$ rpki-client -vvf rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/MOI2HN2l66cF86ay--vl232vEPE.mft File: MOI2HN2l66cF86ay--vl232vEPE.mft (raw, json) Hash identifier: DAuXtY9CutpJ5YzDM7vx4iQNTeXGW9vpBNySc2ykvpw= Subject key identifier: CD:9A:FE:B7:97:86:C7:6E:1E:E3:2A:8F:29:BE:04:25:13:AC:A3:F0 Authority key identifier: 30:E2:36:1C:DD:A5:EB:A7:05:F3:A6:B2:FB:EB:E5:DB:7D:AF:10:F1 Certificate issuer: /CN=A91386E8/serialNumber=30E2361CDDA5EBA705F3A6B2FBEBE5DB7DAF10F1 Certificate serial: 0629 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOI2HN2l66cF86ay--vl232vEPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/MOI2HN2l66cF86ay--vl232vEPE.mft Manifest number: 061F Signing time: Wed 02 Jul 2025 23:08:13 +0000 Manifest this update: Wed 02 Jul 2025 23:08:12 +0000 Manifest next update: Wed 09 Jul 2025 23:08:12 +0000 Files and hashes: 1: MOI2HN2l66cF86ay--vl232vEPE.crl (hash: YNwkPdKIKqHuXJoPiTPktQ7KQkkiAH0h3s6B38+rj4M=) 2: 65C6DD42E15211EC8EEE9668C4F9AE02.roa (hash: BLYldDR5zxqTMcX8NQEJYFIKVTzk5VrQGbTFGjfROjo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/MOI2HN2l66cF86ay--vl232vEPE.crl rsync://rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/MOI2HN2l66cF86ay--vl232vEPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOI2HN2l66cF86ay--vl232vEPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:08:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1577 (0x629) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91386E8, serialNumber=30E2361CDDA5EBA705F3A6B2FBEBE5DB7DAF10F1 Validity Not Before: Jul 2 23:08:12 2025 GMT Not After : Jul 9 23:08:12 2025 GMT Subject: CN=6865bbdc-9670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b6:46:eb:83:ac:c1:8d:08:96:29:56:65:ee: 1e:5e:a7:f5:a9:07:51:9f:e4:55:0d:16:52:eb:fc: 97:d9:fb:79:00:7f:23:19:5a:3c:d4:2e:bf:3c:77: dc:fc:61:b1:c8:08:f5:cf:2d:2d:41:0b:e4:b7:81: 6a:0e:34:5b:41:fd:57:c7:48:1f:47:53:db:8a:f0: c3:d5:68:76:ef:98:15:9e:ca:45:26:c3:8f:1a:b3: 38:a9:26:50:8f:fe:29:5a:01:f8:3c:e0:42:67:51: 97:30:cf:42:e5:45:4d:7c:9c:55:f4:96:58:8b:6f: 28:b8:0e:47:64:41:88:4b:b7:e7:99:e3:e8:4b:ff: 02:90:a2:cb:94:25:8b:d6:79:4d:cd:e6:35:2d:43: 64:d5:24:44:1e:c8:66:cf:87:21:3c:f0:1d:b2:5c: 89:57:17:5f:fa:4e:a4:d6:a8:82:4d:dc:92:b8:b9: 82:39:32:c8:79:93:7f:12:28:3a:a8:3c:c8:dd:00: 80:82:8e:eb:e1:45:54:9a:34:88:55:0f:47:ee:ac: 7f:d9:74:36:36:c4:5e:1d:73:4e:26:55:53:16:00: e1:12:a9:98:31:a6:40:35:f9:59:ac:ca:45:c6:0a: b7:e0:a2:35:a4:11:97:7b:5b:96:1b:bf:a1:01:3c: 08:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:9A:FE:B7:97:86:C7:6E:1E:E3:2A:8F:29:BE:04:25:13:AC:A3:F0 X509v3 Authority Key Identifier: keyid:30:E2:36:1C:DD:A5:EB:A7:05:F3:A6:B2:FB:EB:E5:DB:7D:AF:10:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/MOI2HN2l66cF86ay--vl232vEPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOI2HN2l66cF86ay--vl232vEPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/MOI2HN2l66cF86ay--vl232vEPE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:69:2e:c5:68:f5:17:3d:c1:b7:cc:cc:7b:a2:f6:d3:29:45: c7:46:eb:89:80:1e:13:f6:02:b0:a1:9e:c5:ed:3e:36:b5:57: 95:cf:05:21:e5:f5:7e:3b:47:45:89:e1:ef:b1:de:7f:35:68: 55:d1:18:86:dc:a1:f9:6c:7e:8c:a8:5b:31:e7:d2:bd:ec:73: cc:6d:0e:fa:e4:63:48:c1:f5:b8:1c:ac:8b:a4:19:37:ce:b9: 9b:5a:f8:d2:d2:d3:c5:b2:8d:2e:d4:b1:ce:43:7e:d7:1c:bb: 39:5b:40:a8:37:16:3a:60:77:ec:05:e4:93:2a:4f:eb:cb:74: 88:95:37:d4:8a:5d:53:30:24:7e:86:3f:7f:de:d0:16:53:b0: b9:c6:0e:a8:71:2e:6f:be:63:7f:18:48:4b:cd:86:a1:77:b1: 5d:09:56:c6:92:d3:07:dd:cb:3e:86:04:da:6a:a1:56:e7:b9: 42:07:85:8e:3d:34:0b:ad:7d:a8:c3:32:bd:83:a7:c7:7e:e0: 8a:7c:1b:27:ae:53:fb:2c:67:f2:35:aa:4b:f7:8f:84:8a:de: 24:f2:1e:b6:ab:cc:15:0f:58:b9:ea:6a:db:6e:c3:f2:9f:68: ff:af:41:60:ec:f3:c5:1c:01:67:04:62:c9:9d:56:a7:66:18: 68:de:32:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg2RTgxMTAvBgNVBAUTKDMwRTIzNjFDRERBNUVCQTcwNUYzQTZCMkZCRUJFNURC N0RBRjEwRjEwHhcNMjUwNzAyMjMwODEyWhcNMjUwNzA5MjMwODEyWjAYMRYwFAYD VQQDEw02ODY1YmJkYy05NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7ZG64OswY0IlilWZe4eXqf1qQdRn+RVDRZS6/yX2ft5AH8jGVo81C6/PHfc /GGxyAj1zy0tQQvkt4FqDjRbQf1Xx0gfR1PbivDD1Wh275gVnspFJsOPGrM4qSZQ j/4pWgH4POBCZ1GXMM9C5UVNfJxV9JZYi28ouA5HZEGIS7fnmePoS/8CkKLLlCWL 1nlNzeY1LUNk1SREHshmz4chPPAdslyJVxdf+k6k1qiCTdySuLmCOTLIeZN/Eig6 qDzI3QCAgo7r4UVUmjSIVQ9H7qx/2XQ2NsReHXNOJlVTFgDhEqmYMaZANflZrMpF xgq34KI1pBGXe1uWG7+hATwIsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM2a/reX hsduHuMqjym+BCUTrKPwMB8GA1UdIwQYMBaAFDDiNhzdpeunBfOmsvvr5dt9rxDx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODZFOC80ODg5NTk0RUE4 MDAxMUVCOTA2NTBBMTVDNEY5QUUwMi9NT0kySE4ybDY2Y0Y4NmF5LS12bDIzMnZF UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01PSTJITjJsNjZjRjg2YXktLXZsMjMydkVQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODZFOC80ODg5NTk0RUE4MDAxMUVCOTA2NTBBMTVDNEY5QUUwMi9NT0kySE4ybDY2 Y0Y4NmF5LS12bDIzMnZFUEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7aS7FaPUXPcG3zMx7ovbTKUXHRuuJgB4T9gKwoZ7F7T42tVeVzwUh 5fV+O0dFieHvsd5/NWhV0RiG3KH5bH6MqFsx59K97HPMbQ765GNIwfW4HKyLpBk3 zrmbWvjS0tPFso0u1LHOQ37XHLs5W0CoNxY6YHfsBeSTKk/ry3SIlTfUil1TMCR+ hj9/3tAWU7C5xg6ocS5vvmN/GEhLzYahd7FdCVbGktMH3cs+hgTaaqFW57lCB4WO PTQLrX2owzK9g6fHfuCKfBsnrlP7LGfyNapL94+Eit4k8h62q8wVD1i56mrbbsPy n2j/r0Fg7PPFHAFnBGLJnVanZhho3jIf -----END CERTIFICATE-----Generated at Thu Jul 3 17:40:24 2025 by rpki-client