$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft File: OYVAYLL1jUyRnGTapLfrHwzfaDA.mft (raw, json) Hash identifier: IcCZON2iUKMQOc5I4nWrR0p2v4qAJJK/PpP3DGghgyk= Subject key identifier: 0C:71:36:D7:9E:7D:20:A9:0D:DB:B3:18:C7:04:46:1D:B6:51:79:F5 Authority key identifier: 39:85:40:60:B2:F5:8D:4C:91:9C:64:DA:A4:B7:EB:1F:0C:DF:68:30 Certificate issuer: /CN=A91A1A51/serialNumber=39854060B2F58D4C919C64DAA4B7EB1F0CDF6830 Certificate serial: 0358 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYVAYLL1jUyRnGTapLfrHwzfaDA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft Manifest number: 0358 Signing time: Sun 29 Jun 2025 00:30:41 +0000 Manifest this update: Sun 29 Jun 2025 00:30:41 +0000 Manifest next update: Sun 06 Jul 2025 00:30:41 +0000 Files and hashes: 1: OYVAYLL1jUyRnGTapLfrHwzfaDA.crl (hash: eOpIlngeZheBHi7zloKRPSZQNmVdFSxGsUlMnYLdDns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.crl rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYVAYLL1jUyRnGTapLfrHwzfaDA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 00:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 856 (0x358) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1A51, serialNumber=39854060B2F58D4C919C64DAA4B7EB1F0CDF6830 Validity Not Before: Jun 29 00:30:41 2025 GMT Not After : Jul 6 00:30:41 2025 GMT Subject: CN=68608931-49d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:00:02:3c:88:ac:19:fc:01:59:54:fb:e2:1b: 77:7e:27:4d:25:e0:31:11:c2:8f:4b:25:be:ba:95: c8:98:82:c2:ca:ef:83:a4:44:78:84:08:8a:74:a8: 34:09:e1:de:06:e5:8f:30:8b:e6:cd:fb:7a:90:2f: a8:68:15:c6:2f:98:93:c3:8b:9f:b9:d8:5b:b8:0a: 7d:8c:52:41:c4:51:22:19:11:dc:2d:8a:f3:7d:97: 37:da:3f:19:ff:e5:f3:d8:67:01:6e:dd:11:ac:c7: ed:de:43:1c:53:21:40:be:1a:db:68:1c:37:81:43: 62:fb:ef:85:03:64:ff:b8:5a:3b:31:50:74:59:76: ea:1f:b5:d6:50:0e:fc:d5:be:fd:e2:26:ef:04:0a: dc:cd:b8:b4:aa:43:f5:df:75:e1:03:f1:20:35:ae: 60:3c:b6:9d:85:30:a7:3d:a3:a2:76:23:35:32:ff: 8b:c2:bd:5f:33:55:b5:a1:5b:37:60:ae:50:19:85: 46:b0:bd:37:5d:b9:01:c2:cd:26:ec:3c:71:71:e7: 58:23:07:e3:88:f1:2b:44:6f:ee:c3:df:ce:8e:6b: f9:56:fc:de:4a:a1:81:95:fe:f9:95:74:ea:b6:e5: fd:9f:91:d7:85:c1:fc:8f:63:e0:2f:8d:9e:7f:7f: 06:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:71:36:D7:9E:7D:20:A9:0D:DB:B3:18:C7:04:46:1D:B6:51:79:F5 X509v3 Authority Key Identifier: keyid:39:85:40:60:B2:F5:8D:4C:91:9C:64:DA:A4:B7:EB:1F:0C:DF:68:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYVAYLL1jUyRnGTapLfrHwzfaDA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:a2:50:8d:6c:92:7e:83:39:72:ea:df:d9:96:a5:bb:51:19: ff:9d:ab:ac:2d:50:77:a0:0d:bb:8e:9b:1f:de:7a:39:98:1f: e1:21:28:7a:3e:3e:4e:ab:f7:38:36:ce:60:57:29:3f:5e:80: 8f:23:e7:82:14:48:05:cb:ab:b0:5a:06:35:60:2e:2f:5f:25: 6f:3f:c5:43:8a:66:08:10:ab:5f:70:89:f8:de:7d:ab:a1:be: 9a:a9:44:02:72:71:45:db:c9:df:67:26:e8:58:9c:4c:27:8a: b1:2a:51:12:c9:89:a0:e7:91:f1:3d:e7:3a:33:fb:45:36:2f: 5c:77:60:b6:ea:d4:d6:a7:6a:e7:2b:0f:2f:d1:1d:1c:e0:c5: 4e:46:9d:0c:9b:0e:bf:d9:6d:32:6a:80:e3:e3:bc:5c:55:6c: 32:de:ad:ae:c4:ae:24:1a:51:25:68:01:4b:2f:e8:2b:9e:ed: fb:7b:2b:e2:5d:00:04:cb:fa:08:71:1a:97:6e:b7:bc:bd:4c: 96:4d:b9:5c:26:68:76:ee:a1:e4:7d:9b:39:c9:a0:54:67:01: f5:59:01:89:7f:b6:8c:c1:fd:ba:63:ad:8c:e5:2c:c8:aa:11: 67:23:a3:42:f7:29:e4:98:8b:09:42:d2:fd:b6:51:97:e3:d0: 79:5b:e0:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFBNTExMTAvBgNVBAUTKDM5ODU0MDYwQjJGNThENEM5MTlDNjREQUE0QjdFQjFG MENERjY4MzAwHhcNMjUwNjI5MDAzMDQxWhcNMjUwNzA2MDAzMDQxWjAYMRYwFAYD VQQDEw02ODYwODkzMS00OWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwACPIisGfwBWVT74ht3fidNJeAxEcKPSyW+upXImILCyu+DpER4hAiKdKg0 CeHeBuWPMIvmzft6kC+oaBXGL5iTw4ufudhbuAp9jFJBxFEiGRHcLYrzfZc32j8Z /+Xz2GcBbt0RrMft3kMcUyFAvhrbaBw3gUNi+++FA2T/uFo7MVB0WXbqH7XWUA78 1b794ibvBArczbi0qkP133XhA/EgNa5gPLadhTCnPaOidiM1Mv+Lwr1fM1W1oVs3 YK5QGYVGsL03XbkBws0m7DxxcedYIwfjiPErRG/uw9/Ojmv5VvzeSqGBlf75lXTq tuX9n5HXhcH8j2PgL42ef38GCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAxxNtee fSCpDduzGMcERh22UXn1MB8GA1UdIwQYMBaAFDmFQGCy9Y1MkZxk2qS36x8M32gw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUE1MS9BRjY5MEY2MEI5 MjAxMUVDOTkxNTY3NEZDNEY5QUUwMi9PWVZBWUxMMWpVeVJuR1RhcExmckh3emZh REEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09ZVkFZTEwxalV5Um5HVGFwTGZySHd6ZmFEQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUE1MS9BRjY5MEY2MEI5MjAxMUVDOTkxNTY3NEZDNEY5QUUwMi9PWVZBWUxMMWpV eVJuR1RhcExmckh3emZhREEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnolCNbJJ+gzly6t/ZlqW7URn/nausLVB3oA27jpsf3no5mB/hISh6 Pj5Oq/c4Ns5gVyk/XoCPI+eCFEgFy6uwWgY1YC4vXyVvP8VDimYIEKtfcIn43n2r ob6aqUQCcnFF28nfZyboWJxMJ4qxKlESyYmg55HxPec6M/tFNi9cd2C26tTWp2rn Kw8v0R0c4MVORp0Mmw6/2W0yaoDj47xcVWwy3q2uxK4kGlElaAFLL+grnu37eyvi XQAEy/oIcRqXbre8vUyWTblcJmh27qHkfZs5yaBUZwH1WQGJf7aMwf26Y62M5SzI qhFnI6NC9ynkmIsJQtL9tlGX49B5W+B3 -----END CERTIFICATE-----Generated at Tue Jul 1 00:34:30 2025 by rpki-client