$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft File: 0y2jboghgi5r08gs_6mE56kJw_Y.mft (raw, json) Hash identifier: eMsbgnh2vo+oUN0W2EWgCFTgUlnoloqR+8wAvxjA8EQ= Subject key identifier: 2D:10:FD:E4:4F:92:62:9D:68:33:B3:79:E6:2D:1F:DF:BF:45:1D:DF Authority key identifier: D3:2D:A3:6E:88:21:82:2E:6B:D3:C8:2C:FF:A9:84:E7:A9:09:C3:F6 Certificate issuer: /CN=A91B8EF9/serialNumber=D32DA36E8821822E6BD3C82CFFA984E7A909C3F6 Certificate serial: 33E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft Manifest number: 33D2 Signing time: Wed 02 Jul 2025 15:25:39 +0000 Manifest this update: Wed 02 Jul 2025 15:25:39 +0000 Manifest next update: Wed 09 Jul 2025 15:25:39 +0000 Files and hashes: 1: 0y2jboghgi5r08gs_6mE56kJw_Y.crl (hash: 3nsjrv9e2z8oM+HXsYTaAYEFMv/YtW6qjblJAsHxJR0=) 2: A1C2C79680FE11E985D53F55C4F9AE02.roa (hash: Ko3Luk3NXRMVTdrKjxB+T1Aq5Rz7BTBaPzcxuwLSdz4=) 3: A30DC17880FE11E985D53F55C4F9AE02.roa (hash: FAySI2su8cL3vKBRY/mDcgCBdpz6IW+fV0g4HW92eb8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.crl rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:25:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13280 (0x33e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8EF9, serialNumber=D32DA36E8821822E6BD3C82CFFA984E7A909C3F6 Validity Not Before: Jul 2 15:25:39 2025 GMT Not After : Jul 9 15:25:39 2025 GMT Subject: CN=68654f73-827d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:9a:e7:27:1e:b2:58:4f:64:3d:c3:fd:da:12: 74:83:8a:36:c6:13:13:8e:2a:1c:0b:a0:b8:46:6e: df:02:b8:e7:c2:97:46:24:4a:45:c4:0b:28:55:41: 52:71:47:d6:0e:d0:b9:96:27:b4:fc:82:53:e8:66: 97:70:52:9b:d5:29:33:7d:30:d4:53:33:c5:87:d7: c3:79:ba:94:0e:23:82:15:40:dd:73:6b:82:2e:f0: a7:5e:a9:56:08:c3:e0:6a:05:d5:7a:e7:ae:5c:4d: 91:10:ee:b5:2d:0d:10:e4:9d:df:19:0b:3e:8d:91: 74:89:9c:e3:9c:89:53:1f:bc:3a:ab:7d:0d:98:f4: 2c:bd:ca:89:a0:22:31:90:0b:2f:77:da:58:3f:c7: 31:e1:31:b5:f5:fd:6d:d1:87:91:71:1b:56:0a:d4: 64:df:7c:a4:f4:c3:81:47:d6:f8:04:a7:60:ca:fc: 39:1b:5f:90:1c:e2:a7:d1:3f:c3:35:1c:34:0e:36: 12:6f:6c:10:c2:fb:3c:2b:71:27:b8:25:d6:db:c4: 21:9c:57:6c:3c:c9:b0:99:b0:29:d9:01:65:4c:a3: 51:75:d8:76:f4:19:4f:54:76:74:90:cd:ba:3b:e4: 4b:c1:b7:33:02:87:3c:d3:a1:ab:80:c7:0b:78:85: 7d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:10:FD:E4:4F:92:62:9D:68:33:B3:79:E6:2D:1F:DF:BF:45:1D:DF X509v3 Authority Key Identifier: keyid:D3:2D:A3:6E:88:21:82:2E:6B:D3:C8:2C:FF:A9:84:E7:A9:09:C3:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:80:24:47:7c:5c:eb:11:e4:46:b8:31:00:2a:c8:dc:c1:d6: cb:a7:f0:31:32:5f:15:0f:05:56:76:00:dd:a3:02:73:2b:cd: 78:a3:46:80:c0:18:4f:bb:92:08:2d:b5:39:84:df:34:a9:2b: 6f:d4:ca:8e:c7:ce:4d:ea:74:6b:86:a5:92:48:cd:2a:5f:da: 03:0f:93:28:d0:2b:79:2a:b3:2d:dd:13:3c:55:38:c3:53:4a: a7:98:4d:14:4d:19:57:25:ca:3c:0a:14:ca:21:75:61:0e:a5: 93:37:ae:71:1e:81:c2:dd:e7:c4:eb:80:8b:f5:5e:f3:a3:b6: 3f:86:03:ae:36:25:b6:b1:34:0f:38:bb:a8:f8:84:dc:c2:da: 31:2e:dd:e2:60:2d:ab:fd:4f:cc:56:cb:c9:15:4c:53:4c:78: 31:ac:22:e8:8c:de:c9:17:7d:f8:36:d5:53:30:5a:21:a0:83: a0:30:9b:b3:63:21:65:e1:9b:c0:e1:8d:b1:f0:4b:ef:61:20: 7b:91:3c:c9:73:f2:fe:e5:de:1d:7c:5a:f7:68:54:c5:15:54: 53:1a:05:3e:b6:76:1b:0c:6e:56:5c:36:1e:34:4c:30:8d:36: b0:f7:1f:dc:78:d6:8f:b6:c5:7a:a2:d9:90:30:1c:dd:90:4c: cd:6a:5d:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM+AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhFRjkxMTAvBgNVBAUTKEQzMkRBMzZFODgyMTgyMkU2QkQzQzgyQ0ZGQTk4NEU3 QTkwOUMzRjYwHhcNMjUwNzAyMTUyNTM5WhcNMjUwNzA5MTUyNTM5WjAYMRYwFAYD VQQDEw02ODY1NGY3My04MjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl5rnJx6yWE9kPcP92hJ0g4o2xhMTjiocC6C4Rm7fArjnwpdGJEpFxAsoVUFS cUfWDtC5lie0/IJT6GaXcFKb1SkzfTDUUzPFh9fDebqUDiOCFUDdc2uCLvCnXqlW CMPgagXVeueuXE2REO61LQ0Q5J3fGQs+jZF0iZzjnIlTH7w6q30NmPQsvcqJoCIx kAsvd9pYP8cx4TG19f1t0YeRcRtWCtRk33yk9MOBR9b4BKdgyvw5G1+QHOKn0T/D NRw0DjYSb2wQwvs8K3EnuCXW28QhnFdsPMmwmbAp2QFlTKNRddh29BlPVHZ0kM26 O+RLwbczAoc806GrgMcLeIV9QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC0Q/eRP kmKdaDOzeeYtH9+/RR3fMB8GA1UdIwQYMBaAFNMto26IIYIua9PILP+phOepCcP2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEVGOS80NEE4MDVFRTQ0 QzkxMUUyQjM1QUM0ODQyOTc5QkIyMC8weTJqYm9naGdpNXIwOGdzXzZtRTU2a0p3 X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB5Mmpib2doZ2k1cjA4Z3NfNm1FNTZrSndfWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEVGOS80NEE4MDVFRTQ0QzkxMUUyQjM1QUM0ODQyOTc5QkIyMC8weTJqYm9naGdp NXIwOGdzXzZtRTU2a0p3X1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCugCRHfFzrEeRGuDEAKsjcwdbLp/AxMl8VDwVWdgDdowJzK814o0aA wBhPu5IILbU5hN80qStv1MqOx85N6nRrhqWSSM0qX9oDD5Mo0Ct5KrMt3RM8VTjD U0qnmE0UTRlXJco8ChTKIXVhDqWTN65xHoHC3efE64CL9V7zo7Y/hgOuNiW2sTQP OLuo+ITcwtoxLt3iYC2r/U/MVsvJFUxTTHgxrCLojN7JF334NtVTMFohoIOgMJuz YyFl4ZvA4Y2x8EvvYSB7kTzJc/L+5d4dfFr3aFTFFVRTGgU+tnYbDG5WXDYeNEww jTaw9x/ceNaPtsV6otmQMBzdkEzNal2r -----END CERTIFICATE-----Generated at Thu Jul 3 14:57:42 2025 by rpki-client