$ rpki-client -vvf rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.mft File: 1OqUZPMism19ISjcN1LyKIgAFto.mft (raw, json) Hash identifier: 2RyAxJ0e69LcuuY0Okj1nRFXhm+ZdGxrBkrESOCSkMY= Subject key identifier: B1:15:76:6F:02:A8:73:8C:DB:8C:B8:7E:50:6B:B3:65:61:71:0E:7B Authority key identifier: D4:EA:94:64:F3:22:B2:6D:7D:21:28:DC:37:52:F2:28:88:00:16:DA Certificate issuer: /CN=A913367F/serialNumber=D4EA9464F322B26D7D2128DC3752F228880016DA Certificate serial: 07A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OqUZPMism19ISjcN1LyKIgAFto.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.mft Manifest number: 0791 Signing time: Fri 30 May 2025 21:39:54 +0000 Manifest this update: Fri 30 May 2025 21:39:54 +0000 Manifest next update: Fri 06 Jun 2025 21:39:54 +0000 Files and hashes: 1: 1OqUZPMism19ISjcN1LyKIgAFto.crl (hash: DdLD4Sc+gx4xbjdVUe3iB/VVASR9aAGgHJSMhk31q6Q=) 2: BF13AB8C5D3311EFA43E0C6EC4F9AE02.roa (hash: w+svrnjAumlsgho2zJHotOA2YwQVmczAOvvR54Jd4tQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.crl rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OqUZPMism19ISjcN1LyKIgAFto.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:39:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1954 (0x7a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913367F, serialNumber=D4EA9464F322B26D7D2128DC3752F228880016DA Validity Not Before: May 30 21:39:54 2025 GMT Not After : Jun 6 21:39:54 2025 GMT Subject: CN=683a25aa-c8ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6f:53:8c:9d:ee:6d:28:74:78:b8:b1:da:17: 33:2e:ce:fd:0a:5a:2a:1b:81:cb:82:29:46:50:65: 92:0b:b6:f6:97:48:46:e8:56:2b:c1:82:74:f8:66: 45:05:00:ff:d4:e8:57:15:8d:da:2f:c4:42:68:97: 48:c7:e2:05:67:3c:03:eb:ba:8a:79:31:4a:e8:6e: 6e:d5:e7:85:bf:c8:87:28:a7:c5:5a:ec:29:f4:99: 1b:6b:50:8e:34:86:e9:cb:c7:df:a7:76:c2:bf:7e: 59:6b:26:82:8b:3d:35:51:d1:dd:45:12:4c:19:9c: 9a:49:00:14:84:2f:56:81:0b:63:f2:1d:39:43:d7: a2:c2:10:de:13:1f:37:8b:14:e9:fc:b5:96:bf:5f: b3:ff:36:23:92:be:59:96:5a:b4:fc:11:50:1d:ed: 6d:da:0a:2d:11:81:3c:ea:63:2c:61:62:a5:32:e9: 19:6d:00:9a:2b:c6:12:1d:6b:50:4c:52:ad:9b:f2: af:59:08:64:a1:e0:31:09:99:64:f6:60:3b:23:e5: f8:06:f3:e3:c1:ea:4e:2c:b3:8f:eb:08:1d:8f:9b: c3:39:2d:0d:7d:54:46:1f:e0:6d:18:da:ab:d2:ed: 25:ba:2f:84:9a:4d:b8:47:87:01:5a:ea:74:2f:97: 6a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:15:76:6F:02:A8:73:8C:DB:8C:B8:7E:50:6B:B3:65:61:71:0E:7B X509v3 Authority Key Identifier: keyid:D4:EA:94:64:F3:22:B2:6D:7D:21:28:DC:37:52:F2:28:88:00:16:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OqUZPMism19ISjcN1LyKIgAFto.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:59:41:44:ff:ae:90:bc:b6:01:17:73:8b:ee:b0:ec:18:c5: f0:c7:8a:2e:c5:04:e4:95:52:83:41:6f:f2:2c:bb:01:24:f9: c8:61:d2:b5:30:90:48:74:cf:65:61:29:86:a5:7d:f3:60:2a: 06:29:df:10:e5:54:3d:53:0b:df:d6:ec:65:09:f5:43:74:8f: 5c:9c:4e:c9:d0:eb:3b:23:4e:38:6a:5b:97:9c:7c:67:e1:ec: 1f:7a:c7:c2:d1:93:cb:c0:e1:21:93:b3:84:db:dc:94:83:2f: a4:fd:c5:de:10:46:1f:68:36:a5:74:3e:d6:fd:93:79:72:3a: 34:bc:88:b4:b4:b9:f2:ae:37:00:e9:37:b1:f5:1a:bc:58:31: e9:9b:2d:2c:ed:94:66:7e:77:b7:31:cc:de:b8:08:46:bb:9f: be:8f:97:90:20:9f:65:f6:6e:95:0c:f8:22:86:24:92:9e:16: c4:64:4b:62:0b:d5:eb:4d:16:d8:fa:d7:01:c5:8f:98:c6:36: a1:2a:97:12:26:82:72:d1:6e:0a:34:10:10:7d:47:8c:fe:83: e0:c4:e4:9a:11:e0:76:84:a9:ec:e9:fa:69:7a:5e:ed:0c:84: d5:fc:ef:a4:d3:0a:45:9d:32:5f:f0:20:e5:ec:f8:8e:56:e3: c2:72:ca:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM2N0YxMTAvBgNVBAUTKEQ0RUE5NDY0RjMyMkIyNkQ3RDIxMjhEQzM3NTJGMjI4 ODgwMDE2REEwHhcNMjUwNTMwMjEzOTU0WhcNMjUwNjA2MjEzOTU0WjAYMRYwFAYD VQQDEw02ODNhMjVhYS1jOGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp29TjJ3ubSh0eLix2hczLs79CloqG4HLgilGUGWSC7b2l0hG6FYrwYJ0+GZF BQD/1OhXFY3aL8RCaJdIx+IFZzwD67qKeTFK6G5u1eeFv8iHKKfFWuwp9Jkba1CO NIbpy8ffp3bCv35ZayaCiz01UdHdRRJMGZyaSQAUhC9WgQtj8h05Q9eiwhDeEx83 ixTp/LWWv1+z/zYjkr5Zllq0/BFQHe1t2gotEYE86mMsYWKlMukZbQCaK8YSHWtQ TFKtm/KvWQhkoeAxCZlk9mA7I+X4BvPjwepOLLOP6wgdj5vDOS0NfVRGH+BtGNqr 0u0lui+Emk24R4cBWup0L5dq6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLEVdm8C qHOM24y4flBrs2VhcQ57MB8GA1UdIwQYMBaAFNTqlGTzIrJtfSEo3DdS8iiIABba MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzY3Ri9BMjIxOTA1ODEy OEIxMUVCQkZBMkM0N0VDNEY5QUUwMi8xT3FVWlBNaXNtMTlJU2pjTjFMeUtJZ0FG dG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFPcVVaUE1pc20xOUlTamNOMUx5S0lnQUZ0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzY3Ri9BMjIxOTA1ODEyOEIxMUVCQkZBMkM0N0VDNEY5QUUwMi8xT3FVWlBNaXNt MTlJU2pjTjFMeUtJZ0FGdG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnWUFE/66QvLYBF3OL7rDsGMXwx4ouxQTklVKDQW/yLLsBJPnIYdK1 MJBIdM9lYSmGpX3zYCoGKd8Q5VQ9Uwvf1uxlCfVDdI9cnE7J0Os7I044aluXnHxn 4ewfesfC0ZPLwOEhk7OE29yUgy+k/cXeEEYfaDaldD7W/ZN5cjo0vIi0tLnyrjcA 6Tex9Rq8WDHpmy0s7ZRmfne3MczeuAhGu5++j5eQIJ9l9m6VDPgihiSSnhbEZEti C9XrTRbY+tcBxY+YxjahKpcSJoJy0W4KNBAQfUeM/oPgxOSaEeB2hKns6fppel7t DITV/O+k0wpFnTJf8CDl7PiOVuPCcspD -----END CERTIFICATE-----Generated at Sat May 31 17:48:38 2025 by rpki-client