$ rpki-client -vvf rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.mft File: o1EXGLQporBD5kW_sWUO5nd-QXI.mft (raw, json) Hash identifier: 6YeThxQM17i9bcPh+PaTiAVHPM9SYT2qFDdPetpphbw= Subject key identifier: 0D:0D:3E:C4:5B:CF:29:0F:6F:8E:8F:40:06:BF:65:E8:F5:62:55:A1 Authority key identifier: A3:51:17:18:B4:29:A2:B0:43:E6:45:BF:B1:65:0E:E6:77:7E:41:72 Certificate issuer: /CN=A919ACF6/serialNumber=A3511718B429A2B043E645BFB1650EE6777E4172 Certificate serial: 0810 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1EXGLQporBD5kW_sWUO5nd-QXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.mft Manifest number: 0809 Signing time: Wed 04 Jun 2025 20:45:53 +0000 Manifest this update: Wed 04 Jun 2025 20:45:53 +0000 Manifest next update: Wed 11 Jun 2025 20:45:53 +0000 Files and hashes: 1: o1EXGLQporBD5kW_sWUO5nd-QXI.crl (hash: vdv0OIJ4LCTtXbPBLkddIb09T2mfv5xD4yojPOyTTvs=) 2: F48207E6DB8711EAA446B360C4F9AE02.roa (hash: wGBFb60F2aF0B9pOX18btxm9jl1WJHVfOK5kaTJxavY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.crl rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1EXGLQporBD5kW_sWUO5nd-QXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 20:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2064 (0x810) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919ACF6, serialNumber=A3511718B429A2B043E645BFB1650EE6777E4172 Validity Not Before: Jun 4 20:45:53 2025 GMT Not After : Jun 11 20:45:53 2025 GMT Subject: CN=6840b081-b1d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:70:fd:3d:7b:db:3d:8c:c6:30:ff:02:7e:28: d5:84:f5:01:21:e2:72:ba:24:fe:00:42:cb:ab:9c: 13:31:72:8c:ba:42:ac:e0:02:9d:45:85:85:3a:20: 4c:d0:95:a3:65:01:f8:be:ed:b2:b9:15:23:60:26: 31:d2:b5:8f:60:11:47:4d:4c:a4:48:65:45:42:16: 66:b8:7d:98:62:bc:7c:df:1d:62:8d:c4:99:0f:6f: 42:a5:76:88:b2:d8:c9:0e:e0:c8:73:2f:f3:b4:b8: ff:32:c7:9e:ed:37:67:4e:6d:86:aa:0d:0e:e9:1a: 87:fe:3b:41:31:53:43:dd:3e:9a:38:a9:8b:c9:b2: f1:cc:af:ef:b0:0f:4e:fa:e0:b7:67:42:f4:bb:2b: 12:c1:4d:83:1d:21:b6:52:09:ed:b7:25:f4:fb:18: e5:cd:4b:e8:f3:bc:35:84:94:31:14:41:2b:2b:4a: 22:fc:69:a9:77:cf:32:f8:48:6a:11:1a:70:75:da: 46:2f:0c:a4:67:01:b1:5b:ee:ec:ed:79:4c:ed:c9: 81:50:99:d7:1a:e3:d7:b5:41:29:95:33:7f:06:3e: bd:9a:b0:8d:40:4a:c5:31:75:d7:32:54:3a:bd:fa: fc:da:f7:d4:26:e5:3e:5d:68:94:4a:bd:1b:1a:6f: 5f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:0D:3E:C4:5B:CF:29:0F:6F:8E:8F:40:06:BF:65:E8:F5:62:55:A1 X509v3 Authority Key Identifier: keyid:A3:51:17:18:B4:29:A2:B0:43:E6:45:BF:B1:65:0E:E6:77:7E:41:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1EXGLQporBD5kW_sWUO5nd-QXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:16:26:d7:06:b8:a8:f2:0b:b5:7b:98:fc:53:ce:cb:ec:01: 77:30:75:28:0e:5e:93:44:88:71:0e:4f:27:f5:d4:c5:2d:13: 27:eb:c8:da:a8:32:ca:49:1b:76:5d:e7:e6:e7:6c:88:b4:93: ec:19:3d:9e:8c:18:da:da:9e:82:a8:8a:0b:bc:22:6d:87:59: ae:f6:6c:d2:91:b3:31:1d:45:fb:6c:90:a8:79:88:c1:73:b9: f7:22:55:bc:47:f0:4f:65:6f:df:f3:6c:c1:0a:e2:ab:0e:0e: 68:92:a4:da:ea:b7:01:48:e6:3e:5b:b3:cb:0b:66:14:32:7c: 5f:fd:4a:79:92:2f:02:ba:68:74:c0:1c:98:0f:fa:c1:63:3f: d8:00:c7:1c:73:64:6d:22:e9:70:7f:f7:d0:62:a9:6f:bb:fb: d7:e4:15:31:b8:f3:9f:07:1a:6a:8b:38:9a:40:f8:32:d2:e3: 98:e5:f1:80:37:32:a7:c2:7b:91:99:3f:98:c7:76:1e:7a:9d: 61:d4:00:38:90:96:c7:44:c6:0c:a0:4d:a7:0d:9c:3d:64:55: d0:43:94:d0:7a:c9:90:77:d4:b0:05:f0:2e:be:8e:39:16:37: 8b:a9:6c:7a:2a:8c:38:37:7a:1a:06:38:ab:73:c8:e3:20:22: 5f:57:5b:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUFDRjYxMTAvBgNVBAUTKEEzNTExNzE4QjQyOUEyQjA0M0U2NDVCRkIxNjUwRUU2 Nzc3RTQxNzIwHhcNMjUwNjA0MjA0NTUzWhcNMjUwNjExMjA0NTUzWjAYMRYwFAYD VQQDEw02ODQwYjA4MS1iMWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr3D9PXvbPYzGMP8CfijVhPUBIeJyuiT+AELLq5wTMXKMukKs4AKdRYWFOiBM 0JWjZQH4vu2yuRUjYCYx0rWPYBFHTUykSGVFQhZmuH2YYrx83x1ijcSZD29CpXaI stjJDuDIcy/ztLj/Msee7TdnTm2Gqg0O6RqH/jtBMVND3T6aOKmLybLxzK/vsA9O +uC3Z0L0uysSwU2DHSG2UgnttyX0+xjlzUvo87w1hJQxFEErK0oi/Gmpd88y+Ehq ERpwddpGLwykZwGxW+7s7XlM7cmBUJnXGuPXtUEplTN/Bj69mrCNQErFMXXXMlQ6 vfr82vfUJuU+XWiUSr0bGm9ftwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA0NPsRb zykPb46PQAa/Zej1YlWhMB8GA1UdIwQYMBaAFKNRFxi0KaKwQ+ZFv7FlDuZ3fkFy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QUNGNi8zNDk3ODNFRURC ODYxMUVBODU1OTQyNUVDNEY5QUUwMi9vMUVYR0xRcG9yQkQ1a1dfc1dVTzVuZC1R WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28xRVhHTFFwb3JCRDVrV19zV1VPNW5kLVFYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QUNGNi8zNDk3ODNFRURCODYxMUVBODU1OTQyNUVDNEY5QUUwMi9vMUVYR0xRcG9y QkQ1a1dfc1dVTzVuZC1RWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSFibXBrio8gu1e5j8U87L7AF3MHUoDl6TRIhxDk8n9dTFLRMn68ja qDLKSRt2Xefm52yItJPsGT2ejBja2p6CqIoLvCJth1mu9mzSkbMxHUX7bJCoeYjB c7n3IlW8R/BPZW/f82zBCuKrDg5okqTa6rcBSOY+W7PLC2YUMnxf/Up5ki8Cumh0 wByYD/rBYz/YAMccc2RtIulwf/fQYqlvu/vX5BUxuPOfBxpqiziaQPgy0uOY5fGA NzKnwnuRmT+Yx3Yeep1h1AA4kJbHRMYMoE2nDZw9ZFXQQ5TQesmQd9SwBfAuvo45 FjeLqWx6Kow4N3oaBjirc8jjICJfV1tI -----END CERTIFICATE-----Generated at Thu Jun 5 20:08:49 2025 by rpki-client