$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.mft File: oAM_SUNjDclOLd9fKmuI6GZGGuc.mft (raw, json) Hash identifier: FaFEhC3v6gZWiClBxU/DHeVIewmbGjN44d1l+ssBWnA= Subject key identifier: 81:A6:D8:09:27:44:06:7B:C9:B7:28:96:79:5C:73:FE:DE:01:04:5B Authority key identifier: A0:03:3F:49:43:63:0D:C9:4E:2D:DF:5F:2A:6B:88:E8:66:46:1A:E7 Certificate issuer: /CN=A91DC0F2/serialNumber=A0033F4943630DC94E2DDF5F2A6B88E866461AE7 Certificate serial: E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oAM_SUNjDclOLd9fKmuI6GZGGuc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.mft Manifest number: E3 Signing time: Sun 29 Jun 2025 04:32:46 +0000 Manifest this update: Sun 29 Jun 2025 04:32:46 +0000 Manifest next update: Sun 06 Jul 2025 04:32:46 +0000 Files and hashes: 1: oAM_SUNjDclOLd9fKmuI6GZGGuc.crl (hash: kap44ximifFFzcNxmk7GLffSYm+yc/LAxGa4iZd7RpQ=) 2: EE647C1418A411EFBA690F60C4F9AE02.roa (hash: 1sKQhDe4XE+z/iEwFOdjuVVtLfzSNo7ytvziBnxPEOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.crl rsync://rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oAM_SUNjDclOLd9fKmuI6GZGGuc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 04:32:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 231 (0xe7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC0F2, serialNumber=A0033F4943630DC94E2DDF5F2A6B88E866461AE7 Validity Not Before: Jun 29 04:32:46 2025 GMT Not After : Jul 6 04:32:46 2025 GMT Subject: CN=6860c1ee-68fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:fa:ef:00:5c:6a:f9:6e:4c:d8:91:93:db:23: 33:f2:ed:14:b4:44:8c:5c:d4:2b:1c:cd:6c:ab:30: 55:8f:5e:af:2f:36:20:79:9a:91:76:79:07:bd:7d: b2:fc:f4:dc:ce:e9:bf:65:59:b3:67:c9:eb:55:bf: d9:43:c9:27:b4:38:d0:ee:e4:e2:63:da:58:96:f7: 92:dc:af:89:57:79:2e:8d:d9:ae:8f:77:f0:fb:eb: e1:7f:2a:37:58:77:58:92:2b:84:c4:3e:65:3e:7b: 56:fa:4a:2c:2b:b2:68:6b:30:4d:bb:14:7c:dc:90: 13:b8:85:8f:3e:67:a0:ee:cf:f9:97:58:75:a7:e4: 03:39:6c:49:8c:42:f1:46:f4:d0:3c:97:f0:59:49: c9:5c:a2:68:6c:b9:1c:12:20:42:80:c5:5d:46:37: fa:9b:19:40:1b:a2:ba:a2:94:6c:03:b2:1b:eb:5e: 9c:6f:a3:d0:37:29:c9:50:2b:0c:22:c3:d1:4e:e3: b8:96:c1:ed:6a:fc:d4:9f:b5:ed:4c:fe:d5:32:7c: f1:90:40:36:77:eb:9c:e1:34:b3:75:d2:83:00:09: f4:44:2f:4d:76:48:5e:06:13:a9:c5:3d:f3:c2:37: 61:0d:11:86:ed:f6:0f:7d:79:ec:eb:45:3a:0d:bc: dc:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:A6:D8:09:27:44:06:7B:C9:B7:28:96:79:5C:73:FE:DE:01:04:5B X509v3 Authority Key Identifier: keyid:A0:03:3F:49:43:63:0D:C9:4E:2D:DF:5F:2A:6B:88:E8:66:46:1A:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oAM_SUNjDclOLd9fKmuI6GZGGuc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:14:86:7e:7a:52:6c:b9:5d:dd:54:26:44:ad:8d:4d:10:94: f8:fe:00:17:bf:dd:b5:a5:81:0e:21:56:2c:42:5b:8a:00:d0: 7d:0b:19:0f:8b:1d:03:39:2d:c3:99:45:29:dd:4f:41:83:e7: 2b:82:52:5e:8c:70:72:c4:0c:e4:eb:06:19:9e:5c:72:f1:59: 45:30:11:57:2c:89:14:8a:6c:99:70:4a:10:7d:33:f0:08:a4: 97:2f:f0:9e:60:af:fc:22:37:06:80:03:0e:1c:56:b6:cb:e5: 94:40:a4:57:5a:ec:a2:99:dd:88:03:65:a3:56:b9:56:e8:01: d5:3c:6f:e8:6c:79:f2:b9:a4:b1:c5:a2:28:75:8f:dc:9d:17: d8:62:81:21:97:71:3b:61:49:45:bf:14:e0:55:81:dd:34:a1: 0c:c2:77:35:fc:c6:41:87:cc:fb:58:14:e2:e4:ca:cf:02:cc: 4c:0d:1b:cd:5d:d1:22:12:ab:20:7e:e2:92:98:b4:9c:40:22: c5:cb:82:c8:e4:8e:13:c1:e0:d5:44:c8:c8:d8:30:41:46:e3: 51:8e:ea:f5:f8:7a:b7:72:3a:55:7e:46:06:31:7a:52:2a:bb: dc:45:40:8b:34:97:97:65:b1:ae:36:35:bb:0e:7d:83:96:3c: 06:3f:53:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwRjIxMTAvBgNVBAUTKEEwMDMzRjQ5NDM2MzBEQzk0RTJEREY1RjJBNkI4OEU4 NjY0NjFBRTcwHhcNMjUwNjI5MDQzMjQ2WhcNMjUwNzA2MDQzMjQ2WjAYMRYwFAYD VQQDEw02ODYwYzFlZS02OGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4/rvAFxq+W5M2JGT2yMz8u0UtESMXNQrHM1sqzBVj16vLzYgeZqRdnkHvX2y /PTczum/ZVmzZ8nrVb/ZQ8kntDjQ7uTiY9pYlveS3K+JV3kujdmuj3fw++vhfyo3 WHdYkiuExD5lPntW+kosK7JoazBNuxR83JATuIWPPmeg7s/5l1h1p+QDOWxJjELx RvTQPJfwWUnJXKJobLkcEiBCgMVdRjf6mxlAG6K6opRsA7Ib616cb6PQNynJUCsM IsPRTuO4lsHtavzUn7XtTP7VMnzxkEA2d+uc4TSzddKDAAn0RC9NdkheBhOpxT3z wjdhDRGG7fYPfXns60U6Dbzc2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIGm2Akn RAZ7ybcolnlcc/7eAQRbMB8GA1UdIwQYMBaAFKADP0lDYw3JTi3fXypriOhmRhrn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzBGMi83RjMzRUUyNEZE N0UxMUVFQTFCMzUzNUNDNEY5QUUwMi9vQU1fU1VOakRjbE9MZDlmS211STZHWkdH dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29BTV9TVU5qRGNsT0xkOWZLbXVJNkdaR0d1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzBGMi83RjMzRUUyNEZEN0UxMUVFQTFCMzUzNUNDNEY5QUUwMi9vQU1fU1VOakRj bE9MZDlmS211STZHWkdHdWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyFIZ+elJsuV3dVCZErY1NEJT4/gAXv921pYEOIVYsQluKANB9CxkP ix0DOS3DmUUp3U9Bg+crglJejHByxAzk6wYZnlxy8VlFMBFXLIkUimyZcEoQfTPw CKSXL/CeYK/8IjcGgAMOHFa2y+WUQKRXWuyimd2IA2WjVrlW6AHVPG/obHnyuaSx xaIodY/cnRfYYoEhl3E7YUlFvxTgVYHdNKEMwnc1/MZBh8z7WBTi5MrPAsxMDRvN XdEiEqsgfuKSmLScQCLFy4LI5I4TweDVRMjI2DBBRuNRjur1+Hq3cjpVfkYGMXpS KrvcRUCLNJeXZbGuNjW7Dn2DljwGP1Po -----END CERTIFICATE-----Generated at Tue Jul 1 02:46:24 2025 by rpki-client