$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.mft File: oCcZWkgg89cmSk1X7pqdTCoQySM.mft (raw, json) Hash identifier: QTVSkL9s85J6CoSjGb2f5a8Od08LFLDOjC6PGt+8Wiw= Subject key identifier: FD:7E:0F:CC:EF:93:0A:9D:69:61:96:58:F7:D5:5E:42:7D:86:E7:DA Authority key identifier: A0:27:19:5A:48:20:F3:D7:26:4A:4D:57:EE:9A:9D:4C:2A:10:C9:23 Certificate issuer: /CN=A91C1621/serialNumber=A027195A4820F3D7264A4D57EE9A9D4C2A10C923 Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oCcZWkgg89cmSk1X7pqdTCoQySM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.mft Manifest number: 4F Signing time: Mon 02 Jun 2025 14:16:12 +0000 Manifest this update: Mon 02 Jun 2025 14:16:12 +0000 Manifest next update: Mon 09 Jun 2025 14:16:12 +0000 Files and hashes: 1: oCcZWkgg89cmSk1X7pqdTCoQySM.crl (hash: PRW9vjwkRqFyUnWiqKAT2GVZXxtDo4xIQtex+N8HM2c=) 2: 81E4D4A2053011F09C73001FC4F9AE02.roa (hash: cA2l4Bz4w9KwEr1hYRA0GBgp3+TMBDk54SQcEyXzSVQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.crl rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oCcZWkgg89cmSk1X7pqdTCoQySM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 05:53:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1621, serialNumber=A027195A4820F3D7264A4D57EE9A9D4C2A10C923 Validity Not Before: Jun 2 14:16:12 2025 GMT Not After : Jun 9 14:16:12 2025 GMT Subject: CN=683db22c-3e9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:cd:fe:2c:ac:8f:2e:5a:cc:6d:93:fe:ba:f9: 85:b7:07:66:21:0c:41:53:66:df:41:b3:79:9f:9d: b0:2e:af:fe:7d:ed:7b:66:71:81:16:68:22:22:4d: 80:3d:c8:88:dd:22:00:ed:c7:00:6a:d0:7c:7b:cd: bb:68:d9:89:f1:99:b7:df:38:8a:d6:cd:bf:67:62: 1d:d4:76:6c:0d:d8:3d:04:0f:f3:aa:d6:89:54:c5: 34:8d:70:3c:13:d1:5b:40:8d:61:29:3d:d4:cb:27: 19:fe:a0:0e:72:24:fa:90:99:f3:d3:86:48:89:3f: 20:63:9b:f6:9f:a0:95:ad:f1:64:c5:5b:70:04:be: 11:0f:32:e1:85:45:f2:21:20:f8:7d:05:d8:a5:a2: 54:4f:d1:8c:0a:93:a3:1d:a2:91:ce:c9:7f:e0:11: 2e:55:eb:f0:09:e5:dc:99:f7:49:d9:ec:cc:47:0e: 67:9e:6d:54:9e:d4:a8:9d:b7:49:0c:aa:b0:76:6e: 84:76:b0:b6:56:5f:2c:e2:b0:54:ac:db:99:a6:67: 09:87:e7:a4:1d:f2:90:0e:4b:ac:d0:0c:a5:51:49: 6c:a4:09:b7:d0:26:a5:09:63:60:b8:68:88:61:c6: f4:1b:cd:7b:a0:48:e6:d5:a9:c3:3c:92:7a:eb:9c: c9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:7E:0F:CC:EF:93:0A:9D:69:61:96:58:F7:D5:5E:42:7D:86:E7:DA X509v3 Authority Key Identifier: keyid:A0:27:19:5A:48:20:F3:D7:26:4A:4D:57:EE:9A:9D:4C:2A:10:C9:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oCcZWkgg89cmSk1X7pqdTCoQySM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:58:ce:8a:f4:fe:97:dc:91:f8:93:a3:5c:0b:7d:8b:8a:da: 4d:61:b3:f8:17:26:78:42:c4:03:39:d7:e1:11:0a:2d:6c:19: d7:7b:8e:55:4a:1b:31:f9:5d:d3:be:49:0f:98:5c:31:12:2c: 33:cd:3d:05:95:95:cf:0c:e2:a8:7b:75:88:2f:78:b8:13:e3: 55:8e:9e:e6:71:d5:6b:1a:19:ab:75:0c:74:8b:29:9d:c5:08: 45:db:98:66:55:ef:b0:49:fd:3c:4c:f4:ba:a0:6b:ab:37:9a: a0:f8:4b:ce:08:a9:e0:c8:e4:a5:8a:40:b7:8c:36:1d:c7:af: f8:4e:13:9a:2c:64:3a:64:6f:18:56:82:0e:d5:87:16:41:25: 9c:da:80:f4:9a:c0:cd:2d:c6:ae:fe:fb:47:29:48:f9:49:b5: d0:ad:94:b0:c1:65:26:3e:42:c5:b1:68:73:a8:9e:57:fc:b2: 60:14:25:91:a6:59:f5:7c:16:50:45:f6:22:6e:9e:d4:df:20: 29:a7:a2:4d:5d:3e:e0:9a:ff:1a:54:82:c0:8c:fd:d9:f2:ea: 12:7a:a7:dc:ab:56:58:94:bf:5d:69:53:85:c9:b3:fc:04:46: 20:a6:3e:9b:b2:dc:b7:93:6d:b9:af:78:19:07:6f:fd:cb:83: fe:fc:51:f7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MTYyMTExMC8GA1UEBRMoQTAyNzE5NUE0ODIwRjNENzI2NEE0RDU3RUU5QTlENEMy QTEwQzkyMzAeFw0yNTA2MDIxNDE2MTJaFw0yNTA2MDkxNDE2MTJaMBgxFjAUBgNV BAMTDTY4M2RiMjJjLTNlOWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCWzf4srI8uWsxtk/66+YW3B2YhDEFTZt9Bs3mfnbAur/597XtmcYEWaCIiTYA9 yIjdIgDtxwBq0Hx7zbto2YnxmbffOIrWzb9nYh3UdmwN2D0ED/Oq1olUxTSNcDwT 0VtAjWEpPdTLJxn+oA5yJPqQmfPThkiJPyBjm/afoJWt8WTFW3AEvhEPMuGFRfIh IPh9BdilolRP0YwKk6MdopHOyX/gES5V6/AJ5dyZ90nZ7MxHDmeebVSe1Kidt0kM qrB2boR2sLZWXyzisFSs25mmZwmH56Qd8pAOS6zQDKVRSWykCbfQJqUJY2C4aIhh xvQbzXugSObVqcM8knrrnMnzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/X4PzO+T Cp1pYZZY99VeQn2G59owHwYDVR0jBBgwFoAUoCcZWkgg89cmSk1X7pqdTCoQySMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMxNjIxLzM1RURBOTJFQ0Yw RDExRUY5MkYxRUMzNkM0RjlBRTAyL29DY1pXa2dnODljbVNrMVg3cHFkVENvUXlT TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvb0NjWldrZ2c4OWNtU2sxWDdwcWRUQ29ReVNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMx NjIxLzM1RURBOTJFQ0YwRDExRUY5MkYxRUMzNkM0RjlBRTAyL29DY1pXa2dnODlj bVNrMVg3cHFkVENvUXlTTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABxYzor0/pfckfiTo1wLfYuK2k1hs/gXJnhCxAM51+ERCi1sGdd7jlVK GzH5XdO+SQ+YXDESLDPNPQWVlc8M4qh7dYgveLgT41WOnuZx1WsaGat1DHSLKZ3F CEXbmGZV77BJ/TxM9Lqga6s3mqD4S84IqeDI5KWKQLeMNh3Hr/hOE5osZDpkbxhW gg7VhxZBJZzagPSawM0txq7++0cpSPlJtdCtlLDBZSY+QsWxaHOonlf8smAUJZGm WfV8FlBF9iJuntTfICmnok1dPuCa/xpUgsCM/dny6hJ6p9yrVliUv11pU4XJs/wE RiCmPpuy3LeTbbmveBkHb/3Lg/78Ufc= -----END CERTIFICATE-----Generated at Mon Jun 2 20:12:50 2025 by rpki-client