$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft File: OddGjPgMUFXp0EybT60xF1wU1l8.mft (raw, json) Hash identifier: EZg5ETJ4A8ZoASL5PeLNJyqEok7LUoWivneLGvKt7mQ= Subject key identifier: AE:38:BE:45:B0:01:65:CF:05:F0:6A:34:A0:08:38:A3:20:A3:3E:3C Authority key identifier: 39:D7:46:8C:F8:0C:50:55:E9:D0:4C:9B:4F:AD:31:17:5C:14:D6:5F Certificate issuer: /CN=A91AD643/serialNumber=39D7468CF80C5055E9D04C9B4FAD31175C14D65F Certificate serial: 06E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft Manifest number: 06DB Signing time: Wed 02 Jul 2025 22:19:34 +0000 Manifest this update: Wed 02 Jul 2025 22:19:34 +0000 Manifest next update: Wed 09 Jul 2025 22:19:34 +0000 Files and hashes: 1: OddGjPgMUFXp0EybT60xF1wU1l8.crl (hash: WRRPBOpe7uNEVjPxxY2xiPQ9QLjOfdn13wfwLGNKTTc=) 2: 865F2F80EE8911EBB390AC76C4F9AE02.roa (hash: 0ULrTT5sEmnlV5jXg9GCbo9G2IRIBRTqvgY01zsRTW8=) 3: 81E9653E5B8A11EB857A3F77C4F9AE02.roa (hash: hFkz2Rxz8bjHa9W5ewxpkxAw84TOeg9mnyL9BGUNw+E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.crl rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:19:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1767 (0x6e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD643, serialNumber=39D7468CF80C5055E9D04C9B4FAD31175C14D65F Validity Not Before: Jul 2 22:19:34 2025 GMT Not After : Jul 9 22:19:34 2025 GMT Subject: CN=6865b076-d401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5c:5a:ee:7a:42:ef:66:4c:9b:27:20:c1:50: c0:6a:0e:10:18:e7:73:b5:70:a2:af:a2:84:2e:ca: 81:3a:c2:cd:95:f5:09:ff:6e:d8:3f:e4:c9:da:47: 88:a0:37:0f:ef:8c:69:f5:20:7d:b1:75:c5:17:9a: f3:e4:19:3c:73:e7:bb:5a:91:fd:90:0d:11:19:be: 6d:31:b2:7b:be:cb:79:80:c6:d5:c2:b2:bb:dd:11: 9b:4c:8c:08:35:90:a7:5f:ea:99:94:54:7f:a7:b0: b2:6c:f4:ea:03:ea:73:c5:5a:09:1c:b6:8b:a5:38: 1b:93:ab:ab:c3:a6:67:cb:4c:da:65:0e:e2:bd:2b: eb:5a:bb:24:30:d3:ee:11:b7:4c:20:d3:68:7a:15: 4d:a5:5d:a1:18:ed:9a:5e:24:59:e2:c9:55:fd:d8: 69:7d:f2:77:d1:9d:94:e5:20:86:6f:cf:89:2a:6e: f9:f4:d9:81:59:1f:59:1e:c5:2a:f5:91:f2:85:33: 25:cb:7c:f1:39:97:f8:86:9a:ab:a2:ef:78:1f:36: 4f:ef:50:42:5b:af:5a:7c:25:d7:8d:81:98:ac:a5: 60:36:9b:4f:7a:80:69:62:43:c7:1c:b5:b9:2d:e9: 24:07:df:d4:bb:bd:1e:06:17:a2:20:29:c7:dd:a3: 68:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:38:BE:45:B0:01:65:CF:05:F0:6A:34:A0:08:38:A3:20:A3:3E:3C X509v3 Authority Key Identifier: keyid:39:D7:46:8C:F8:0C:50:55:E9:D0:4C:9B:4F:AD:31:17:5C:14:D6:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:c8:ec:69:9a:25:b9:1b:ac:50:45:89:15:f6:a4:7b:2b:fe: 84:2e:ed:ca:72:e8:a0:4e:be:c1:9e:05:a4:20:29:60:38:b6: e4:20:76:25:3e:6c:da:da:b4:69:bd:ad:7d:e6:55:6e:53:46: ca:69:7c:80:bf:04:95:c8:e9:38:5e:7a:c4:12:73:3b:0f:1e: 6a:f6:79:fe:57:41:cf:d5:c3:3f:c1:0c:b7:15:63:31:27:fa: 32:83:1d:b0:8a:8a:36:7e:5e:92:8f:ba:05:eb:4a:63:55:6e: 21:25:be:ce:f4:58:6e:5f:13:b1:ab:40:8b:81:8d:cb:ad:71: f2:ef:cf:df:f7:3d:f8:db:d8:aa:60:f3:18:a1:15:76:e3:2c: 52:6b:83:2c:d5:59:17:a6:5a:ee:ae:67:9a:d4:24:2e:91:52: 1b:49:29:90:b7:cf:bd:66:5b:be:b1:fe:d3:3b:f4:94:f1:07: ba:fb:72:2f:43:7b:f1:87:6a:f5:6b:b7:39:26:d1:cb:e4:f8: 90:bf:22:87:d0:b4:91:01:23:24:41:7a:cc:25:81:4a:72:2a: f1:64:a5:46:aa:e5:d7:58:f0:7b:62:64:d6:c8:be:bc:3f:8e: 64:ef:f9:d9:3e:4f:77:bd:a5:a9:2f:3d:82:c3:7a:fd:0d:3b: b7:f5:f7:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBucwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ2NDMxMTAvBgNVBAUTKDM5RDc0NjhDRjgwQzUwNTVFOUQwNEM5QjRGQUQzMTE3 NUMxNEQ2NUYwHhcNMjUwNzAyMjIxOTM0WhcNMjUwNzA5MjIxOTM0WjAYMRYwFAYD VQQDEw02ODY1YjA3Ni1kNDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1xa7npC72ZMmycgwVDAag4QGOdztXCir6KELsqBOsLNlfUJ/27YP+TJ2keI oDcP74xp9SB9sXXFF5rz5Bk8c+e7WpH9kA0RGb5tMbJ7vst5gMbVwrK73RGbTIwI NZCnX+qZlFR/p7CybPTqA+pzxVoJHLaLpTgbk6urw6Zny0zaZQ7ivSvrWrskMNPu EbdMINNoehVNpV2hGO2aXiRZ4slV/dhpffJ30Z2U5SCGb8+JKm759NmBWR9ZHsUq 9ZHyhTMly3zxOZf4hpqrou94HzZP71BCW69afCXXjYGYrKVgNptPeoBpYkPHHLW5 LekkB9/Uu70eBheiICnH3aNo6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK44vkWw AWXPBfBqNKAIOKMgoz48MB8GA1UdIwQYMBaAFDnXRoz4DFBV6dBMm0+tMRdcFNZf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDY0My9FRkJFNkVCMjVC ODgxMUVCQkQ1RjMwNzZDNEY5QUUwMi9PZGRHalBnTVVGWHAwRXliVDYweEYxd1Ux bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09kZEdqUGdNVUZYcDBFeWJUNjB4RjF3VTFsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDY0My9FRkJFNkVCMjVCODgxMUVCQkQ1RjMwNzZDNEY5QUUwMi9PZGRHalBnTVVG WHAwRXliVDYweEYxd1UxbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyyOxpmiW5G6xQRYkV9qR7K/6ELu3KcuigTr7BngWkIClgOLbkIHYl Pmza2rRpva195lVuU0bKaXyAvwSVyOk4XnrEEnM7Dx5q9nn+V0HP1cM/wQy3FWMx J/oygx2wioo2fl6Sj7oF60pjVW4hJb7O9FhuXxOxq0CLgY3LrXHy78/f9z3429iq YPMYoRV24yxSa4Ms1VkXplrurmea1CQukVIbSSmQt8+9Zlu+sf7TO/SU8Qe6+3Iv Q3vxh2r1a7c5JtHL5PiQvyKH0LSRASMkQXrMJYFKcirxZKVGquXXWPB7YmTWyL68 P45k7/nZPk93vaWpLz2Cw3r9DTu39ffS -----END CERTIFICATE-----Generated at Fri Jul 4 19:01:57 2025 by rpki-client