$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft File: 5Otd-leSQpC7j-xFuZd_xsf2-jc.mft (raw, json) Hash identifier: zJWMJbaGp6nIjf5OL3kSWkp2eInfJnYecrdYk4iiB9U= Subject key identifier: E1:27:C3:AB:F2:EC:EF:4F:90:B5:41:D0:93:BA:F5:83:56:82:19:14 Authority key identifier: E4:EB:5D:FA:57:92:42:90:BB:8F:EC:45:B9:97:7F:C6:C7:F6:FA:37 Certificate issuer: /CN=A91A8B0B/serialNumber=E4EB5DFA57924290BB8FEC45B9977FC6C7F6FA37 Certificate serial: 0C9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft Manifest number: 0C8B Signing time: Sat 28 Jun 2025 18:00:47 +0000 Manifest this update: Sat 28 Jun 2025 18:00:46 +0000 Manifest next update: Sat 05 Jul 2025 18:00:46 +0000 Files and hashes: 1: 5Otd-leSQpC7j-xFuZd_xsf2-jc.crl (hash: Hi+tqfk2hE5/BLZ9cPKIB/5su8NtmS5y1kIZnKUtVRc=) 2: 5842DDF0FCE511E9BFA4B27AC4F9AE02.roa (hash: 6JiNuWz5Fkw8aMu3lON6uTLPgLOG+xf9uCqK1rE3Qew=) 3: EA17F65E6C6711ECB7C0925AC4F9AE02.roa (hash: 80MLiBcpNIycThAKM26TDicBsDE58l79IER/QoSPi08=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.crl rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 18:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3231 (0xc9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8B0B, serialNumber=E4EB5DFA57924290BB8FEC45B9977FC6C7F6FA37 Validity Not Before: Jun 28 18:00:46 2025 GMT Not After : Jul 5 18:00:46 2025 GMT Subject: CN=68602dce-2b6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b6:14:7a:d8:81:a4:0a:f9:fb:5e:b6:5b:f2: 16:ab:a1:53:60:69:59:1e:a6:38:e3:25:1b:33:05: 50:a5:c1:5b:6d:c4:d7:42:96:c0:04:a0:7e:67:bd: 2b:05:00:ba:52:1c:15:33:ce:86:3b:d9:67:e9:4c: 89:da:80:0c:da:11:13:2d:74:0b:3c:7b:a8:e4:5c: dc:7a:8c:17:4a:07:76:5b:0b:30:1b:7b:87:d2:e5: 31:70:40:21:07:aa:a4:e8:30:0e:d7:40:f4:10:5a: 69:ba:dc:48:94:8a:34:a4:8e:cc:1e:70:9e:85:cd: 67:ce:cf:fc:30:75:94:a6:21:4a:70:ac:bc:79:5f: 63:0e:f4:67:d6:53:b7:2e:13:03:21:73:71:44:08: 67:d2:cc:d5:e9:4c:75:2a:1d:aa:ad:ec:ef:c2:d6: 9a:ec:ce:b4:fa:45:5d:10:ee:1c:2e:2e:2a:24:a2: e4:ef:3a:5f:18:48:9a:d9:34:b4:a2:99:99:76:45: 24:42:9d:16:79:49:15:c5:f3:bf:77:7f:f3:c5:bb: db:df:93:d7:1f:10:12:f3:66:57:ff:d2:0d:8a:7f: 0a:0b:0d:3e:89:cc:67:87:0a:c1:eb:7c:75:27:04: 69:51:d4:57:48:f5:49:ee:25:4c:33:1c:87:61:7a: 41:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:27:C3:AB:F2:EC:EF:4F:90:B5:41:D0:93:BA:F5:83:56:82:19:14 X509v3 Authority Key Identifier: keyid:E4:EB:5D:FA:57:92:42:90:BB:8F:EC:45:B9:97:7F:C6:C7:F6:FA:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:e9:f2:40:32:a0:04:a9:5c:3d:64:31:4d:2e:c8:32:af:02: f7:ac:bc:1a:ea:4b:12:e8:61:01:a8:cf:6a:0a:7c:75:f0:1c: d4:a8:65:2b:75:a5:14:0a:e2:c2:de:66:db:2b:02:f4:d4:2b: 6c:d5:bb:4d:65:32:b7:14:e1:8d:76:55:fb:55:7c:41:c3:3d: 20:f8:27:7c:5b:ec:71:2b:cf:42:cd:81:5b:cd:cb:be:a7:af: 9c:94:48:6c:45:01:9f:3f:25:92:c7:ff:6e:dc:dc:4a:c2:af: 7c:25:af:29:27:e2:01:6e:90:75:94:ac:af:84:8e:ff:ed:cf: 33:2a:93:94:b2:d3:d3:0c:bc:bc:bf:14:cb:61:81:b6:0f:b5: f2:b7:c6:ff:5d:e7:d7:78:32:dd:0f:d9:8f:ed:68:ba:21:ce: d7:30:af:c7:73:d5:e5:e0:6c:ca:f9:3f:b2:3c:98:eb:b6:14: e3:58:d5:ee:4e:a0:65:81:35:1a:2e:dc:03:b7:dd:94:43:7d: 59:72:91:2b:cb:af:fb:73:91:f1:0c:f7:84:39:33:14:7e:91: e1:21:da:92:b5:97:bd:8d:94:0b:d7:4b:e8:f7:43:bc:f5:d7: f0:8b:b0:c3:ba:7d:ad:3f:5b:4b:cc:7a:b1:c6:08:72:fc:c5: 27:01:80:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThCMEIxMTAvBgNVBAUTKEU0RUI1REZBNTc5MjQyOTBCQjhGRUM0NUI5OTc3RkM2 QzdGNkZBMzcwHhcNMjUwNjI4MTgwMDQ2WhcNMjUwNzA1MTgwMDQ2WjAYMRYwFAYD VQQDEw02ODYwMmRjZS0yYjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoLYUetiBpAr5+162W/IWq6FTYGlZHqY44yUbMwVQpcFbbcTXQpbABKB+Z70r BQC6UhwVM86GO9ln6UyJ2oAM2hETLXQLPHuo5FzceowXSgd2WwswG3uH0uUxcEAh B6qk6DAO10D0EFpputxIlIo0pI7MHnCehc1nzs/8MHWUpiFKcKy8eV9jDvRn1lO3 LhMDIXNxRAhn0szV6Ux1Kh2qrezvwtaa7M60+kVdEO4cLi4qJKLk7zpfGEia2TS0 opmZdkUkQp0WeUkVxfO/d3/zxbvb35PXHxAS82ZX/9INin8KCw0+icxnhwrB63x1 JwRpUdRXSPVJ7iVMMxyHYXpBpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOEnw6vy 7O9PkLVB0JO69YNWghkUMB8GA1UdIwQYMBaAFOTrXfpXkkKQu4/sRbmXf8bH9vo3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEIwQi81QUVCNUVCMkZD QzUxMUU5OTg1OEE5MUVDNEY5QUUwMi81T3RkLWxlU1FwQzdqLXhGdVpkX3hzZjIt amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVPdGQtbGVTUXBDN2oteEZ1WmRfeHNmMi1qYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEIwQi81QUVCNUVCMkZDQzUxMUU5OTg1OEE5MUVDNEY5QUUwMi81T3RkLWxlU1Fw QzdqLXhGdVpkX3hzZjItamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCq6fJAMqAEqVw9ZDFNLsgyrwL3rLwa6ksS6GEBqM9qCnx18BzUqGUr daUUCuLC3mbbKwL01Cts1btNZTK3FOGNdlX7VXxBwz0g+Cd8W+xxK89CzYFbzcu+ p6+clEhsRQGfPyWSx/9u3NxKwq98Ja8pJ+IBbpB1lKyvhI7/7c8zKpOUstPTDLy8 vxTLYYG2D7Xyt8b/XefXeDLdD9mP7Wi6Ic7XMK/Hc9Xl4GzK+T+yPJjrthTjWNXu TqBlgTUaLtwDt92UQ31ZcpEry6/7c5HxDPeEOTMUfpHhIdqStZe9jZQL10vo90O8 9dfwi7DDun2tP1tLzHqxxghy/MUnAYDP -----END CERTIFICATE-----Generated at Sun Jun 29 19:02:09 2025 by rpki-client