$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft File: Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft (raw, json) Hash identifier: bq47zBmjEnqr6oApQK5JJdepmCHv00Syn64KTa8TZLg= Subject key identifier: B7:04:D8:96:92:D4:8D:36:5C:13:F0:0F:10:43:E9:CB:64:2F:EC:AB Authority key identifier: 39:CE:15:DB:36:73:9A:22:CA:EE:64:E0:CF:8B:A3:1F:5A:6B:93:48 Certificate issuer: /CN=A91DF863/serialNumber=39CE15DB36739A22CAEE64E0CF8BA31F5A6B9348 Certificate serial: 331C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft Manifest number: 32C6 Signing time: Fri 30 May 2025 15:32:55 +0000 Manifest this update: Fri 30 May 2025 15:32:55 +0000 Manifest next update: Fri 06 Jun 2025 15:32:55 +0000 Files and hashes: 1: Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl (hash: o9es6cfZTSFrJr/CBdG0/hnOzPjKVntPV1Lgo6zkOs8=) 2: 844CFD1C5BAA11EFBAF22B7FC4F9AE02.roa (hash: F0EI0pjKdFSXXJaNRIeZAVVcc/1UvTOq8MA6ZbeocbA=) 3: 902F4AAC567011EFA451BD7CC4F9AE02.roa (hash: qmlGrSLmYcGa18yom8d6PeePfMWIiWVkajsGQGVwEAE=) 4: 909AA4DC567011EFA451BD7CC4F9AE02.roa (hash: eNA7hmO0iaDh6B8QriE+uJJoAJhe22m7Y0RORTwFmBQ=) 5: 834D7D565BAA11EFBAF22B7FC4F9AE02.roa (hash: TJYAsaduMNFlCfCtpHImQhHzTtlz3kZi3/4L+kmyEYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 15:32:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13084 (0x331c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF863, serialNumber=39CE15DB36739A22CAEE64E0CF8BA31F5A6B9348 Validity Not Before: May 30 15:32:55 2025 GMT Not After : Jun 6 15:32:55 2025 GMT Subject: CN=6839cfa7-9409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c2:49:c8:d3:3b:a6:19:e0:82:96:55:e4:ba: 46:a5:2a:74:5d:cb:cb:46:4d:95:70:8a:80:ab:46: 9e:07:25:75:5e:ea:10:95:bc:06:7f:e2:61:2b:5c: ff:fe:13:5b:63:84:a1:b7:72:52:49:db:7d:d6:86: 99:6d:32:38:32:5b:b7:89:a9:b0:ff:bc:d4:32:c7: 7b:03:d4:57:28:c8:cb:85:7f:cd:cf:18:b7:10:4a: cc:48:ec:4f:50:a0:12:bc:58:a0:0e:5b:82:0a:13: ae:8a:95:e5:74:2e:7f:49:52:f1:0b:10:4f:28:67: a5:63:ed:64:6b:2f:1e:c9:33:e0:52:03:d8:31:55: 3d:7e:1a:8c:cf:e8:7d:0e:97:03:7f:85:d8:6b:59: 53:b3:08:bd:3b:bc:bb:a9:9b:ee:2e:62:d0:d2:ac: 8f:65:5e:d9:65:b1:97:91:0d:e2:fe:4f:c6:64:32: be:c4:da:df:84:ab:2a:08:ed:b2:5c:ea:28:0e:06: be:0c:70:a8:b8:7d:ad:35:46:75:86:cb:d1:61:d7: bf:16:0d:b1:5c:9e:ff:e1:31:36:2a:19:54:23:42: 67:91:fc:d9:32:ab:cf:38:89:dc:21:85:64:85:a7: 16:64:60:37:c0:b1:82:dd:af:4c:4f:7d:c6:7e:65: ac:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:04:D8:96:92:D4:8D:36:5C:13:F0:0F:10:43:E9:CB:64:2F:EC:AB X509v3 Authority Key Identifier: keyid:39:CE:15:DB:36:73:9A:22:CA:EE:64:E0:CF:8B:A3:1F:5A:6B:93:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:fc:de:05:2f:62:75:69:ba:ae:dc:73:31:d3:fd:05:e3:c9: cb:5a:4d:49:e2:07:53:90:97:4c:8e:a0:20:0d:e7:fc:31:ac: 50:05:e0:d8:11:a9:fe:7f:ef:4d:56:40:dc:c3:c2:9b:0e:4d: e5:d0:c7:5d:80:d3:77:91:ab:a3:99:f3:eb:10:9a:5f:97:db: de:11:7f:35:01:26:96:0f:a8:7b:1f:e8:89:5f:ad:31:5f:e7: ca:ab:8f:6c:a3:e2:3d:26:e1:02:5f:e4:e1:ed:3b:16:8e:90: 9a:ed:ee:55:f4:0c:66:bc:5f:d9:25:8b:87:86:17:2a:9d:29: 55:32:9d:e0:8d:f3:9c:63:34:05:b1:68:a8:19:9b:7f:38:cb: 35:45:2e:e1:0e:62:09:b1:df:c2:8a:4f:6d:05:b3:05:83:9b: 0e:5a:87:df:db:9d:b9:e1:ca:9a:48:6e:14:50:75:22:6c:8f: 41:a2:7e:5e:f3:ac:a4:21:6c:d4:7f:57:df:e0:65:e1:56:1c: df:42:16:19:f2:7a:a4:bf:bd:48:ec:08:2e:c5:ba:ba:8a:81: 76:2e:cd:f8:4f:1a:d0:5e:8f:3e:57:61:c8:88:24:6c:27:95: 9a:5e:04:d4:32:42:b6:65:ba:59:42:49:9c:2e:c8:9b:9d:52: e9:04:47:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMxwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY4NjMxMTAvBgNVBAUTKDM5Q0UxNURCMzY3MzlBMjJDQUVFNjRFMENGOEJBMzFG NUE2QjkzNDgwHhcNMjUwNTMwMTUzMjU1WhcNMjUwNjA2MTUzMjU1WjAYMRYwFAYD VQQDEw02ODM5Y2ZhNy05NDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2cJJyNM7phnggpZV5LpGpSp0XcvLRk2VcIqAq0aeByV1XuoQlbwGf+JhK1z/ /hNbY4Sht3JSSdt91oaZbTI4Mlu3iamw/7zUMsd7A9RXKMjLhX/Nzxi3EErMSOxP UKASvFigDluCChOuipXldC5/SVLxCxBPKGelY+1kay8eyTPgUgPYMVU9fhqMz+h9 DpcDf4XYa1lTswi9O7y7qZvuLmLQ0qyPZV7ZZbGXkQ3i/k/GZDK+xNrfhKsqCO2y XOooDga+DHCouH2tNUZ1hsvRYde/Fg2xXJ7/4TE2KhlUI0JnkfzZMqvPOIncIYVk hacWZGA3wLGC3a9MT33GfmWsZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLcE2JaS 1I02XBPwDxBD6ctkL+yrMB8GA1UdIwQYMBaAFDnOFds2c5oiyu5k4M+Lox9aa5NI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjg2My9CRkU1NEE2ODgx NUIxMUUyOUI1OEE3M0IzMjkyQjVFOC9PYzRWMnpaem1pTEs3bVRnejR1akgxcHJr MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09jNFYyelp6bWlMSzdtVGd6NHVqSDFwcmswZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Rjg2My9CRkU1NEE2ODgxNUIxMUUyOUI1OEE3M0IzMjkyQjVFOC9PYzRWMnpaem1p TEs3bVRnejR1akgxcHJrMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBv/N4FL2J1abqu3HMx0/0F48nLWk1J4gdTkJdMjqAgDef8MaxQBeDY Ean+f+9NVkDcw8KbDk3l0MddgNN3kaujmfPrEJpfl9veEX81ASaWD6h7H+iJX60x X+fKq49so+I9JuECX+Th7TsWjpCa7e5V9AxmvF/ZJYuHhhcqnSlVMp3gjfOcYzQF sWioGZt/OMs1RS7hDmIJsd/Cik9tBbMFg5sOWoff25254cqaSG4UUHUibI9Bon5e 86ykIWzUf1ff4GXhVhzfQhYZ8nqkv71I7Aguxbq6ioF2Ls34TxrQXo8+V2HIiCRs J5WaXgTUMkK2ZbpZQkmcLsibnVLpBEcN -----END CERTIFICATE-----Generated at Sat May 31 16:39:47 2025 by rpki-client