$ rpki-client -vvf rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft File: O6JVjKXxoDfZaW9WeugTZ8buNeY.mft (raw, json) Hash identifier: U5zQW3elCJF/BiJyxgTKX9HcqYSUIr4t167vz4/lZlA= Subject key identifier: 1E:C7:AE:E6:85:66:28:EB:9E:22:97:87:BB:46:66:A1:21:94:B9:EA Authority key identifier: 3B:A2:55:8C:A5:F1:A0:37:D9:69:6F:56:7A:E8:13:67:C6:EE:35:E6 Certificate issuer: /CN=A91C022C/serialNumber=3BA2558CA5F1A037D9696F567AE81367C6EE35E6 Certificate serial: 57 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6JVjKXxoDfZaW9WeugTZ8buNeY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft Manifest number: 56 Signing time: Thu 03 Jul 2025 07:26:20 +0000 Manifest this update: Thu 03 Jul 2025 07:26:19 +0000 Manifest next update: Thu 10 Jul 2025 07:26:19 +0000 Files and hashes: 1: O6JVjKXxoDfZaW9WeugTZ8buNeY.crl (hash: 2r3T4ntlT9tsM6ZdpsXGStoZydS5uXHzbtTHCfA7+do=) 2: 372B21F6D4BA11EFA5BAA345C4F9AE02.roa (hash: 0VQHEL6AI7GrKoKG052X6QJW7qwnCtlNzYdHLuxNwGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.crl rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6JVjKXxoDfZaW9WeugTZ8buNeY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C022C, serialNumber=3BA2558CA5F1A037D9696F567AE81367C6EE35E6 Validity Not Before: Jul 3 07:26:19 2025 GMT Not After : Jul 10 07:26:19 2025 GMT Subject: CN=6866309b-9b73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:62:c3:9f:67:a5:63:c6:c2:33:48:72:8c:ad: b4:b2:ff:d4:3a:98:3e:83:0d:6e:b2:4b:ea:e8:1d: d8:b8:2e:88:a6:e9:f1:ab:0f:a3:fd:be:bb:74:85: d9:87:7b:27:e4:42:00:f8:ee:20:ca:3d:f3:84:d0: 2e:db:7c:13:f2:e7:b3:fc:13:85:98:78:5a:7f:af: 0e:78:7f:f3:23:e2:ff:d3:57:35:04:d4:c4:25:63: 7c:be:19:ba:47:7b:ab:db:29:9e:e9:a2:5e:c6:73: ee:7a:1b:d1:98:43:9e:d9:98:24:76:a1:29:3a:d6: 0c:dd:6c:f3:bc:e0:5d:05:eb:84:ff:8e:0c:0c:f7: f6:ae:12:89:1a:f1:75:af:85:79:ef:5c:93:57:d5: ec:fd:a5:31:3b:a4:c5:ed:92:85:a5:aa:8d:79:a4: 99:a1:a7:ed:b0:b4:d5:ab:c8:4f:f7:df:28:5f:44: 14:9a:36:06:41:e6:7e:49:82:9d:7b:bd:73:61:aa: 28:3b:37:a4:59:5f:87:74:1c:8b:04:5c:5f:a7:ab: 10:db:46:44:49:1f:4a:b8:80:77:d4:c7:61:8e:f5: 4d:25:8c:e2:c5:ca:46:69:d1:29:0d:b1:dd:24:d8: 9e:97:ef:86:7d:57:2a:41:cf:01:28:fd:41:47:a4: 4b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:C7:AE:E6:85:66:28:EB:9E:22:97:87:BB:46:66:A1:21:94:B9:EA X509v3 Authority Key Identifier: keyid:3B:A2:55:8C:A5:F1:A0:37:D9:69:6F:56:7A:E8:13:67:C6:EE:35:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6JVjKXxoDfZaW9WeugTZ8buNeY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:1a:3a:5a:fd:bd:d8:95:93:45:21:1c:9c:19:89:fa:14:46: 1d:01:23:23:60:57:51:4e:f1:5a:47:e7:be:a8:f7:80:73:2b: 5c:ca:13:63:a2:fb:55:95:ac:8d:07:9a:80:7c:40:63:5a:cc: d0:bb:13:2d:27:c2:d3:af:b8:06:e6:fc:a1:94:d1:ca:1c:23: 2d:67:a2:cc:ab:64:00:9c:fd:4f:5f:dd:95:9a:8f:1f:4b:ac: 1e:41:18:47:30:f5:9e:36:83:ad:f2:de:b3:a9:8c:87:68:10: 03:68:41:9f:eb:a0:80:be:53:9e:7f:28:13:db:86:a3:30:4e: 26:6c:6b:62:8f:64:30:a4:65:5c:f1:9e:87:49:e1:4a:12:3d: 64:82:fd:ce:6d:23:55:8f:ce:4d:91:53:d1:b6:57:a1:1d:31: 12:b7:de:01:4f:d5:bd:f1:a5:79:ed:fe:4b:2e:99:bc:c3:6a: ac:2f:bf:e2:a7:a1:31:f7:8d:7e:e7:20:04:b1:d3:99:f2:2d: 81:39:86:84:f2:bd:2b:02:f2:b9:5f:8a:92:9e:88:47:7e:44: d2:47:d8:9f:84:cf:b3:44:7e:aa:8c:49:d4:62:e1:52:46:17: 0d:30:8d:a3:d7:50:50:16:30:9b:aa:a1:6b:05:1e:36:a0:88: 6d:1c:67:82 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MDIyQzExMC8GA1UEBRMoM0JBMjU1OENBNUYxQTAzN0Q5Njk2RjU2N0FFODEzNjdD NkVFMzVFNjAeFw0yNTA3MDMwNzI2MTlaFw0yNTA3MTAwNzI2MTlaMBgxFjAUBgNV BAMTDTY4NjYzMDliLTliNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1YsOfZ6VjxsIzSHKMrbSy/9Q6mD6DDW6yS+roHdi4Loim6fGrD6P9vrt0hdmH eyfkQgD47iDKPfOE0C7bfBPy57P8E4WYeFp/rw54f/Mj4v/TVzUE1MQlY3y+GbpH e6vbKZ7pol7Gc+56G9GYQ57ZmCR2oSk61gzdbPO84F0F64T/jgwM9/auEoka8XWv hXnvXJNX1ez9pTE7pMXtkoWlqo15pJmhp+2wtNWryE/33yhfRBSaNgZB5n5Jgp17 vXNhqig7N6RZX4d0HIsEXF+nqxDbRkRJH0q4gHfUx2GO9U0ljOLFykZp0SkNsd0k 2J6X74Z9VypBzwEo/UFHpEuxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHseu5oVm KOueIpeHu0ZmoSGUueowHwYDVR0jBBgwFoAUO6JVjKXxoDfZaW9WeugTZ8buNeYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMwMjJDL0IxQzE4MjMwRDRC OTExRUY5RkE4RTI0RkM0RjlBRTAyL082SlZqS1h4b0RmWmFXOVdldWdUWjhidU5l WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTzZKVmpLWHhvRGZaYVc5V2V1Z1RaOGJ1TmVZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMw MjJDL0IxQzE4MjMwRDRCOTExRUY5RkE4RTI0RkM0RjlBRTAyL082SlZqS1h4b0Rm WmFXOVdldWdUWjhidU5lWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH8aOlr9vdiVk0UhHJwZifoURh0BIyNgV1FO8VpH576o94BzK1zKE2Oi +1WVrI0HmoB8QGNazNC7Ey0nwtOvuAbm/KGU0cocIy1nosyrZACc/U9f3ZWajx9L rB5BGEcw9Z42g63y3rOpjIdoEANoQZ/roIC+U55/KBPbhqMwTiZsa2KPZDCkZVzx nodJ4UoSPWSC/c5tI1WPzk2RU9G2V6EdMRK33gFP1b3xpXnt/ksumbzDaqwvv+Kn oTH3jX7nIASx05nyLYE5hoTyvSsC8rlfipKeiEd+RNJH2J+Ez7NEfqqMSdRi4VJG Fw0wjaPXUFAWMJuqoWsFHjagiG0cZ4I= -----END CERTIFICATE-----Generated at Thu Jul 3 21:07:40 2025 by rpki-client