$ rpki-client -vvf rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.mft File: OochbBWSc79Rk0f8H-5wYZXMKuY.mft (raw, json) Hash identifier: vA0WzMvpu8QkwBiniqRqR0GOUvsHGIYXEboR+FZbBh8= Subject key identifier: 27:DF:E0:8C:04:22:0C:D3:D0:7E:B6:1C:96:3D:94:F7:9E:A5:BB:74 Authority key identifier: 3A:87:21:6C:15:92:73:BF:51:93:47:FC:1F:EE:70:61:95:CC:2A:E6 Certificate issuer: /CN=A91C661C/serialNumber=3A87216C159273BF519347FC1FEE706195CC2AE6 Certificate serial: 06AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OochbBWSc79Rk0f8H-5wYZXMKuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.mft Manifest number: 06A1 Signing time: Wed 02 Jul 2025 22:29:56 +0000 Manifest this update: Wed 02 Jul 2025 22:29:56 +0000 Manifest next update: Wed 09 Jul 2025 22:29:56 +0000 Files and hashes: 1: OochbBWSc79Rk0f8H-5wYZXMKuY.crl (hash: okSmJ8YNYUjj8IwJN5X4pvIjpD/qAihmbrtpJ1CAfw4=) 2: AABC79100EC411EF858B5255C4F9AE02.roa (hash: xd+kZGDM6lidBL503M6KRPrbZpmB555muvLLsOdJRog=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.crl rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OochbBWSc79Rk0f8H-5wYZXMKuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:29:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1708 (0x6ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C661C, serialNumber=3A87216C159273BF519347FC1FEE706195CC2AE6 Validity Not Before: Jul 2 22:29:56 2025 GMT Not After : Jul 9 22:29:56 2025 GMT Subject: CN=6865b2e4-d8b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0c:6f:65:9e:07:ec:40:59:29:b5:46:9e:fd: 79:19:c8:41:8b:bb:99:ea:8e:7c:0c:50:bd:9e:47: 8b:42:0e:2d:b3:d1:4f:05:d2:a2:2e:5d:a2:bb:d4: 91:2d:e4:d1:be:c1:5e:9f:fa:6e:e2:bd:7a:3a:d2: 2e:ba:a8:83:96:6d:12:d8:98:7b:58:17:c2:5b:e3: 1a:f4:64:90:ce:cb:1c:69:3f:9b:10:82:49:a0:f3: 2f:8b:f5:a3:ff:2a:5c:7a:a6:64:63:60:0b:4f:02: 68:f7:2b:86:a1:f8:92:8a:3b:37:61:7a:3b:a8:27: 4b:1d:f7:2d:a4:fc:68:f4:f8:55:9e:15:51:ec:1f: fb:12:56:cf:80:16:fe:a9:ee:04:b3:d7:4e:be:17: b0:65:85:f3:5f:3e:3f:02:5f:e8:3f:98:3d:cc:7f: 1f:95:1a:bc:d2:22:6a:77:a2:d2:73:45:99:69:1e: 28:05:91:74:37:ad:8e:56:59:a2:32:ea:fe:9a:42: 58:c1:e0:ea:00:50:1d:7b:7e:8c:e1:d5:46:a3:72: e7:de:e8:d7:2c:6b:9e:6a:10:3b:be:40:45:2a:c8: 3c:f6:0a:ec:b4:d2:8f:ba:98:e0:b9:75:36:64:85: 16:ea:b0:76:1a:01:01:e7:87:2a:5d:7d:70:ca:69: 27:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:DF:E0:8C:04:22:0C:D3:D0:7E:B6:1C:96:3D:94:F7:9E:A5:BB:74 X509v3 Authority Key Identifier: keyid:3A:87:21:6C:15:92:73:BF:51:93:47:FC:1F:EE:70:61:95:CC:2A:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OochbBWSc79Rk0f8H-5wYZXMKuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:2f:cd:a5:ad:64:46:52:e3:39:a1:79:92:2e:b9:35:89:f1: 0b:41:aa:9a:32:ef:c9:60:c8:09:f1:63:c7:69:bb:f8:07:af: 17:30:ef:d2:84:76:03:88:bf:3b:60:91:f9:73:a2:bd:6f:91: 43:9d:e0:53:d8:a7:fd:2e:23:d1:2d:3b:c3:aa:6d:1f:d5:de: d8:9b:28:6b:47:c8:ed:ae:ba:67:18:42:c0:ce:bc:86:0c:c3: 87:ab:37:97:4a:8f:00:d3:e6:2b:f8:6d:30:f9:be:80:70:22: cc:5f:bf:c6:ed:a8:a8:3c:6b:c2:e6:3d:82:6e:4d:e0:0c:e6: 56:dd:0a:b5:19:5e:3a:4d:b3:da:39:71:96:89:53:0c:35:16: 69:7e:4d:a7:be:be:0a:43:34:f6:d8:2a:7f:e8:01:a0:28:7e: c4:34:c8:5b:1b:02:be:7c:77:2f:81:e9:9a:cd:9e:4c:09:c9: 2a:bc:14:4b:e2:3c:c8:3b:58:f3:a0:ff:65:0a:d6:01:2d:fe: 44:de:e5:f0:51:0a:25:46:91:48:60:31:17:4f:6a:1b:ce:61: 90:3f:28:c4:86:27:8d:e3:28:6e:ce:e0:94:17:6a:cb:5f:ad: b4:eb:78:34:6e:ae:05:ea:05:53:fc:df:8b:54:12:49:cc:46: 3a:f2:6e:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY2MUMxMTAvBgNVBAUTKDNBODcyMTZDMTU5MjczQkY1MTkzNDdGQzFGRUU3MDYx OTVDQzJBRTYwHhcNMjUwNzAyMjIyOTU2WhcNMjUwNzA5MjIyOTU2WjAYMRYwFAYD VQQDEw02ODY1YjJlNC1kOGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzQxvZZ4H7EBZKbVGnv15GchBi7uZ6o58DFC9nkeLQg4ts9FPBdKiLl2iu9SR LeTRvsFen/pu4r16OtIuuqiDlm0S2Jh7WBfCW+Ma9GSQzsscaT+bEIJJoPMvi/Wj /ypceqZkY2ALTwJo9yuGofiSijs3YXo7qCdLHfctpPxo9PhVnhVR7B/7ElbPgBb+ qe4Es9dOvhewZYXzXz4/Al/oP5g9zH8flRq80iJqd6LSc0WZaR4oBZF0N62OVlmi Mur+mkJYweDqAFAde36M4dVGo3Ln3ujXLGueahA7vkBFKsg89grstNKPupjguXU2 ZIUW6rB2GgEB54cqXX1wymknGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCff4IwE IgzT0H62HJY9lPeepbt0MB8GA1UdIwQYMBaAFDqHIWwVknO/UZNH/B/ucGGVzCrm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjYxQy9GNDU5Mjk5Mjcz NzIxMUVCOTQ3NUNBNURDNEY5QUUwMi9Pb2NoYkJXU2M3OVJrMGY4SC01d1laWE1L dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09vY2hiQldTYzc5UmswZjhILTV3WVpYTUt1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjYxQy9GNDU5Mjk5MjczNzIxMUVCOTQ3NUNBNURDNEY5QUUwMi9Pb2NoYkJXU2M3 OVJrMGY4SC01d1laWE1LdVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlL82lrWRGUuM5oXmSLrk1ifELQaqaMu/JYMgJ8WPHabv4B68XMO/S hHYDiL87YJH5c6K9b5FDneBT2Kf9LiPRLTvDqm0f1d7YmyhrR8jtrrpnGELAzryG DMOHqzeXSo8A0+Yr+G0w+b6AcCLMX7/G7aioPGvC5j2Cbk3gDOZW3Qq1GV46TbPa OXGWiVMMNRZpfk2nvr4KQzT22Cp/6AGgKH7ENMhbGwK+fHcvgemazZ5MCckqvBRL 4jzIO1jzoP9lCtYBLf5E3uXwUQolRpFIYDEXT2obzmGQPyjEhieN4yhuzuCUF2rL X62063g0bq4F6gVT/N+LVBJJzEY68m7w -----END CERTIFICATE-----Generated at Fri Jul 4 21:47:23 2025 by rpki-client