$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft File: _oJu6bwS2q07GXRxsEE_HrIIJjU.mft (raw, json) Hash identifier: li1klUpcv/8AOwluF2s+p+8GtoazSX7t3fU6RS8Xnw4= Subject key identifier: F6:19:15:58:C7:E6:73:15:D5:59:73:E2:B8:CB:74:38:F3:E9:9D:BC Authority key identifier: FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35 Certificate issuer: /CN=A91CEBCA/serialNumber=FE826EE9BC12DAAD3B197471B0413F1EB2082635 Certificate serial: 34C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft Manifest number: 34B0 Signing time: Wed 02 Jul 2025 14:30:51 +0000 Manifest this update: Wed 02 Jul 2025 14:30:51 +0000 Manifest next update: Wed 09 Jul 2025 14:30:51 +0000 Files and hashes: 1: _oJu6bwS2q07GXRxsEE_HrIIJjU.crl (hash: ykIK1fMSiaWQxlDry3tjBKJ58sjnngC8tVLwQh84yag=) 2: 3BB279343A4C11F09EE4062EC4F9AE02.roa (hash: EUAq0b6vFZHqG0NFz8v3UvIwZhKTrOh+6DkoF6jgH7I=) 3: 9954B962F02D11EFBA26B94FC4F9AE02.roa (hash: ispiyRde3IxZPG0KNxY3BpmgVhlnDLIsiApuDlDjYFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.crl rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:30:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13507 (0x34c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEBCA, serialNumber=FE826EE9BC12DAAD3B197471B0413F1EB2082635 Validity Not Before: Jul 2 14:30:51 2025 GMT Not After : Jul 9 14:30:51 2025 GMT Subject: CN=6865429b-6563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e1:2b:71:89:21:e6:19:13:2a:4d:b3:7e:aa: 8b:7c:27:80:68:30:08:84:a8:79:de:2c:63:ef:89: a2:ce:af:b0:1f:6d:d5:99:e6:3b:ff:b4:93:fd:65: e1:d8:8c:fb:52:74:f0:65:3c:00:4d:10:60:90:6b: 4d:b7:c6:b3:29:04:88:f8:74:38:34:d7:04:d0:d9: 1d:a5:3c:c6:b4:cd:f8:da:4d:7e:30:0a:0c:d4:ed: b4:45:bd:70:b8:15:5c:c7:8f:28:94:5c:b9:23:c2: 63:c6:e7:97:dd:9d:75:70:dd:f6:e2:83:df:31:f8: 61:a8:6a:c4:f0:d1:f6:ec:2f:b0:55:62:ca:6a:bd: b0:fd:18:8d:5e:fb:b2:cb:3c:08:47:12:94:ad:e6: 74:9d:97:77:e5:10:eb:cb:5c:49:40:e9:7d:ed:68: da:04:bd:b4:5c:d1:5d:32:d0:6e:0b:8c:9d:c6:10: 5c:90:50:0a:68:94:76:7f:1c:f5:9a:80:c8:52:ee: 21:c9:e6:7d:73:23:2d:bd:31:3c:42:07:c7:ae:47: 9d:23:ae:7b:39:b5:c8:85:ce:75:d4:24:fd:44:df: ed:38:22:a5:17:80:56:ae:41:20:16:15:1b:b1:8b: 67:d3:28:c6:17:7e:81:40:0a:97:48:2d:da:b9:22: 9f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:19:15:58:C7:E6:73:15:D5:59:73:E2:B8:CB:74:38:F3:E9:9D:BC X509v3 Authority Key Identifier: keyid:FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:39:77:b0:02:e3:e7:7f:32:9b:88:0e:8f:e0:53:9b:98:c1: 89:fc:1c:7c:74:17:4b:e2:ee:a3:2c:b8:4c:66:95:e9:e4:a1: 28:5a:bd:9b:0f:91:6d:fe:57:52:74:c5:80:ad:21:68:22:17: bb:6e:1e:6c:bb:91:ae:d7:a6:65:36:1b:03:d3:09:7d:01:cf: 19:31:a7:3e:88:12:c3:16:f7:70:02:30:7e:f1:bb:d8:8d:25: 05:11:1f:c6:b3:ab:b9:9a:eb:e0:6e:45:f7:93:87:1c:e6:e7: 17:ea:82:9d:0f:94:f3:22:eb:a3:55:5a:65:e4:54:13:dd:b3: 44:5d:d6:95:e7:1b:85:94:04:be:43:ea:50:06:a9:b5:06:3e: 04:5c:a1:64:92:d4:60:0e:f8:35:81:61:44:c7:94:d1:8e:f6: 96:ff:5d:f6:63:e3:61:18:a0:32:36:10:d5:2d:e2:b8:b8:04: 6f:95:27:dd:cd:a4:27:fd:84:52:6c:06:a8:73:72:d2:0b:d4: 19:8e:3f:5b:e5:2e:44:e5:5b:39:63:2e:45:2f:a8:78:bb:0f: d0:84:d7:1c:34:d2:cc:3d:32:b9:f2:83:e8:4a:f5:43:07:67: f9:ba:e5:a3:0c:30:54:77:e3:bf:f0:d2:a3:14:bc:bc:fb:ec: 89:eb:2e:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VCQ0ExMTAvBgNVBAUTKEZFODI2RUU5QkMxMkRBQUQzQjE5NzQ3MUIwNDEzRjFF QjIwODI2MzUwHhcNMjUwNzAyMTQzMDUxWhcNMjUwNzA5MTQzMDUxWjAYMRYwFAYD VQQDEw02ODY1NDI5Yi02NTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyuErcYkh5hkTKk2zfqqLfCeAaDAIhKh53ixj74mizq+wH23VmeY7/7ST/WXh 2Iz7UnTwZTwATRBgkGtNt8azKQSI+HQ4NNcE0NkdpTzGtM342k1+MAoM1O20Rb1w uBVcx48olFy5I8JjxueX3Z11cN324oPfMfhhqGrE8NH27C+wVWLKar2w/RiNXvuy yzwIRxKUreZ0nZd35RDry1xJQOl97WjaBL20XNFdMtBuC4ydxhBckFAKaJR2fxz1 moDIUu4hyeZ9cyMtvTE8QgfHrkedI657ObXIhc511CT9RN/tOCKlF4BWrkEgFhUb sYtn0yjGF36BQAqXSC3auSKfAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPYZFVjH 5nMV1Vlz4rjLdDjz6Z28MB8GA1UdIwQYMBaAFP6Cbum8EtqtOxl0cbBBPx6yCCY1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUJDQS9CNTg4QjRBNjFE ODgxMUUyOENBRThGRTEwOEIwMkNEMi9fb0p1NmJ3UzJxMDdHWFJ4c0VFX0hySUlK alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19vSnU2YndTMnEwN0dYUnhzRUVfSHJJSUpqVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUJDQS9CNTg4QjRBNjFEODgxMUUyOENBRThGRTEwOEIwMkNEMi9fb0p1NmJ3UzJx MDdHWFJ4c0VFX0hySUlKalUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFOXewAuPnfzKbiA6P4FObmMGJ/Bx8dBdL4u6jLLhMZpXp5KEoWr2b D5Ft/ldSdMWArSFoIhe7bh5su5Gu16ZlNhsD0wl9Ac8ZMac+iBLDFvdwAjB+8bvY jSUFER/Gs6u5muvgbkX3k4cc5ucX6oKdD5TzIuujVVpl5FQT3bNEXdaV5xuFlAS+ Q+pQBqm1Bj4EXKFkktRgDvg1gWFEx5TRjvaW/132Y+NhGKAyNhDVLeK4uARvlSfd zaQn/YRSbAaoc3LSC9QZjj9b5S5E5Vs5Yy5FL6h4uw/QhNccNNLMPTK58oPoSvVD B2f5uuWjDDBUd+O/8NKjFLy8++yJ6y67 -----END CERTIFICATE-----Generated at Thu Jul 3 13:30:15 2025 by rpki-client