$ rpki-client -vvf rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft File: oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft (raw, json) Hash identifier: W/UnPZaxcONIt/lOHsCNJmslVX9mrG4FUzB7WEl52io= Subject key identifier: 64:E9:C0:5E:2D:8D:75:6F:B3:90:93:FE:C9:33:4E:3E:FB:C6:BB:A2 Authority key identifier: A3:21:53:71:25:37:60:0D:71:34:2E:C0:69:A5:7F:3E:ED:60:D7:0C Certificate issuer: /CN=A918D771/serialNumber=A32153712537600D71342EC069A57F3EED60D70C Certificate serial: 0767 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft Manifest number: 0753 Signing time: Wed 04 Jun 2025 21:33:47 +0000 Manifest this update: Wed 04 Jun 2025 21:33:47 +0000 Manifest next update: Wed 11 Jun 2025 21:33:46 +0000 Files and hashes: 1: oyFTcSU3YA1xNC7AaaV_Pu1g1ww.crl (hash: wvbIYf0rdL0WvOvvbx0HC3YXps2aRClHPGAcahLDe54=) 2: B10AE62CBC4711EFAB43324BC4F9AE02.roa (hash: Cg9ICYE9I7QHfG+L0DGU6D2Wt92m7BQcheqj3kGMwFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.crl rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 21:33:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1895 (0x767) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D771, serialNumber=A32153712537600D71342EC069A57F3EED60D70C Validity Not Before: Jun 4 21:33:47 2025 GMT Not After : Jun 11 21:33:46 2025 GMT Subject: CN=6840bbbb-3fe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:60:b0:f3:08:b0:62:ec:18:c9:3f:cd:36:2c: 54:a3:1e:4e:1f:b8:9b:85:81:fa:2b:f9:ee:67:04: 36:0c:75:fe:7b:8b:ba:3b:46:16:82:91:c2:2e:b3: 15:ae:e7:bc:44:2a:4a:3c:e0:cd:05:f6:c7:da:60: 36:94:ee:c3:d7:2c:db:38:21:5b:76:83:ac:fe:f0: 02:fc:02:c2:e2:d3:f9:29:27:cd:6c:ec:3f:4d:e4: 9a:b1:b4:e9:d0:f2:9b:25:ab:aa:55:3e:f3:71:31: fe:e9:91:75:59:85:ba:b4:31:1d:ab:03:9a:a4:22: db:59:7b:58:09:c3:29:30:3a:1a:4c:e4:27:5a:19: a3:9c:d1:09:29:74:f8:42:34:8c:84:67:a1:71:a1: c7:c3:e4:8c:5e:df:d5:87:3d:82:b0:6c:30:c4:ed: bb:db:e4:04:3f:27:cb:c0:ad:ba:d5:7f:a6:e7:d5: d2:26:bb:4b:75:05:f4:da:d0:cb:c0:5f:27:cd:59: 59:51:45:89:cd:20:43:22:a7:c4:c9:a0:f5:56:ee: 72:34:a3:08:b8:87:0b:8a:0b:fa:eb:de:00:96:b4: 35:a5:d6:fa:8c:e1:0a:eb:60:2b:14:05:a9:3a:d4: 7a:17:f8:51:a7:e1:8e:a1:47:b5:b4:31:d4:f2:79: e6:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:E9:C0:5E:2D:8D:75:6F:B3:90:93:FE:C9:33:4E:3E:FB:C6:BB:A2 X509v3 Authority Key Identifier: keyid:A3:21:53:71:25:37:60:0D:71:34:2E:C0:69:A5:7F:3E:ED:60:D7:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:84:3f:58:21:e0:9e:8f:81:bf:68:61:51:16:18:44:68:89: d2:11:f3:74:5d:6c:8f:37:ab:69:ca:6a:8c:11:4d:25:e5:50: ff:9b:9a:c2:fd:82:5b:e2:7e:0f:82:10:d7:db:87:f3:8d:ef: a9:e2:84:5a:93:18:b7:87:eb:f4:da:00:2d:4d:a7:04:b1:9b: f9:54:33:6d:ef:e3:4e:10:dd:ff:56:5c:a5:9e:79:c4:27:1a: ac:71:42:ae:c8:c9:76:d3:f2:e0:71:56:11:42:53:68:18:e0: 0f:62:09:b7:8c:99:88:58:d9:8b:70:b6:8f:9f:b5:f4:3f:8e: 79:86:bc:4b:57:92:d6:94:48:98:53:46:ed:8c:53:d5:04:2d: 9d:e8:b5:31:95:e8:68:52:d5:14:da:08:3e:59:a8:a7:b5:83: 65:24:e3:61:f2:f0:91:74:dc:9f:5b:ab:05:2c:7a:61:5a:a1: 1a:a0:3f:17:59:bb:14:9b:75:d4:86:7d:68:29:24:0a:15:59: 90:21:0f:af:7c:29:e9:16:ad:1e:c6:57:b5:a7:71:a0:3f:5b: 1d:b4:ba:da:69:32:25:f3:5b:8d:05:3e:dd:f7:17:ad:41:0c: 6f:a6:bf:36:a9:61:d2:75:70:de:3d:bd:c9:8b:42:09:c0:99: 81:5c:95:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ3NzExMTAvBgNVBAUTKEEzMjE1MzcxMjUzNzYwMEQ3MTM0MkVDMDY5QTU3RjNF RUQ2MEQ3MEMwHhcNMjUwNjA0MjEzMzQ3WhcNMjUwNjExMjEzMzQ2WjAYMRYwFAYD VQQDEw02ODQwYmJiYi0zZmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4GCw8wiwYuwYyT/NNixUox5OH7ibhYH6K/nuZwQ2DHX+e4u6O0YWgpHCLrMV rue8RCpKPODNBfbH2mA2lO7D1yzbOCFbdoOs/vAC/ALC4tP5KSfNbOw/TeSasbTp 0PKbJauqVT7zcTH+6ZF1WYW6tDEdqwOapCLbWXtYCcMpMDoaTOQnWhmjnNEJKXT4 QjSMhGehcaHHw+SMXt/Vhz2CsGwwxO272+QEPyfLwK261X+m59XSJrtLdQX02tDL wF8nzVlZUUWJzSBDIqfEyaD1Vu5yNKMIuIcLigv6694AlrQ1pdb6jOEK62ArFAWp OtR6F/hRp+GOoUe1tDHU8nnm5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGTpwF4t jXVvs5CT/skzTj77xruiMB8GA1UdIwQYMBaAFKMhU3ElN2ANcTQuwGmlfz7tYNcM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDc3MS81MEMwODA0RTI5 NEIxMUVCQTc4QzFCMkZDNEY5QUUwMi9veUZUY1NVM1lBMXhOQzdBYWFWX1B1MWcx d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL295RlRjU1UzWUExeE5DN0FhYVZfUHUxZzF3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDc3MS81MEMwODA0RTI5NEIxMUVCQTc4QzFCMkZDNEY5QUUwMi9veUZUY1NVM1lB MXhOQzdBYWFWX1B1MWcxd3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYhD9YIeCej4G/aGFRFhhEaInSEfN0XWyPN6tpymqMEU0l5VD/m5rC /YJb4n4PghDX24fzje+p4oRakxi3h+v02gAtTacEsZv5VDNt7+NOEN3/VlylnnnE JxqscUKuyMl20/LgcVYRQlNoGOAPYgm3jJmIWNmLcLaPn7X0P455hrxLV5LWlEiY U0btjFPVBC2d6LUxlehoUtUU2gg+WaintYNlJONh8vCRdNyfW6sFLHphWqEaoD8X WbsUm3XUhn1oKSQKFVmQIQ+vfCnpFq0exle1p3GgP1sdtLraaTIl81uNBT7d9xet QQxvpr82qWHSdXDePb3Ji0IJwJmBXJWj -----END CERTIFICATE-----Generated at Thu Jun 5 20:01:11 2025 by rpki-client