$ rpki-client -vvf rpki.apnic.net/member_repository/A91C66B7/66CDA4E8911611EA91C4650CC4F9AE02/w0Ozu4On4j-tla-NIytSBSoP3nI.mft File: w0Ozu4On4j-tla-NIytSBSoP3nI.mft (raw, json) Hash identifier: MoLNnHmQnzFTNxGLHJH476jAELnh10gOJSxeiM/Eiw8= Subject key identifier: 53:2F:D2:07:1E:D1:EE:72:E8:1A:A5:FD:D8:E6:18:43:07:9D:C6:CF Authority key identifier: C3:43:B3:BB:83:A7:E2:3F:AD:95:AF:8D:23:2B:52:05:2A:0F:DE:72 Certificate issuer: /CN=A91C66B7/serialNumber=C343B3BB83A7E23FAD95AF8D232B52052A0FDE72 Certificate serial: 09A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w0Ozu4On4j-tla-NIytSBSoP3nI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C66B7/66CDA4E8911611EA91C4650CC4F9AE02/w0Ozu4On4j-tla-NIytSBSoP3nI.mft Manifest number: 098A Signing time: Tue 10 Jun 2025 20:03:20 +0000 Manifest this update: Tue 10 Jun 2025 20:03:20 +0000 Manifest next update: Tue 17 Jun 2025 20:03:20 +0000 Files and hashes: 1: w0Ozu4On4j-tla-NIytSBSoP3nI.crl (hash: PmICSu0jwkJFRpwGmKbDpQYzGZfHBbySx5wDDbWZ4j4=) 2: 8A480EFE80EE11EBA01B8C79C4F9AE02.roa (hash: nGCSzyeCGWb2by2Ok6xODoRNUK8MF0tF735aj9iyb9Y=) 3: 63FE6F90232411EB87A6CB0DC4F9AE02.roa (hash: MFp+TQFdjUkWq8YrpZoPX+xKXmHG4qHFMaA4FACPOxE=) 4: 023564E6D5BE11ECA8BE4666C4F9AE02.roa (hash: wHZWRXwKbEVincv7YJ3e25Slz3Zw4ni306PAKoBPm2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C66B7/66CDA4E8911611EA91C4650CC4F9AE02/w0Ozu4On4j-tla-NIytSBSoP3nI.crl rsync://rpki.apnic.net/member_repository/A91C66B7/66CDA4E8911611EA91C4650CC4F9AE02/w0Ozu4On4j-tla-NIytSBSoP3nI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w0Ozu4On4j-tla-NIytSBSoP3nI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 20:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2469 (0x9a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C66B7, serialNumber=C343B3BB83A7E23FAD95AF8D232B52052A0FDE72 Validity Not Before: Jun 10 20:03:20 2025 GMT Not After : Jun 17 20:03:20 2025 GMT Subject: CN=68488f88-cb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7f:e3:16:66:3d:81:0a:3b:bd:e0:c1:d1:ce: 84:90:17:13:59:14:11:0c:fc:17:11:4a:c0:b9:bb: 49:50:fd:4f:2f:8c:7d:c7:a4:94:99:5e:a1:73:95: dc:78:10:09:31:d5:61:f8:2a:9f:1f:43:42:6d:4b: 5c:0a:11:14:99:88:f5:c0:30:5a:51:d9:22:57:a7: c3:8e:57:b9:a2:e5:37:6e:84:86:4e:fe:02:04:e8: 54:25:d8:9b:2d:9b:12:78:71:da:90:8a:39:2e:22: c8:08:23:e8:3d:4e:08:66:2b:38:a3:2b:30:74:e3: 13:bb:3e:99:14:5a:d1:41:28:89:55:c6:03:73:1b: a4:51:4c:d0:a8:97:86:d9:5f:dd:c6:a0:78:60:9f: 0b:ae:c9:e0:6e:11:d9:62:d4:71:d2:2d:fc:1c:bf: 19:4f:9c:e7:d4:80:d8:2f:21:5c:4d:33:e9:11:bf: 19:fb:b1:58:36:a4:b8:db:c5:03:6b:e5:97:fe:06: 5a:02:1c:8f:3f:46:de:8d:a5:e9:96:be:cd:10:10: f8:6b:2b:fe:0f:26:5b:e3:77:d6:4d:d6:bc:24:ba: 78:cf:81:6c:0c:ee:62:f4:08:8f:8b:f1:7e:b8:4a: db:48:0b:0a:80:9e:82:fe:ab:44:e6:86:8e:75:17: 79:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:2F:D2:07:1E:D1:EE:72:E8:1A:A5:FD:D8:E6:18:43:07:9D:C6:CF X509v3 Authority Key Identifier: keyid:C3:43:B3:BB:83:A7:E2:3F:AD:95:AF:8D:23:2B:52:05:2A:0F:DE:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C66B7/66CDA4E8911611EA91C4650CC4F9AE02/w0Ozu4On4j-tla-NIytSBSoP3nI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w0Ozu4On4j-tla-NIytSBSoP3nI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C66B7/66CDA4E8911611EA91C4650CC4F9AE02/w0Ozu4On4j-tla-NIytSBSoP3nI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:bd:3f:55:8e:34:e7:e1:c9:40:65:4d:89:e3:76:a8:a7:bb: f1:9c:ea:98:74:01:9d:52:93:aa:fb:5d:0d:0f:16:c3:c2:bc: b1:ee:cd:d3:24:f9:79:3d:64:72:66:72:ef:7b:7b:44:8d:ef: 28:09:6b:65:09:b4:7c:47:d4:a0:ae:b8:a0:64:b0:85:4f:84: 07:8d:ac:aa:b2:e5:7d:65:7d:15:69:22:53:cd:02:2f:93:b4: b3:d5:7c:1f:be:ef:e3:10:a2:67:da:3d:9f:86:6c:20:7e:e8: 81:bf:75:9b:9a:7f:c8:c4:da:69:de:28:37:a6:de:96:ee:dd: 6b:11:48:e0:90:b0:d1:2f:c4:68:c4:55:e7:2c:02:80:0c:95: bb:e1:9c:25:c4:98:a2:c0:84:3f:5b:43:11:a4:1f:6a:8a:c4: 16:ac:6c:81:1a:2a:3b:2e:df:a0:ea:34:6c:4f:12:3f:75:e9: 33:39:79:69:f7:2c:d0:43:b5:9b:6a:01:bf:a5:58:69:f0:29: 85:1d:30:c0:9a:35:77:a7:8f:8a:fc:f2:7f:da:c1:49:f6:48: c2:25:a9:0b:a3:ce:35:a4:64:cf:0b:20:87:d6:e4:0f:dc:02: 23:76:16:8e:41:81:b1:cd:25:5c:d0:dd:52:29:f4:d4:c5:8a: ef:9b:ce:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY2QjcxMTAvBgNVBAUTKEMzNDNCM0JCODNBN0UyM0ZBRDk1QUY4RDIzMkI1MjA1 MkEwRkRFNzIwHhcNMjUwNjEwMjAwMzIwWhcNMjUwNjE3MjAwMzIwWjAYMRYwFAYD VQQDEw02ODQ4OGY4OC1jYjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlX/jFmY9gQo7veDB0c6EkBcTWRQRDPwXEUrAubtJUP1PL4x9x6SUmV6hc5Xc eBAJMdVh+CqfH0NCbUtcChEUmYj1wDBaUdkiV6fDjle5ouU3boSGTv4CBOhUJdib LZsSeHHakIo5LiLICCPoPU4IZis4oyswdOMTuz6ZFFrRQSiJVcYDcxukUUzQqJeG 2V/dxqB4YJ8LrsngbhHZYtRx0i38HL8ZT5zn1IDYLyFcTTPpEb8Z+7FYNqS428UD a+WX/gZaAhyPP0bejaXplr7NEBD4ayv+DyZb43fWTda8JLp4z4FsDO5i9AiPi/F+ uErbSAsKgJ6C/qtE5oaOdRd5pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFMv0gce 0e5y6Bql/djmGEMHncbPMB8GA1UdIwQYMBaAFMNDs7uDp+I/rZWvjSMrUgUqD95y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjZCNy82NkNEQTRFODkx MTYxMUVBOTFDNDY1MENDNEY5QUUwMi93ME96dTRPbjRqLXRsYS1OSXl0U0JTb1Az bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3cwT3p1NE9uNGotdGxhLU5JeXRTQlNvUDNuSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjZCNy82NkNEQTRFODkxMTYxMUVBOTFDNDY1MENDNEY5QUUwMi93ME96dTRPbjRq LXRsYS1OSXl0U0JTb1AzbkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0vT9VjjTn4clAZU2J43aop7vxnOqYdAGdUpOq+10NDxbDwryx7s3T JPl5PWRyZnLve3tEje8oCWtlCbR8R9SgrrigZLCFT4QHjayqsuV9ZX0VaSJTzQIv k7Sz1Xwfvu/jEKJn2j2fhmwgfuiBv3Wbmn/IxNpp3ig3pt6W7t1rEUjgkLDRL8Ro xFXnLAKADJW74ZwlxJiiwIQ/W0MRpB9qisQWrGyBGio7Lt+g6jRsTxI/dekzOXlp 9yzQQ7WbagG/pVhp8CmFHTDAmjV3p4+K/PJ/2sFJ9kjCJakLo841pGTPCyCH1uQP 3AIjdhaOQYGxzSVc0N1SKfTUxYrvm84j -----END CERTIFICATE-----Generated at Wed Jun 11 11:33:43 2025 by rpki-client