d:0a:8e:1d:dd:66:82: d3:38:db:03:42:58:0b:ab:39:06:3e:8c:38:8e:2c: 46:58:f2:ad:28:91:5c:b8:f9:cb:d9:27:24:01:cc: 39:0e:5a:66:95:2b:e3:24:0c:ec:76:23:5a:d2:94: 33:b8:eb:1c:db:33:0d:6f:1e:8d:13:bd:37:7f:1f: dc:d4:12:a7:d2:34:75:32:96:d8:c7:d2:f6:c9:cb: 72:11:eb:8f:d5:66:c1:54:51:2b:be:f9:92:7e:0e: 2b:fe:d6:2b:34:8b:5d:7b:b0:dd:5e:b8:bf:64:e0: 2c:39:26:c9:6b:a1:1e:fc:6d:73:7f:53:24:63:92: 23:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:2D:69:0B:13:7A:C6:9B:C4:42:A2:38:BC:7E:45:B8:DB:8E:30:15 X509v3 Authority Key Identifier: keyid:3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:40:39:6e:55:66:48:bc:4d:48:fa:06:b8:9e:6f:dc:44:61: aa:7a:17:79:e1:56:8b:f9:c5:0b:1a:9b:7f:bd:b8:96:77:63: 82:b8:7d:32:59:9d:16:4a:e9:07:fd:25:bf:60:dc:68:a5:82: 28:b1:f5:52:bc:51:9c:c1:b6:08:dc:a9:29:78:36:88:eb:aa: 4d:e7:56:ba:9f:2b:52:12:6c:be:c1:d5:89:7d:c2:22:a6:23: b7:04:1e:d8:e5:40:2c:38:f2:eb:5d:eb:a3:7f:22:55:7b:06: 28:31:4e:cf:9c:11:0f:99:04:95:72:2c:c5:5c:61:5a:d8:c3: a1:0a:12:b8:f6:e3:99:84:55:18:67:74:cd:ce:db:e2:a6:83: 06:07:d8:65:a1:f0:37:db:85:04:26:2d:3f:be:f1:6b:76:c3: 61:72:fa:62:be:5f:ca:f3:aa:bd:0a:d2:1b:d1:1b:04:ad:4e: 1a:58:b3:0b:2a:1f:e0:6c:2e:e2:8c:9a:29:1a:1e:dd:30:1b: 00:08:29:60:39:04:d5:06:d0:56:2c:3f:a8:f2:9e:78:09:bd: b9:9f:df:be:db:c2:5e:e3:c9:e7:17:1d:92:ba:b7:7c:16:e0: 21:f8:f9:14:4a:f5:ed:6d:6f:e9:87:f0:d7:05:cd:3d:8d:0f: ee:43:c2:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg4RUUxMTAvBgNVBAUTKDNBRURBODA0MDdENzdCQjUyODQ4QUJEOUY3MjU5QkQ4 MDdBNUQzNjAwHhcNMjUwNzAzMDUzNjUxWhcNMjUwNzEwMDUzNjUxWjAYMRYwFAYD VQQDEw02ODY2MTZmMy05MTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvcsg/toyGRDHTwtUSJikGsRctIoC1dvncF1dP7D5sAgDOExazwZVnC/nCZmT 6VkWXMkUtMa1d3Sw8czm+xE3hHJBN4IHbHE8oA/MDhWshUYP8nQNW9ZdmMNSm6Tz jR37a8J+OSZJiGc9TK3f/g56xbRmFsRyF/0WjcPNRYF/WH0Kjh3dZoLTONsDQlgL qzkGPow4jixGWPKtKJFcuPnL2SckAcw5DlpmlSvjJAzsdiNa0pQzuOsc2zMNbx6N E703fx/c1BKn0jR1MpbYx9L2yctyEeuP1WbBVFErvvmSfg4r/tYrNItde7DdXri/ ZOAsOSbJa6Ee/G1zf1MkY5IjUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCstaQsT esabxEKiOLx+RbjbjjAVMB8GA1UdIwQYMBaAFDrtqAQH13u1KEir2fclm9gHpdNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODhFRS8zMjA5NzMxQUZC QUYxMUVFQTZCQzM5NTJDNEY5QUUwMi9PdTJvQkFmWGU3VW9TS3ZaOXlXYjJBZWww MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL091Mm9CQWZYZTdVb1NLdlo5eVdiMkFlbDAyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODhFRS8zMjA5NzMxQUZCQUYxMUVFQTZCQzM5NTJDNEY5QUUwMi9PdTJvQkFmWGU3 VW9TS3ZaOXlXYjJBZWwwMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXQDluVWZIvE1I+ga4nm/cRGGqehd54VaL+cULGpt/vbiWd2OCuH0y WZ0WSukH/SW/YNxopYIosfVSvFGcwbYI3KkpeDaI66pN51a6nytSEmy+wdWJfcIi piO3BB7Y5UAsOPLrXeujfyJVewYoMU7PnBEPmQSVcizFXGFa2MOhChK49uOZhFUY Z3TNztvipoMGB9hlofA324UEJi0/vvFrdsNhcvpivl/K86q9CtIb0RsErU4aWLML Kh/gbC7ijJopGh7dMBsACClgOQTVBtBWLD+o8p54Cb25n9++28Je48nnFx2Surd8 FuAh+PkUSvXtbW/ph/DXBc09jQ/uQ8Ip -----END CERTIFICATE-----Generated at Thu Jul 3 08:05:22 2025 by rpki-client