$ rpki-client -vvf rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft File: O2jmA9GPVutmXvcukmQF8MEL4-c.mft (raw, json) Hash identifier: yOiWt+dnBKQQq4aSygmhtBk4p2B3E44/daEpRjbI27A= Subject key identifier: 06:6C:56:4B:10:90:33:60:98:30:1C:12:AB:E4:06:DB:2A:19:83:3C Authority key identifier: 3B:68:E6:03:D1:8F:56:EB:66:5E:F7:2E:92:64:05:F0:C1:0B:E3:E7 Certificate issuer: /CN=A912D1D1/serialNumber=3B68E603D18F56EB665EF72E926405F0C10BE3E7 Certificate serial: 088F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft Manifest number: 0889 Signing time: Mon 30 Jun 2025 20:49:09 +0000 Manifest this update: Mon 30 Jun 2025 20:49:08 +0000 Manifest next update: Mon 07 Jul 2025 20:49:08 +0000 Files and hashes: 1: O2jmA9GPVutmXvcukmQF8MEL4-c.crl (hash: K8EMwtA2plPtgLyhWDHZmKKbdftFErUodr3AJk3xwcA=) 2: 30CB037EC18E11EA8BF4FB68C4F9AE02.roa (hash: d1mOeGTfFGoxO3FpLGtyELB1KUYkFiEXG3WDXupnmMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.crl rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 20:37:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2191 (0x88f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D1D1, serialNumber=3B68E603D18F56EB665EF72E926405F0C10BE3E7 Validity Not Before: Jun 30 20:49:08 2025 GMT Not After : Jul 7 20:49:08 2025 GMT Subject: CN=6862f844-a870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2d:9b:20:3a:b2:b3:6c:b5:6b:73:18:65:d5: e5:9e:b3:8c:20:62:03:6d:55:86:f8:32:e0:4d:08: b7:cf:aa:64:1c:01:ac:29:64:17:00:c6:89:20:a1: 4d:09:12:4d:42:c8:03:96:71:0c:0f:84:ef:0a:68: a9:92:5a:41:25:40:47:e5:88:7d:ef:47:4d:b0:1b: 40:44:db:2d:2e:f7:72:9b:c3:41:03:5b:41:b0:67: 91:6a:78:af:cf:40:13:68:3b:45:04:5c:59:53:aa: 6e:db:6a:2e:60:4f:c0:a0:fe:bc:9f:9f:b3:c0:21: c0:9e:6b:da:81:b3:e1:30:f7:46:64:4c:f9:02:c1: 02:d8:4e:01:8c:25:c3:17:af:51:c7:a1:98:b4:06: 95:c8:9b:d2:aa:5e:f9:a6:b9:8e:6f:32:36:64:e2: 89:31:14:cd:54:1e:ef:c7:a9:63:a1:1a:d0:65:b4: 9a:a4:70:71:da:91:92:98:c9:84:f7:00:24:a9:9f: 85:29:11:aa:6a:20:ed:95:59:16:61:63:f5:2f:bc: 14:a0:e8:51:02:38:28:09:15:bb:f9:95:74:4c:b4: bc:9d:2d:19:45:58:78:4b:8b:f6:2e:8e:a6:49:dd: e9:c9:98:99:4c:ef:c6:03:22:1d:eb:67:e8:40:74: 90:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:6C:56:4B:10:90:33:60:98:30:1C:12:AB:E4:06:DB:2A:19:83:3C X509v3 Authority Key Identifier: keyid:3B:68:E6:03:D1:8F:56:EB:66:5E:F7:2E:92:64:05:F0:C1:0B:E3:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:66:92:09:4a:e4:9c:da:e0:75:d9:17:63:60:38:f5:9c:a7: e0:75:2d:fc:b5:08:a6:54:35:b8:5c:0b:91:80:8e:68:d8:e8: 75:67:7e:af:48:b1:cb:ab:49:b1:f3:b7:a7:da:9a:53:b8:b9: 03:de:88:9e:6f:38:58:3c:0b:d2:4a:f8:2b:15:f8:ff:cc:eb: 2d:36:4e:97:e4:66:02:04:af:5a:21:9d:91:68:58:37:e9:2c: 4a:14:25:78:b2:91:13:61:1a:d7:3b:bb:bc:78:4e:2c:8d:93: 6f:29:aa:23:ff:89:12:9a:c6:88:f9:d2:a4:c8:54:cb:44:e8: a1:50:95:f8:bd:21:eb:e3:f8:6f:27:38:a6:4a:43:31:f3:e4: 45:4f:e8:95:a2:db:d4:46:c0:55:30:e5:27:33:f9:ad:2a:02: 9d:b2:f9:e6:7d:7e:cc:9e:e4:39:53:e5:76:cb:10:65:c7:0c: 7c:12:4c:14:14:d8:56:da:5f:cb:e4:7c:ee:55:fa:0a:6d:98: 8c:91:c4:80:bf:9b:03:af:19:ed:0f:71:11:b3:6e:3a:8c:0b: 0a:d9:ff:6c:76:28:55:ac:dd:11:8c:d3:c9:56:4f:28:ce:cf: 89:24:41:22:e7:59:9b:a6:bf:45:fd:90:7e:cb:80:65:62:92: f1:15:f7:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQxRDExMTAvBgNVBAUTKDNCNjhFNjAzRDE4RjU2RUI2NjVFRjcyRTkyNjQwNUYw QzEwQkUzRTcwHhcNMjUwNjMwMjA0OTA4WhcNMjUwNzA3MjA0OTA4WjAYMRYwFAYD VQQDEw02ODYyZjg0NC1hODcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwy2bIDqys2y1a3MYZdXlnrOMIGIDbVWG+DLgTQi3z6pkHAGsKWQXAMaJIKFN CRJNQsgDlnEMD4TvCmipklpBJUBH5Yh970dNsBtARNstLvdym8NBA1tBsGeRaniv z0ATaDtFBFxZU6pu22ouYE/AoP68n5+zwCHAnmvagbPhMPdGZEz5AsEC2E4BjCXD F69Rx6GYtAaVyJvSql75prmObzI2ZOKJMRTNVB7vx6ljoRrQZbSapHBx2pGSmMmE 9wAkqZ+FKRGqaiDtlVkWYWP1L7wUoOhRAjgoCRW7+ZV0TLS8nS0ZRVh4S4v2Lo6m Sd3pyZiZTO/GAyId62foQHSQjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAZsVksQ kDNgmDAcEqvkBtsqGYM8MB8GA1UdIwQYMBaAFDto5gPRj1brZl73LpJkBfDBC+Pn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDFEMS9DMTYwMDZGQ0Mx OEMxMUVBOEYzNjQxNjZDNEY5QUUwMi9PMmptQTlHUFZ1dG1YdmN1a21RRjhNRUw0 LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL08yam1BOUdQVnV0bVh2Y3VrbVFGOE1FTDQtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDFEMS9DMTYwMDZGQ0MxOEMxMUVBOEYzNjQxNjZDNEY5QUUwMi9PMmptQTlHUFZ1 dG1YdmN1a21RRjhNRUw0LWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8ZpIJSuSc2uB12RdjYDj1nKfgdS38tQimVDW4XAuRgI5o2Oh1Z36v SLHLq0mx87en2ppTuLkD3oiebzhYPAvSSvgrFfj/zOstNk6X5GYCBK9aIZ2RaFg3 6SxKFCV4spETYRrXO7u8eE4sjZNvKaoj/4kSmsaI+dKkyFTLROihUJX4vSHr4/hv JzimSkMx8+RFT+iVotvURsBVMOUnM/mtKgKdsvnmfX7MnuQ5U+V2yxBlxwx8EkwU FNhW2l/L5HzuVfoKbZiMkcSAv5sDrxntD3ERs246jAsK2f9sdihVrN0RjNPJVk8o zs+JJEEi51mbpr9F/ZB+y4BlYpLxFfdf -----END CERTIFICATE-----Generated at Mon Jun 30 22:43:44 2025 by rpki-client