$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft File: oNGf1mnyVeFici98GdiGS7Brc5k.mft (raw, json) Hash identifier: KiAnunRIcNPMHuvPIaQOfc4l/EuD21v5tn2F/hKQLDg= Subject key identifier: D5:6A:C3:86:DA:50:B0:92:AB:A9:7A:71:D6:1B:95:4C:2C:F0:77:74 Authority key identifier: A0:D1:9F:D6:69:F2:55:E1:62:72:2F:7C:19:D8:86:4B:B0:6B:73:99 Certificate issuer: /CN=A91DEC72/serialNumber=A0D19FD669F255E162722F7C19D8864BB06B7399 Certificate serial: 0162 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNGf1mnyVeFici98GdiGS7Brc5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft Manifest number: 0161 Signing time: Thu 03 Jul 2025 04:04:25 +0000 Manifest this update: Thu 03 Jul 2025 04:04:25 +0000 Manifest next update: Thu 10 Jul 2025 04:04:25 +0000 Files and hashes: 1: oNGf1mnyVeFici98GdiGS7Brc5k.crl (hash: ZGsgTTWNnxwAha8La3wLvfaNvW/0s/julVs5QxQELsE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.crl rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNGf1mnyVeFici98GdiGS7Brc5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 354 (0x162) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEC72, serialNumber=A0D19FD669F255E162722F7C19D8864BB06B7399 Validity Not Before: Jul 3 04:04:25 2025 GMT Not After : Jul 10 04:04:25 2025 GMT Subject: CN=68660149-9a49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f1:6d:30:a4:3b:2a:74:d6:98:56:f1:1f:87: 4f:73:76:1a:18:b0:5c:d1:ec:1f:ee:4f:0b:0b:46: 83:6d:d3:06:a3:bc:a5:30:95:ee:00:40:b8:7e:9f: ba:63:15:fa:bd:db:28:cd:75:a4:a8:04:2e:76:6f: e2:ed:9b:44:1c:86:0c:58:c2:6f:97:9e:6d:06:56: 0a:ac:b8:d4:db:e7:c7:43:e2:69:1d:6a:8a:0a:f0: 11:fd:e9:cb:ad:ee:68:88:ae:fd:9b:d5:01:e6:6c: e3:bf:25:cf:8e:8e:25:d7:a8:d9:84:77:87:78:f7: 10:26:11:8e:78:7a:1e:7e:ac:53:09:63:3d:a5:bb: 61:2b:51:2c:2a:00:ba:9b:b1:d5:cc:da:bd:1d:50: 35:6b:fc:bb:63:8b:a1:7d:04:57:b8:c4:b8:6d:95: 53:eb:00:89:c6:c8:49:d6:61:d4:c6:0a:81:40:21: cc:6f:64:ab:23:03:7d:3b:62:8d:a9:30:1a:7f:26: 0b:9e:c3:1c:ac:c0:08:c3:52:94:9e:79:06:ac:11: 94:d6:b8:68:fd:f4:f5:f9:3a:59:28:4c:c9:4d:01: eb:17:47:ca:55:c5:99:9c:e9:cd:dc:45:7f:3b:a8: 81:fc:b4:c6:62:bd:60:5b:bd:1f:79:f4:ed:c6:c9: e3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:6A:C3:86:DA:50:B0:92:AB:A9:7A:71:D6:1B:95:4C:2C:F0:77:74 X509v3 Authority Key Identifier: keyid:A0:D1:9F:D6:69:F2:55:E1:62:72:2F:7C:19:D8:86:4B:B0:6B:73:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNGf1mnyVeFici98GdiGS7Brc5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:1b:8f:c0:55:fd:2c:1f:7e:74:20:1f:f3:5a:cf:75:e3:e2: c7:f3:06:a0:6c:41:63:41:43:7d:22:4b:5f:61:ea:9d:68:40: aa:49:ff:d1:a6:ef:6d:f9:90:22:b0:76:ff:da:aa:48:bf:fd: f5:8f:38:4d:65:f2:fc:07:35:e1:3f:8d:b5:04:1d:95:1c:2c: 50:d1:8d:09:08:f9:bf:82:37:6a:4e:33:28:d9:fe:b5:63:26: 15:3b:72:4f:5c:95:4d:57:9d:25:a9:23:89:64:23:cd:85:1f: bd:77:52:c7:b4:7c:c9:02:9f:ee:f3:89:42:ba:08:ef:07:e8: 9a:39:9a:63:29:13:f0:e7:6c:64:f2:a1:17:58:da:31:68:a0: 3f:ce:a8:41:25:f8:68:90:89:46:19:45:78:48:11:d1:55:6e: c4:e7:58:b7:fd:c4:8a:85:7d:d7:31:19:38:43:eb:bc:a2:cf: f1:a2:52:0e:1c:1d:35:7f:7c:73:09:12:73:5e:ee:3c:28:5e: 40:7f:74:29:49:e2:25:95:22:77:e5:34:79:42:90:2f:33:63: 85:ff:93:1f:a9:84:75:cc:f7:99:d1:0d:4b:69:e5:f9:8a:83: f9:49:68:5f:81:46:37:5d:f7:32:34:65:9d:70:66:7f:79:8f: 84:7c:cd:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVDNzIxMTAvBgNVBAUTKEEwRDE5RkQ2NjlGMjU1RTE2MjcyMkY3QzE5RDg4NjRC QjA2QjczOTkwHhcNMjUwNzAzMDQwNDI1WhcNMjUwNzEwMDQwNDI1WjAYMRYwFAYD VQQDEw02ODY2MDE0OS05YTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvPFtMKQ7KnTWmFbxH4dPc3YaGLBc0ewf7k8LC0aDbdMGo7ylMJXuAEC4fp+6 YxX6vdsozXWkqAQudm/i7ZtEHIYMWMJvl55tBlYKrLjU2+fHQ+JpHWqKCvAR/enL re5oiK79m9UB5mzjvyXPjo4l16jZhHeHePcQJhGOeHoefqxTCWM9pbthK1EsKgC6 m7HVzNq9HVA1a/y7Y4uhfQRXuMS4bZVT6wCJxshJ1mHUxgqBQCHMb2SrIwN9O2KN qTAafyYLnsMcrMAIw1KUnnkGrBGU1rho/fT1+TpZKEzJTQHrF0fKVcWZnOnN3EV/ O6iB/LTGYr1gW70fefTtxsnj9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNVqw4ba ULCSq6l6cdYblUws8Hd0MB8GA1UdIwQYMBaAFKDRn9Zp8lXhYnIvfBnYhkuwa3OZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUM3Mi8zRjcxRkY4ODNC OTExMUVFQUM2MTdFNkFDNEY5QUUwMi9vTkdmMW1ueVZlRmljaTk4R2RpR1M3QnJj NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29OR2YxbW55VmVGaWNpOThHZGlHUzdCcmM1ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUM3Mi8zRjcxRkY4ODNCOTExMUVFQUM2MTdFNkFDNEY5QUUwMi9vTkdmMW1ueVZl RmljaTk4R2RpR1M3QnJjNWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBG4/AVf0sH350IB/zWs914+LH8wagbEFjQUN9IktfYeqdaECqSf/R pu9t+ZAisHb/2qpIv/31jzhNZfL8BzXhP421BB2VHCxQ0Y0JCPm/gjdqTjMo2f61 YyYVO3JPXJVNV50lqSOJZCPNhR+9d1LHtHzJAp/u84lCugjvB+iaOZpjKRPw52xk 8qEXWNoxaKA/zqhBJfhokIlGGUV4SBHRVW7E51i3/cSKhX3XMRk4Q+u8os/xolIO HB01f3xzCRJzXu48KF5Af3QpSeIllSJ35TR5QpAvM2OF/5MfqYR1zPeZ0Q1LaeX5 ioP5SWhfgUY3XfcyNGWdcGZ/eY+EfM32 -----END CERTIFICATE-----Generated at Thu Jul 3 07:06:03 2025 by rpki-client