$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft File: bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft (raw, json) Hash identifier: DJtOFUFcxJtFLhUYB92VTuMQs18ZXJZTt8qpyY5zJq8= Subject key identifier: 7A:50:C6:15:15:F1:52:D2:C1:87:D4:D6:03:8A:67:52:CD:2E:7B:73 Authority key identifier: 6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25 Certificate issuer: /CN=A91C2C8A/serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325 Certificate serial: DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft Manifest number: D2 Signing time: Thu 03 Jul 2025 05:54:52 +0000 Manifest this update: Thu 03 Jul 2025 05:54:52 +0000 Manifest next update: Thu 10 Jul 2025 05:54:52 +0000 Files and hashes: 1: bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl (hash: CtwN5Y/QRf5QulPgqNHZrXaT4UOYaGRaVsXDJVd/0AQ=) 2: AA97516E24CA11EFB59A9379C4F9AE02.roa (hash: vY7AsZ08Pw1TlHVY7hGbU3NQuV3eecatAeSNrTUiOFk=) 3: A1732A0E24CA11EF93486579C4F9AE02.roa (hash: c1fiRMTzx+sKc+PUXDGG2MhU2IceNjiS5ZTGcmsSFDc=) 4: 41A8950C272F11EF9D0A0C5CC4F9AE02.roa (hash: Zeo9E1pvK7pqXxcoNJpNgvy4k5rrUkurswNhSqNf24s=) 5: A074721624CA11EF93486579C4F9AE02.roa (hash: EAuwmClXGMo+6npZ19N/RRkMj4x/6MUGDRCOhMDeS9A=) 6: 0E49D1E024CC11EFB113A27BC4F9AE02.roa (hash: NR/+YgQkm7A4mmhSV+xz9O4OYp+ZS9oT3gP6zL7oedM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223 (0xdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2C8A, serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325 Validity Not Before: Jul 3 05:54:52 2025 GMT Not After : Jul 10 05:54:52 2025 GMT Subject: CN=68661b2c-832a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:92:9c:5b:76:b5:c7:a9:53:22:92:8b:0c:d2: 8b:d4:46:c6:dc:64:1e:14:16:39:34:89:db:e2:72: b3:3d:db:25:52:08:ef:a0:5c:80:38:16:c0:61:87: f9:a1:87:3c:bf:5a:04:d0:b7:3f:e5:dd:38:3b:47: f7:d6:8c:b7:0f:ee:37:9f:8e:b1:1f:6c:35:88:f2: 2d:3c:ec:a1:10:be:8f:72:c8:91:9c:b2:9b:76:c6: 14:b5:02:3b:91:21:ce:15:a3:97:31:23:3b:b4:6f: 3d:d9:00:d9:20:f5:30:8d:86:d7:9d:b6:d6:67:fe: 51:1a:30:24:b7:7a:c9:ab:78:3f:b3:18:c0:08:f0: c7:98:77:30:fa:20:4d:57:a7:74:fb:69:0f:ef:44: 34:49:48:94:ad:0a:eb:ba:14:c9:8b:c7:1f:73:0a: 2b:ef:29:c0:b6:d3:ae:fa:4c:85:10:fe:6c:11:0c: 69:d9:5b:ba:03:1f:0c:ea:df:f9:a9:e4:82:7b:5e: 26:88:2c:97:34:55:3d:26:45:d8:cd:d9:87:be:d2: 62:db:9d:f0:80:d0:73:9c:26:33:8d:69:ea:01:7f: 91:9a:0f:2c:75:2f:7c:57:dd:4c:19:b8:e4:5d:6c: ca:c7:a5:7e:6b:a8:72:df:6e:e3:b0:be:95:22:5b: 35:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:50:C6:15:15:F1:52:D2:C1:87:D4:D6:03:8A:67:52:CD:2E:7B:73 X509v3 Authority Key Identifier: keyid:6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:dd:51:a6:e0:6b:67:26:a9:0d:7d:7f:1f:3c:c6:7a:49:95: 4e:36:eb:57:fa:7e:ab:3e:83:b8:c5:de:3c:be:6c:69:5d:a6: 9d:d1:32:97:ab:87:77:af:cd:fe:e7:81:29:f3:56:f5:f5:af: 58:aa:fe:42:5d:bd:d4:aa:10:6a:92:91:72:ad:b1:b6:df:3f: 18:04:9b:cd:0d:da:52:70:cd:a4:04:8d:e2:bf:2f:2c:02:61: c7:28:b0:7b:2c:18:a4:09:0b:df:f6:4d:93:d9:24:fc:17:06: df:e7:98:99:85:f9:99:d6:39:3d:d3:56:f8:a1:22:01:c1:46: 56:94:92:d4:9e:89:1b:d4:72:9d:bf:d3:19:b0:f1:7b:7a:db: c4:4b:0b:4a:26:1f:66:4e:80:35:70:aa:0f:cd:c3:19:d3:3d: 92:3f:9a:8c:fd:6a:11:19:12:f5:7c:7a:30:1e:35:a4:92:e5: d7:32:54:04:37:ae:43:11:57:ba:78:a1:08:fe:2e:d7:0c:42: f1:28:ad:bb:f7:b6:55:ff:19:ea:f3:f7:14:1e:c8:f6:f9:78: 6a:ac:12:39:2a:be:5b:b5:47:8f:36:e9:de:01:63:8e:86:95: 99:1e:7b:82:0c:31:0d:af:d4:ac:2d:87:f4:62:31:02:fa:10: 7a:87:b3:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJDOEExMTAvBgNVBAUTKDZDRTdCNTc1MEU2RTE3RDNEMzlFQjVCMDg3RkQzRkFE NTk1OUYzMjUwHhcNMjUwNzAzMDU1NDUyWhcNMjUwNzEwMDU1NDUyWjAYMRYwFAYD VQQDEw02ODY2MWIyYy04MzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnZKcW3a1x6lTIpKLDNKL1EbG3GQeFBY5NInb4nKzPdslUgjvoFyAOBbAYYf5 oYc8v1oE0Lc/5d04O0f31oy3D+43n46xH2w1iPItPOyhEL6PcsiRnLKbdsYUtQI7 kSHOFaOXMSM7tG892QDZIPUwjYbXnbbWZ/5RGjAkt3rJq3g/sxjACPDHmHcw+iBN V6d0+2kP70Q0SUiUrQrruhTJi8cfcwor7ynAttOu+kyFEP5sEQxp2Vu6Ax8M6t/5 qeSCe14miCyXNFU9JkXYzdmHvtJi253wgNBznCYzjWnqAX+Rmg8sdS98V91MGbjk XWzKx6V+a6hy327jsL6VIls1eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHpQxhUV 8VLSwYfU1gOKZ1LNLntzMB8GA1UdIwQYMBaAFGzntXUObhfT0561sIf9P61ZWfMl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkM4QS82MUVDNDkxNjI0 QzkxMUVGOUM4QzYyNTlDNEY5QUUwMi9iT2UxZFE1dUY5UFRucld3aF8wX3JWbFo4 eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JPZTFkUTV1RjlQVG5yV3doXzBfclZsWjh5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkM4QS82MUVDNDkxNjI0QzkxMUVGOUM4QzYyNTlDNEY5QUUwMi9iT2UxZFE1dUY5 UFRucld3aF8wX3JWbFo4eVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJ3VGm4GtnJqkNfX8fPMZ6SZVONutX+n6rPoO4xd48vmxpXaad0TKX q4d3r83+54Ep81b19a9Yqv5CXb3UqhBqkpFyrbG23z8YBJvNDdpScM2kBI3ivy8s AmHHKLB7LBikCQvf9k2T2ST8Fwbf55iZhfmZ1jk901b4oSIBwUZWlJLUnokb1HKd v9MZsPF7etvESwtKJh9mToA1cKoPzcMZ0z2SP5qM/WoRGRL1fHowHjWkkuXXMlQE N65DEVe6eKEI/i7XDELxKK2797ZV/xnq8/cUHsj2+XhqrBI5Kr5btUePNuneAWOO hpWZHnuCDDENr9SsLYf0YjEC+hB6h7MP -----END CERTIFICATE-----Generated at Thu Jul 3 14:38:51 2025 by rpki-client