$ rpki-client -vvf rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft File: OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft (raw, json) Hash identifier: YtiX8ShDuFWLeng/fD7lsd1mO4/Bi68AKRVyLbN2ooc= Subject key identifier: 46:6D:5C:64:20:FB:65:1A:13:98:B1:92:89:F5:A1:94:6D:24:B6:51 Authority key identifier: 39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38 Certificate issuer: /CN=A91613AB/serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838 Certificate serial: 01EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft Manifest number: 01DF Signing time: Sat 31 May 2025 02:32:18 +0000 Manifest this update: Sat 31 May 2025 02:32:17 +0000 Manifest next update: Sat 07 Jun 2025 02:32:17 +0000 Files and hashes: 1: OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl (hash: T/bDqwUOZ/p4N6ppaEPDJnRk2zVjsiT/6PCHEXt7zKI=) 2: 65AFE18C91DB11EFBC4C2A3EC4F9AE02.roa (hash: LqvEH1o9qv1Spv16C52zEqgMsWnx5LeCvM7wNncYwmQ=) 3: A50FD050DA7911EDB0D3866BC4F9AE02.roa (hash: sq3CtUxJWk/lwN1trxwIddBHXPOdGnUuNzRlPvsNflY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:32:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 491 (0x1eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91613AB, serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838 Validity Not Before: May 31 02:32:17 2025 GMT Not After : Jun 7 02:32:17 2025 GMT Subject: CN=683a6a32-d275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:74:71:b4:c2:87:a8:e7:9a:2c:c6:c0:fa:ff: 08:17:ba:08:db:ce:97:62:8e:2c:a6:e4:a1:94:bd: 47:fb:41:42:00:ad:92:06:16:a2:3a:59:8e:19:3f: 06:86:91:80:8b:8d:d4:a7:58:d8:b5:60:45:4d:38: 2b:d8:e1:d5:38:00:d3:49:de:40:98:4b:47:ed:e6: d9:e5:b5:87:7d:d7:41:d2:7c:47:50:19:15:ee:96: 9d:ba:fb:ee:58:d3:c1:da:41:8c:67:1f:d0:49:3c: 4b:9c:ff:ec:ea:86:b0:66:80:13:00:2d:e1:d9:fb: 86:89:f9:08:dd:2c:36:50:2d:be:d3:9d:e9:ed:09: 32:09:12:12:ef:a7:83:86:9f:7c:56:e2:05:8e:3d: f6:ab:45:47:10:2b:1f:c8:d8:d2:64:68:22:e1:8e: 94:5b:45:3a:d3:aa:79:44:72:dc:6c:1b:60:79:21: 6e:12:ce:66:ff:46:e1:61:73:d1:03:a9:89:e8:3a: 3d:3b:c7:38:fb:06:6b:8a:c0:5c:b7:56:d3:46:a4: 7e:bd:89:b3:b4:44:c4:dd:91:c5:83:4b:44:d8:1f: 02:35:b9:21:39:76:b1:be:5e:54:b3:bd:92:1d:89: a7:27:e4:f7:7e:cf:24:11:02:3f:45:46:d5:18:a4: 19:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:6D:5C:64:20:FB:65:1A:13:98:B1:92:89:F5:A1:94:6D:24:B6:51 X509v3 Authority Key Identifier: keyid:39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:75:f3:00:2a:e7:76:9b:2a:d0:6d:3b:a9:ee:94:98:e9:82: b1:42:de:91:d2:2b:5c:bd:7d:76:39:86:ab:04:16:0f:a7:e4: 8a:59:e8:8a:86:c8:19:1a:c4:54:a1:92:73:80:65:2b:d2:ca: a9:fe:a3:04:9c:03:65:60:4c:49:ad:e9:a8:36:af:6e:a9:cd: d6:90:0a:51:15:9c:f9:b9:d5:dc:7a:17:1f:87:8f:db:ae:f7: 98:13:d9:f8:2c:07:ae:16:fa:50:9c:c3:cf:ff:28:31:f5:8c: 91:25:4b:62:f6:0e:cc:6a:de:e4:c7:c7:9e:e5:10:bd:7b:d5: 1b:01:57:15:43:95:24:8c:cb:31:02:6e:6f:8f:30:43:31:60: 81:e0:02:c6:77:e0:fc:e0:8f:94:4d:6c:0d:d9:0c:4c:01:77: f5:89:00:55:10:6a:ec:eb:ed:06:c7:6f:b2:1f:5f:a1:59:93: 3b:6a:c1:69:8d:35:37:b0:54:c4:18:bf:6e:da:52:3b:f5:20: 6b:3c:bb:3c:99:d7:48:06:2b:1c:9d:bd:54:24:ea:51:d7:a9: f8:11:3e:0c:32:fa:75:b5:ef:dc:5e:28:04:cb:26:d4:be:95: 40:0b:27:86:ab:9f:ae:8e:5c:3f:74:79:11:35:21:d1:4e:b2: 0b:a6:37:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEzQUIxMTAvBgNVBAUTKDM5MDFBRjRBOTNGRUZBQUVCODc5Q0M5RjU5OTRFNEU3 RjAxQUY4MzgwHhcNMjUwNTMxMDIzMjE3WhcNMjUwNjA3MDIzMjE3WjAYMRYwFAYD VQQDEw02ODNhNmEzMi1kMjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl3RxtMKHqOeaLMbA+v8IF7oI286XYo4spuShlL1H+0FCAK2SBhaiOlmOGT8G hpGAi43Up1jYtWBFTTgr2OHVOADTSd5AmEtH7ebZ5bWHfddB0nxHUBkV7paduvvu WNPB2kGMZx/QSTxLnP/s6oawZoATAC3h2fuGifkI3Sw2UC2+053p7QkyCRIS76eD hp98VuIFjj32q0VHECsfyNjSZGgi4Y6UW0U606p5RHLcbBtgeSFuEs5m/0bhYXPR A6mJ6Do9O8c4+wZrisBct1bTRqR+vYmztETE3ZHFg0tE2B8CNbkhOXaxvl5Us72S HYmnJ+T3fs8kEQI/RUbVGKQZ2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEZtXGQg +2UaE5ixkon1oZRtJLZRMB8GA1UdIwQYMBaAFDkBr0qT/vquuHnMn1mU5OfwGvg4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTNBQi85Q0Y3RUNEQTZG OEIxMUVEOEZBRTNDMTFDNEY5QUUwMi9PUUd2U3BQLS1xNjRlY3lmV1pUazVfQWEt RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09RR3ZTcFAtLXE2NGVjeWZXWlRrNV9BYS1EZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTNBQi85Q0Y3RUNEQTZGOEIxMUVEOEZBRTNDMTFDNEY5QUUwMi9PUUd2U3BQLS1x NjRlY3lmV1pUazVfQWEtRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwdfMAKud2myrQbTup7pSY6YKxQt6R0itcvX12OYarBBYPp+SKWeiK hsgZGsRUoZJzgGUr0sqp/qMEnANlYExJremoNq9uqc3WkApRFZz5udXcehcfh4/b rveYE9n4LAeuFvpQnMPP/ygx9YyRJUti9g7Mat7kx8ee5RC9e9UbAVcVQ5UkjMsx Am5vjzBDMWCB4ALGd+D84I+UTWwN2QxMAXf1iQBVEGrs6+0Gx2+yH1+hWZM7asFp jTU3sFTEGL9u2lI79SBrPLs8mddIBiscnb1UJOpR16n4ET4MMvp1te/cXigEyybU vpVACyeGq5+ujlw/dHkRNSHRTrILpjdf -----END CERTIFICATE-----Generated at Sat May 31 16:32:11 2025 by rpki-client