$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft File: pOaGeeZ7phon9Pib0JKu5cH3ITk.mft (raw, json) Hash identifier: J9jR5qichRK5fTEUc3MyqBlv+lOw1jvlKc2fPhQRUC8= Subject key identifier: 29:F1:62:A2:EA:A1:BA:2E:94:08:CD:AB:C9:B4:1B:15:BA:DB:35:AE Authority key identifier: A4:E6:86:79:E6:7B:A6:1A:27:F4:F8:9B:D0:92:AE:E5:C1:F7:21:39 Certificate issuer: /CN=A91E1B48/serialNumber=A4E68679E67BA61A27F4F89BD092AEE5C1F72139 Certificate serial: 84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft Manifest number: 82 Signing time: Tue 01 Jul 2025 07:43:17 +0000 Manifest this update: Tue 01 Jul 2025 07:43:16 +0000 Manifest next update: Tue 08 Jul 2025 07:43:16 +0000 Files and hashes: 1: pOaGeeZ7phon9Pib0JKu5cH3ITk.crl (hash: Kdd2fG+AqLS40L4verf9UbcB7rvALSBO6J1PO7oVyuk=) 2: FB03B42C927411EF870E655AC4F9AE02.roa (hash: 1Pw3F4k0O1ke+ThDTspVWhZWgUjv2zsb15CKjPdj4IQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.crl rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:43:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1B48, serialNumber=A4E68679E67BA61A27F4F89BD092AEE5C1F72139 Validity Not Before: Jul 1 07:43:16 2025 GMT Not After : Jul 8 07:43:16 2025 GMT Subject: CN=68639195-0b9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2a:c4:7a:23:a1:ca:56:c8:15:73:ca:2b:b9: 16:85:2d:7c:5c:9b:6e:77:e8:db:c6:d9:fc:b8:a0: 0b:ab:a3:ae:c7:de:08:c4:4f:50:a7:18:af:c9:31: 61:5d:1d:24:47:b1:b8:a7:6f:34:f3:1f:f8:01:38: e9:d4:40:bc:ad:3c:42:0b:e9:a1:3a:c7:2e:c3:c9: 2c:20:f6:10:c6:25:d9:6c:ed:f9:08:a9:43:7f:de: 96:ed:7a:67:51:ca:af:e0:79:24:6f:02:2b:26:0e: bf:80:c8:16:b8:9a:8d:54:2e:6d:3d:77:53:4e:78: aa:fe:63:e1:f8:1e:22:17:47:55:c7:17:07:11:65: 49:a5:72:d1:a6:17:54:8e:19:11:70:ae:3e:e4:24: a2:8e:da:51:d1:7b:4b:61:2c:74:f2:ad:e5:22:47: f5:37:de:f6:21:b0:78:e8:52:7b:7a:4c:1f:56:83: d7:8f:0a:96:66:0d:51:d3:ee:a5:be:5e:63:44:e2: 53:52:4c:cd:96:96:72:4e:48:bc:9f:8a:d8:be:c4: 98:a9:1d:7c:be:7b:a6:b1:c9:ac:70:37:f4:50:f2: 78:d0:13:0d:f8:97:da:16:61:d9:d3:4d:d3:4b:67: 2d:4e:e4:c2:e4:64:f4:b0:3e:c5:ac:79:7e:15:cb: a8:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:F1:62:A2:EA:A1:BA:2E:94:08:CD:AB:C9:B4:1B:15:BA:DB:35:AE X509v3 Authority Key Identifier: keyid:A4:E6:86:79:E6:7B:A6:1A:27:F4:F8:9B:D0:92:AE:E5:C1:F7:21:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:a3:6f:4e:ae:4c:f2:63:a0:d6:43:d1:32:fb:99:02:a2:37: 91:59:7c:98:3a:3f:e6:0b:5f:be:1d:21:56:c6:75:18:91:29: ac:3d:06:ef:e7:eb:19:59:63:4a:48:f3:3d:a6:1e:fe:dd:d5: 39:5f:de:da:bd:b9:22:df:a3:cb:45:e1:9e:2d:9d:ea:7c:e3: 9d:bd:41:19:d7:37:d0:56:1b:66:8d:88:9e:22:f4:b8:23:f9: 35:ca:0b:49:e2:df:fd:8c:0b:ee:b2:31:76:73:31:a5:d2:6e: 89:bf:ea:9d:3d:80:87:c5:5d:30:69:85:30:a5:e5:b8:77:e3: 8b:0f:12:09:d7:80:4c:a2:87:56:85:24:ea:0e:f1:83:01:aa: d6:90:ed:7a:02:ac:1e:db:4b:af:a8:e0:26:7c:6d:a4:27:04: c4:e3:6e:e4:f8:3f:a0:85:0f:e0:bb:ac:27:3a:17:45:d5:85: 60:b7:5c:e4:b1:4a:c9:22:e7:a7:44:ce:f5:13:fa:d7:46:21: 3b:a3:b7:e2:07:73:38:e2:ba:d2:ee:86:e4:8c:d2:70:97:f8: c0:df:6d:52:6e:e2:ef:c6:40:3f:df:1a:c5:d2:ab:cd:e2:19: bb:e4:7e:f5:09:9e:2f:a6:6b:fc:aa:fb:b2:6d:39:8d:35:c2: 49:02:13:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFCNDgxMTAvBgNVBAUTKEE0RTY4Njc5RTY3QkE2MUEyN0Y0Rjg5QkQwOTJBRUU1 QzFGNzIxMzkwHhcNMjUwNzAxMDc0MzE2WhcNMjUwNzA4MDc0MzE2WjAYMRYwFAYD VQQDEw02ODYzOTE5NS0wYjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuSrEeiOhylbIFXPKK7kWhS18XJtud+jbxtn8uKALq6Oux94IxE9QpxivyTFh XR0kR7G4p2808x/4ATjp1EC8rTxCC+mhOscuw8ksIPYQxiXZbO35CKlDf96W7Xpn Ucqv4HkkbwIrJg6/gMgWuJqNVC5tPXdTTniq/mPh+B4iF0dVxxcHEWVJpXLRphdU jhkRcK4+5CSijtpR0XtLYSx08q3lIkf1N972IbB46FJ7ekwfVoPXjwqWZg1R0+6l vl5jROJTUkzNlpZyTki8n4rYvsSYqR18vnumscmscDf0UPJ40BMN+JfaFmHZ003T S2ctTuTC5GT0sD7FrHl+FcuozQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCnxYqLq oboulAjNq8m0GxW62zWuMB8GA1UdIwQYMBaAFKTmhnnme6YaJ/T4m9CSruXB9yE5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUI0OC82NkY1NzY0NDky NzQxMUVGQkY4NjRBM0RDNEY5QUUwMi9wT2FHZWVaN3Bob245UGliMEpLdTVjSDNJ VGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BPYUdlZVo3cGhvbjlQaWIwSkt1NWNIM0lUay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUI0OC82NkY1NzY0NDkyNzQxMUVGQkY4NjRBM0RDNEY5QUUwMi9wT2FHZWVaN3Bo b245UGliMEpLdTVjSDNJVGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCao29OrkzyY6DWQ9Ey+5kCojeRWXyYOj/mC1++HSFWxnUYkSmsPQbv 5+sZWWNKSPM9ph7+3dU5X97avbki36PLReGeLZ3qfOOdvUEZ1zfQVhtmjYieIvS4 I/k1ygtJ4t/9jAvusjF2czGl0m6Jv+qdPYCHxV0waYUwpeW4d+OLDxIJ14BMoodW hSTqDvGDAarWkO16Aqwe20uvqOAmfG2kJwTE427k+D+ghQ/gu6wnOhdF1YVgt1zk sUrJIuenRM71E/rXRiE7o7fiB3M44rrS7obkjNJwl/jA321SbuLvxkA/3xrF0qvN 4hm75H71CZ4vpmv8qvuybTmNNcJJAhPi -----END CERTIFICATE-----Generated at Wed Jul 2 23:19:04 2025 by rpki-client