$ rpki-client -vvf rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft File: 3obmXuoeCzDk_Y2SRYft9XI9UH0.mft (raw, json) Hash identifier: BiPg+/KA00LR+MjRZNKx2yHUzA4PVLaTvO6EfE1nPvc= Subject key identifier: 75:BB:4D:CE:97:D5:92:14:0D:E2:CA:82:1B:60:58:6B:A3:E5:6D:03 Authority key identifier: DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D Certificate issuer: /CN=A91E00A5/serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D Certificate serial: 92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft Manifest number: 90 Signing time: Sun 29 Jun 2025 05:29:08 +0000 Manifest this update: Sun 29 Jun 2025 05:29:07 +0000 Manifest next update: Sun 06 Jul 2025 05:29:07 +0000 Files and hashes: 1: 3obmXuoeCzDk_Y2SRYft9XI9UH0.crl (hash: IDRTVvSXGf51uo5rmff6CL6PN733fu7hfVnRzpBz7LY=) 2: 1F63E4347ABC11EF9E53E753C4F9AE02.roa (hash: HKA4VosuvqKj93QksjNsBERDuKRgYc9/Nd6hWkYBCUw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 05:29:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 146 (0x92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E00A5, serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D Validity Not Before: Jun 29 05:29:07 2025 GMT Not After : Jul 6 05:29:07 2025 GMT Subject: CN=6860cf24-45c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:27:ea:1f:7a:4b:58:80:7b:c4:77:c5:f7:db: 3c:4d:9a:81:60:cb:b1:bd:ba:5c:a4:dd:ae:8b:3d: 33:3b:b4:52:a5:0f:08:4c:2e:af:d4:61:5f:f9:6f: 18:5c:01:2f:c0:28:c9:22:ed:bb:0a:1b:6e:13:d9: e5:8b:4e:c1:89:51:55:43:53:e0:d1:08:29:8a:9f: e6:c1:ab:55:9a:04:1b:57:56:53:f8:2a:e8:c0:b0: a0:1c:8d:f6:95:71:89:7d:f4:49:6d:8c:d0:a6:8c: 08:07:7b:aa:40:e8:c2:ff:69:fb:b5:70:bf:26:12: fc:fa:ae:bb:ce:ca:c0:de:40:63:83:aa:88:28:03: 3a:7f:02:e0:4d:a5:61:c7:38:ae:76:d4:82:d5:5f: ce:08:6e:cd:fd:d5:93:3c:61:81:ad:f4:e0:03:a6: 0e:13:89:e9:d1:d0:e5:b1:1e:b8:69:d3:b9:11:68: 76:74:4e:41:f9:74:d1:fd:8a:b9:39:b1:98:7f:89: 8f:84:48:b3:fa:8e:15:c4:71:6d:8b:cb:d1:a5:e9: b4:f2:e4:2d:79:4f:9d:e6:a4:d2:2a:e1:4c:96:36: 3f:2c:86:74:09:6a:a8:d1:9a:6b:41:0f:8a:ca:66: 81:01:79:de:4b:ea:13:b7:3a:93:01:ad:a9:ee:24: ba:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:BB:4D:CE:97:D5:92:14:0D:E2:CA:82:1B:60:58:6B:A3:E5:6D:03 X509v3 Authority Key Identifier: keyid:DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:69:50:0d:b1:ec:e4:5e:d8:56:98:96:31:ea:b6:bd:2d:1a: e4:ce:31:7b:61:1e:f5:1a:0d:75:c3:88:ef:7e:04:b3:b2:47: f5:37:6a:da:02:09:15:ef:b0:c4:e0:6d:6f:d4:6b:da:fa:3f: 16:33:d0:4b:30:fa:0d:d7:da:d7:49:53:80:15:a3:08:b9:d1: 57:aa:b7:cb:b4:53:ef:80:e0:47:94:68:c6:de:4d:4c:89:d0: 03:0e:9e:bd:27:f3:bb:9a:4c:a5:09:92:bd:76:f3:da:f7:a3: 67:80:da:38:40:48:b4:2c:a3:8f:7f:14:98:7b:c8:e4:68:37: 8f:c2:62:81:51:48:b8:9a:2f:75:8f:57:f9:dc:bc:8f:66:93: 0e:fc:24:4f:ea:ad:ac:70:a0:8a:cb:4f:94:03:40:fc:4e:59: c2:5a:d4:6c:f8:ef:6e:9d:85:7b:22:12:36:f7:98:8f:2f:e9: 14:d0:5e:c1:52:48:77:88:77:13:9e:88:6c:27:ed:07:9d:b1: ed:6b:1a:0e:60:61:8f:94:d3:7b:be:64:ca:f0:5a:42:f1:97: 30:0b:59:35:96:8a:ba:3c:d3:bf:82:19:ec:6a:c4:29:67:2f: 9f:5d:4a:9c:2c:d5:cf:4e:29:dd:37:78:c9:f6:c9:52:81:5d: c2:1a:32:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAwQTUxMTAvBgNVBAUTKERFODZFNjVFRUExRTBCMzBFNEZEOEQ5MjQ1ODdFREY1 NzIzRDUwN0QwHhcNMjUwNjI5MDUyOTA3WhcNMjUwNzA2MDUyOTA3WjAYMRYwFAYD VQQDEw02ODYwY2YyNC00NWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqyfqH3pLWIB7xHfF99s8TZqBYMuxvbpcpN2uiz0zO7RSpQ8ITC6v1GFf+W8Y XAEvwCjJIu27ChtuE9nli07BiVFVQ1Pg0Qgpip/mwatVmgQbV1ZT+CrowLCgHI32 lXGJffRJbYzQpowIB3uqQOjC/2n7tXC/JhL8+q67zsrA3kBjg6qIKAM6fwLgTaVh xziudtSC1V/OCG7N/dWTPGGBrfTgA6YOE4np0dDlsR64adO5EWh2dE5B+XTR/Yq5 ObGYf4mPhEiz+o4VxHFti8vRpem08uQteU+d5qTSKuFMljY/LIZ0CWqo0ZprQQ+K ymaBAXneS+oTtzqTAa2p7iS69QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHW7Tc6X 1ZIUDeLKghtgWGuj5W0DMB8GA1UdIwQYMBaAFN6G5l7qHgsw5P2NkkWH7fVyPVB9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDBBNS9BNjQ4M0EzQzdB QkIxMUVGOTM3OUFFNTJDNEY5QUUwMi8zb2JtWHVvZUN6RGtfWTJTUllmdDlYSTlV SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNvYm1YdW9lQ3pEa19ZMlNSWWZ0OVhJOVVIMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDBBNS9BNjQ4M0EzQzdBQkIxMUVGOTM3OUFFNTJDNEY5QUUwMi8zb2JtWHVvZUN6 RGtfWTJTUllmdDlYSTlVSDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpaVANsezkXthWmJYx6ra9LRrkzjF7YR71Gg11w4jvfgSzskf1N2ra AgkV77DE4G1v1Gva+j8WM9BLMPoN19rXSVOAFaMIudFXqrfLtFPvgOBHlGjG3k1M idADDp69J/O7mkylCZK9dvPa96NngNo4QEi0LKOPfxSYe8jkaDePwmKBUUi4mi91 j1f53LyPZpMO/CRP6q2scKCKy0+UA0D8TlnCWtRs+O9unYV7IhI295iPL+kU0F7B Ukh3iHcTnohsJ+0HnbHtaxoOYGGPlNN7vmTK8FpC8ZcwC1k1loq6PNO/ghnsasQp Zy+fXUqcLNXPTindN3jJ9slSgV3CGjII -----END CERTIFICATE-----Generated at Mon Jun 30 19:51:41 2025 by rpki-client