$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/owQJVBg5BUscPhXRmD19vYp9ZII.mft File: owQJVBg5BUscPhXRmD19vYp9ZII.mft (raw, json) Hash identifier: 5IhafvTj2/AH3xOBwRyf4UrW4l4O1LudoLp8RKr3S4M= Subject key identifier: 1D:7E:D7:C0:06:7B:02:29:8D:DE:96:FB:AB:74:04:23:70:94:6B:41 Authority key identifier: A3:04:09:54:18:39:05:4B:1C:3E:15:D1:98:3D:7D:BD:8A:7D:64:82 Certificate issuer: /CN=A91D9E03/serialNumber=A30409541839054B1C3E15D1983D7DBD8A7D6482 Certificate serial: 03AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owQJVBg5BUscPhXRmD19vYp9ZII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/owQJVBg5BUscPhXRmD19vYp9ZII.mft Manifest number: 03A7 Signing time: Tue 01 Jul 2025 01:19:07 +0000 Manifest this update: Tue 01 Jul 2025 01:19:07 +0000 Manifest next update: Tue 08 Jul 2025 01:19:07 +0000 Files and hashes: 1: owQJVBg5BUscPhXRmD19vYp9ZII.crl (hash: gEiw+amH7yv57Pu+yX1OMX0f1b/e4LATdbb3H16mEp8=) 2: 521DCED89C5911EC97E58855C4F9AE02.roa (hash: K/6Sxmjn7Y9RMsh3D/CkcDPEvNJggoP2DR+Gq8xtxL8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/owQJVBg5BUscPhXRmD19vYp9ZII.crl rsync://rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/owQJVBg5BUscPhXRmD19vYp9ZII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owQJVBg5BUscPhXRmD19vYp9ZII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:19:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 939 (0x3ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9E03, serialNumber=A30409541839054B1C3E15D1983D7DBD8A7D6482 Validity Not Before: Jul 1 01:19:07 2025 GMT Not After : Jul 8 01:19:07 2025 GMT Subject: CN=6863378b-59e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ff:c1:71:bd:45:9f:d5:b2:41:8c:1f:ef:c6: d3:e7:ee:64:09:ab:39:3d:8b:22:b9:1a:2e:f5:a2: e4:dc:b9:b1:ad:e1:6f:a2:b6:7b:2d:e9:f0:d3:cc: 25:f7:95:9c:a3:42:7f:21:f6:68:12:81:72:2b:5b: 7c:8b:33:a3:ae:3e:c4:70:5d:a5:30:4d:d3:ff:6f: ff:25:9e:13:d3:18:e9:1a:63:6f:0d:e0:36:9d:e6: a0:56:26:b5:cb:3a:bb:df:0e:92:3e:a8:3b:37:03: 79:e0:01:9d:16:5f:6d:04:22:7c:ac:90:b0:2e:1e: bf:3f:1a:8b:94:6e:5f:ae:ff:61:9b:3f:96:fd:a2: 23:6f:bb:bf:b4:2d:a4:25:6e:f7:77:b0:17:76:ee: a8:ab:d7:e5:05:2f:c5:28:d5:86:16:a2:a6:1a:b9: 54:15:59:f6:c0:17:f6:17:d4:c4:d9:dd:13:cf:ed: 3c:b5:83:f8:e4:b3:12:b5:99:ca:2c:15:eb:3e:ec: c4:f8:4a:d2:6b:75:5a:2f:bc:22:75:f3:2f:b3:45: 87:ed:3a:cf:77:af:bc:ad:10:ca:c4:81:5b:b7:bf: 52:70:b8:43:08:96:80:9f:d6:62:fb:d0:07:a0:3e: 33:79:c4:08:f9:ed:15:fb:18:7b:3b:f8:09:a7:26: 1c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:7E:D7:C0:06:7B:02:29:8D:DE:96:FB:AB:74:04:23:70:94:6B:41 X509v3 Authority Key Identifier: keyid:A3:04:09:54:18:39:05:4B:1C:3E:15:D1:98:3D:7D:BD:8A:7D:64:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/owQJVBg5BUscPhXRmD19vYp9ZII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owQJVBg5BUscPhXRmD19vYp9ZII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/owQJVBg5BUscPhXRmD19vYp9ZII.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:13:78:ba:14:4e:21:57:6d:b7:88:f1:5e:c2:22:d1:97:39: 1d:51:17:c1:17:3d:97:6e:1d:36:2d:4c:4e:de:4d:56:2b:31: c3:37:45:b7:58:ad:6d:20:2d:4a:3c:44:75:94:20:81:6f:17: a2:62:73:ef:09:09:7f:e3:29:47:f9:3b:cb:3c:74:e6:ca:a9: f7:a3:02:9a:f5:5d:a5:0f:3b:9e:c0:a6:79:ac:63:63:19:ba: 87:0e:9e:15:ce:e1:75:b8:1e:ea:47:b0:a8:57:01:60:c0:6a: 35:9c:48:7e:6d:f2:7f:24:2a:0b:95:09:c0:68:bb:1b:0d:7c: b4:8c:b6:ab:5d:5e:b5:42:64:10:66:83:e2:e9:93:69:45:46: 66:d5:55:c6:8e:a9:7b:67:d4:07:7a:39:37:8d:e8:52:0d:8c: 67:a7:09:21:54:db:a1:5d:b2:3a:55:65:ae:54:7d:09:c3:e9: 9f:48:b0:cd:e5:5d:a0:83:3b:0b:e5:02:04:72:ce:e2:5e:f8: 90:6c:3a:d4:eb:db:9d:eb:2b:d5:06:24:4c:a2:4b:83:ec:39: 12:39:3d:fe:5b:0c:1e:b6:c3:74:6e:1c:20:17:3c:09:d1:9c: 80:29:08:6b:d0:c4:9f:18:c2:a8:69:df:f9:04:86:11:75:23: 16:d7:4c:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlFMDMxMTAvBgNVBAUTKEEzMDQwOTU0MTgzOTA1NEIxQzNFMTVEMTk4M0Q3REJE OEE3RDY0ODIwHhcNMjUwNzAxMDExOTA3WhcNMjUwNzA4MDExOTA3WjAYMRYwFAYD VQQDEw02ODYzMzc4Yi01OWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuP/Bcb1Fn9WyQYwf78bT5+5kCas5PYsiuRou9aLk3LmxreFvorZ7Lenw08wl 95Wco0J/IfZoEoFyK1t8izOjrj7EcF2lME3T/2//JZ4T0xjpGmNvDeA2neagVia1 yzq73w6SPqg7NwN54AGdFl9tBCJ8rJCwLh6/PxqLlG5frv9hmz+W/aIjb7u/tC2k JW73d7AXdu6oq9flBS/FKNWGFqKmGrlUFVn2wBf2F9TE2d0Tz+08tYP45LMStZnK LBXrPuzE+ErSa3VaL7widfMvs0WH7TrPd6+8rRDKxIFbt79ScLhDCJaAn9Zi+9AH oD4zecQI+e0V+xh7O/gJpyYc8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB1+18AG ewIpjd6W+6t0BCNwlGtBMB8GA1UdIwQYMBaAFKMECVQYOQVLHD4V0Zg9fb2KfWSC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUUwMy85OTZBN0U4ODlD NTYxMUVDQkRFRTA1NTNDNEY5QUUwMi9vd1FKVkJnNUJVc2NQaFhSbUQxOXZZcDla SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL293UUpWQmc1QlVzY1BoWFJtRDE5dllwOVpJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUUwMy85OTZBN0U4ODlDNTYxMUVDQkRFRTA1NTNDNEY5QUUwMi9vd1FKVkJnNUJV c2NQaFhSbUQxOXZZcDlaSUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiE3i6FE4hV223iPFewiLRlzkdURfBFz2Xbh02LUxO3k1WKzHDN0W3 WK1tIC1KPER1lCCBbxeiYnPvCQl/4ylH+TvLPHTmyqn3owKa9V2lDzuewKZ5rGNj GbqHDp4VzuF1uB7qR7CoVwFgwGo1nEh+bfJ/JCoLlQnAaLsbDXy0jLarXV61QmQQ ZoPi6ZNpRUZm1VXGjql7Z9QHejk3jehSDYxnpwkhVNuhXbI6VWWuVH0Jw+mfSLDN 5V2ggzsL5QIEcs7iXviQbDrU69ud6yvVBiRMokuD7DkSOT3+WwwetsN0bhwgFzwJ 0ZyAKQhr0MSfGMKoad/5BIYRdSMW10wa -----END CERTIFICATE-----Generated at Tue Jul 1 04:23:53 2025 by rpki-client