$ rpki-client -vvf rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft File: OSQdwqlJIur_mC2bQID4vkD3tr0.mft (raw, json) Hash identifier: dEe9gmNcHjYZA2b73ed9uERY3vdTTtLw7fZmEtOKGCE= Subject key identifier: 66:E3:A0:3B:62:25:FA:4A:3C:59:BA:DA:04:79:0A:E0:73:0E:35:74 Authority key identifier: 39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD Certificate issuer: /CN=A91E17F3/serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft Manifest number: 3B Signing time: Tue 01 Jul 2025 08:20:48 +0000 Manifest this update: Tue 01 Jul 2025 08:20:47 +0000 Manifest next update: Tue 08 Jul 2025 08:20:47 +0000 Files and hashes: 1: OSQdwqlJIur_mC2bQID4vkD3tr0.crl (hash: zv+j4YQQQ/llQ/2aIY2SeexNMOuH+4VSgVT/HXlS35Q=) 2: C565FFE0025011F0ACBE181CC4F9AE02.roa (hash: /AkxNQvclEOTbcMEyripKFhKBkJQiQZpl8ngTKJu9eY=) 3: 7B3E74A6025011F096E34819C4F9AE02.roa (hash: WR0rb26sSd7NNnmbaBSVENCtgD1Go/mwg9p/vOPLcpI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:20:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E17F3, serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD Validity Not Before: Jul 1 08:20:47 2025 GMT Not After : Jul 8 08:20:47 2025 GMT Subject: CN=68639a5f-45be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ca:c0:a9:8a:59:7b:81:ac:0e:65:ab:8f:23: 4b:80:f2:fd:8f:0f:9b:87:14:7f:0d:98:a5:36:f3: b0:00:44:60:17:4e:6a:2a:bf:a2:43:df:d6:10:6b: 26:2a:dc:29:4f:05:9a:50:cc:ea:da:32:07:3c:45: 5a:92:4d:7b:94:99:8d:10:b3:4c:50:88:1e:0c:66: 6b:b3:d0:69:6e:70:79:8c:95:bd:26:b6:93:d2:fd: e9:cb:07:5a:55:43:6a:bb:51:93:4b:e9:da:14:5a: 02:24:4d:5f:e6:a7:c2:6e:e4:2c:fb:e4:f0:b7:fb: 0a:98:be:5b:65:f9:f7:8b:e8:0a:28:26:4e:b6:9c: 59:92:3d:2f:05:8e:e8:a4:52:b4:6d:d0:b2:a7:4d: 52:cb:4e:4f:6a:09:97:62:82:5f:a9:22:40:3b:06: c5:7a:12:18:32:1a:e8:0a:81:9f:3e:e6:b0:e8:b6: b4:97:bd:7a:ff:19:2b:d9:40:66:ea:08:7b:db:43: 1c:06:b2:fe:fe:38:46:ef:49:9e:77:b4:80:39:20: 41:9d:9c:02:01:cf:a9:2d:ab:d6:20:f0:20:d6:49: 74:6c:bb:45:2e:9b:8f:e0:3c:5f:9c:ca:34:1e:0a: 4c:73:cb:db:42:94:86:f2:59:52:ef:f5:2a:f4:4b: f6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:E3:A0:3B:62:25:FA:4A:3C:59:BA:DA:04:79:0A:E0:73:0E:35:74 X509v3 Authority Key Identifier: keyid:39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:0e:7a:f2:7a:11:fd:5d:99:19:2f:3e:b8:fb:4c:38:29:35: f6:71:bd:b3:f6:d3:3b:49:17:cf:89:ff:97:70:b7:34:df:fe: e9:cd:84:d5:53:84:52:cf:61:13:3e:80:87:f7:52:f6:ef:a6: ae:4b:2e:95:0f:05:1b:d8:f4:d1:91:3b:89:98:87:43:04:a5: e6:33:e1:c9:e0:f1:11:67:5a:08:0d:14:5c:de:66:6e:69:07: b2:45:11:94:aa:0a:28:7a:d3:69:59:37:51:b2:22:c2:43:a4: f5:01:72:58:0b:74:2f:eb:15:b6:f5:ea:71:4a:43:16:43:0b: 1d:ae:e5:e3:a9:df:6e:31:99:bc:53:92:d5:9f:35:e8:17:f9: d9:e6:e8:0b:26:36:42:d6:0d:26:cf:72:7d:41:ea:07:dc:7f: 2d:72:86:29:7a:1a:7c:d8:f6:ca:0c:59:87:8b:ee:79:de:cc: d5:76:73:46:1d:4f:37:d7:61:b3:5f:00:b8:ae:1d:57:6f:20: 4b:78:dc:35:7c:ab:e8:bb:c8:a3:2f:14:48:7e:99:f4:bb:64: a6:46:dc:a9:85:6f:0e:3f:ca:f4:ba:56:9a:11:57:d9:9c:dd: 22:d0:6a:b6:df:ff:da:32:f4:88:2f:e3:09:6e:c2:cf:9f:87: 16:c8:07:2c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MTdGMzExMC8GA1UEBRMoMzkyNDFEQzJBOTQ5MjJFQUZGOTgyRDlCNDA4MEY4QkU0 MEY3QjZCRDAeFw0yNTA3MDEwODIwNDdaFw0yNTA3MDgwODIwNDdaMBgxFjAUBgNV BAMTDTY4NjM5YTVmLTQ1YmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0ysCpill7gawOZauPI0uA8v2PD5uHFH8NmKU287AARGAXTmoqv6JD39YQayYq 3ClPBZpQzOraMgc8RVqSTXuUmY0Qs0xQiB4MZmuz0GlucHmMlb0mtpPS/enLB1pV Q2q7UZNL6doUWgIkTV/mp8Ju5Cz75PC3+wqYvltl+feL6AooJk62nFmSPS8Fjuik UrRt0LKnTVLLTk9qCZdigl+pIkA7BsV6EhgyGugKgZ8+5rDotrSXvXr/GSvZQGbq CHvbQxwGsv7+OEbvSZ53tIA5IEGdnAIBz6ktq9Yg8CDWSXRsu0Uum4/gPF+cyjQe Ckxzy9tClIbyWVLv9Sr0S/YjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZuOgO2Il +ko8WbraBHkK4HMONXQwHwYDVR0jBBgwFoAUOSQdwqlJIur/mC2bQID4vkD3tr0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxN0YzLzlBOUZCOEYyRkZF QzExRUZCRjU1QkI2RkM0RjlBRTAyL09TUWR3cWxKSXVyX21DMmJRSUQ0dmtEM3Ry MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT1NRZHdxbEpJdXJfbUMyYlFJRDR2a0QzdHIwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx N0YzLzlBOUZCOEYyRkZFQzExRUZCRjU1QkI2RkM0RjlBRTAyL09TUWR3cWxKSXVy X21DMmJRSUQ0dmtEM3RyMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA4OevJ6Ef1dmRkvPrj7TDgpNfZxvbP20ztJF8+J/5dwtzTf/unNhNVT hFLPYRM+gIf3Uvbvpq5LLpUPBRvY9NGRO4mYh0MEpeYz4cng8RFnWggNFFzeZm5p B7JFEZSqCih602lZN1GyIsJDpPUBclgLdC/rFbb16nFKQxZDCx2u5eOp324xmbxT ktWfNegX+dnm6AsmNkLWDSbPcn1B6gfcfy1yhil6GnzY9soMWYeL7nnezNV2c0Yd TzfXYbNfALiuHVdvIEt43DV8q+i7yKMvFEh+mfS7ZKZG3KmFbw4/yvS6VpoRV9mc 3SLQarbf/9oy9Igv4wluws+fhxbIByw= -----END CERTIFICATE-----Generated at Tue Jul 1 20:41:37 2025 by rpki-client