$ rpki-client -vvf rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.mft File: oPnraYHccqJ4sYUomQbB4RwLNfE.mft (raw, json) Hash identifier: nu/DS3mf9KC16cqskT7Y94AiGw8mTU1S4vYAaCtUGfw= Subject key identifier: 06:4D:94:78:28:0B:D1:74:AC:F5:11:EA:89:78:E8:F3:F2:14:86:4E Authority key identifier: A0:F9:EB:69:81:DC:72:A2:78:B1:85:28:99:06:C1:E1:1C:0B:35:F1 Certificate issuer: /CN=A91A05A0/serialNumber=A0F9EB6981DC72A278B185289906C1E11C0B35F1 Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPnraYHccqJ4sYUomQbB4RwLNfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.mft Manifest number: 09 Signing time: Sat 31 May 2025 07:40:09 +0000 Manifest this update: Sat 31 May 2025 07:40:08 +0000 Manifest next update: Sat 07 Jun 2025 07:40:08 +0000 Files and hashes: 1: oPnraYHccqJ4sYUomQbB4RwLNfE.crl (hash: aw81MpQG+CuE0LXYYw3Vv3ON0X0JW9gGdHVHnzwOZ7g=) 2: 25E96E4C2F6511F0A4430347C4F9AE02.roa (hash: 1Yct3nRJtVY9HiL2zSbCvIf02xNnDEaRtj5Z7mWSdjk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.crl rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPnraYHccqJ4sYUomQbB4RwLNfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:40:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A05A0, serialNumber=A0F9EB6981DC72A278B185289906C1E11C0B35F1 Validity Not Before: May 31 07:40:08 2025 GMT Not After : Jun 7 07:40:08 2025 GMT Subject: CN=683ab258-7e1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:af:e7:b8:ef:4e:d7:fe:78:bf:91:fb:db:35: e9:47:e6:b0:0f:b4:2c:1e:95:84:a4:3f:e2:59:ae: bb:c1:43:ca:93:3d:98:aa:4e:04:06:ec:b5:dc:98: 59:0a:b0:9c:51:49:76:c7:2e:bd:49:75:61:b3:56: fa:03:b6:41:a3:02:8f:21:9c:d9:b3:6b:f7:f7:e3: f4:07:7f:ad:aa:ce:9f:0f:ab:e1:a6:f3:ca:67:99: 19:38:ab:3a:2b:9b:44:73:23:ac:24:77:69:46:d2: d0:07:bc:6f:53:e2:24:88:a8:24:c3:1a:fb:d7:70: e2:6c:e8:b6:84:41:c7:8c:82:07:00:25:d0:0f:84: ec:a2:10:4a:66:08:3a:0b:cd:ba:bc:a7:82:c2:c0: 63:0a:7c:7d:7a:87:01:02:c5:c8:07:ed:cb:be:a5: 39:49:f6:32:34:27:3a:2b:c4:b3:4e:97:99:bc:b1: 1e:20:e4:78:22:43:b7:c4:ea:e2:12:0c:42:b7:4f: 5d:70:c7:8c:5e:04:b5:c9:e1:1f:26:3f:b8:ba:a0: 7b:2c:26:ca:34:cf:4b:e1:97:77:48:b8:44:4b:7c: 88:c3:cc:84:dc:e2:a2:35:ab:bb:24:3e:25:a2:b4: e6:8c:70:46:5a:e3:1d:c8:ea:93:4a:f9:39:b8:0c: 73:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:4D:94:78:28:0B:D1:74:AC:F5:11:EA:89:78:E8:F3:F2:14:86:4E X509v3 Authority Key Identifier: keyid:A0:F9:EB:69:81:DC:72:A2:78:B1:85:28:99:06:C1:E1:1C:0B:35:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPnraYHccqJ4sYUomQbB4RwLNfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:09:af:60:64:0d:ff:38:5b:8d:89:81:04:51:bd:df:97:5f: 93:60:24:f2:60:76:17:48:3f:b3:0a:da:16:e9:14:cb:24:39: 25:c5:bc:8b:3e:a1:1b:d9:49:a0:86:0a:8d:33:dc:bf:65:a2: 7c:32:7a:9b:18:73:27:6e:c5:84:27:57:30:25:e9:66:76:9a: 9d:6e:3d:46:b5:cd:33:5b:d1:e4:73:e0:46:cc:0a:73:70:85: b8:e2:8c:26:41:99:be:52:a5:78:e3:83:a2:83:be:84:df:33: a0:dd:ba:a0:fa:85:f5:18:0c:3d:9f:4c:ee:56:1b:4f:e4:ee: f8:5b:fe:d1:07:72:b0:d3:a3:ea:df:52:5e:bb:20:a5:d7:7f: 6c:ad:4e:64:ae:5d:ba:9a:ee:af:c0:d6:32:98:ca:bc:ee:d1: 47:a3:50:c5:92:a6:cf:8f:d9:58:ff:48:6e:29:e8:86:f1:a5: 15:b0:6c:13:5c:4a:e5:cc:3a:13:b7:e2:8a:e3:75:de:dc:07: 22:5f:70:50:08:57:34:a4:ea:6a:fa:2f:b4:8b:7d:11:ac:a6: ab:60:07:77:70:b0:30:af:a5:37:ea:0e:16:84:22:3c:25:f8: 3e:96:d3:86:3d:dc:40:f9:ed:24:21:e8:68:da:0d:c6:f0:ae: 7f:40:5c:4f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MDVBMDExMC8GA1UEBRMoQTBGOUVCNjk4MURDNzJBMjc4QjE4NTI4OTkwNkMxRTEx QzBCMzVGMTAeFw0yNTA1MzEwNzQwMDhaFw0yNTA2MDcwNzQwMDhaMBgxFjAUBgNV BAMTDTY4M2FiMjU4LTdlMWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwr+e4707X/ni/kfvbNelH5rAPtCwelYSkP+JZrrvBQ8qTPZiqTgQG7LXcmFkK sJxRSXbHLr1JdWGzVvoDtkGjAo8hnNmza/f34/QHf62qzp8Pq+Gm88pnmRk4qzor m0RzI6wkd2lG0tAHvG9T4iSIqCTDGvvXcOJs6LaEQceMggcAJdAPhOyiEEpmCDoL zbq8p4LCwGMKfH16hwECxcgH7cu+pTlJ9jI0JzorxLNOl5m8sR4g5HgiQ7fE6uIS DEK3T11wx4xeBLXJ4R8mP7i6oHssJso0z0vhl3dIuERLfIjDzITc4qI1q7skPiWi tOaMcEZa4x3I6pNK+Tm4DHMVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBk2UeCgL 0XSs9RHqiXjo8/IUhk4wHwYDVR0jBBgwFoAUoPnraYHccqJ4sYUomQbB4RwLNfEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEwNUEwLzlDNTM3MTc4MkY2 NDExRjBCNEYyQTI0NUM0RjlBRTAyL29QbnJhWUhjY3FKNHNZVW9tUWJCNFJ3TE5m RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb1BucmFZSGNjcUo0c1lVb21RYkI0UndMTmZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEw NUEwLzlDNTM3MTc4MkY2NDExRjBCNEYyQTI0NUM0RjlBRTAyL29QbnJhWUhjY3FK NHNZVW9tUWJCNFJ3TE5mRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABYJr2BkDf84W42JgQRRvd+XX5NgJPJgdhdIP7MK2hbpFMskOSXFvIs+ oRvZSaCGCo0z3L9lonwyepsYcyduxYQnVzAl6WZ2mp1uPUa1zTNb0eRz4EbMCnNw hbjijCZBmb5SpXjjg6KDvoTfM6DduqD6hfUYDD2fTO5WG0/k7vhb/tEHcrDTo+rf Ul67IKXXf2ytTmSuXbqa7q/A1jKYyrzu0UejUMWSps+P2Vj/SG4p6IbxpRWwbBNc SuXMOhO34orjdd7cByJfcFAIVzSk6mr6L7SLfRGspqtgB3dwsDCvpTfqDhaEIjwl +D6W04Y93ED57SQh6GjaDcbwrn9AXE8= -----END CERTIFICATE-----Generated at Sat May 31 17:34:18 2025 by rpki-client