$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft File: OddGjPgMUFXp0EybT60xF1wU1l8.mft (raw, json) Hash identifier: 7mq0YsT4MlwdDWOUKTkcbhkZg5W7nqA2/JcNsdSI/+g= Subject key identifier: 91:FE:A9:29:73:E4:AF:26:38:2A:47:0A:3D:99:D9:CB:03:B0:D4:9D Authority key identifier: 39:D7:46:8C:F8:0C:50:55:E9:D0:4C:9B:4F:AD:31:17:5C:14:D6:5F Certificate issuer: /CN=A91AD643/serialNumber=39D7468CF80C5055E9D04C9B4FAD31175C14D65F Certificate serial: 06D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft Manifest number: 06CA Signing time: Fri 30 May 2025 22:18:13 +0000 Manifest this update: Fri 30 May 2025 22:18:12 +0000 Manifest next update: Fri 06 Jun 2025 22:18:12 +0000 Files and hashes: 1: OddGjPgMUFXp0EybT60xF1wU1l8.crl (hash: fd3GQ5nqFOgFAMOLhLDw3uBKtzBFqUJKtbbo3xfDTQE=) 2: 865F2F80EE8911EBB390AC76C4F9AE02.roa (hash: 0ULrTT5sEmnlV5jXg9GCbo9G2IRIBRTqvgY01zsRTW8=) 3: 81E9653E5B8A11EB857A3F77C4F9AE02.roa (hash: hFkz2Rxz8bjHa9W5ewxpkxAw84TOeg9mnyL9BGUNw+E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.crl rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:18:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1750 (0x6d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD643, serialNumber=39D7468CF80C5055E9D04C9B4FAD31175C14D65F Validity Not Before: May 30 22:18:12 2025 GMT Not After : Jun 6 22:18:12 2025 GMT Subject: CN=683a2ea4-91c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7a:14:58:2e:b6:84:d9:31:e0:c4:72:34:a4: 47:7b:f1:d8:03:ac:b8:f2:8d:91:7a:ba:ba:25:ec: af:fa:37:f3:fe:c3:f5:54:89:5c:ad:b1:e5:a2:f3: 31:c7:95:0a:9a:95:19:74:2e:c6:0e:bb:2e:d9:d5: fa:55:d1:69:b3:ef:07:06:e7:98:8c:9b:39:a0:0e: 90:c3:9d:f9:df:ea:49:72:49:bd:f9:27:bd:34:9f: 62:3b:fa:c7:88:93:41:7c:c6:6c:07:5e:af:4a:7b: 0e:d1:8a:5a:d4:34:5e:c7:57:a2:88:70:43:23:31: 2a:3a:93:3c:bb:c8:25:f5:be:59:37:3d:32:36:1e: d0:c4:b9:d5:76:dd:ca:4f:3f:ab:be:99:21:f1:e5: 70:0e:1d:61:16:c6:ef:2a:70:40:5f:c4:65:69:c8: ec:14:70:08:22:84:94:13:fa:77:ba:67:da:1f:a5: 31:56:9f:d9:d2:90:37:50:8e:2a:0d:6e:a1:2a:45: cd:f2:01:80:f6:bc:7f:b2:b2:61:cc:f5:6a:6a:ae: 92:89:e7:ab:19:08:e7:c1:6d:e2:d0:5b:7d:b7:4b: e7:ae:96:20:e8:9f:f5:cb:fe:8c:5f:e9:2e:7b:4e: 3c:a9:b9:d6:45:6a:de:2b:78:79:b6:bd:98:5b:52: 5a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:FE:A9:29:73:E4:AF:26:38:2A:47:0A:3D:99:D9:CB:03:B0:D4:9D X509v3 Authority Key Identifier: keyid:39:D7:46:8C:F8:0C:50:55:E9:D0:4C:9B:4F:AD:31:17:5C:14:D6:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:3b:b5:63:e9:b3:c1:ef:86:9a:35:c4:90:4f:83:9d:e4:fb: 29:f6:6f:04:a4:09:bd:82:5d:be:ba:d9:70:42:ec:c0:38:4c: ed:37:e9:9a:46:72:7d:85:df:7c:b5:a4:24:15:5e:bc:31:ac: b5:6b:df:29:1a:e4:8b:5d:9e:3a:58:4b:1f:31:e6:5e:dc:56: a6:61:f1:12:5f:15:48:ca:a5:d8:b4:d4:1c:07:e5:e2:02:3b: ea:34:a3:66:e7:04:8f:ec:3f:c2:5d:c4:a0:3e:3b:34:2a:2b: d4:bd:85:33:44:e2:5d:f4:8e:fd:ed:6a:f3:1c:b5:30:40:87: 54:0c:97:47:5a:bb:0e:84:0f:52:24:9a:5c:9f:eb:ad:e3:20: 7f:99:8c:10:8b:51:b1:fb:9f:3f:fa:c0:d0:3e:2f:d1:7a:4b: c5:20:6d:02:ad:22:f3:e0:92:dc:71:1b:a9:b9:a7:40:43:80: f6:21:39:38:36:b2:dc:84:28:e0:e6:90:9b:3d:ff:b2:d0:3f: a1:f6:e9:3b:f6:84:bb:f9:41:20:7b:56:aa:5d:28:1a:e1:e6: 77:ef:a1:d2:76:df:b1:35:36:13:8f:93:89:c5:b9:fa:55:5c: dc:ac:bd:35:2b:4a:15:09:c9:ec:59:86:d4:0e:50:cf:27:a8: 09:ff:5f:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ2NDMxMTAvBgNVBAUTKDM5RDc0NjhDRjgwQzUwNTVFOUQwNEM5QjRGQUQzMTE3 NUMxNEQ2NUYwHhcNMjUwNTMwMjIxODEyWhcNMjUwNjA2MjIxODEyWjAYMRYwFAYD VQQDEw02ODNhMmVhNC05MWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyXoUWC62hNkx4MRyNKRHe/HYA6y48o2Rerq6Jeyv+jfz/sP1VIlcrbHlovMx x5UKmpUZdC7GDrsu2dX6VdFps+8HBueYjJs5oA6Qw5353+pJckm9+Se9NJ9iO/rH iJNBfMZsB16vSnsO0Ypa1DRex1eiiHBDIzEqOpM8u8gl9b5ZNz0yNh7QxLnVdt3K Tz+rvpkh8eVwDh1hFsbvKnBAX8RlacjsFHAIIoSUE/p3umfaH6UxVp/Z0pA3UI4q DW6hKkXN8gGA9rx/srJhzPVqaq6SieerGQjnwW3i0Ft9t0vnrpYg6J/1y/6MX+ku e048qbnWRWreK3h5tr2YW1Ja6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJH+qSlz 5K8mOCpHCj2Z2csDsNSdMB8GA1UdIwQYMBaAFDnXRoz4DFBV6dBMm0+tMRdcFNZf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDY0My9FRkJFNkVCMjVC ODgxMUVCQkQ1RjMwNzZDNEY5QUUwMi9PZGRHalBnTVVGWHAwRXliVDYweEYxd1Ux bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09kZEdqUGdNVUZYcDBFeWJUNjB4RjF3VTFsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDY0My9FRkJFNkVCMjVCODgxMUVCQkQ1RjMwNzZDNEY5QUUwMi9PZGRHalBnTVVG WHAwRXliVDYweEYxd1UxbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBO7Vj6bPB74aaNcSQT4Od5Psp9m8EpAm9gl2+utlwQuzAOEztN+ma RnJ9hd98taQkFV68May1a98pGuSLXZ46WEsfMeZe3FamYfESXxVIyqXYtNQcB+Xi AjvqNKNm5wSP7D/CXcSgPjs0KivUvYUzROJd9I797WrzHLUwQIdUDJdHWrsOhA9S JJpcn+ut4yB/mYwQi1Gx+58/+sDQPi/RekvFIG0CrSLz4JLccRupuadAQ4D2ITk4 NrLchCjg5pCbPf+y0D+h9uk79oS7+UEge1aqXSga4eZ376HSdt+xNTYTj5OJxbn6 VVzcrL01K0oVCcnsWYbUDlDPJ6gJ/190 -----END CERTIFICATE-----Generated at Sat May 31 17:49:40 2025 by rpki-client