$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft File: mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft (raw, json) Hash identifier: 68blCyG69GtvIL4W3RB1/PulwYVX6EHmNPtDg007JV4= Subject key identifier: C5:47:09:08:E2:38:E2:36:9A:49:F2:28:E9:D8:55:D7:65:52:80:AC Authority key identifier: 98:E8:63:E4:4B:59:7B:64:CA:8C:81:FE:3F:6D:CB:CD:DF:E1:F6:55 Certificate issuer: /CN=A91A4707/serialNumber=98E863E44B597B64CA8C81FE3F6DCBCDDFE1F655 Certificate serial: 0515 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhj5EtZe2TKjIH-P23Lzd_h9lU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft Manifest number: 050A Signing time: Wed 02 Jul 2025 23:57:55 +0000 Manifest this update: Wed 02 Jul 2025 23:57:55 +0000 Manifest next update: Wed 09 Jul 2025 23:57:55 +0000 Files and hashes: 1: mOhj5EtZe2TKjIH-P23Lzd_h9lU.crl (hash: yiiqP8yzU8AIpr/ubcJBOpC49GOaFIFkgUNFcZ/DTpU=) 2: 52B59ED2108D11ECA2542150C4F9AE02.roa (hash: YHM2Ry9OqK4ZQ8qnXB/9z3rSEtR8bDIhVl02jmEtILs=) 3: 5202131C108D11ECA2542150C4F9AE02.roa (hash: f0fj2CiJrQsqOvPb5aCJ72sWUs4weqyglPKr75EglVo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.crl rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhj5EtZe2TKjIH-P23Lzd_h9lU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:57:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1301 (0x515) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4707, serialNumber=98E863E44B597B64CA8C81FE3F6DCBCDDFE1F655 Validity Not Before: Jul 2 23:57:55 2025 GMT Not After : Jul 9 23:57:55 2025 GMT Subject: CN=6865c783-e7bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3b:a8:2f:a2:36:c5:7a:f4:09:ef:fb:43:ca: cf:60:35:8c:28:52:6e:9e:5c:d2:c6:e0:e3:65:ed: 52:47:63:a6:38:1a:cb:91:cb:31:0c:fa:5b:fb:ae: 8d:b0:a7:96:64:d3:2c:21:28:ab:3b:5f:d1:d5:a3: 12:e5:b3:fa:4f:76:76:0f:c4:71:52:06:17:f5:6d: ac:06:15:6d:54:15:27:0b:3f:54:5b:14:5e:b1:3f: f5:1f:b7:fc:16:3a:6d:68:a4:aa:30:c2:f6:d8:16: 22:86:32:35:cb:d0:fb:c4:2f:13:93:47:e4:8b:f0: 7f:38:10:4b:ab:a3:c1:4d:4a:67:65:f7:e9:56:54: 32:1b:11:c6:05:46:2a:62:50:f3:b8:a5:e8:02:54: 78:06:61:24:c6:6b:3e:99:1e:3d:b4:19:58:17:1c: 6f:0a:05:29:a5:c9:ca:2b:c4:7a:1a:e5:c8:5b:06: 74:f9:5e:ed:89:97:02:86:09:a4:33:04:f5:02:b6: 9d:34:be:20:f4:c9:56:70:2c:3b:4b:e6:f3:15:41: 8c:f5:2c:7a:e9:35:7a:30:df:8e:bd:93:2b:11:a2: 30:ec:5a:dd:41:d3:f6:8d:79:c2:8b:ba:e4:a7:6b: 1c:aa:1f:72:6e:34:96:ae:7d:0b:f4:85:5b:04:c5: 69:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:47:09:08:E2:38:E2:36:9A:49:F2:28:E9:D8:55:D7:65:52:80:AC X509v3 Authority Key Identifier: keyid:98:E8:63:E4:4B:59:7B:64:CA:8C:81:FE:3F:6D:CB:CD:DF:E1:F6:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhj5EtZe2TKjIH-P23Lzd_h9lU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:22:1c:e9:b7:71:7b:5d:b2:56:c9:49:b2:67:e9:49:85:59: 10:2f:15:31:c9:3b:f0:2d:52:3b:11:0c:24:bb:71:34:46:f4: 4a:7c:67:76:8b:a2:3c:99:a4:7b:00:cf:98:43:83:42:d9:43: c8:aa:30:ec:48:ab:e1:d5:30:96:57:d0:e1:12:7f:2b:9a:fe: 99:1a:9b:c3:74:ad:cf:98:5d:35:b2:33:01:92:98:ce:c1:00: f5:7e:8e:21:e0:8b:75:84:13:9b:8a:41:3c:65:d7:ec:5f:6d: f9:e3:4d:04:c4:09:ec:65:a2:80:fb:3c:8d:0e:e8:97:e0:0c: 96:10:d5:6a:47:23:9b:f3:aa:dd:b8:54:d4:63:02:7f:2d:90: c2:21:96:36:d5:e2:cb:5b:74:b2:c2:12:77:b3:41:48:d8:fc: 3c:b9:32:ca:46:16:48:fa:97:2a:57:8d:f2:1d:0a:8a:dc:b8: 98:9c:03:fd:cd:b2:45:d4:a3:84:7c:90:41:f3:0e:e3:3e:bd: c2:c7:ae:98:54:ec:12:10:c3:73:e0:f1:59:26:86:e6:01:02: 54:4b:9a:12:0a:91:d0:24:f0:96:ec:07:27:5a:20:7c:f3:14: 0b:0b:6f:c2:c3:99:38:43:76:cc:e6:7c:b5:7d:8e:cb:9f:44: 84:e5:66:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ3MDcxMTAvBgNVBAUTKDk4RTg2M0U0NEI1OTdCNjRDQThDODFGRTNGNkRDQkNE REZFMUY2NTUwHhcNMjUwNzAyMjM1NzU1WhcNMjUwNzA5MjM1NzU1WjAYMRYwFAYD VQQDEw02ODY1Yzc4My1lN2JkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArTuoL6I2xXr0Ce/7Q8rPYDWMKFJunlzSxuDjZe1SR2OmOBrLkcsxDPpb+66N sKeWZNMsISirO1/R1aMS5bP6T3Z2D8RxUgYX9W2sBhVtVBUnCz9UWxResT/1H7f8 FjptaKSqMML22BYihjI1y9D7xC8Tk0fki/B/OBBLq6PBTUpnZffpVlQyGxHGBUYq YlDzuKXoAlR4BmEkxms+mR49tBlYFxxvCgUppcnKK8R6GuXIWwZ0+V7tiZcChgmk MwT1AradNL4g9MlWcCw7S+bzFUGM9Sx66TV6MN+OvZMrEaIw7FrdQdP2jXnCi7rk p2scqh9ybjSWrn0L9IVbBMVpnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMVHCQji OOI2mknyKOnYVddlUoCsMB8GA1UdIwQYMBaAFJjoY+RLWXtkyoyB/j9ty83f4fZV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDcwNy8yODY2QzIzNDEw OEIxMUVDODc4RjFCNEZDNEY5QUUwMi9tT2hqNUV0WmUyVEtqSUgtUDIzTHpkX2g5 bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21PaGo1RXRaZTJUS2pJSC1QMjNMemRfaDlsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDcwNy8yODY2QzIzNDEwOEIxMUVDODc4RjFCNEZDNEY5QUUwMi9tT2hqNUV0WmUy VEtqSUgtUDIzTHpkX2g5bFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEIhzpt3F7XbJWyUmyZ+lJhVkQLxUxyTvwLVI7EQwku3E0RvRKfGd2 i6I8maR7AM+YQ4NC2UPIqjDsSKvh1TCWV9DhEn8rmv6ZGpvDdK3PmF01sjMBkpjO wQD1fo4h4It1hBObikE8ZdfsX235400ExAnsZaKA+zyNDuiX4AyWENVqRyOb86rd uFTUYwJ/LZDCIZY21eLLW3SywhJ3s0FI2Pw8uTLKRhZI+pcqV43yHQqK3LiYnAP9 zbJF1KOEfJBB8w7jPr3Cx66YVOwSEMNz4PFZJobmAQJUS5oSCpHQJPCW7AcnWiB8 8xQLC2/Cw5k4Q3bM5ny1fY7Ln0SE5Wa7 -----END CERTIFICATE-----Generated at Thu Jul 3 02:52:57 2025 by rpki-client