$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft File: 2OL6sVCi_VePZ-GbApZTmzdSyak.mft (raw, json) Hash identifier: WzxUPza3FeEsNMHXb8jqX5X0fIBEFy/516IFgnYOX38= Subject key identifier: A0:76:33:E7:EB:74:B4:1C:82:2E:19:82:E0:4D:4F:2F:BD:68:46:54 Authority key identifier: D8:E2:FA:B1:50:A2:FD:57:8F:67:E1:9B:02:96:53:9B:37:52:C9:A9 Certificate issuer: /CN=A91EC225/serialNumber=D8E2FAB150A2FD578F67E19B0296539B3752C9A9 Certificate serial: 0EB8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2OL6sVCi_VePZ-GbApZTmzdSyak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft Manifest number: 0EAE Signing time: Sat 28 Jun 2025 17:29:09 +0000 Manifest this update: Sat 28 Jun 2025 17:29:08 +0000 Manifest next update: Sat 05 Jul 2025 17:29:08 +0000 Files and hashes: 1: 2OL6sVCi_VePZ-GbApZTmzdSyak.crl (hash: UChxjtxt9m/sU1T7nDy6o4ETL/r1CbLSkHXOmw4SHRI=) 2: B30A5D14428D11F0A38E3C31C4F9AE02.roa (hash: OUDdI6XWhWggQ8MLQV5MQbWEvs6RgdjtWxLd0Cq39Z8=) 3: 83974F92EF7C11EF9079DB1CC4F9AE02.roa (hash: yybAeEAc62kbf0vMICJ/T2r9CwvlPXBXXe+0zfXPjFk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.crl rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2OL6sVCi_VePZ-GbApZTmzdSyak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 17:29:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3768 (0xeb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC225, serialNumber=D8E2FAB150A2FD578F67E19B0296539B3752C9A9 Validity Not Before: Jun 28 17:29:08 2025 GMT Not After : Jul 5 17:29:08 2025 GMT Subject: CN=68602665-24b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7f:ce:7e:cd:b9:a5:db:09:74:fa:4c:3d:3d: 5c:71:70:50:5c:80:f0:bf:d7:f9:65:2a:85:78:d6: a3:06:a8:88:a9:3f:f6:63:d2:98:fd:92:93:ea:1d: c3:f8:d4:6a:37:d5:08:3b:79:d5:af:6c:d0:c3:28: 8a:af:7d:9d:87:96:6c:7e:c7:6c:33:a3:6b:98:aa: d0:c3:9a:68:21:76:a5:19:52:d9:c6:6a:d6:6b:10: 3e:f5:30:71:b9:86:2b:6f:79:df:2b:c4:ff:b1:bb: 13:17:02:16:29:38:de:2f:f0:81:42:9b:90:4b:ea: 88:b7:51:34:33:16:23:00:f8:c8:f0:76:25:7d:06: d7:9d:0c:55:10:57:01:24:e6:12:b2:ff:d8:cc:d6: da:7b:d8:f9:67:27:0c:0f:8e:3f:28:ad:8d:0e:78: 37:b4:43:62:ad:f3:19:a1:db:99:d8:d6:d1:a7:de: 18:e0:9c:6b:b5:20:c7:82:7c:da:df:82:c2:f7:33: bf:45:79:d9:ae:2b:63:c0:98:22:90:9e:43:52:b8: 65:3a:39:a5:bd:7b:42:94:4a:36:ce:f1:87:6f:ab: 66:8b:63:ec:54:c5:28:01:d8:28:bc:6a:b7:e5:e3: fd:94:13:36:af:ec:5c:8a:75:24:12:88:d2:f1:74: f6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:76:33:E7:EB:74:B4:1C:82:2E:19:82:E0:4D:4F:2F:BD:68:46:54 X509v3 Authority Key Identifier: keyid:D8:E2:FA:B1:50:A2:FD:57:8F:67:E1:9B:02:96:53:9B:37:52:C9:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2OL6sVCi_VePZ-GbApZTmzdSyak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:41:8a:43:34:a6:ee:bb:6d:e6:0b:b3:a6:c1:fa:8d:31:ca: d5:ec:fd:36:dd:75:bc:c2:d5:2d:51:e9:e4:53:cf:ed:fe:98: 7d:57:fc:c4:ab:f6:76:8c:62:36:82:46:30:ee:dd:e4:1e:a4: f4:c7:47:c5:43:90:a5:10:43:0c:8a:eb:87:85:21:4f:f3:b6: ed:2f:34:ab:54:28:89:67:37:6d:95:70:58:b1:39:55:79:d5: 06:3b:84:d3:ac:81:94:a4:3f:f3:4e:81:e1:db:13:ad:db:5b: 4e:13:5f:b4:04:2a:20:8d:84:4a:7c:a4:bc:68:e8:f7:3c:e3: 6c:69:99:db:7b:2b:bb:71:14:a7:80:be:71:0d:54:1c:7e:42: 96:a0:76:e8:0b:b3:e2:fc:1c:98:f2:ee:98:c7:bf:31:dc:89: 61:82:45:4c:89:23:77:32:b3:7d:97:1b:88:a2:c0:b1:79:ea: c9:77:b5:6c:c4:fd:b1:b1:ff:67:f1:d5:31:eb:24:37:81:72: 12:05:85:45:e8:5e:e0:74:85:b8:76:b8:2c:99:24:7e:96:2d: b4:a3:68:03:0d:c7:aa:51:a9:f5:fa:16:02:a1:30:77:2e:4b: a1:78:ba:8d:b5:f4:45:77:b9:e1:92:eb:f2:2b:4f:9e:f2:aa: 78:dc:a7:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDrgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUMyMjUxMTAvBgNVBAUTKEQ4RTJGQUIxNTBBMkZENTc4RjY3RTE5QjAyOTY1MzlC Mzc1MkM5QTkwHhcNMjUwNjI4MTcyOTA4WhcNMjUwNzA1MTcyOTA4WjAYMRYwFAYD VQQDEw02ODYwMjY2NS0yNGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAln/Ofs25pdsJdPpMPT1ccXBQXIDwv9f5ZSqFeNajBqiIqT/2Y9KY/ZKT6h3D +NRqN9UIO3nVr2zQwyiKr32dh5ZsfsdsM6NrmKrQw5poIXalGVLZxmrWaxA+9TBx uYYrb3nfK8T/sbsTFwIWKTjeL/CBQpuQS+qIt1E0MxYjAPjI8HYlfQbXnQxVEFcB JOYSsv/YzNbae9j5ZycMD44/KK2NDng3tENirfMZoduZ2NbRp94Y4JxrtSDHgnza 34LC9zO/RXnZritjwJgikJ5DUrhlOjmlvXtClEo2zvGHb6tmi2PsVMUoAdgovGq3 5eP9lBM2r+xcinUkEojS8XT24wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKB2M+fr dLQcgi4ZguBNTy+9aEZUMB8GA1UdIwQYMBaAFNji+rFQov1Xj2fhmwKWU5s3Usmp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzIyNS80OTlGREY5MDhF NTUxMUU5ODBEMDlBNDJDNEY5QUUwMi8yT0w2c1ZDaV9WZVBaLUdiQXBaVG16ZFN5 YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJPTDZzVkNpX1ZlUFotR2JBcFpUbXpkU3lhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzIyNS80OTlGREY5MDhFNTUxMUU5ODBEMDlBNDJDNEY5QUUwMi8yT0w2c1ZDaV9W ZVBaLUdiQXBaVG16ZFN5YWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAQYpDNKbuu23mC7OmwfqNMcrV7P023XW8wtUtUenkU8/t/ph9V/zE q/Z2jGI2gkYw7t3kHqT0x0fFQ5ClEEMMiuuHhSFP87btLzSrVCiJZzdtlXBYsTlV edUGO4TTrIGUpD/zToHh2xOt21tOE1+0BCogjYRKfKS8aOj3PONsaZnbeyu7cRSn gL5xDVQcfkKWoHboC7Pi/ByY8u6Yx78x3IlhgkVMiSN3MrN9lxuIosCxeerJd7Vs xP2xsf9n8dUx6yQ3gXISBYVF6F7gdIW4drgsmSR+li20o2gDDceqUan1+hYCoTB3 LkuheLqNtfRFd7nhkuvyK0+e8qp43KfH -----END CERTIFICATE-----Generated at Mon Jun 30 15:50:00 2025 by rpki-client