$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft File: OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft (raw, json) Hash identifier: MHozAavtR/da4WSDSWav3Ddy6nqsOqqqieIdkvEH0dg= Subject key identifier: E2:49:78:2A:58:E4:34:C4:1F:8D:9A:FA:AB:7C:8C:70:63:35:F2:AF Authority key identifier: 3A:83:0D:43:F3:59:44:FF:B2:86:01:D3:33:30:20:AC:3C:31:92:41 Certificate issuer: /CN=A919F0DA/serialNumber=3A830D43F35944FFB28601D3333020AC3C319241 Certificate serial: 23F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft Manifest number: 601B Signing time: Wed 02 Jul 2025 14:15:20 +0000 Manifest this update: Wed 02 Jul 2025 14:15:20 +0000 Manifest next update: Wed 09 Jul 2025 14:15:20 +0000 Files and hashes: 1: OoMNQ_NZRP-yhgHTMzAgrDwxkkE.crl (hash: 3rN99RtXCsU86XaDS6sdOKrdnOW1EcyuCD//6r3z+O0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.crl rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:15:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9209 (0x23f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F0DA, serialNumber=3A830D43F35944FFB28601D3333020AC3C319241 Validity Not Before: Jul 2 14:15:20 2025 GMT Not After : Jul 9 14:15:20 2025 GMT Subject: CN=68653ef8-0455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:6f:13:a0:87:d2:c7:98:51:ad:3d:1c:40:63: db:1b:56:24:3b:d3:00:d7:90:3e:be:89:8a:4e:b5: 4b:13:c8:ef:1b:a0:e3:46:eb:af:10:9c:dd:32:97: c5:a9:a5:22:35:70:e7:e2:14:e9:64:c1:e0:5a:c6: fb:c1:aa:23:21:1e:9d:0a:57:b0:90:87:0a:0c:e3: 92:bd:c5:5a:f2:ab:ae:22:9d:79:1f:e5:79:7c:e3: d5:79:19:cb:a6:50:fd:d2:19:cc:6c:21:a5:c4:7c: de:f0:dd:a0:f9:e9:d4:01:ad:98:04:60:40:7a:82: da:48:b3:a3:b6:7b:fc:1a:c9:fe:0d:6d:20:bc:c2: 9b:ef:b5:a1:97:c7:6c:8e:45:53:20:c1:fb:d0:8a: 15:e4:88:2f:4d:7c:37:b8:ec:f0:bd:32:54:ed:45: 8a:ab:e2:f0:2b:06:ab:f0:99:82:07:15:51:e4:c2: f6:a6:c8:ee:82:dd:c9:35:c5:bb:44:9c:f2:b8:36: 5f:3e:7b:33:81:9a:71:be:63:91:97:27:06:ad:c1: c9:4b:cf:11:ac:c9:3c:21:5d:64:15:0c:1f:5a:9b: 24:4a:80:21:b1:9c:fd:71:5c:df:73:ee:b6:ce:7a: 18:0a:8e:cd:bf:67:a3:da:fd:32:09:78:a7:6e:95: 53:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:49:78:2A:58:E4:34:C4:1F:8D:9A:FA:AB:7C:8C:70:63:35:F2:AF X509v3 Authority Key Identifier: keyid:3A:83:0D:43:F3:59:44:FF:B2:86:01:D3:33:30:20:AC:3C:31:92:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:d2:e6:5d:df:81:95:81:69:7d:66:e1:30:c4:39:0d:c7:fe: da:ba:48:6b:a0:82:d9:5e:a1:3b:bd:63:db:e6:6e:4a:e8:f0: dc:6c:31:ef:0e:d0:41:fe:cf:5f:e5:45:17:ab:d8:13:90:7c: 9b:20:b8:f0:ce:70:0d:ca:52:40:76:bb:ac:83:03:60:0c:bd: b7:40:ff:4c:cc:73:88:2b:eb:fa:25:aa:4e:18:17:14:2c:f0: dc:60:89:81:51:dd:22:56:da:47:4c:e8:43:c8:04:98:d3:3d: 16:2e:6d:ad:fd:80:a7:f8:b7:86:cc:8a:bb:56:89:b2:b5:a0: ec:d7:77:ea:99:f7:39:0c:81:0e:73:06:71:7d:5f:1b:ca:dc: 2a:16:a6:4c:c8:f8:71:69:1c:b7:c3:f9:4e:07:9b:f8:e8:58: 8b:10:8b:a4:6d:56:92:28:62:14:1e:44:97:0a:ec:9f:28:98: 20:a9:6f:6c:30:67:34:94:38:92:ce:18:4e:0a:5c:b0:b5:89: 65:52:da:7b:0d:78:5d:1d:74:b7:f8:a8:2d:ea:02:bd:23:bb: e3:62:c0:a9:8a:2f:e8:0f:a3:f1:2e:30:82:b1:bb:f2:16:ff: 12:b8:9e:45:d8:02:ea:da:77:96:e2:e3:32:5c:de:ca:8b:65: 6d:37:6b:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI/kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYwREExMTAvBgNVBAUTKDNBODMwRDQzRjM1OTQ0RkZCMjg2MDFEMzMzMzAyMEFD M0MzMTkyNDEwHhcNMjUwNzAyMTQxNTIwWhcNMjUwNzA5MTQxNTIwWjAYMRYwFAYD VQQDEw02ODY1M2VmOC0wNDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA328ToIfSx5hRrT0cQGPbG1YkO9MA15A+vomKTrVLE8jvG6DjRuuvEJzdMpfF qaUiNXDn4hTpZMHgWsb7waojIR6dClewkIcKDOOSvcVa8quuIp15H+V5fOPVeRnL plD90hnMbCGlxHze8N2g+enUAa2YBGBAeoLaSLOjtnv8Gsn+DW0gvMKb77Whl8ds jkVTIMH70IoV5IgvTXw3uOzwvTJU7UWKq+LwKwar8JmCBxVR5ML2psjugt3JNcW7 RJzyuDZfPnszgZpxvmORlycGrcHJS88RrMk8IV1kFQwfWpskSoAhsZz9cVzfc+62 znoYCo7Nv2ej2v0yCXinbpVTgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOJJeCpY 5DTEH42a+qt8jHBjNfKvMB8GA1UdIwQYMBaAFDqDDUPzWUT/soYB0zMwIKw8MZJB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjBEQS9GQzYxRTAwODFE NjcxMUUyOEMxODI4QTQwOEIwMkNEMi9Pb01OUV9OWlJQLXloZ0hUTXpBZ3JEd3hr a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09vTU5RX05aUlAteWhnSFRNekFnckR3eGtrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjBEQS9GQzYxRTAwODFENjcxMUUyOEMxODI4QTQwOEIwMkNEMi9Pb01OUV9OWlJQ LXloZ0hUTXpBZ3JEd3hra0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB10uZd34GVgWl9ZuEwxDkNx/7aukhroILZXqE7vWPb5m5K6PDcbDHv DtBB/s9f5UUXq9gTkHybILjwznANylJAdrusgwNgDL23QP9MzHOIK+v6JapOGBcU LPDcYImBUd0iVtpHTOhDyASY0z0WLm2t/YCn+LeGzIq7VomytaDs13fqmfc5DIEO cwZxfV8bytwqFqZMyPhxaRy3w/lOB5v46FiLEIukbVaSKGIUHkSXCuyfKJggqW9s MGc0lDiSzhhOClywtYllUtp7DXhdHXS3+Kgt6gK9I7vjYsCpii/oD6PxLjCCsbvy Fv8SuJ5F2ALq2neW4uMyXN7Ki2VtN2sl -----END CERTIFICATE-----Generated at Thu Jul 3 22:58:29 2025 by rpki-client