$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.mft File: O0eqDQMgkZXwVVxgreMpTy03oqE.mft (raw, json) Hash identifier: yXk2sfuwkkYiZd79sGR0QW3y3JyXayLSj0TtofkiXCI= Subject key identifier: EC:C4:2C:5A:80:DD:E8:F9:F7:D5:F1:29:C9:74:50:B7:C6:70:02:3D Authority key identifier: 3B:47:AA:0D:03:20:91:95:F0:55:5C:60:AD:E3:29:4F:2D:37:A2:A1 Certificate issuer: /CN=A91A3873/serialNumber=3B47AA0D03209195F0555C60ADE3294F2D37A2A1 Certificate serial: 02BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0eqDQMgkZXwVVxgreMpTy03oqE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.mft Manifest number: 02B9 Signing time: Thu 03 Jul 2025 01:51:08 +0000 Manifest this update: Thu 03 Jul 2025 01:51:07 +0000 Manifest next update: Thu 10 Jul 2025 01:51:07 +0000 Files and hashes: 1: O0eqDQMgkZXwVVxgreMpTy03oqE.crl (hash: Y5+F3ryN2ny2i3g59rS4jQihxfnncXs7uimKnsjZJzM=) 2: C78C216A070211EDB5178252C4F9AE02.roa (hash: SRhZlpn7+MBKLxOuK/LxQ3OpeiTq/ZO5FLcjac1mcNc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.crl rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0eqDQMgkZXwVVxgreMpTy03oqE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 703 (0x2bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3873, serialNumber=3B47AA0D03209195F0555C60ADE3294F2D37A2A1 Validity Not Before: Jul 3 01:51:07 2025 GMT Not After : Jul 10 01:51:07 2025 GMT Subject: CN=6865e20b-1873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:27:d3:15:3f:de:db:d0:79:83:66:6d:8c:17: cf:ad:ad:aa:66:2b:f7:e7:7e:13:dd:3f:27:ee:0d: 2d:55:af:82:b0:a6:34:71:b5:ce:74:6a:01:c7:ef: 7e:c3:cc:ba:73:8d:64:b2:e6:7d:84:b1:d4:fc:d7: 3d:36:b8:7e:0f:e0:d9:f1:3c:d0:55:da:1b:30:db: b6:fd:c7:02:db:4f:1d:ee:50:c5:e3:fc:18:92:06: ba:cb:a4:78:db:26:39:f3:d2:a7:29:30:07:8e:28: f7:c7:47:98:f3:19:b4:10:23:c6:8a:4c:bf:ab:99: a9:51:f3:0e:76:be:15:2b:6a:a8:09:f4:10:bb:e5: 84:3a:45:e9:11:3b:1e:8c:b3:89:59:f6:87:9f:45: f3:86:0c:39:5b:6a:ed:ea:f1:7f:ba:47:41:0b:2d: 2c:f7:7f:2d:62:3d:c2:eb:2f:b2:0a:75:48:2b:ea: 52:9a:85:03:8d:a3:dc:88:59:be:8b:00:33:b4:d4: 0a:48:39:ed:e7:91:12:c9:f8:fc:70:46:e2:af:29: 13:09:fb:f0:5a:89:0c:c1:e2:21:d3:44:2c:15:0c: 49:cd:81:76:0b:d7:7b:3f:b0:5b:63:33:52:83:1e: 3c:66:6d:3e:cc:c0:8f:1a:fd:e8:d8:d1:5f:88:b2: 7c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:C4:2C:5A:80:DD:E8:F9:F7:D5:F1:29:C9:74:50:B7:C6:70:02:3D X509v3 Authority Key Identifier: keyid:3B:47:AA:0D:03:20:91:95:F0:55:5C:60:AD:E3:29:4F:2D:37:A2:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0eqDQMgkZXwVVxgreMpTy03oqE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:3c:c1:57:ab:65:ac:5c:88:af:c8:02:e6:37:2e:64:2f:37: cb:20:5b:5a:ba:f9:cf:22:29:a7:ff:fe:6d:f1:1f:be:8c:02: f7:5e:44:0d:82:3f:b8:3d:63:f8:e3:f5:d6:bb:8c:ec:04:ee: fc:ff:d0:7f:f9:95:1b:a9:b4:4d:e4:44:b4:92:56:31:4b:a0: 7c:65:17:75:51:23:1e:36:02:50:da:2a:8b:8d:bd:14:6a:c9: a1:c5:41:b0:4b:1f:f6:4f:fa:d4:89:ba:d6:b8:af:8a:d3:9d: 7e:16:ec:9b:61:55:72:0e:d6:5c:39:0d:f8:4b:31:47:94:f5: 40:e0:90:50:51:60:e8:7c:94:8f:78:f2:12:23:20:cb:2a:43: f5:e4:46:ce:32:e7:2b:b7:18:e3:6f:78:c4:c2:7a:b0:53:34: 03:51:ee:e1:a5:74:f4:6e:02:05:8e:73:25:9a:6b:63:db:43: 95:61:cb:57:ff:4c:ed:b2:ee:31:f0:59:f4:07:76:e2:0a:95: a4:f4:cf:58:bb:ef:6b:5b:a6:f6:d6:71:49:65:e0:6d:2b:db: 74:d3:9f:e6:42:a8:b5:5d:2b:73:53:cf:e0:0f:f6:70:bc:c9: bf:35:66:52:b0:62:29:d8:e3:88:73:1e:79:e7:36:98:b2:19: 86:e9:6d:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAr8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM4NzMxMTAvBgNVBAUTKDNCNDdBQTBEMDMyMDkxOTVGMDU1NUM2MEFERTMyOTRG MkQzN0EyQTEwHhcNMjUwNzAzMDE1MTA3WhcNMjUwNzEwMDE1MTA3WjAYMRYwFAYD VQQDEw02ODY1ZTIwYi0xODczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApCfTFT/e29B5g2ZtjBfPra2qZiv3534T3T8n7g0tVa+CsKY0cbXOdGoBx+9+ w8y6c41ksuZ9hLHU/Nc9Nrh+D+DZ8TzQVdobMNu2/ccC208d7lDF4/wYkga6y6R4 2yY589KnKTAHjij3x0eY8xm0ECPGiky/q5mpUfMOdr4VK2qoCfQQu+WEOkXpETse jLOJWfaHn0Xzhgw5W2rt6vF/ukdBCy0s938tYj3C6y+yCnVIK+pSmoUDjaPciFm+ iwAztNQKSDnt55ESyfj8cEbirykTCfvwWokMweIh00QsFQxJzYF2C9d7P7BbYzNS gx48Zm0+zMCPGv3o2NFfiLJ8AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOzELFqA 3ej599XxKcl0ULfGcAI9MB8GA1UdIwQYMBaAFDtHqg0DIJGV8FVcYK3jKU8tN6Kh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzg3My8xMTJFQzE5NkZE QjgxMUVDOEUzODY5MTNDNEY5QUUwMi9PMGVxRFFNZ2taWHdWVnhncmVNcFR5MDNv cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL08wZXFEUU1na1pYd1ZWeGdyZU1wVHkwM29xRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Mzg3My8xMTJFQzE5NkZEQjgxMUVDOEUzODY5MTNDNEY5QUUwMi9PMGVxRFFNZ2ta WHdWVnhncmVNcFR5MDNvcUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9PMFXq2WsXIivyALmNy5kLzfLIFtauvnPIimn//5t8R++jAL3XkQN gj+4PWP44/XWu4zsBO78/9B/+ZUbqbRN5ES0klYxS6B8ZRd1USMeNgJQ2iqLjb0U asmhxUGwSx/2T/rUibrWuK+K051+FuybYVVyDtZcOQ34SzFHlPVA4JBQUWDofJSP ePISIyDLKkP15EbOMucrtxjjb3jEwnqwUzQDUe7hpXT0bgIFjnMlmmtj20OVYctX /0ztsu4x8Fn0B3biCpWk9M9Yu+9rW6b21nFJZeBtK9t005/mQqi1XStzU8/gD/Zw vMm/NWZSsGIp2OOIcx555zaYshmG6W1c -----END CERTIFICATE-----Generated at Thu Jul 3 09:11:50 2025 by rpki-client