$ rpki-client -vvf rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft File: OIX50v0IYCg7VTgfHE9KWjoe7z8.mft (raw, json) Hash identifier: zRFMf1qUAddVCh9yHrUtUEN/fWes8vIbFVMLnEwj67A= Subject key identifier: 01:B9:82:C4:12:32:B2:D6:00:43:46:8C:C8:A3:90:3C:3A:6F:CB:96 Authority key identifier: 38:85:F9:D2:FD:08:60:28:3B:55:38:1F:1C:4F:4A:5A:3A:1E:EF:3F Certificate issuer: /CN=A91847C2/serialNumber=3885F9D2FD0860283B55381F1C4F4A5A3A1EEF3F Certificate serial: DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIX50v0IYCg7VTgfHE9KWjoe7z8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft Manifest number: DB Signing time: Tue 01 Jul 2025 06:05:52 +0000 Manifest this update: Tue 01 Jul 2025 06:05:51 +0000 Manifest next update: Tue 08 Jul 2025 06:05:51 +0000 Files and hashes: 1: OIX50v0IYCg7VTgfHE9KWjoe7z8.crl (hash: wLDgVqj/2cXYvNfWKPrySAtuaAaGd5c8CAObQjfwO8A=) 2: 744D8A1005EE11EF851FA42FC4F9AE02.roa (hash: g7/I1107TKCwjJnWd7arEQMGj8EBr7MRJOF1ZUaFXNI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.crl rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIX50v0IYCg7VTgfHE9KWjoe7z8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 06:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847C2, serialNumber=3885F9D2FD0860283B55381F1C4F4A5A3A1EEF3F Validity Not Before: Jul 1 06:05:51 2025 GMT Not After : Jul 8 06:05:51 2025 GMT Subject: CN=68637ac0-4d17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:14:90:99:b9:9d:d0:03:41:1c:9d:ec:5e:b2: 3e:cc:ad:76:5d:dd:9b:25:24:16:ae:52:de:8d:4f: e8:23:5f:8a:ea:87:00:78:2c:fd:ce:37:92:08:e1: d2:7c:32:a3:4d:1d:4f:e0:8b:c5:fb:75:79:30:3f: 75:cc:a2:76:71:9a:66:b6:09:78:22:ff:a2:3f:e4: a0:9d:af:db:00:d6:e6:a5:96:38:ff:30:e1:2b:67: ba:b2:39:36:1c:69:c2:4c:55:ba:c3:a3:dc:2c:29: c6:27:28:83:16:90:be:5e:20:31:7a:7a:1f:f5:5d: 3a:30:07:46:63:81:10:f6:d9:fd:84:ee:d9:a2:f2: 65:ec:e4:d7:04:40:4d:02:4e:4d:5e:eb:2c:14:e6: 90:f9:f1:ac:8e:cd:25:6c:e5:8c:ab:b7:2d:4a:a3: 96:fe:1f:50:b5:f9:a3:21:e7:5b:f1:5d:57:5f:54: 25:8f:00:2e:75:1a:eb:dc:5c:64:c6:f6:b4:8a:5e: c3:62:4b:70:3c:d1:a0:fd:ac:db:e1:3c:eb:96:e8: 9e:13:26:ec:38:7b:12:17:55:44:8f:4b:95:e9:6e: 16:c3:d5:ac:67:e4:86:26:11:fa:ef:b1:45:f2:69: e5:68:2d:b4:d6:08:a1:79:c7:65:3c:e2:a2:9f:9a: ba:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B9:82:C4:12:32:B2:D6:00:43:46:8C:C8:A3:90:3C:3A:6F:CB:96 X509v3 Authority Key Identifier: keyid:38:85:F9:D2:FD:08:60:28:3B:55:38:1F:1C:4F:4A:5A:3A:1E:EF:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIX50v0IYCg7VTgfHE9KWjoe7z8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:79:26:7e:48:fe:ec:2e:44:bd:6e:02:06:bc:0f:f7:26:b3: 81:bf:fd:fb:41:a9:97:de:15:da:56:ff:dd:d2:64:f0:37:9a: e3:ba:11:5a:d8:f6:cb:f3:45:1a:72:88:9e:4d:f6:9f:79:d2: 12:06:ca:28:f1:d3:87:c8:5c:33:20:e8:f1:40:31:78:a1:cd: cb:d6:13:6f:2e:6b:87:6c:1c:a3:33:92:c8:58:62:b8:34:d8: f6:58:2e:be:b2:68:54:cb:47:c3:0e:b5:81:10:9c:bd:9f:53: d0:a6:a7:8b:a6:6e:b9:c6:11:7d:70:dc:f1:fd:70:9b:54:c4: 30:70:d7:2c:5f:99:b7:7c:cf:ed:c0:e9:76:95:ba:e8:05:31: 5a:a5:03:0d:01:b3:77:d2:ed:69:db:0d:40:ae:45:bf:99:bc: 45:14:50:2f:9e:e9:3e:79:c1:56:9f:df:12:7b:93:3b:0e:80: 4f:4c:58:f2:cb:af:93:97:56:76:34:e5:f9:d4:b1:e1:5e:14: d5:84:20:11:31:fb:33:dd:0c:9f:8a:1c:81:62:6c:dc:b6:d3: 50:f8:bf:43:2c:19:3b:b0:f5:e2:fd:59:eb:18:50:d6:7f:e4: 6f:8d:96:09:7b:8f:d5:1a:3f:ec:b3:c8:3a:10:15:37:c1:6e: 41:63:19:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ3QzIxMTAvBgNVBAUTKDM4ODVGOUQyRkQwODYwMjgzQjU1MzgxRjFDNEY0QTVB M0ExRUVGM0YwHhcNMjUwNzAxMDYwNTUxWhcNMjUwNzA4MDYwNTUxWjAYMRYwFAYD VQQDEw02ODYzN2FjMC00ZDE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqxSQmbmd0ANBHJ3sXrI+zK12Xd2bJSQWrlLejU/oI1+K6ocAeCz9zjeSCOHS fDKjTR1P4IvF+3V5MD91zKJ2cZpmtgl4Iv+iP+Sgna/bANbmpZY4/zDhK2e6sjk2 HGnCTFW6w6PcLCnGJyiDFpC+XiAxenof9V06MAdGY4EQ9tn9hO7ZovJl7OTXBEBN Ak5NXussFOaQ+fGsjs0lbOWMq7ctSqOW/h9QtfmjIedb8V1XX1QljwAudRrr3Fxk xva0il7DYktwPNGg/azb4TzrluieEybsOHsSF1VEj0uV6W4Ww9WsZ+SGJhH677FF 8mnlaC201gihecdlPOKin5q67wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAG5gsQS MrLWAENGjMijkDw6b8uWMB8GA1UdIwQYMBaAFDiF+dL9CGAoO1U4HxxPSlo6Hu8/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdDMi9COTJCRkFENDA1 RUIxMUVGOTU2QkQ2NDNDNEY5QUUwMi9PSVg1MHYwSVlDZzdWVGdmSEU5S1dqb2U3 ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09JWDUwdjBJWUNnN1ZUZ2ZIRTlLV2pvZTd6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDdDMi9COTJCRkFENDA1RUIxMUVGOTU2QkQ2NDNDNEY5QUUwMi9PSVg1MHYwSVlD ZzdWVGdmSEU5S1dqb2U3ejgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTeSZ+SP7sLkS9bgIGvA/3JrOBv/37QamX3hXaVv/d0mTwN5rjuhFa 2PbL80UacoieTfafedISBsoo8dOHyFwzIOjxQDF4oc3L1hNvLmuHbByjM5LIWGK4 NNj2WC6+smhUy0fDDrWBEJy9n1PQpqeLpm65xhF9cNzx/XCbVMQwcNcsX5m3fM/t wOl2lbroBTFapQMNAbN30u1p2w1ArkW/mbxFFFAvnuk+ecFWn98Se5M7DoBPTFjy y6+Tl1Z2NOX51LHhXhTVhCARMfsz3QyfihyBYmzcttNQ+L9DLBk7sPXi/VnrGFDW f+RvjZYJe4/VGj/ss8g6EBU3wW5BYxk/ -----END CERTIFICATE-----Generated at Tue Jul 1 10:03:29 2025 by rpki-client