$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft File: OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft (raw, json) Hash identifier: HB+oKpp/ifW0qWsjJJ3BOzEeXtyWZtbECSPr8Lhnr6U= Subject key identifier: 96:50:B6:5C:84:71:2A:43:E1:4A:16:30:43:85:7F:21:09:28:71:68 Authority key identifier: 3A:14:94:25:BE:32:85:D6:11:4B:01:F6:C2:FC:88:A1:7A:FF:4B:EC Certificate issuer: /CN=A91CAB4E/serialNumber=3A149425BE3285D6114B01F6C2FC88A17AFF4BEC Certificate serial: 139B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhSUJb4yhdYRSwH2wvyIoXr_S-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft Manifest number: 1392 Signing time: Wed 02 Jul 2025 17:09:14 +0000 Manifest this update: Wed 02 Jul 2025 17:09:14 +0000 Manifest next update: Wed 09 Jul 2025 17:09:14 +0000 Files and hashes: 1: OhSUJb4yhdYRSwH2wvyIoXr_S-w.crl (hash: g1K1LwZXEwgmO6TN9xS59D/h2NB9vN/10zN+wFCK5m8=) 2: 7F662C72997011E8B0FDEF57C4F9AE02.roa (hash: c+PuAbIml2jBjPavn1IEZDbXlxGsrH9yX4XnYZy8fpU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.crl rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhSUJb4yhdYRSwH2wvyIoXr_S-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:09:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5019 (0x139b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAB4E, serialNumber=3A149425BE3285D6114B01F6C2FC88A17AFF4BEC Validity Not Before: Jul 2 17:09:14 2025 GMT Not After : Jul 9 17:09:14 2025 GMT Subject: CN=686567ba-9788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6b:4e:70:dc:79:6b:85:bd:2f:10:c7:06:d8: 99:f9:7a:bc:92:bc:5a:66:e4:f8:0d:30:58:c7:04: 87:d0:dd:fb:6a:86:e4:09:de:78:bd:46:f4:30:41: 3c:5e:18:a8:41:c9:f6:13:44:c2:40:d6:ef:1e:62: e4:37:c1:3d:1b:38:13:44:16:91:1f:d8:b7:6a:57: 1a:3d:32:95:e4:a0:ba:6d:72:e9:7b:c5:77:ca:82: 08:4b:ea:4a:29:09:ad:09:cb:17:db:c9:18:70:2f: 55:1d:5f:bd:a8:db:cd:39:bd:f3:ea:7b:f5:59:2b: 25:e2:d0:07:a4:2e:7c:38:06:b3:14:63:63:fa:b6: 95:ff:d3:03:12:88:db:f8:7f:70:2d:b8:be:ca:09: 88:73:d5:43:21:ff:55:d1:7c:16:60:ac:5f:66:fd: 8e:26:46:72:18:66:a2:16:dc:4d:8c:b4:60:92:ce: be:ea:1a:35:03:e1:23:9f:d7:43:ca:e6:56:c3:84: 10:80:d9:3c:3d:1a:33:84:ed:d9:8c:96:d8:9d:60: a1:49:eb:38:c2:bc:e5:db:ec:79:5c:14:6f:10:d7: e8:21:b2:97:54:cd:c2:c9:05:35:44:56:bf:55:55: 4a:4b:36:6c:2c:ce:ac:ab:c6:82:39:e9:7a:fb:a5: d9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:50:B6:5C:84:71:2A:43:E1:4A:16:30:43:85:7F:21:09:28:71:68 X509v3 Authority Key Identifier: keyid:3A:14:94:25:BE:32:85:D6:11:4B:01:F6:C2:FC:88:A1:7A:FF:4B:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhSUJb4yhdYRSwH2wvyIoXr_S-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:1d:82:70:73:83:46:53:0d:a2:f5:c1:01:30:f8:20:bf:c5: 0d:f4:bf:1e:48:1c:eb:83:f7:74:4d:12:94:f6:42:d2:a3:93: 47:e4:6d:8f:f1:92:47:0b:38:1f:71:ab:c8:c7:ef:85:b9:8c: d8:7c:77:c3:cf:4d:97:0e:c0:a1:65:33:26:df:88:a1:15:e5: 15:c6:f6:9e:b3:38:96:bc:4a:2b:99:03:11:bd:54:9f:f1:dd: f8:cd:91:bc:90:b5:90:45:66:da:67:24:9b:d3:dd:1d:7f:29: 2d:4c:d2:4e:77:b5:11:ba:bd:b1:25:b0:ba:f3:f0:37:0b:f3: 0c:4f:eb:1f:b7:5f:84:34:15:0a:b9:91:1c:c7:cc:89:3d:cb: 6a:4c:a5:eb:81:f0:79:f4:f8:d8:35:d5:9d:41:38:d8:9a:2e: 26:6e:4b:33:4a:2b:52:87:1e:e6:50:a8:42:70:36:5f:8c:89: 06:04:33:65:df:d1:38:9d:b2:cf:ee:d0:37:08:3f:44:45:8c: 5a:59:cd:1a:71:35:1f:bb:41:aa:1f:a9:b6:ec:d8:4e:1a:c3: 71:b0:78:c1:cd:69:14:d6:81:0c:4f:b2:25:c0:42:3a:9d:6e: e9:af:3e:49:b5:5b:0c:f5:76:c6:73:5b:58:db:a1:30:98:1d: 00:35:e6:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE5swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FCNEUxMTAvBgNVBAUTKDNBMTQ5NDI1QkUzMjg1RDYxMTRCMDFGNkMyRkM4OEEx N0FGRjRCRUMwHhcNMjUwNzAyMTcwOTE0WhcNMjUwNzA5MTcwOTE0WjAYMRYwFAYD VQQDEw02ODY1NjdiYS05Nzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqmtOcNx5a4W9LxDHBtiZ+Xq8krxaZuT4DTBYxwSH0N37aobkCd54vUb0MEE8 XhioQcn2E0TCQNbvHmLkN8E9GzgTRBaRH9i3alcaPTKV5KC6bXLpe8V3yoIIS+pK KQmtCcsX28kYcC9VHV+9qNvNOb3z6nv1WSsl4tAHpC58OAazFGNj+raV/9MDEojb +H9wLbi+ygmIc9VDIf9V0XwWYKxfZv2OJkZyGGaiFtxNjLRgks6+6ho1A+Ejn9dD yuZWw4QQgNk8PRozhO3ZjJbYnWChSes4wrzl2+x5XBRvENfoIbKXVM3CyQU1RFa/ VVVKSzZsLM6sq8aCOel6+6XZrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJZQtlyE cSpD4UoWMEOFfyEJKHFoMB8GA1UdIwQYMBaAFDoUlCW+MoXWEUsB9sL8iKF6/0vs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUI0RS8yQ0E0NzA2Njk5 NzAxMUU4ODYxREQwNTdDNEY5QUUwMi9PaFNVSmI0eWhkWVJTd0gyd3Z5SW9Ycl9T LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09oU1VKYjR5aGRZUlN3SDJ3dnlJb1hyX1Mtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUI0RS8yQ0E0NzA2Njk5NzAxMUU4ODYxREQwNTdDNEY5QUUwMi9PaFNVSmI0eWhk WVJTd0gyd3Z5SW9Ycl9TLXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5HYJwc4NGUw2i9cEBMPggv8UN9L8eSBzrg/d0TRKU9kLSo5NH5G2P 8ZJHCzgfcavIx++FuYzYfHfDz02XDsChZTMm34ihFeUVxvaesziWvEormQMRvVSf 8d34zZG8kLWQRWbaZySb090dfyktTNJOd7URur2xJbC68/A3C/MMT+sft1+ENBUK uZEcx8yJPctqTKXrgfB59PjYNdWdQTjYmi4mbkszSitShx7mUKhCcDZfjIkGBDNl 39E4nbLP7tA3CD9ERYxaWc0acTUfu0GqH6m27NhOGsNxsHjBzWkU1oEMT7IlwEI6 nW7prz5JtVsM9XbGc1tY26EwmB0ANeYt -----END CERTIFICATE-----Generated at Thu Jul 3 15:05:51 2025 by rpki-client