$ rpki-client -vvf rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft File: OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft (raw, json) Hash identifier: jEGfHTmMnzZ2113IEKF+7UATlstlhHKsn78hqgHhYBo= Subject key identifier: D7:EF:D6:F2:4C:0A:4E:CC:80:23:B1:2B:11:C6:FA:1E:B9:D0:29:B8 Authority key identifier: 39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38 Certificate issuer: /CN=A91613AB/serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838 Certificate serial: 01FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft Manifest number: 01EE Signing time: Sun 29 Jun 2025 01:49:35 +0000 Manifest this update: Sun 29 Jun 2025 01:49:34 +0000 Manifest next update: Sun 06 Jul 2025 01:49:34 +0000 Files and hashes: 1: OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl (hash: 5OBuQpj/5W1fhtnFCyj+87ZBf5Go0xv1L6zeIzt9cpk=) 2: 65AFE18C91DB11EFBC4C2A3EC4F9AE02.roa (hash: LqvEH1o9qv1Spv16C52zEqgMsWnx5LeCvM7wNncYwmQ=) 3: A50FD050DA7911EDB0D3866BC4F9AE02.roa (hash: sq3CtUxJWk/lwN1trxwIddBHXPOdGnUuNzRlPvsNflY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 01:49:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 506 (0x1fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91613AB, serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838 Validity Not Before: Jun 29 01:49:34 2025 GMT Not After : Jul 6 01:49:34 2025 GMT Subject: CN=68609bae-6b41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6f:d7:91:41:62:bf:5a:ef:b2:37:29:4c:fd: 67:df:6f:a6:87:48:d2:9c:b0:5a:e4:7b:03:28:b2: c8:03:55:6c:f8:40:01:b2:06:f3:da:41:27:1f:1f: 47:56:f1:25:36:c7:1c:92:48:99:74:00:04:1f:eb: 57:b3:f2:9e:36:73:de:97:1c:d1:0a:0b:43:ff:c8: f9:9a:5a:c7:de:aa:83:bb:8a:4f:ac:8c:f7:88:b1: a2:80:11:05:af:84:7e:e0:cd:c4:27:f3:d0:70:80: 2d:c6:8d:9c:06:c2:bf:c6:fb:d6:01:93:c1:2c:dd: 5c:5b:b1:28:79:75:28:fc:36:ba:10:00:6a:79:50: 31:60:51:41:5f:c5:08:d3:54:b9:47:ac:99:3f:3d: 30:16:ef:ef:e3:2f:88:71:b5:e3:94:db:8d:3a:e8: 4f:29:d0:7d:01:86:d8:5f:85:54:87:9c:02:ec:19: a1:d0:12:cf:40:b6:37:a7:a2:12:9f:f0:76:1d:5b: 01:01:ba:bc:90:35:71:05:7b:33:40:86:34:66:d7: 0a:5a:af:08:3a:ea:57:f0:72:71:65:1c:99:94:44: 92:64:ec:ce:a1:74:cb:d8:9f:15:8d:81:93:ee:0e: bc:ff:8b:0c:22:68:e1:55:4d:7e:56:fc:65:11:2c: 0a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:EF:D6:F2:4C:0A:4E:CC:80:23:B1:2B:11:C6:FA:1E:B9:D0:29:B8 X509v3 Authority Key Identifier: keyid:39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:57:b5:71:26:f7:03:eb:a8:32:21:92:7f:43:73:f1:ed:f6: c6:af:e9:63:3f:cb:dc:67:89:81:73:86:9a:3f:9b:42:5d:4b: 8c:23:45:ae:9b:14:0b:dd:e3:51:30:c5:7b:38:1b:48:e5:32: ba:3b:f3:88:4e:ab:eb:86:50:9c:7a:78:0c:10:67:89:5e:fc: ea:67:1e:31:8e:6b:4d:f3:d8:9d:61:18:f0:61:a2:1c:02:0a: 8a:68:2f:6a:29:d3:61:84:b5:11:45:c5:88:c3:93:0b:19:a5: b9:93:7c:f4:57:fa:4a:57:b6:ce:73:86:51:0e:db:20:9f:a4: a1:f5:b7:ea:5f:26:aa:1d:b5:db:72:68:a4:42:4f:dd:f7:2e: 47:b9:98:e9:55:f7:9a:bb:61:b1:2a:b4:45:d1:ee:9b:6a:5f: 28:0c:c1:0e:bc:35:cd:96:42:c9:cf:12:35:b4:7a:b4:81:a5: a2:de:fb:25:e7:84:b0:63:cb:53:44:bf:e9:1c:df:e9:43:f2: a3:ac:21:d8:bc:01:0c:57:b3:71:49:dc:01:e9:e5:70:ff:93: 15:08:eb:d8:06:8a:20:c2:d8:66:e2:38:39:75:10:2c:49:b5: 23:79:b1:fc:5e:1b:ea:f9:ca:7f:b1:08:6d:58:3e:e5:19:e3: ea:c6:dc:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEzQUIxMTAvBgNVBAUTKDM5MDFBRjRBOTNGRUZBQUVCODc5Q0M5RjU5OTRFNEU3 RjAxQUY4MzgwHhcNMjUwNjI5MDE0OTM0WhcNMjUwNzA2MDE0OTM0WjAYMRYwFAYD VQQDEw02ODYwOWJhZS02YjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsG/XkUFiv1rvsjcpTP1n32+mh0jSnLBa5HsDKLLIA1Vs+EABsgbz2kEnHx9H VvElNscckkiZdAAEH+tXs/KeNnPelxzRCgtD/8j5mlrH3qqDu4pPrIz3iLGigBEF r4R+4M3EJ/PQcIAtxo2cBsK/xvvWAZPBLN1cW7EoeXUo/Da6EABqeVAxYFFBX8UI 01S5R6yZPz0wFu/v4y+IcbXjlNuNOuhPKdB9AYbYX4VUh5wC7Bmh0BLPQLY3p6IS n/B2HVsBAbq8kDVxBXszQIY0ZtcKWq8IOupX8HJxZRyZlESSZOzOoXTL2J8VjYGT 7g68/4sMImjhVU1+VvxlESwKpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNfv1vJM Ck7MgCOxKxHG+h650Cm4MB8GA1UdIwQYMBaAFDkBr0qT/vquuHnMn1mU5OfwGvg4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTNBQi85Q0Y3RUNEQTZG OEIxMUVEOEZBRTNDMTFDNEY5QUUwMi9PUUd2U3BQLS1xNjRlY3lmV1pUazVfQWEt RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09RR3ZTcFAtLXE2NGVjeWZXWlRrNV9BYS1EZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTNBQi85Q0Y3RUNEQTZGOEIxMUVEOEZBRTNDMTFDNEY5QUUwMi9PUUd2U3BQLS1x NjRlY3lmV1pUazVfQWEtRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfV7VxJvcD66gyIZJ/Q3Px7fbGr+ljP8vcZ4mBc4aaP5tCXUuMI0Wu mxQL3eNRMMV7OBtI5TK6O/OITqvrhlCcengMEGeJXvzqZx4xjmtN89idYRjwYaIc AgqKaC9qKdNhhLURRcWIw5MLGaW5k3z0V/pKV7bOc4ZRDtsgn6Sh9bfqXyaqHbXb cmikQk/d9y5HuZjpVfeau2GxKrRF0e6bal8oDMEOvDXNlkLJzxI1tHq0gaWi3vsl 54SwY8tTRL/pHN/pQ/KjrCHYvAEMV7NxSdwB6eVw/5MVCOvYBoogwthm4jg5dRAs SbUjebH8Xhvq+cp/sQhtWD7lGePqxtyJ -----END CERTIFICATE-----Generated at Sun Jun 29 21:02:38 2025 by rpki-client