$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft File: OdCbSlNggIIFqdaRRxnguYnPVgs.mft (raw, json) Hash identifier: oEyenaqbPQr2NHtgjcgmtyJR8DZ5eHHT3w/jEeeSpf8= Subject key identifier: E4:96:E8:61:25:CA:4A:A8:96:E8:B8:23:33:22:66:86:AD:64:EB:6F Authority key identifier: 39:D0:9B:4A:53:60:80:82:05:A9:D6:91:47:19:E0:B9:89:CF:56:0B Certificate issuer: /CN=A91FDCF0/serialNumber=39D09B4A5360808205A9D6914719E0B989CF560B Certificate serial: 17A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdCbSlNggIIFqdaRRxnguYnPVgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft Manifest number: 179A Signing time: Mon 30 Jun 2025 16:44:30 +0000 Manifest this update: Mon 30 Jun 2025 16:44:29 +0000 Manifest next update: Mon 07 Jul 2025 16:44:29 +0000 Files and hashes: 1: OdCbSlNggIIFqdaRRxnguYnPVgs.crl (hash: CjHE599iWustBZdzU4AgDoAtT+eIfxihUo/fyADpCs4=) 2: D8D34E92100411EE9849087AC4F9AE02.roa (hash: NYe/OwRHgWBG4n1tEVTichlRmY2tFDrc7PdcIFXXIB4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.crl rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdCbSlNggIIFqdaRRxnguYnPVgs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 16:44:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6051 (0x17a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDCF0, serialNumber=39D09B4A5360808205A9D6914719E0B989CF560B Validity Not Before: Jun 30 16:44:29 2025 GMT Not After : Jul 7 16:44:29 2025 GMT Subject: CN=6862beed-6066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e1:4b:56:6d:49:88:7d:e8:30:4e:ff:d6:1d: 9e:d9:39:6f:0c:98:82:e6:36:c4:16:e0:92:66:17: ee:93:2f:d7:a6:bd:8e:19:26:2c:9e:a1:b9:9d:90: 5f:0b:30:18:d7:78:13:37:f5:f7:8a:d9:96:6b:58: 3f:81:c3:6c:9e:73:be:ec:51:74:26:75:6d:1e:cf: ab:72:e6:88:89:74:59:3b:20:c3:13:fa:a0:17:11: a2:9f:fd:0b:b4:71:3a:cc:a7:03:61:8a:e0:e3:34: 84:17:18:2f:1f:f0:67:c7:f1:ba:f5:aa:27:cf:d5: a6:7f:23:da:17:06:90:03:08:35:c2:6b:61:4a:ee: 6d:1b:fb:1a:c5:07:ef:44:49:6a:ac:8b:88:e7:c0: f2:1a:de:98:ca:7f:60:94:e6:06:31:35:59:13:52: 41:93:40:c6:6f:00:21:74:cd:e7:2d:c8:4f:9e:9a: 58:91:d8:5b:78:7e:79:46:83:d3:69:a4:26:46:c7: 25:d9:d2:d3:80:7f:b4:3a:c4:2c:15:8e:0e:35:c0: 7f:a7:22:c3:82:40:e6:1e:73:d9:e9:72:aa:e4:72: 74:4c:50:37:86:97:cd:d4:1d:b1:1a:0f:62:fc:30: 7d:57:91:27:e5:1a:f3:c7:c6:e3:70:10:87:84:83: b3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:96:E8:61:25:CA:4A:A8:96:E8:B8:23:33:22:66:86:AD:64:EB:6F X509v3 Authority Key Identifier: keyid:39:D0:9B:4A:53:60:80:82:05:A9:D6:91:47:19:E0:B9:89:CF:56:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdCbSlNggIIFqdaRRxnguYnPVgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:2c:1d:66:a0:bf:8b:bd:a4:75:57:2d:41:39:92:7a:b8:1a: c6:f0:84:5c:27:ff:c5:62:a8:fd:4c:33:0f:ba:a7:ca:71:8b: e5:67:f1:22:6a:5d:d5:b6:36:b2:f7:56:d0:ff:13:e3:0d:cd: 01:c5:38:e9:6d:37:dc:f2:c5:d6:f4:77:18:93:f0:84:72:86: e7:46:ac:e7:39:dc:25:dc:f8:2b:3b:bd:86:b7:d4:3b:a0:10: 61:3e:ab:91:f2:68:41:36:c4:9e:55:58:bc:98:8a:7c:96:57: 9a:d1:36:aa:40:c1:d1:33:eb:fd:07:0b:30:d8:e4:fa:e9:ad: 5e:72:2f:87:7d:9a:c8:a8:d9:a5:57:3a:40:67:22:a6:39:16: a1:89:f1:b9:f9:ba:d3:9a:33:e7:2c:1e:f8:07:ec:b4:20:9a: 5a:bc:d5:13:57:2a:82:10:59:5d:02:31:77:62:35:46:6a:5b: b9:23:2a:87:7e:1f:68:a3:6b:1e:d0:37:c9:fc:e5:09:01:1a: 44:10:4a:f1:56:0e:11:0e:e1:c1:32:cc:9e:d9:e7:50:de:9f: 07:fc:9d:ca:45:ac:3e:65:60:65:af:e9:fa:23:7e:8e:91:ad: ec:f3:14:5a:22:26:9d:96:85:d1:63:c9:4c:54:7b:fe:cb:ce: 7c:f8:8e:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF6MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRDRjAxMTAvBgNVBAUTKDM5RDA5QjRBNTM2MDgwODIwNUE5RDY5MTQ3MTlFMEI5 ODlDRjU2MEIwHhcNMjUwNjMwMTY0NDI5WhcNMjUwNzA3MTY0NDI5WjAYMRYwFAYD VQQDEw02ODYyYmVlZC02MDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwOFLVm1JiH3oME7/1h2e2TlvDJiC5jbEFuCSZhfuky/Xpr2OGSYsnqG5nZBf CzAY13gTN/X3itmWa1g/gcNsnnO+7FF0JnVtHs+rcuaIiXRZOyDDE/qgFxGin/0L tHE6zKcDYYrg4zSEFxgvH/Bnx/G69aonz9WmfyPaFwaQAwg1wmthSu5tG/saxQfv RElqrIuI58DyGt6Yyn9glOYGMTVZE1JBk0DGbwAhdM3nLchPnppYkdhbeH55RoPT aaQmRscl2dLTgH+0OsQsFY4ONcB/pyLDgkDmHnPZ6XKq5HJ0TFA3hpfN1B2xGg9i /DB9V5En5Rrzx8bjcBCHhIOz2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOSW6GEl ykqolui4IzMiZoatZOtvMB8GA1UdIwQYMBaAFDnQm0pTYICCBanWkUcZ4LmJz1YL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRENGMC8zMTI3QjAxOENF QUUxMUU3ODk3ODQ4MjVDNEY5QUUwMi9PZENiU2xOZ2dJSUZxZGFSUnhuZ3VZblBW Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09kQ2JTbE5nZ0lJRnFkYVJSeG5ndVluUFZncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RENGMC8zMTI3QjAxOENFQUUxMUU3ODk3ODQ4MjVDNEY5QUUwMi9PZENiU2xOZ2dJ SUZxZGFSUnhuZ3VZblBWZ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFLB1moL+LvaR1Vy1BOZJ6uBrG8IRcJ//FYqj9TDMPuqfKcYvlZ/Ei al3Vtjay91bQ/xPjDc0BxTjpbTfc8sXW9HcYk/CEcobnRqznOdwl3PgrO72Gt9Q7 oBBhPquR8mhBNsSeVVi8mIp8llea0TaqQMHRM+v9Bwsw2OT66a1eci+HfZrIqNml VzpAZyKmORahifG5+brTmjPnLB74B+y0IJpavNUTVyqCEFldAjF3YjVGalu5IyqH fh9oo2se0DfJ/OUJARpEEErxVg4RDuHBMsye2edQ3p8H/J3KRaw+ZWBlr+n6I36O ka3s8xRaIiadloXRY8lMVHv+y858+I5P -----END CERTIFICATE-----Generated at Mon Jun 30 20:38:32 2025 by rpki-client