$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft File: MOIGH3wgvYQ77lNywTIcNfux0-8.mft (raw, json) Hash identifier: LkaCV1OWAfKqw0mwIeDJg9aHrO/nmfvAca6r5sinTbU= Subject key identifier: 42:E6:3F:5B:29:4A:35:26:8C:86:F5:0D:1C:2B:12:E7:FC:BB:D8:5B Authority key identifier: 30:E2:06:1F:7C:20:BD:84:3B:EE:53:72:C1:32:1C:35:FB:B1:D3:EF Certificate issuer: /CN=A91BC269/serialNumber=30E2061F7C20BD843BEE5372C1321C35FBB1D3EF Certificate serial: 0372 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft Manifest number: 0349 Signing time: Sat 31 May 2025 01:22:16 +0000 Manifest this update: Sat 31 May 2025 01:22:16 +0000 Manifest next update: Sat 07 Jun 2025 01:22:16 +0000 Files and hashes: 1: MOIGH3wgvYQ77lNywTIcNfux0-8.crl (hash: NX+kie8aZNTRQGKtnP8xo9gDihAJgffseiTje4LnfgE=) 2: 96A539C2278211EF902D8D85C4F9AE02.roa (hash: pJW1JdeGLLzOt3FmC1xw+P+I/N25ewL6n7IDt7taQwc=) 3: 80F23C7E1BC011EFB7916B7DC4F9AE02.roa (hash: qSv2BT3qwQ8QX0Y5AHl2Fu25v4OXEGvtOVat3ng7Qm0=) 4: DAAECE38C77711EDA89BE25DC4F9AE02.roa (hash: j9PZe7H54iqFwSW5LIWJcZWzWL15B6MkV0bnjdVzrtw=) 5: BC17B1DCB96311EDA3070C82C4F9AE02.roa (hash: cN84s7I55h93u/XVx1FhwQXM6ahiSIjmBZ81HatEkU4=) 6: 9B8A0A56F56F11EF84317935C4F9AE02.roa (hash: 0bWlqpDV1jdZ32UUmwWBU46n0Ec3stYEb8RHblnMIUE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.crl rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:22:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 882 (0x372) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC269, serialNumber=30E2061F7C20BD843BEE5372C1321C35FBB1D3EF Validity Not Before: May 31 01:22:16 2025 GMT Not After : Jun 7 01:22:16 2025 GMT Subject: CN=683a59c8-0184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:85:f7:4b:3b:51:33:96:6a:2a:64:b3:1d:34: 50:63:89:69:ae:13:7c:a9:2f:07:7d:f3:2d:a3:e8: bb:6a:fb:18:48:75:e7:c2:3f:11:ad:42:d0:ba:a6: 23:4c:b1:88:c2:d1:d9:55:db:26:ca:df:b0:76:0b: d7:de:c1:66:cf:54:d4:bb:b2:4f:9d:4f:8d:52:70: a6:38:a7:a1:3f:09:e0:6a:fa:07:1b:5a:b6:3a:fe: fb:7c:ba:a4:d2:b2:bf:ce:6c:e0:78:2c:f0:59:46: be:5a:d8:ed:cc:8e:16:f5:da:4a:9e:cd:c5:fa:7c: 9a:f2:2f:ad:e4:d4:c3:29:64:c9:75:3d:c5:df:2a: 71:65:a8:ab:d4:6f:dd:0e:93:dc:74:96:04:32:4d: 44:79:b7:de:f0:1c:11:5e:f0:2d:6a:ce:86:5f:4e: 90:0d:66:8a:bf:31:ea:81:7a:62:54:e0:d6:17:31: 8c:14:12:15:29:e2:15:ef:d2:96:5a:f5:e5:0a:94: 14:23:3c:e9:0c:a0:b8:0a:bb:58:ca:61:e0:89:9b: ba:5f:59:1e:f1:93:b7:04:08:ce:99:be:8a:b9:7b: 28:bf:c0:7a:c1:20:0d:cb:59:48:3b:96:96:85:21: 1d:6c:1e:d0:44:d0:e0:de:ab:69:cd:45:2c:11:7f: 4d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:E6:3F:5B:29:4A:35:26:8C:86:F5:0D:1C:2B:12:E7:FC:BB:D8:5B X509v3 Authority Key Identifier: keyid:30:E2:06:1F:7C:20:BD:84:3B:EE:53:72:C1:32:1C:35:FB:B1:D3:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:bd:64:c0:c3:0e:f3:fb:1e:5c:94:5f:d1:2d:24:97:e1:34: 8f:cf:a1:9f:06:f7:2b:0b:8e:c9:e1:63:fd:42:03:4f:42:fd: a7:95:09:ac:a2:4e:e1:5c:cb:ac:85:d9:09:f7:a9:81:a9:dd: 26:13:19:64:e8:08:1a:d2:19:a0:91:d5:35:ad:20:a4:d7:98: bd:6f:7b:16:31:3f:99:8d:92:62:b9:fd:63:02:4b:45:0e:7d: 7c:69:3e:89:db:36:06:b4:80:fe:e1:3c:de:5a:db:67:bd:4d: 6c:3d:8d:d9:7e:6b:4e:da:58:8f:7c:87:49:91:5b:86:10:2a: e5:62:16:7e:fa:b5:1b:82:58:35:bb:4e:6d:34:cb:5b:de:1f: 3a:6f:90:e4:7d:e0:1d:bb:31:80:8c:57:c2:80:92:d7:a4:ef: ab:3a:a8:a3:19:23:5d:9f:bd:e1:ea:b0:8a:d9:8f:31:b3:05: 99:50:64:29:23:73:80:f5:05:4a:0f:d1:da:f2:ce:46:5b:68: 9e:f1:64:6b:d0:82:16:e2:75:ad:ab:2b:6e:87:55:72:c3:0c: 19:58:e3:3c:a9:b8:62:a4:58:e0:2a:34:1e:8b:35:2c:5c:63: 53:2e:2d:80:4d:2f:cd:65:6f:0a:e6:98:0d:3b:8e:ea:1c:bf: bf:b6:2c:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMyNjkxMTAvBgNVBAUTKDMwRTIwNjFGN0MyMEJEODQzQkVFNTM3MkMxMzIxQzM1 RkJCMUQzRUYwHhcNMjUwNTMxMDEyMjE2WhcNMjUwNjA3MDEyMjE2WjAYMRYwFAYD VQQDEw02ODNhNTljOC0wMTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmoX3SztRM5ZqKmSzHTRQY4lprhN8qS8HffMto+i7avsYSHXnwj8RrULQuqYj TLGIwtHZVdsmyt+wdgvX3sFmz1TUu7JPnU+NUnCmOKehPwngavoHG1q2Ov77fLqk 0rK/zmzgeCzwWUa+WtjtzI4W9dpKns3F+nya8i+t5NTDKWTJdT3F3ypxZair1G/d DpPcdJYEMk1Eebfe8BwRXvAtas6GX06QDWaKvzHqgXpiVODWFzGMFBIVKeIV79KW WvXlCpQUIzzpDKC4CrtYymHgiZu6X1ke8ZO3BAjOmb6KuXsov8B6wSANy1lIO5aW hSEdbB7QRNDg3qtpzUUsEX9N/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFELmP1sp SjUmjIb1DRwrEuf8u9hbMB8GA1UdIwQYMBaAFDDiBh98IL2EO+5TcsEyHDX7sdPv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzI2OS9CQTY3NkUzMENG RTUxMUVDOTRCQkM3NUFDNEY5QUUwMi9NT0lHSDN3Z3ZZUTc3bE55d1RJY05mdXgw LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01PSUdIM3dndllRNzdsTnl3VEljTmZ1eDAtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzI2OS9CQTY3NkUzMENGRTUxMUVDOTRCQkM3NUFDNEY5QUUwMi9NT0lHSDN3Z3ZZ UTc3bE55d1RJY05mdXgwLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLvWTAww7z+x5clF/RLSSX4TSPz6GfBvcrC47J4WP9QgNPQv2nlQms ok7hXMushdkJ96mBqd0mExlk6Aga0hmgkdU1rSCk15i9b3sWMT+ZjZJiuf1jAktF Dn18aT6J2zYGtID+4TzeWttnvU1sPY3ZfmtO2liPfIdJkVuGECrlYhZ++rUbglg1 u05tNMtb3h86b5DkfeAduzGAjFfCgJLXpO+rOqijGSNdn73h6rCK2Y8xswWZUGQp I3OA9QVKD9Ha8s5GW2ie8WRr0IIW4nWtqytuh1VywwwZWOM8qbhipFjgKjQeizUs XGNTLi2ATS/NZW8K5pgNO47qHL+/tixn -----END CERTIFICATE-----Generated at Sat May 31 17:08:59 2025 by rpki-client