$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft File: oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft (raw, json) Hash identifier: mbqnj1FOGvAavQaPQ3tfFrTMEfvcOMkUCR8J9AvMqBw= Subject key identifier: AB:02:83:78:5C:1F:88:2B:E3:29:35:24:1C:80:B9:14:6A:DA:53:6C Authority key identifier: A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57 Certificate issuer: /CN=A91FAA91/serialNumber=A0C80CEE063C9CC82CDCB0BC745C4FE46DD02657 Certificate serial: 01BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft Manifest number: 01A3 Signing time: Thu 03 Jul 2025 03:43:29 +0000 Manifest this update: Thu 03 Jul 2025 03:43:29 +0000 Manifest next update: Thu 10 Jul 2025 03:43:29 +0000 Files and hashes: 1: oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl (hash: yc0Xq/U0m6M108eV3B1CSlkGS9a6l1clhFD2BHrbcnQ=) 2: CE65A4E4A57E11EFA1B6E428C4F9AE02.roa (hash: 1SKbx2XsDMYzA80POo6zzafuauDwKbPNh6n7Ob5AjVA=) 3: D0103496FD6611EE9188C568C4F9AE02.roa (hash: PxpNeamT7nJAO8ypf86mF4tTFHjbBgphhBI0WaQ2K6I=) 4: 13D68EB430AB11F0A15DC75AC4F9AE02.roa (hash: 8ceZRP/XUhaUyTjeioD/K4mCivFkQCLXcH6cjJ7JFq0=) 5: E762B166FAF811EE92A3642EC4F9AE02.roa (hash: e/dOTjn5zjRzl7VVF4lYBqEjUR3aP4ajbLKyVpxXtqo=) 6: 1D9A36F40C6B11EF95ACFA13C4F9AE02.roa (hash: NJPr7OZom8PgcjW18JJjDNXMEozgSB9WGNPuyE4apbo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 447 (0x1bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAA91, serialNumber=A0C80CEE063C9CC82CDCB0BC745C4FE46DD02657 Validity Not Before: Jul 3 03:43:29 2025 GMT Not After : Jul 10 03:43:29 2025 GMT Subject: CN=6865fc61-53b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:40:f8:b9:cd:f5:b1:2a:49:0d:2e:cd:3e:4d: e6:e0:a9:48:e2:e7:3f:70:13:4c:65:cf:f7:17:44: ee:40:f2:06:6e:93:9f:b2:9e:6d:0f:da:8a:7e:96: 29:b7:54:b2:12:bf:51:62:d0:08:e6:2c:d6:04:90: dd:53:ce:ea:fc:ac:7b:47:48:7b:68:94:f1:58:a1: f3:68:38:a5:d8:db:21:e3:0d:17:b5:8b:bc:61:0b: 46:ca:9d:58:be:8e:2c:19:c0:6a:62:d2:7e:2d:aa: 5e:30:39:3f:0b:91:0a:be:6f:8c:7c:a6:ab:6a:d3: b7:36:36:a9:22:a9:98:aa:fb:c9:fa:bf:11:c1:be: 29:34:c4:7b:1a:92:c6:f7:7a:2f:ec:8e:aa:64:01: b6:0b:e3:ac:16:49:51:d5:db:ce:3b:e1:f5:12:f2: 6f:21:c4:c2:1f:e1:32:7e:a4:36:e3:67:87:42:fc: 61:20:42:a0:a6:c5:b1:68:12:4a:52:c0:a6:87:98: b5:f5:58:e5:31:ca:75:41:8b:7a:b5:32:f6:d3:37: 9d:46:cb:95:ae:25:7a:8e:f3:27:2e:b0:12:12:55: 93:05:7f:68:18:68:4c:6c:82:e9:3b:01:78:4c:db: 3b:6b:6f:e7:ec:79:4f:ef:cb:7d:64:cd:fa:c7:06: cd:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:02:83:78:5C:1F:88:2B:E3:29:35:24:1C:80:B9:14:6A:DA:53:6C X509v3 Authority Key Identifier: keyid:A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:3e:60:87:97:4f:b6:b7:18:16:7e:15:98:1a:98:8c:42:7c: 31:ec:12:35:39:02:c2:db:09:ef:5b:bc:df:de:62:84:4c:0a: c4:0f:d1:e1:ea:c5:a6:17:47:36:33:6e:c1:9c:e4:37:bc:76: cb:4a:cb:ca:e1:25:e4:bd:64:fa:ed:85:bc:00:0d:3b:52:48: 4c:e3:c0:96:05:3c:16:cc:39:af:05:c0:07:5a:6b:49:fc:cd: 94:6d:dd:79:86:f5:01:3e:60:51:03:6f:6f:cf:2f:50:f8:e7: 90:d9:c2:60:5d:72:20:c9:22:53:df:57:e4:d6:69:b1:40:19: b1:13:52:74:13:16:1f:93:93:9a:fa:31:2f:2c:20:b2:09:71: 58:63:4f:5d:f1:a2:45:e2:f8:fe:1f:20:5c:6d:e5:2b:2f:ff: 9b:70:f3:71:37:c5:40:b9:57:7a:1e:68:91:79:f4:50:4e:5f: f3:fb:6b:93:b2:76:c4:d4:bf:2f:ff:2e:25:0c:b6:a1:2e:32: 05:39:2c:f2:72:09:82:43:21:e4:80:b1:7d:6d:ef:84:09:94: 35:ef:f3:7a:df:19:ce:9e:de:5b:b8:fd:62:1e:dd:4f:36:30: e7:60:59:17:f3:3e:e9:3a:95:d8:df:a0:9c:95:ed:88:bf:f8: fd:9a:ef:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFBOTExMTAvBgNVBAUTKEEwQzgwQ0VFMDYzQzlDQzgyQ0RDQjBCQzc0NUM0RkU0 NkREMDI2NTcwHhcNMjUwNzAzMDM0MzI5WhcNMjUwNzEwMDM0MzI5WjAYMRYwFAYD VQQDEw02ODY1ZmM2MS01M2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzkD4uc31sSpJDS7NPk3m4KlI4uc/cBNMZc/3F0TuQPIGbpOfsp5tD9qKfpYp t1SyEr9RYtAI5izWBJDdU87q/Kx7R0h7aJTxWKHzaDil2Nsh4w0XtYu8YQtGyp1Y vo4sGcBqYtJ+LapeMDk/C5EKvm+MfKaratO3NjapIqmYqvvJ+r8Rwb4pNMR7GpLG 93ov7I6qZAG2C+OsFklR1dvOO+H1EvJvIcTCH+EyfqQ242eHQvxhIEKgpsWxaBJK UsCmh5i19VjlMcp1QYt6tTL20zedRsuVriV6jvMnLrASElWTBX9oGGhMbILpOwF4 TNs7a2/n7HlP78t9ZM36xwbN9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKsCg3hc H4gr4yk1JByAuRRq2lNsMB8GA1UdIwQYMBaAFKDIDO4GPJzILNywvHRcT+Rt0CZX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUE5MS85NDIwRDIxMDBB NUExMUVFQTNGNUI0NDFDNEY5QUUwMi9vTWdNN2dZOG5NZ3MzTEM4ZEZ4UDVHM1FK bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29NZ003Z1k4bk1nczNMQzhkRnhQNUczUUpsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUE5MS85NDIwRDIxMDBBNUExMUVFQTNGNUI0NDFDNEY5QUUwMi9vTWdNN2dZOG5N Z3MzTEM4ZEZ4UDVHM1FKbGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByPmCHl0+2txgWfhWYGpiMQnwx7BI1OQLC2wnvW7zf3mKETArED9Hh 6sWmF0c2M27BnOQ3vHbLSsvK4SXkvWT67YW8AA07UkhM48CWBTwWzDmvBcAHWmtJ /M2Ubd15hvUBPmBRA29vzy9Q+OeQ2cJgXXIgySJT31fk1mmxQBmxE1J0ExYfk5Oa +jEvLCCyCXFYY09d8aJF4vj+HyBcbeUrL/+bcPNxN8VAuVd6HmiRefRQTl/z+2uT snbE1L8v/y4lDLahLjIFOSzycgmCQyHkgLF9be+ECZQ17/N63xnOnt5buP1iHt1P NjDnYFkX8z7pOpXY36Ccle2Iv/j9mu9U -----END CERTIFICATE-----Generated at Fri Jul 4 15:14:48 2025 by rpki-client