$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.mft File: oB0j94Ho_zU7GL0YgoTJrfzZ45Y.mft (raw, json) Hash identifier: Y7uqrMBn5rRkNQBmRLWYoHjMf6UI5RDhla2RzfCDotE= Subject key identifier: 31:37:17:A5:B7:E0:65:E3:55:9E:DC:B2:11:5A:51:7F:9E:58:1B:8D Authority key identifier: A0:1D:23:F7:81:E8:FF:35:3B:18:BD:18:82:84:C9:AD:FC:D9:E3:96 Certificate issuer: /CN=A91E0267/serialNumber=A01D23F781E8FF353B18BD188284C9ADFCD9E396 Certificate serial: 349C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.mft Manifest number: 3498 Signing time: Wed 02 Jul 2025 14:55:22 +0000 Manifest this update: Wed 02 Jul 2025 14:55:21 +0000 Manifest next update: Wed 09 Jul 2025 14:55:21 +0000 Files and hashes: 1: oB0j94Ho_zU7GL0YgoTJrfzZ45Y.crl (hash: NZVYCEFLw+npKhg8/Bhm1uvi4YmtACXTGv8kjTZX9N8=) 2: 77C9E89A3CDC11EEBFA0475EC4F9AE02.roa (hash: e40Fx6yfX6nJRx1dMJZUnN8AeYmm3aJoH7MptW5kCWo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.crl rsync://rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13468 (0x349c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0267, serialNumber=A01D23F781E8FF353B18BD188284C9ADFCD9E396 Validity Not Before: Jul 2 14:55:21 2025 GMT Not After : Jul 9 14:55:21 2025 GMT Subject: CN=68654859-1bfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:24:fe:e8:fa:12:f1:1c:1c:3a:58:4c:1c:f8: c6:04:8e:11:34:89:02:6c:c4:58:f4:29:30:1f:b8: 71:d7:1d:78:f7:75:a4:39:99:ce:d5:64:46:6f:b2: 74:9c:1e:d8:64:6f:b6:18:ff:40:cb:88:70:62:22: d8:6e:02:e2:f0:bb:80:73:df:f3:e2:c2:e2:bb:a4: 83:70:0a:18:cb:55:f5:54:c9:b5:ed:0a:01:0a:b7: 1c:fe:1c:21:78:86:6f:b7:f0:d5:dd:6e:d5:16:34: 61:62:29:a0:e4:ce:d6:28:ec:6b:ef:6c:9e:a7:5f: fa:c5:e1:46:a8:d1:08:8c:fa:39:6c:ad:bc:c7:8f: 11:6f:06:91:ed:c7:34:15:0e:5a:f3:db:e8:c3:2a: 9b:7b:18:ab:3c:a2:45:34:d9:10:cd:dd:7a:19:fb: df:f2:b2:9a:f9:e0:51:0e:ba:4e:6d:ce:32:ed:e6: b3:74:64:c5:e0:2d:f9:b9:30:44:95:44:24:6d:36: 34:b8:4a:ad:1c:34:3f:e5:35:31:c0:5c:b1:17:e2: c8:b9:98:35:73:f6:0c:5c:c6:b1:4f:e5:51:de:8b: 63:eb:e4:be:4f:74:9f:5b:cc:7c:a0:ca:b2:f1:31: 4f:b2:1e:b8:99:59:8b:7a:7d:2d:f2:df:f2:50:cc: 53:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:37:17:A5:B7:E0:65:E3:55:9E:DC:B2:11:5A:51:7F:9E:58:1B:8D X509v3 Authority Key Identifier: keyid:A0:1D:23:F7:81:E8:FF:35:3B:18:BD:18:82:84:C9:AD:FC:D9:E3:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:f0:58:dd:5b:4f:c7:92:b2:4c:50:51:9f:e1:b0:17:44:86: 2c:58:1a:60:01:23:f4:52:ea:ea:06:da:68:5c:ad:ac:6e:7f: 58:f2:39:9e:b3:71:0b:aa:fd:22:68:67:8e:79:30:75:64:19: dc:84:72:1e:00:24:e9:42:16:ec:2f:42:4a:7c:67:19:d9:a3: 87:cf:ea:94:b4:10:71:b9:9c:67:fe:a3:e1:47:af:d6:3f:63: ad:25:82:e6:98:fc:b1:4b:50:51:5c:06:27:ea:52:88:bb:f1: 54:a4:47:35:c2:d9:7c:0b:d8:69:4b:27:43:69:7b:50:70:42: 71:95:22:55:96:b7:55:69:4a:19:c3:78:5c:a0:b0:60:1f:14: 5b:2e:30:8f:78:4f:78:b2:f1:5c:31:25:d6:15:19:9e:f9:ff: 20:34:bf:8d:aa:aa:2b:f0:d1:33:f0:9e:36:79:75:7e:7c:5d: c9:93:aa:ed:25:ba:2c:98:a7:c8:9d:ef:dd:e3:7a:d8:6e:20: 15:eb:7a:5f:b6:97:b6:b7:db:3e:93:d8:7b:91:32:6c:b5:1f: d4:cd:5f:61:0b:0e:4e:d2:30:7d:54:fd:d9:df:ed:3b:a9:43: 82:e5:76:ed:1e:cc:b9:16:a6:f0:a0:21:4a:58:99:0a:34:8e: 6a:78:55:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAyNjcxMTAvBgNVBAUTKEEwMUQyM0Y3ODFFOEZGMzUzQjE4QkQxODgyODRDOUFE RkNEOUUzOTYwHhcNMjUwNzAyMTQ1NTIxWhcNMjUwNzA5MTQ1NTIxWjAYMRYwFAYD VQQDEw02ODY1NDg1OS0xYmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtiT+6PoS8RwcOlhMHPjGBI4RNIkCbMRY9CkwH7hx1x1493WkOZnO1WRGb7J0 nB7YZG+2GP9Ay4hwYiLYbgLi8LuAc9/z4sLiu6SDcAoYy1X1VMm17QoBCrcc/hwh eIZvt/DV3W7VFjRhYimg5M7WKOxr72yep1/6xeFGqNEIjPo5bK28x48RbwaR7cc0 FQ5a89vowyqbexirPKJFNNkQzd16Gfvf8rKa+eBRDrpObc4y7eazdGTF4C35uTBE lUQkbTY0uEqtHDQ/5TUxwFyxF+LIuZg1c/YMXMaxT+VR3otj6+S+T3SfW8x8oMqy 8TFPsh64mVmLen0t8t/yUMxTCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDE3F6W3 4GXjVZ7cshFaUX+eWBuNMB8GA1UdIwQYMBaAFKAdI/eB6P81Oxi9GIKEya382eOW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDI2Ny8xOTBFQUI1QzFE OTgxMUUyOUU2NUZGODEwOEIwMkNEMi9vQjBqOTRIb196VTdHTDBZZ29USnJmelo0 NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29CMGo5NEhvX3pVN0dMMFlnb1RKcmZ6WjQ1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDI2Ny8xOTBFQUI1QzFEOTgxMUUyOUU2NUZGODEwOEIwMkNEMi9vQjBqOTRIb196 VTdHTDBZZ29USnJmelo0NVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBk8FjdW0/HkrJMUFGf4bAXRIYsWBpgASP0UurqBtpoXK2sbn9Y8jme s3ELqv0iaGeOeTB1ZBnchHIeACTpQhbsL0JKfGcZ2aOHz+qUtBBxuZxn/qPhR6/W P2OtJYLmmPyxS1BRXAYn6lKIu/FUpEc1wtl8C9hpSydDaXtQcEJxlSJVlrdVaUoZ w3hcoLBgHxRbLjCPeE94svFcMSXWFRme+f8gNL+Nqqor8NEz8J42eXV+fF3Jk6rt JbosmKfIne/d43rYbiAV63pftpe2t9s+k9h7kTJstR/UzV9hCw5O0jB9VP3Z3+07 qUOC5XbtHsy5FqbwoCFKWJkKNI5qeFXI -----END CERTIFICATE-----Generated at Thu Jul 3 18:43:46 2025 by rpki-client