$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft File: MOIGH3wgvYQ77lNywTIcNfux0-8.mft (raw, json) Hash identifier: GRGir6TKlAkiwgTxN6mt1YMcBnNc3VRY6nsxq/QbyIE= Subject key identifier: 39:4E:F3:C5:46:F1:34:2B:F0:17:BA:E3:99:64:41:2A:8A:1D:2F:87 Authority key identifier: 30:E2:06:1F:7C:20:BD:84:3B:EE:53:72:C1:32:1C:35:FB:B1:D3:EF Certificate issuer: /CN=A91BC269/serialNumber=30E2061F7C20BD843BEE5372C1321C35FBB1D3EF Certificate serial: 0383 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft Manifest number: 035A Signing time: Thu 03 Jul 2025 01:29:07 +0000 Manifest this update: Thu 03 Jul 2025 01:29:07 +0000 Manifest next update: Thu 10 Jul 2025 01:29:07 +0000 Files and hashes: 1: MOIGH3wgvYQ77lNywTIcNfux0-8.crl (hash: kBIR05Eq2isQ0K9p7qo1Bt/dcsUSOBbDNBIMojcpO7I=) 2: 96A539C2278211EF902D8D85C4F9AE02.roa (hash: pJW1JdeGLLzOt3FmC1xw+P+I/N25ewL6n7IDt7taQwc=) 3: 80F23C7E1BC011EFB7916B7DC4F9AE02.roa (hash: qSv2BT3qwQ8QX0Y5AHl2Fu25v4OXEGvtOVat3ng7Qm0=) 4: DAAECE38C77711EDA89BE25DC4F9AE02.roa (hash: j9PZe7H54iqFwSW5LIWJcZWzWL15B6MkV0bnjdVzrtw=) 5: BC17B1DCB96311EDA3070C82C4F9AE02.roa (hash: cN84s7I55h93u/XVx1FhwQXM6ahiSIjmBZ81HatEkU4=) 6: 9B8A0A56F56F11EF84317935C4F9AE02.roa (hash: 0bWlqpDV1jdZ32UUmwWBU46n0Ec3stYEb8RHblnMIUE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.crl rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:29:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 899 (0x383) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC269, serialNumber=30E2061F7C20BD843BEE5372C1321C35FBB1D3EF Validity Not Before: Jul 3 01:29:07 2025 GMT Not After : Jul 10 01:29:07 2025 GMT Subject: CN=6865dce3-01e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2b:4f:2a:7f:bb:2c:e8:41:92:c2:e5:48:05: 60:fb:b4:5b:45:23:e7:7b:c7:c0:1f:34:90:c4:54: bf:66:a9:d8:14:41:c1:7e:af:82:25:a3:74:00:b8: 28:51:2c:77:c1:e2:db:1e:ca:f4:0f:a8:0e:bb:10: 4b:4f:5d:fe:1e:3d:5b:bf:6f:39:ed:04:36:7e:22: 41:e0:8a:b8:a6:f7:3b:46:39:8a:62:5c:6d:88:f6: cd:e8:db:48:05:39:51:38:d0:54:c5:8e:4b:9d:b3: 88:ea:90:ab:3f:dd:42:4a:08:48:1b:fb:72:2a:dc: a3:11:cf:72:5c:81:6c:eb:06:3c:ea:44:05:7b:43: 8a:eb:9d:33:80:cc:85:57:24:05:84:a9:1a:ee:b4: bd:89:e8:7e:e8:3d:31:f4:25:9f:82:5c:1d:59:bf: fc:cd:6d:31:cb:78:5a:28:53:69:64:49:2b:0a:05: d7:9c:79:f0:48:00:43:b8:7a:f2:a8:94:7a:28:fa: 74:26:df:b1:8e:e3:9d:46:3e:90:f3:17:5d:93:cf: b7:c0:89:cf:6d:18:f4:42:30:cd:f0:bf:6b:fc:29: ea:97:2d:83:1f:6e:bb:7c:f6:b6:d6:94:53:4d:5a: a8:38:68:42:c2:ac:78:c1:2b:af:0b:10:01:10:1b: ca:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:4E:F3:C5:46:F1:34:2B:F0:17:BA:E3:99:64:41:2A:8A:1D:2F:87 X509v3 Authority Key Identifier: keyid:30:E2:06:1F:7C:20:BD:84:3B:EE:53:72:C1:32:1C:35:FB:B1:D3:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:c7:41:c7:d7:84:3e:32:eb:89:f5:4f:ea:ba:82:5b:1e:b5: f5:a7:60:11:34:05:f2:ba:c2:37:e0:13:5e:b1:fa:82:9a:d7: cb:80:94:ed:34:3b:a6:69:63:dc:a4:cb:c9:4a:ad:1b:1a:7d: fe:5f:77:dc:e5:e8:82:87:70:78:89:a7:88:48:94:ce:3a:15: 6b:96:54:8f:6b:be:a3:d9:18:eb:9d:22:34:95:54:93:e7:f2: b6:6f:e4:85:41:51:5a:32:92:d7:98:cf:51:14:31:a3:0a:cc: e1:8c:56:56:7e:ae:d6:b1:db:a7:9b:80:1b:b7:16:e1:eb:7e: a0:b2:0c:ae:23:fb:e1:96:d1:e0:b4:bc:28:49:dd:1e:04:9e: 2e:96:f4:01:d0:b0:93:68:9c:dd:e0:ab:05:e5:8c:f6:d9:77: 46:6c:c8:43:0a:d3:33:25:21:0e:d9:b7:f6:94:08:36:86:f9: 84:eb:20:82:ec:45:46:f6:11:45:c5:22:c6:a1:8b:04:8d:93: 0e:45:d4:bd:10:c5:54:9f:56:4c:ad:da:48:58:73:fb:44:75: d4:83:13:09:81:48:eb:99:0d:08:c3:4a:bc:21:1f:23:94:c9: 4c:54:cc:5e:4c:3b:32:27:9a:a3:28:04:d3:1b:79:f7:44:71: 9f:c0:5a:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMyNjkxMTAvBgNVBAUTKDMwRTIwNjFGN0MyMEJEODQzQkVFNTM3MkMxMzIxQzM1 RkJCMUQzRUYwHhcNMjUwNzAzMDEyOTA3WhcNMjUwNzEwMDEyOTA3WjAYMRYwFAYD VQQDEw02ODY1ZGNlMy0wMWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsytPKn+7LOhBksLlSAVg+7RbRSPne8fAHzSQxFS/ZqnYFEHBfq+CJaN0ALgo USx3weLbHsr0D6gOuxBLT13+Hj1bv2857QQ2fiJB4Iq4pvc7RjmKYlxtiPbN6NtI BTlRONBUxY5LnbOI6pCrP91CSghIG/tyKtyjEc9yXIFs6wY86kQFe0OK650zgMyF VyQFhKka7rS9ieh+6D0x9CWfglwdWb/8zW0xy3haKFNpZEkrCgXXnHnwSABDuHry qJR6KPp0Jt+xjuOdRj6Q8xddk8+3wInPbRj0QjDN8L9r/Cnqly2DH267fPa21pRT TVqoOGhCwqx4wSuvCxABEBvK+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDlO88VG 8TQr8Be645lkQSqKHS+HMB8GA1UdIwQYMBaAFDDiBh98IL2EO+5TcsEyHDX7sdPv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzI2OS9CQTY3NkUzMENG RTUxMUVDOTRCQkM3NUFDNEY5QUUwMi9NT0lHSDN3Z3ZZUTc3bE55d1RJY05mdXgw LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01PSUdIM3dndllRNzdsTnl3VEljTmZ1eDAtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzI2OS9CQTY3NkUzMENGRTUxMUVDOTRCQkM3NUFDNEY5QUUwMi9NT0lHSDN3Z3ZZ UTc3bE55d1RJY05mdXgwLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBx0HH14Q+MuuJ9U/quoJbHrX1p2ARNAXyusI34BNesfqCmtfLgJTt NDumaWPcpMvJSq0bGn3+X3fc5eiCh3B4iaeISJTOOhVrllSPa76j2RjrnSI0lVST 5/K2b+SFQVFaMpLXmM9RFDGjCszhjFZWfq7Wsdunm4Abtxbh636gsgyuI/vhltHg tLwoSd0eBJ4ulvQB0LCTaJzd4KsF5Yz22XdGbMhDCtMzJSEO2bf2lAg2hvmE6yCC 7EVG9hFFxSLGoYsEjZMORdS9EMVUn1ZMrdpIWHP7RHXUgxMJgUjrmQ0Iw0q8IR8j lMlMVMxeTDsyJ5qjKATTG3n3RHGfwFpV -----END CERTIFICATE-----Generated at Thu Jul 3 07:20:11 2025 by rpki-client