$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft File: a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft (raw, json) Hash identifier: t31WWkkebsHSN+Ae2YyG1FuiRNaJIqyEi9JliP9WeTE= Subject key identifier: AB:3B:36:F2:24:BE:B3:03:9F:C9:B3:83:B0:99:52:D0:D3:D5:C4:45 Authority key identifier: 6B:63:A6:0E:7D:7F:51:D0:38:72:8C:64:25:90:60:47:01:6C:99:04 Certificate issuer: /CN=A91BDEEB/serialNumber=6B63A60E7D7F51D038728C6425906047016C9904 Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft Manifest number: 5C Signing time: Tue 01 Jul 2025 08:06:21 +0000 Manifest this update: Tue 01 Jul 2025 08:06:21 +0000 Manifest next update: Tue 08 Jul 2025 08:06:21 +0000 Files and hashes: 1: a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl (hash: PnfMTEU2lgt4dQ/E9WOQOk4QWbVBIF7NRormuyIVtkw=) 2: 04241E3222F011F0B021396DC4F9AE02.roa (hash: 9kO0kni7kPsnzaPtvxx9OF7DZQab6VvydwUdZC1SpXA=) 3: C4A33CA4275711F0BA7C7752C4F9AE02.roa (hash: UodVJEZpG8jo//8K6ghcq6/5J2v+GWRbykcw2y9KJwI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:06:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDEEB, serialNumber=6B63A60E7D7F51D038728C6425906047016C9904 Validity Not Before: Jul 1 08:06:21 2025 GMT Not After : Jul 8 08:06:21 2025 GMT Subject: CN=686396fd-5468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3a:c8:97:92:72:82:de:2a:99:2d:d2:f6:b8: 66:70:82:7a:9b:ec:d0:74:44:c8:35:7b:17:d1:01: 02:1b:76:4b:b6:14:55:c1:9d:2a:67:80:0d:a9:79: 1f:a4:d4:8a:87:c6:ea:b6:8d:e4:dd:3d:3e:19:b3: aa:33:03:96:57:bc:7e:f4:8f:22:9b:5d:24:96:61: 80:0d:eb:55:e4:8e:b7:c6:9a:4f:62:43:bc:31:82: fa:55:12:f4:aa:40:32:59:fd:92:b1:e6:61:30:72: ad:5e:f8:2b:8d:6c:eb:6a:f1:19:16:a9:9d:34:93: e7:14:43:e0:a0:4e:a9:07:35:d8:95:7a:67:7f:91: 0d:10:66:88:d2:6b:bb:b1:7a:ef:b3:d8:04:cf:6a: de:cd:2a:b8:b5:db:43:c5:46:7b:21:85:ea:04:c1: f3:57:0b:7c:96:57:8d:89:2b:d1:9b:d8:f1:18:94: 1c:6b:a4:2f:e6:dd:97:43:d7:18:1a:b9:68:e1:90: e6:9f:56:b2:fc:03:81:f2:0d:8f:65:14:74:43:ef: 74:c9:bc:be:f0:56:5f:f6:6f:58:ee:28:77:3c:ec: 9e:ea:3c:62:c9:6e:5b:ae:4b:5b:01:c7:5e:b3:93: 29:4e:58:a2:45:35:eb:ce:c6:0b:d0:c1:df:7b:4b: f8:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:3B:36:F2:24:BE:B3:03:9F:C9:B3:83:B0:99:52:D0:D3:D5:C4:45 X509v3 Authority Key Identifier: keyid:6B:63:A6:0E:7D:7F:51:D0:38:72:8C:64:25:90:60:47:01:6C:99:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:a3:5e:7e:84:b6:0d:73:63:bf:66:c0:a2:c5:3f:e5:4e:64: 5e:3e:c3:59:0d:50:35:53:6a:7a:8f:c8:e9:b0:28:49:c8:46: bb:35:fc:92:24:f7:f4:da:5e:1b:c3:2a:b0:1a:96:90:8a:15: 46:af:f9:92:48:6b:81:c7:91:21:bb:5e:77:77:bf:84:93:09: 6d:35:55:5d:b5:1d:9b:a3:9f:da:79:97:10:f5:30:09:ca:da: b3:53:e6:91:98:2d:38:e6:6c:4e:69:59:94:38:ab:d4:29:74: 5b:d7:b5:83:5f:0b:95:4e:90:37:8d:11:5c:e9:3d:1c:17:22: 02:ad:9f:a1:a7:e4:b3:9b:86:e4:1f:d4:94:69:7d:81:bb:ca: 2b:28:7c:94:2b:52:ca:73:28:06:93:ed:8a:64:cc:f3:4f:ab: 9a:4d:06:42:1d:db:d0:bc:57:93:03:e4:0a:e8:66:2b:d0:fb: 2a:c4:30:09:01:13:37:72:b6:f1:0f:66:52:b2:16:0f:bb:ca: ef:94:d0:d8:5e:51:f8:6f:61:74:8f:40:12:f3:10:b4:2d:13: ae:55:58:e7:72:9c:81:ee:45:2e:8d:b8:29:89:f4:67:1f:5c: 33:ff:22:11:85:b5:c3:7d:ab:d3:07:ad:98:7f:ca:ce:cd:b1: b4:05:18:64 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC REVFQjExMC8GA1UEBRMoNkI2M0E2MEU3RDdGNTFEMDM4NzI4QzY0MjU5MDYwNDcw MTZDOTkwNDAeFw0yNTA3MDEwODA2MjFaFw0yNTA3MDgwODA2MjFaMBgxFjAUBgNV BAMTDTY4NjM5NmZkLTU0NjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7OsiXknKC3iqZLdL2uGZwgnqb7NB0RMg1exfRAQIbdku2FFXBnSpngA2peR+k 1IqHxuq2jeTdPT4Zs6ozA5ZXvH70jyKbXSSWYYAN61XkjrfGmk9iQ7wxgvpVEvSq QDJZ/ZKx5mEwcq1e+CuNbOtq8RkWqZ00k+cUQ+CgTqkHNdiVemd/kQ0QZojSa7ux eu+z2ATPat7NKri120PFRnshheoEwfNXC3yWV42JK9Gb2PEYlBxrpC/m3ZdD1xga uWjhkOafVrL8A4HyDY9lFHRD73TJvL7wVl/2b1juKHc87J7qPGLJbluuS1sBx16z kylOWKJFNevOxgvQwd97S/gBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqzs28iS+ swOfybODsJlS0NPVxEUwHwYDVR0jBBgwFoAUa2OmDn1/UdA4coxkJZBgRwFsmQQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJERUVCLzFFRTdGQTYwRTVG NDExRUZBQkQzOUQ3RUM0RjlBRTAyL2EyT21EbjFfVWRBNGNveGtKWkJnUndGc21R US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYTJPbURuMV9VZEE0Y294a0paQmdSd0ZzbVFRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJE RUVCLzFFRTdGQTYwRTVGNDExRUZBQkQzOUQ3RUM0RjlBRTAyL2EyT21EbjFfVWRB NGNveGtKWkJnUndGc21RUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIOjXn6Etg1zY79mwKLFP+VOZF4+w1kNUDVTanqPyOmwKEnIRrs1/JIk 9/TaXhvDKrAalpCKFUav+ZJIa4HHkSG7Xnd3v4STCW01VV21HZujn9p5lxD1MAnK 2rNT5pGYLTjmbE5pWZQ4q9QpdFvXtYNfC5VOkDeNEVzpPRwXIgKtn6Gn5LObhuQf 1JRpfYG7yisofJQrUspzKAaT7YpkzPNPq5pNBkId29C8V5MD5AroZivQ+yrEMAkB EzdytvEPZlKyFg+7yu+U0NheUfhvYXSPQBLzELQtE65VWOdynIHuRS6NuCmJ9Gcf XDP/IhGFtcN9q9MHrZh/ys7NsbQFGGQ= -----END CERTIFICATE-----Generated at Wed Jul 2 01:22:43 2025 by rpki-client