$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft File: OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft (raw, json) Hash identifier: 0QoUe/S/1mQMWhnkOwsNeXFzfpXHkgKmpMg00EK789o= Subject key identifier: F8:A0:0B:92:82:95:64:67:9D:F4:55:E2:E9:56:69:7D:44:48:32:07 Authority key identifier: 38:C0:B1:C5:8D:00:DE:3F:73:AD:5B:58:87:D4:24:9B:DE:E7:BB:A2 Certificate issuer: /CN=A91D1200/serialNumber=38C0B1C58D00DE3F73AD5B5887D4249BDEE7BBA2 Certificate serial: 01B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OMCxxY0A3j9zrVtYh9Qkm97nu6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft Manifest number: 01A7 Signing time: Sat 31 May 2025 03:06:29 +0000 Manifest this update: Sat 31 May 2025 03:06:28 +0000 Manifest next update: Sat 07 Jun 2025 03:06:28 +0000 Files and hashes: 1: OMCxxY0A3j9zrVtYh9Qkm97nu6I.crl (hash: AQqgTPcXdnjahEooD2YHq5yFAxBSGziH/NXP2S0Y3Kc=) 2: 3FD9A0B2CC6411EDA7970484C4F9AE02.roa (hash: 57nO5jOvkVp0+vX7iv3bKgXM7+O7quZxwLxBFz3+RLU=) 3: 3F3E2A10CC6411EDA7970484C4F9AE02.roa (hash: zTbUbYoqbVGTCB7vV/9Oi8BgtnQrV/KuVcCelWmi5sI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.crl rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OMCxxY0A3j9zrVtYh9Qkm97nu6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:06:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 435 (0x1b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1200, serialNumber=38C0B1C58D00DE3F73AD5B5887D4249BDEE7BBA2 Validity Not Before: May 31 03:06:28 2025 GMT Not After : Jun 7 03:06:28 2025 GMT Subject: CN=683a7235-32f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cf:92:fa:3e:89:94:ae:9d:b6:f8:35:be:2a: 61:73:39:93:12:40:91:0f:42:79:74:94:2b:aa:42: 36:f2:99:e5:48:79:9f:1c:8c:65:1a:f5:33:9e:2d: 38:03:11:df:12:33:0f:fc:5a:97:a9:60:30:98:bb: 6c:74:bc:45:7c:53:65:e6:e3:ce:ff:5d:fc:29:86: 99:3f:1f:2d:42:ca:3b:63:3e:ad:cc:df:2f:8c:31: c1:4e:3a:7b:bc:7e:33:ab:c2:a4:d4:3f:63:ee:b1: 6e:57:82:60:df:82:f7:a9:d3:aa:28:65:c2:9b:b0: fa:23:cb:19:96:be:fd:ae:5b:dc:42:d9:18:fd:3d: 84:d4:95:b9:00:41:10:80:90:3b:5d:03:e4:55:9e: ed:74:50:fe:93:4c:df:cb:45:50:bb:10:0d:f6:73: c9:83:08:a1:f6:06:20:4f:b0:77:db:dc:01:f2:43: ee:d7:89:18:4d:80:75:69:a5:35:ff:d7:b4:c7:75: 5b:9a:29:4f:4c:a4:5e:bf:8a:33:0b:49:3a:ec:19: ac:db:86:e3:1a:8f:1d:f1:4f:71:6a:a6:d1:e1:b2: 3d:86:51:73:1e:6c:c7:dd:92:a5:c9:86:1e:96:c9: 51:c0:88:b5:1b:99:8d:7c:6a:91:45:e9:a2:c3:05: 8b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:A0:0B:92:82:95:64:67:9D:F4:55:E2:E9:56:69:7D:44:48:32:07 X509v3 Authority Key Identifier: keyid:38:C0:B1:C5:8D:00:DE:3F:73:AD:5B:58:87:D4:24:9B:DE:E7:BB:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OMCxxY0A3j9zrVtYh9Qkm97nu6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:58:08:ea:38:8f:35:15:76:a7:4e:a5:27:5e:bf:69:29:55: cb:3f:ae:6f:31:a5:bb:e1:3a:d5:59:b8:1c:2b:8f:ee:7d:0f: c2:51:f0:51:f1:2e:e4:8c:42:99:66:a4:ca:1f:75:08:aa:15: 5e:2a:9a:4b:f7:1e:3f:eb:cc:9f:54:6c:05:4b:cf:3a:1f:96: a5:bb:e8:6b:08:27:ec:97:f5:cc:12:2a:25:7c:42:8e:17:5e: 48:25:82:16:6e:6a:28:0e:5d:79:07:56:7c:aa:e0:6c:1c:08: 6b:cf:14:69:02:10:83:51:9e:c4:3d:98:89:f4:a1:a6:dc:40: 2f:45:9a:64:7d:fc:6a:90:98:3b:7e:62:c8:51:2d:eb:4b:f5: e9:f4:cd:04:64:a0:de:9d:d3:ba:04:55:d6:92:4c:9d:83:bc: 27:93:a5:c2:72:30:e1:ad:79:e5:0e:f1:f3:01:5f:e1:02:44: a5:4c:9c:6c:4d:7e:86:dc:6f:f3:cd:be:24:e6:30:93:57:d9: 06:2f:68:ab:30:6e:e7:9a:00:ea:f6:4e:54:8d:b4:0a:ff:5f: 7e:af:f7:62:d4:ca:9d:a0:c0:52:57:74:87:c0:d9:2b:75:f6: 14:eb:1f:f0:34:4f:07:27:f6:d0:74:bd:7a:d8:fa:ef:64:c8: 48:23:cd:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDEyMDAxMTAvBgNVBAUTKDM4QzBCMUM1OEQwMERFM0Y3M0FENUI1ODg3RDQyNDlC REVFN0JCQTIwHhcNMjUwNTMxMDMwNjI4WhcNMjUwNjA3MDMwNjI4WjAYMRYwFAYD VQQDEw02ODNhNzIzNS0zMmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyM+S+j6JlK6dtvg1viphczmTEkCRD0J5dJQrqkI28pnlSHmfHIxlGvUzni04 AxHfEjMP/FqXqWAwmLtsdLxFfFNl5uPO/138KYaZPx8tQso7Yz6tzN8vjDHBTjp7 vH4zq8Kk1D9j7rFuV4Jg34L3qdOqKGXCm7D6I8sZlr79rlvcQtkY/T2E1JW5AEEQ gJA7XQPkVZ7tdFD+k0zfy0VQuxAN9nPJgwih9gYgT7B329wB8kPu14kYTYB1aaU1 /9e0x3VbmilPTKRev4ozC0k67Bms24bjGo8d8U9xaqbR4bI9hlFzHmzH3ZKlyYYe lslRwIi1G5mNfGqRRemiwwWLFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPigC5KC lWRnnfRV4ulWaX1ESDIHMB8GA1UdIwQYMBaAFDjAscWNAN4/c61bWIfUJJve57ui MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTIwMC9GNUE5NTJFMEND MDMxMUVEQTk3QUNBNURDNEY5QUUwMi9PTUN4eFkwQTNqOXpyVnRZaDlRa205N251 NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09NQ3h4WTBBM2o5enJWdFloOVFrbTk3bnU2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTIwMC9GNUE5NTJFMENDMDMxMUVEQTk3QUNBNURDNEY5QUUwMi9PTUN4eFkwQTNq OXpyVnRZaDlRa205N251NkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUWAjqOI81FXanTqUnXr9pKVXLP65vMaW74TrVWbgcK4/ufQ/CUfBR 8S7kjEKZZqTKH3UIqhVeKppL9x4/68yfVGwFS886H5alu+hrCCfsl/XMEiolfEKO F15IJYIWbmooDl15B1Z8quBsHAhrzxRpAhCDUZ7EPZiJ9KGm3EAvRZpkffxqkJg7 fmLIUS3rS/Xp9M0EZKDendO6BFXWkkydg7wnk6XCcjDhrXnlDvHzAV/hAkSlTJxs TX6G3G/zzb4k5jCTV9kGL2irMG7nmgDq9k5UjbQK/19+r/di1MqdoMBSV3SHwNkr dfYU6x/wNE8HJ/bQdL162PrvZMhII83a -----END CERTIFICATE-----Generated at Sat May 31 17:58:48 2025 by rpki-client