$ rpki-client -vvf rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft File: 5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft (raw, json) Hash identifier: fI5yg02E3rdNE4BqQjqpDhkS/41WthJNEQPu+33avUw= Subject key identifier: CE:17:BA:9A:BE:9B:EB:B9:BF:0E:E1:8B:11:EF:B7:32:40:50:B5:63 Authority key identifier: E4:E1:01:EE:F4:43:15:0C:62:11:0A:CA:FA:88:15:54:C0:89:FC:53 Certificate issuer: /CN=A9131612/serialNumber=E4E101EEF443150C62110ACAFA881554C089FC53 Certificate serial: 0DCD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft Manifest number: 0DBB Signing time: Wed 02 Jul 2025 18:07:45 +0000 Manifest this update: Wed 02 Jul 2025 18:07:45 +0000 Manifest next update: Wed 09 Jul 2025 18:07:45 +0000 Files and hashes: 1: 5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl (hash: 2XvxTW6OkHW+WKR3KKL3/4wXMn8UuneN0J8eIjsoMfU=) 2: 26F281DEDDF811EAA553705EC4F9AE02.roa (hash: yfx8lsCL6G/ov0fWwE1WTE6uXL656onMX4rdjMifJrY=) 3: 279B0372DDF811EAA553705EC4F9AE02.roa (hash: TXNMP48c0k6G4JxEf3t+PnW7SOJPV7z8Od5Inbeh5Gs=) 4: 923C51A8BE8811E998F37222C4F9AE02.roa (hash: aRzYWRPVSTTgYa3Czpj2Qj/z5H39rDEjDg/TNXrra84=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:07:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3533 (0xdcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131612, serialNumber=E4E101EEF443150C62110ACAFA881554C089FC53 Validity Not Before: Jul 2 18:07:45 2025 GMT Not After : Jul 9 18:07:45 2025 GMT Subject: CN=68657571-cba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8f:9a:a2:a0:06:ea:b7:31:9d:1b:f3:26:15: 5f:dc:e7:54:89:6f:7a:dd:24:86:77:03:44:e9:b1: de:6e:b5:eb:4f:65:5e:8e:81:b3:0d:89:14:fb:2f: de:88:45:56:cf:ca:bc:73:3b:ab:c4:f6:0a:87:01: 10:1f:47:9a:6c:b6:03:f9:f0:28:a3:47:f8:6b:8b: ff:92:6c:2c:90:07:73:e7:26:1d:e8:67:7b:4f:f0: a5:75:ee:d3:aa:af:af:98:3d:65:18:ee:d1:85:bb: b1:c3:0b:17:e3:76:2a:5c:b5:53:78:5c:99:a9:c5: a7:ea:93:6a:84:84:fe:62:7c:71:80:aa:6f:90:f9: 65:5b:f7:7b:a1:9b:ee:c8:fc:f7:0f:e8:2d:17:7e: de:a7:73:ad:63:49:e2:a4:c7:4f:0f:dd:40:74:c1: 6b:25:ac:71:95:01:fb:ee:e3:f3:da:89:dd:25:b9: 28:69:da:07:d6:74:83:77:f3:36:ec:8c:c8:29:a9: a4:11:d2:cd:c6:d5:b0:fc:1f:0b:4d:ca:28:4a:63: b8:a4:db:b4:c8:11:35:a4:f2:45:bd:72:fc:5e:6c: 5e:9b:6c:62:e2:49:46:30:d1:04:22:d9:d5:5f:8f: 26:61:c0:2e:df:57:1d:79:12:83:c6:9c:e8:b4:a2: 6a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:17:BA:9A:BE:9B:EB:B9:BF:0E:E1:8B:11:EF:B7:32:40:50:B5:63 X509v3 Authority Key Identifier: keyid:E4:E1:01:EE:F4:43:15:0C:62:11:0A:CA:FA:88:15:54:C0:89:FC:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:07:68:5b:f2:89:59:3f:fb:15:46:e3:06:82:8b:ea:e9:4d: 1d:a2:1a:b6:23:1a:6c:a6:2f:32:1b:0e:7f:49:05:96:d1:ea: fc:ff:a9:50:fa:c2:1a:96:09:2b:b5:34:e3:a2:e5:bf:d0:93: 53:05:b9:c2:1e:e5:9b:96:1a:c9:c6:e1:68:fc:d1:46:50:29: 47:0f:07:53:4b:0c:92:18:70:e5:68:b8:22:35:82:6a:5b:bd: 64:fc:cc:2a:2a:91:76:c7:84:e2:9c:62:92:23:f7:8c:c8:2f: a3:78:1b:8c:5a:d6:ca:78:b4:1c:b2:ec:fb:58:45:e6:65:e3: 82:33:37:20:de:82:d0:b1:0a:53:87:d0:dc:bc:2b:97:18:50: 93:67:e4:3e:d3:d7:ea:3c:94:06:b7:e8:3b:86:aa:ca:19:92: 18:48:14:cb:a5:5f:6f:89:56:be:fa:11:1c:27:34:1f:24:53: 1e:a6:21:c2:4a:73:3c:16:c0:f5:d8:6e:30:76:0e:06:08:f6: d5:b2:ed:46:3f:d7:48:4c:b1:a6:b5:f3:7d:7a:d0:6b:4f:f6: 7b:3e:d4:7c:76:fd:ab:ce:27:8a:e7:fe:72:b2:82:40:f6:9d: 4d:60:cf:ca:a5:61:2a:28:fb:95:4f:9c:58:41:25:13:81:f0: 22:18:f9:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE2MTIxMTAvBgNVBAUTKEU0RTEwMUVFRjQ0MzE1MEM2MjExMEFDQUZBODgxNTU0 QzA4OUZDNTMwHhcNMjUwNzAyMTgwNzQ1WhcNMjUwNzA5MTgwNzQ1WjAYMRYwFAYD VQQDEw02ODY1NzU3MS1jYmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAto+aoqAG6rcxnRvzJhVf3OdUiW963SSGdwNE6bHebrXrT2VejoGzDYkU+y/e iEVWz8q8czurxPYKhwEQH0eabLYD+fAoo0f4a4v/kmwskAdz5yYd6Gd7T/Clde7T qq+vmD1lGO7RhbuxwwsX43YqXLVTeFyZqcWn6pNqhIT+YnxxgKpvkPllW/d7oZvu yPz3D+gtF37ep3OtY0nipMdPD91AdMFrJaxxlQH77uPz2ondJbkoadoH1nSDd/M2 7IzIKamkEdLNxtWw/B8LTcooSmO4pNu0yBE1pPJFvXL8Xmxem2xi4klGMNEEItnV X48mYcAu31cdeRKDxpzotKJqgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM4Xupq+ m+u5vw7hixHvtzJAULVjMB8GA1UdIwQYMBaAFOThAe70QxUMYhEKyvqIFVTAifxT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTYxMi9FM0I4NEM4Q0JF ODYxMUU5OUE2QzAxMUZDNEY5QUUwMi81T0VCN3ZSREZReGlFUXJLLW9nVlZNQ0pf Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVPRUI3dlJERlF4aUVRckstb2dWVk1DSl9GTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTYxMi9FM0I4NEM4Q0JFODYxMUU5OUE2QzAxMUZDNEY5QUUwMi81T0VCN3ZSREZR eGlFUXJLLW9nVlZNQ0pfRk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOB2hb8olZP/sVRuMGgovq6U0dohq2Ixpspi8yGw5/SQWW0er8/6lQ +sIalgkrtTTjouW/0JNTBbnCHuWblhrJxuFo/NFGUClHDwdTSwySGHDlaLgiNYJq W71k/MwqKpF2x4TinGKSI/eMyC+jeBuMWtbKeLQcsuz7WEXmZeOCMzcg3oLQsQpT h9DcvCuXGFCTZ+Q+09fqPJQGt+g7hqrKGZIYSBTLpV9viVa++hEcJzQfJFMepiHC SnM8FsD12G4wdg4GCPbVsu1GP9dITLGmtfN9etBrT/Z7PtR8dv2rzieK5/5ysoJA 9p1NYM/KpWEqKPuVT5xYQSUTgfAiGPlT -----END CERTIFICATE-----Generated at Thu Jul 3 17:30:46 2025 by rpki-client