$ rpki-client -vvf rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft File: 0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft (raw, json) Hash identifier: rlpc+0Ik3Ukw8Xw39P8VbNaXn8PvrPO1nQeDKICI1Qk= Subject key identifier: 60:CC:9E:4E:C9:C8:5F:8E:9B:A8:02:16:A2:96:BF:B8:3E:60:9C:2F Authority key identifier: D3:03:8B:A4:49:0E:A8:15:AD:B0:9F:1A:38:65:8B:CD:8B:17:F4:82 Certificate issuer: /CN=A91F018E/serialNumber=D3038BA4490EA815ADB09F1A38658BCD8B17F482 Certificate serial: 0E63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wOLpEkOqBWtsJ8aOGWLzYsX9II.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft Manifest number: 0E5C Signing time: Mon 30 Jun 2025 17:56:08 +0000 Manifest this update: Mon 30 Jun 2025 17:56:08 +0000 Manifest next update: Mon 07 Jul 2025 17:56:08 +0000 Files and hashes: 1: 0wOLpEkOqBWtsJ8aOGWLzYsX9II.crl (hash: yVtiMSxTZHXrx5Q4FhfV9yMfBkdtoMs/XP/rkwsmCZQ=) 2: 7214B0AA9E1711E9B3710950C4F9AE02.roa (hash: c4C00IYUahMg/MQNhIkPwEgft6IPuKV052m4LGanBW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.crl rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wOLpEkOqBWtsJ8aOGWLzYsX9II.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 17:56:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3683 (0xe63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F018E, serialNumber=D3038BA4490EA815ADB09F1A38658BCD8B17F482 Validity Not Before: Jun 30 17:56:08 2025 GMT Not After : Jul 7 17:56:08 2025 GMT Subject: CN=6862cfb8-1faf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a4:f3:b4:15:59:38:6c:87:3e:f5:4a:b5:0b: 75:8b:d1:15:dc:f0:a7:3b:c0:0b:35:0c:de:73:f4: 76:b3:75:36:79:ad:7f:9d:2f:f4:f1:69:77:9b:cf: 34:c7:15:55:c8:ba:f2:f5:15:d9:63:a4:a0:c1:11: 63:e4:1a:34:6d:f7:22:72:d2:ed:70:2e:a2:07:af: cc:07:34:7a:ad:61:fb:1d:99:2d:02:2b:4b:51:da: 83:c8:d0:09:1a:71:42:c9:83:34:fa:f1:df:8d:3b: c3:2d:20:ff:50:d7:6b:ea:f6:fe:ee:66:0b:f5:a8: 47:90:c0:ca:f2:e5:4e:ec:53:74:02:7d:0b:fb:1c: 20:6c:3c:1d:83:4b:78:98:78:9d:55:7b:4e:7b:61: 48:16:29:08:47:bf:25:e5:4f:ff:74:49:d3:d2:81: 5b:fd:55:33:c2:48:69:96:7d:92:cf:54:bf:cc:73: 56:0d:43:25:0b:33:8a:bb:09:17:f3:e1:ba:d0:6b: 13:7a:18:ed:e1:99:97:5d:44:90:45:32:47:76:be: 7f:d8:d3:b7:79:4f:43:de:ae:0b:1b:db:c6:2b:12: 60:17:63:d3:fa:4e:de:b0:f3:e2:82:b1:0d:6e:f8: 5b:82:08:9f:b5:9b:96:83:81:a3:70:05:50:7f:b4: 0d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:CC:9E:4E:C9:C8:5F:8E:9B:A8:02:16:A2:96:BF:B8:3E:60:9C:2F X509v3 Authority Key Identifier: keyid:D3:03:8B:A4:49:0E:A8:15:AD:B0:9F:1A:38:65:8B:CD:8B:17:F4:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wOLpEkOqBWtsJ8aOGWLzYsX9II.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:fa:53:0f:f4:9c:5c:64:44:aa:ae:dc:71:10:3c:ab:e0:4c: 65:0f:bd:a0:a0:9d:58:7e:65:e5:52:3f:1a:af:d5:33:32:e3: 64:b7:b3:38:b2:10:2e:21:22:cd:1d:f9:33:dc:2f:69:61:7a: 4b:b5:b4:23:e2:dd:a0:4f:3b:61:c2:08:32:05:29:98:f1:ca: 29:d7:67:cc:04:cc:aa:94:4b:bb:d5:ee:ba:0b:7b:ee:9d:26: 79:c8:70:3f:4f:64:c4:a9:0b:05:66:04:46:41:fe:83:51:6e: 81:95:af:e9:db:b7:88:50:cf:6e:64:c7:64:82:ab:4f:13:5e: 00:c9:fe:f3:02:8a:ec:78:f5:b9:1c:b2:ed:75:a1:1a:69:e2: 7c:9e:34:f7:3d:3c:3c:21:a7:8d:f2:7d:98:9f:0d:18:e8:c5: b1:3e:3e:81:8c:05:6d:7a:ea:4b:ca:9b:15:b0:91:7b:e1:a8: ae:fe:38:a0:52:ec:05:dd:61:a9:f3:1d:ca:00:ab:e5:2c:1c: 94:39:f8:0e:0f:1b:47:c1:5e:6b:b3:c4:aa:bf:17:d6:70:e0: db:c3:0f:5d:67:22:80:cf:f5:5a:92:be:95:9c:6b:72:59:c0: d2:de:f5:82:95:4a:44:56:42:c2:88:44:43:ee:70:42:78:38: 77:57:79:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjAxOEUxMTAvBgNVBAUTKEQzMDM4QkE0NDkwRUE4MTVBREIwOUYxQTM4NjU4QkNE OEIxN0Y0ODIwHhcNMjUwNjMwMTc1NjA4WhcNMjUwNzA3MTc1NjA4WjAYMRYwFAYD VQQDEw02ODYyY2ZiOC0xZmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsaTztBVZOGyHPvVKtQt1i9EV3PCnO8ALNQzec/R2s3U2ea1/nS/08Wl3m880 xxVVyLry9RXZY6SgwRFj5Bo0bfcictLtcC6iB6/MBzR6rWH7HZktAitLUdqDyNAJ GnFCyYM0+vHfjTvDLSD/UNdr6vb+7mYL9ahHkMDK8uVO7FN0An0L+xwgbDwdg0t4 mHidVXtOe2FIFikIR78l5U//dEnT0oFb/VUzwkhpln2Sz1S/zHNWDUMlCzOKuwkX 8+G60GsTehjt4ZmXXUSQRTJHdr5/2NO3eU9D3q4LG9vGKxJgF2PT+k7esPPigrEN bvhbggiftZuWg4GjcAVQf7QNfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGDMnk7J yF+Om6gCFqKWv7g+YJwvMB8GA1UdIwQYMBaAFNMDi6RJDqgVrbCfGjhli82LF/SC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDE4RS9GQTU2OEU1RTlF MTUxMUU5OTAxNTM2NEFDNEY5QUUwMi8wd09McEVrT3FCV3RzSjhhT0dXTHpZc1g5 SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB3T0xwRWtPcUJXdHNKOGFPR1dMellzWDlJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDE4RS9GQTU2OEU1RTlFMTUxMUU5OTAxNTM2NEFDNEY5QUUwMi8wd09McEVrT3FC V3RzSjhhT0dXTHpZc1g5SUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCm+lMP9JxcZESqrtxxEDyr4ExlD72goJ1YfmXlUj8ar9UzMuNkt7M4 shAuISLNHfkz3C9pYXpLtbQj4t2gTzthwggyBSmY8cop12fMBMyqlEu71e66C3vu nSZ5yHA/T2TEqQsFZgRGQf6DUW6Bla/p27eIUM9uZMdkgqtPE14Ayf7zAorsePW5 HLLtdaEaaeJ8njT3PTw8IaeN8n2Ynw0Y6MWxPj6BjAVteupLypsVsJF74aiu/jig UuwF3WGp8x3KAKvlLByUOfgODxtHwV5rs8SqvxfWcODbww9dZyKAz/Vakr6VnGty WcDS3vWClUpEVkLCiERD7nBCeDh3V3m0 -----END CERTIFICATE-----Generated at Tue Jul 1 05:25:42 2025 by rpki-client