$ rpki-client -vvf rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.mft File: 9ouGJos33oELlo2481f3c-mDv20.mft (raw, json) Hash identifier: rvfGoyDWhIh7n+D/mE+LsxFn7Jr/dIpZADKhw4CFPMQ= Subject key identifier: 67:FB:B6:D8:82:4A:4D:BC:00:0C:06:FE:17:2E:83:FE:74:BA:F3:D4 Authority key identifier: F6:8B:86:26:8B:37:DE:81:0B:96:8D:B8:F3:57:F7:73:E9:83:BF:6D Certificate issuer: /CN=A91755F6/serialNumber=F68B86268B37DE810B968DB8F357F773E983BF6D Certificate serial: 0A87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ouGJos33oELlo2481f3c-mDv20.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.mft Manifest number: 0A77 Signing time: Fri 30 May 2025 19:48:43 +0000 Manifest this update: Fri 30 May 2025 19:48:43 +0000 Manifest next update: Fri 06 Jun 2025 19:48:42 +0000 Files and hashes: 1: 9ouGJos33oELlo2481f3c-mDv20.crl (hash: XiF1TbJxVyORjqmrUHfRsHWFuipg3/YDPcDR9ipwhUs=) 2: B47A0CDA660F11EB8A1DB351C4F9AE02.roa (hash: hPcGjX6pod1mQjVuO2fta8f52KKrIcQ5XI+2+yM8wXY=) 3: B5A31A8E660F11EB8A1DB351C4F9AE02.roa (hash: FEaiMi5+ZViFMZcOI+52QVvWi5kkjXKoDrc8FS7/m2Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.crl rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ouGJos33oELlo2481f3c-mDv20.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:48:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2695 (0xa87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91755F6, serialNumber=F68B86268B37DE810B968DB8F357F773E983BF6D Validity Not Before: May 30 19:48:43 2025 GMT Not After : Jun 6 19:48:42 2025 GMT Subject: CN=683a0b9b-0f60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c5:98:89:53:e2:7f:02:01:d3:9f:51:6c:b1: d7:0b:3b:21:d8:ef:40:bf:24:64:1c:a7:70:00:52: b3:32:35:75:93:ab:62:b2:76:5f:bd:f6:5b:9a:08: bd:34:40:71:87:49:57:64:8b:74:65:7e:31:66:ec: c3:4d:c9:7a:85:15:f9:9e:b7:4b:1a:ea:10:59:c6: 67:0b:4f:b7:c0:1b:24:4c:32:e7:d0:05:bf:1e:0b: fb:e8:fa:59:e8:90:8c:3d:b5:e1:f6:fd:58:d0:41: b1:e0:f5:ac:92:25:ad:5a:9f:d8:be:19:0a:78:37: 05:7e:cc:8e:bd:18:4b:75:bd:58:b2:84:37:1a:bd: 9c:f6:f7:53:94:e6:96:f8:4d:5a:57:d9:46:5f:9b: 9e:d0:3c:6b:ff:0d:22:8b:6b:8a:03:b8:75:65:c1: 53:e1:94:01:2f:b3:c5:6d:64:23:da:ef:99:9b:ba: 2a:c8:fe:65:43:0e:7e:f8:44:fa:e5:08:1e:e1:8d: 42:84:d0:6e:e5:f5:96:01:c4:b1:77:f4:ac:19:2d: 4b:bf:ae:32:98:09:e1:d5:d2:ba:a8:7d:e4:9c:32: a7:fd:9b:7e:e3:a3:15:20:14:f0:3e:59:b5:37:a4: a3:76:a6:cb:77:cb:06:3a:bc:be:19:16:80:11:db: 66:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:FB:B6:D8:82:4A:4D:BC:00:0C:06:FE:17:2E:83:FE:74:BA:F3:D4 X509v3 Authority Key Identifier: keyid:F6:8B:86:26:8B:37:DE:81:0B:96:8D:B8:F3:57:F7:73:E9:83:BF:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ouGJos33oELlo2481f3c-mDv20.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:4c:7e:9c:37:58:0e:bc:82:c2:8a:04:00:e4:85:a2:aa:60: 44:ac:35:3d:94:b3:30:db:29:5d:9a:ae:33:61:cc:43:a0:d0: 5f:e9:ea:db:7b:05:66:5f:ed:1d:dd:dd:ea:1c:98:27:57:5b: 6f:44:f5:57:56:64:37:5f:fa:a0:33:3e:18:19:76:56:57:a6: 8a:2c:6d:a5:dd:cb:fc:53:53:75:d6:9e:d3:3e:00:e3:1a:05: f3:8c:89:96:2b:71:81:5c:f2:26:3e:70:0f:4d:8f:b1:ff:f8: ac:a9:ce:fb:f8:83:0e:58:d2:95:f0:50:25:58:9c:c1:08:4c: 09:12:94:7f:61:f5:88:e5:25:6b:a2:09:24:9c:07:c6:8b:48: 97:ce:3b:29:03:9d:24:3d:49:eb:d0:6e:69:d2:3c:bd:8a:86: 18:80:cb:32:5e:b9:8f:89:e8:3f:4c:38:f7:60:98:a4:20:b6: f6:ac:d8:0d:79:56:4a:53:f9:12:2a:9a:1b:52:7d:da:4e:7a: b1:47:5e:8d:54:64:b6:3f:0c:bd:cc:2f:cb:2f:3a:49:fb:58: bf:23:89:80:47:96:34:3d:32:20:e1:6c:3b:2b:9f:58:61:5c: f0:57:88:dc:a1:e4:d3:49:da:68:f8:c0:14:de:58:f8:50:ba: ca:75:5a:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU1RjYxMTAvBgNVBAUTKEY2OEI4NjI2OEIzN0RFODEwQjk2OERCOEYzNTdGNzcz RTk4M0JGNkQwHhcNMjUwNTMwMTk0ODQzWhcNMjUwNjA2MTk0ODQyWjAYMRYwFAYD VQQDEw02ODNhMGI5Yi0wZjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxcWYiVPifwIB059RbLHXCzsh2O9AvyRkHKdwAFKzMjV1k6tisnZfvfZbmgi9 NEBxh0lXZIt0ZX4xZuzDTcl6hRX5nrdLGuoQWcZnC0+3wBskTDLn0AW/Hgv76PpZ 6JCMPbXh9v1Y0EGx4PWskiWtWp/YvhkKeDcFfsyOvRhLdb1YsoQ3Gr2c9vdTlOaW +E1aV9lGX5ue0Dxr/w0ii2uKA7h1ZcFT4ZQBL7PFbWQj2u+Zm7oqyP5lQw5++ET6 5Qge4Y1ChNBu5fWWAcSxd/SsGS1Lv64ymAnh1dK6qH3knDKn/Zt+46MVIBTwPlm1 N6SjdqbLd8sGOry+GRaAEdtm2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGf7ttiC Sk28AAwG/hcug/50uvPUMB8GA1UdIwQYMBaAFPaLhiaLN96BC5aNuPNX93Ppg79t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTVGNi9ENjlFQUFCMjVG NjQxMUVBOUNBQTNBNjRDNEY5QUUwMi85b3VHSm9zMzNvRUxsbzI0ODFmM2MtbUR2 MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlvdUdKb3MzM29FTGxvMjQ4MWYzYy1tRHYyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTVGNi9ENjlFQUFCMjVGNjQxMUVBOUNBQTNBNjRDNEY5QUUwMi85b3VHSm9zMzNv RUxsbzI0ODFmM2MtbUR2MjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWTH6cN1gOvILCigQA5IWiqmBErDU9lLMw2yldmq4zYcxDoNBf6erb ewVmX+0d3d3qHJgnV1tvRPVXVmQ3X/qgMz4YGXZWV6aKLG2l3cv8U1N11p7TPgDj GgXzjImWK3GBXPImPnAPTY+x//isqc77+IMOWNKV8FAlWJzBCEwJEpR/YfWI5SVr ogkknAfGi0iXzjspA50kPUnr0G5p0jy9ioYYgMsyXrmPieg/TDj3YJikILb2rNgN eVZKU/kSKpobUn3aTnqxR16NVGS2Pwy9zC/LLzpJ+1i/I4mAR5Y0PTIg4Ww7K59Y YVzwV4jcoeTTSdpo+MAU3lj4ULrKdVpN -----END CERTIFICATE-----Generated at Sat May 31 16:57:47 2025 by rpki-client