$ rpki-client -vvf rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft File: 0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft (raw, json) Hash identifier: xy/RI+TRPocdKgK7gx2t9Po5vLSrYD+gb6IbsXgSVEk= Subject key identifier: 86:89:C8:6D:69:47:B0:5D:E5:D9:3A:BB:7A:EB:04:76:8F:63:2A:5A Authority key identifier: D0:E5:44:05:B0:3D:3D:12:34:59:DE:01:BB:40:0F:4D:7A:83:29:D0 Certificate issuer: /CN=A91B834D/serialNumber=D0E54405B03D3D123459DE01BB400F4D7A8329D0 Certificate serial: 01CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft Manifest number: 01C1 Signing time: Tue 01 Jul 2025 03:25:55 +0000 Manifest this update: Tue 01 Jul 2025 03:25:54 +0000 Manifest next update: Tue 08 Jul 2025 03:25:54 +0000 Files and hashes: 1: 0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl (hash: Qg7wpRnnivsc6DxFx3XGA69n0Ji5ptWmwZVwhXK0GQU=) 2: F9B10D46ADAA11ED810C6C45C4F9AE02.roa (hash: 9uR9cVnp9mE1i5KXBSkkfpXEwSfx3/BMoE6xrI/LuMM=) 3: 61883292ADA511EDB2C68947C4F9AE02.roa (hash: jVsOkESQWaLXR1oAo7YvVLXTH7CGZNa6Fnq6GGFvuF4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 03:25:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 458 (0x1ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B834D, serialNumber=D0E54405B03D3D123459DE01BB400F4D7A8329D0 Validity Not Before: Jul 1 03:25:54 2025 GMT Not After : Jul 8 03:25:54 2025 GMT Subject: CN=68635542-e253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:85:e0:2f:b5:5f:9e:a2:44:15:97:23:45:fd: b0:cc:5d:bc:64:f9:9c:45:54:6f:b0:e5:92:6d:1e: 82:e7:f8:49:5e:5f:24:49:ba:43:fa:cf:94:ce:52: e9:f5:bd:06:86:43:4e:55:b5:12:4b:9f:ba:c2:47: 1f:63:dc:7f:b2:74:bd:ed:d4:25:45:81:4f:ee:64: 7d:fd:32:6a:e0:f3:87:a5:3d:5f:d7:04:cb:8b:45: d0:fa:c4:56:98:3d:b2:80:d0:cc:14:47:bd:70:e4: de:3c:9e:ce:0b:c1:81:45:24:4a:78:ec:fd:09:a9: 70:20:dc:75:b3:ac:db:bc:36:88:55:fe:77:1f:60: 99:3d:db:cc:06:9f:25:18:c1:03:29:98:37:3b:c6: 4f:4c:80:fb:43:68:33:ce:69:b2:d3:47:43:29:bf: da:bb:7c:1c:86:8b:24:2c:04:e8:59:5b:17:a7:8e: f3:1b:3e:2f:57:c3:63:c6:b3:28:f1:42:e6:d5:1a: 70:4e:eb:7f:c4:6b:2f:a9:3d:69:26:66:ba:78:5f: 49:29:2c:23:28:0e:ea:fa:43:57:75:de:75:0f:37: 34:5a:f4:a6:b1:61:0b:69:db:0d:12:09:4d:8b:83: 8c:c9:9a:1f:2d:76:04:27:1f:0c:78:fb:4b:98:4c: ef:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:89:C8:6D:69:47:B0:5D:E5:D9:3A:BB:7A:EB:04:76:8F:63:2A:5A X509v3 Authority Key Identifier: keyid:D0:E5:44:05:B0:3D:3D:12:34:59:DE:01:BB:40:0F:4D:7A:83:29:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:db:52:96:ca:83:bb:48:15:c9:40:8c:9c:5a:3b:f1:f2:c7: a4:b8:ad:54:90:2d:5a:c8:48:07:37:96:b8:b8:f1:1c:6d:8f: 6a:22:5e:bd:31:66:6c:4d:58:7f:13:e2:17:2f:24:d6:6e:18: 27:e3:7b:a4:6c:22:fe:74:4a:3f:5f:b1:6f:79:06:ad:7f:9a: bf:07:ec:ad:ec:ab:78:f2:de:da:2b:56:b1:d9:58:17:67:5f: b0:99:91:95:79:91:2c:a5:23:66:eb:d9:6b:16:d4:2f:35:b5: 8e:88:e1:e1:3f:fe:4c:8e:cf:5c:ae:0c:dc:79:bc:f5:f1:b4: 94:d7:10:13:77:3a:6c:d6:9b:7e:ee:7d:50:87:73:8b:11:c5: ee:84:14:b1:33:be:46:d3:59:b9:46:67:a4:18:c3:c1:1e:d2: 0d:72:6d:e4:59:4e:c2:24:a5:05:17:66:84:a2:c1:83:ff:b8: 4b:19:ab:a4:66:52:72:a0:6c:80:a9:2f:6b:e5:2a:e3:ea:df: 1f:cc:8f:a7:63:1a:dd:04:5b:01:17:c2:ea:6f:ce:f7:6a:d9: 27:4c:90:7b:09:84:56:a5:79:c1:bd:3a:1d:e5:21:b0:0e:95: f6:ad:1c:5a:a8:24:fe:52:21:63:ab:1d:b2:12:0e:dc:31:6a: 12:f4:42:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgzNEQxMTAvBgNVBAUTKEQwRTU0NDA1QjAzRDNEMTIzNDU5REUwMUJCNDAwRjRE N0E4MzI5RDAwHhcNMjUwNzAxMDMyNTU0WhcNMjUwNzA4MDMyNTU0WjAYMRYwFAYD VQQDEw02ODYzNTU0Mi1lMjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4YXgL7VfnqJEFZcjRf2wzF28ZPmcRVRvsOWSbR6C5/hJXl8kSbpD+s+UzlLp 9b0GhkNOVbUSS5+6wkcfY9x/snS97dQlRYFP7mR9/TJq4POHpT1f1wTLi0XQ+sRW mD2ygNDMFEe9cOTePJ7OC8GBRSRKeOz9CalwINx1s6zbvDaIVf53H2CZPdvMBp8l GMEDKZg3O8ZPTID7Q2gzzmmy00dDKb/au3wchoskLAToWVsXp47zGz4vV8NjxrMo 8ULm1RpwTut/xGsvqT1pJma6eF9JKSwjKA7q+kNXdd51Dzc0WvSmsWELadsNEglN i4OMyZofLXYEJx8MePtLmEzvSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIaJyG1p R7Bd5dk6u3rrBHaPYypaMB8GA1UdIwQYMBaAFNDlRAWwPT0SNFneAbtAD016gynQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODM0RC8zQTJDNTE5NkFE QTExMUVEQUI2REY0MkRDNEY5QUUwMi8wT1ZFQmJBOVBSSTBXZDRCdTBBUFRYcURL ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBPVkVCYkE5UFJJMFdkNEJ1MEFQVFhxREtkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODM0RC8zQTJDNTE5NkFEQTExMUVEQUI2REY0MkRDNEY5QUUwMi8wT1ZFQmJBOVBS STBXZDRCdTBBUFRYcURLZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCj21KWyoO7SBXJQIycWjvx8sekuK1UkC1ayEgHN5a4uPEcbY9qIl69 MWZsTVh/E+IXLyTWbhgn43ukbCL+dEo/X7FveQatf5q/B+yt7Kt48t7aK1ax2VgX Z1+wmZGVeZEspSNm69lrFtQvNbWOiOHhP/5Mjs9crgzcebz18bSU1xATdzps1pt+ 7n1Qh3OLEcXuhBSxM75G01m5RmekGMPBHtINcm3kWU7CJKUFF2aEosGD/7hLGauk ZlJyoGyAqS9r5Srj6t8fzI+nYxrdBFsBF8Lqb873atknTJB7CYRWpXnBvTod5SGw DpX2rRxaqCT+UiFjqx2yEg7cMWoS9EJ8 -----END CERTIFICATE-----Generated at Wed Jul 2 04:22:44 2025 by rpki-client