$ rpki-client -vvf rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft File: 3obmXuoeCzDk_Y2SRYft9XI9UH0.mft (raw, json) Hash identifier: sSXvCISnkfcIpTvVxiYPvQM1CBwvN0MaTsDgaizB8vE= Subject key identifier: A2:E5:A1:E4:7B:CB:F3:92:AB:1D:45:EB:14:A4:70:02:F7:0D:DB:C9 Authority key identifier: DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D Certificate issuer: /CN=A91E00A5/serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D Certificate serial: 84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft Manifest number: 82 Signing time: Sun 01 Jun 2025 06:20:22 +0000 Manifest this update: Sun 01 Jun 2025 06:20:22 +0000 Manifest next update: Sun 08 Jun 2025 06:20:22 +0000 Files and hashes: 1: 3obmXuoeCzDk_Y2SRYft9XI9UH0.crl (hash: 5QCOOezNMditfy4A5xFSR+uyHYODTLK/Sm9cWnlj7G0=) 2: 1F63E4347ABC11EF9E53E753C4F9AE02.roa (hash: HKA4VosuvqKj93QksjNsBERDuKRgYc9/Nd6hWkYBCUw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 06:20:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E00A5, serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D Validity Not Before: Jun 1 06:20:22 2025 GMT Not After : Jun 8 06:20:22 2025 GMT Subject: CN=683bf126-80ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:5a:0a:3e:4e:56:04:11:1d:6b:dc:88:0e:10: 3c:bb:4f:a7:ba:7c:59:0f:64:f2:36:2b:4f:82:52: 35:05:87:88:38:a4:16:49:75:41:54:73:c1:d6:9b: 32:10:79:97:3f:ac:10:6f:d0:d5:45:7d:79:1e:4b: 3a:8d:33:83:ee:21:fd:4e:93:ab:33:b6:0d:10:db: a3:07:c5:d4:82:7d:be:33:97:54:a5:d9:d0:ea:4a: 4d:4b:e7:a6:6b:92:bd:fe:c3:c6:31:b5:87:f4:6d: ba:70:73:84:6c:1a:92:77:0d:64:85:71:f2:19:18: 87:23:fe:e2:6f:3d:0e:63:ac:c2:6b:fb:94:fb:84: dc:94:f1:e1:54:65:a3:40:98:d2:78:ba:db:af:b9: da:6e:55:39:15:0c:2d:6b:0a:b3:cf:20:c6:fb:99: f0:bf:9f:8e:1c:32:0d:ef:96:07:14:4a:0a:52:25: 80:f9:6a:a3:02:30:99:2c:be:19:90:f5:38:ae:27: 71:d2:2f:d5:e9:38:44:61:00:10:ee:de:b6:9c:0b: 33:c7:bd:b9:ff:7d:9c:4b:ff:4f:29:ff:08:8e:b6: 2a:33:45:ef:6c:72:4d:18:e1:ef:11:06:92:0d:ea: c0:0d:8a:90:ec:b3:aa:06:3c:c5:42:fc:e2:94:68: 17:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:E5:A1:E4:7B:CB:F3:92:AB:1D:45:EB:14:A4:70:02:F7:0D:DB:C9 X509v3 Authority Key Identifier: keyid:DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:4b:e4:35:a8:a4:65:f1:1a:de:06:67:74:fe:1e:eb:57:98: 4c:94:64:5b:7c:02:8d:1e:0d:19:13:1c:26:4f:5a:8c:8f:b9: ce:c0:73:61:97:eb:0d:a5:8d:29:93:5a:20:5a:df:fd:fe:18: ad:00:0e:ef:1a:62:31:fd:5d:cb:20:99:1b:9d:e5:9d:95:06: 81:1a:90:14:11:d7:59:ac:22:71:1d:5d:62:46:94:07:a2:25: fc:67:c4:ea:82:9e:2c:eb:57:7b:98:4f:fe:0e:08:47:de:aa: 25:db:ed:af:e6:de:e8:bc:2e:09:96:8b:e3:a5:1c:59:85:59: 54:a7:bf:87:1c:07:94:c5:43:19:fe:e6:6a:b7:0e:76:13:26: 7a:38:d4:b1:c7:74:bb:10:f4:87:1c:8e:30:13:0d:63:02:77: 04:e0:c5:47:4e:93:93:85:c8:6d:ae:ef:b9:00:d7:12:7e:03: a3:68:eb:10:ab:25:6c:c7:4c:3f:e7:a1:e4:e8:4c:6c:e7:d8: 0d:1f:96:b5:9a:55:59:ec:df:c1:b5:60:cc:51:bb:0b:ea:54: 27:73:37:73:b5:70:92:16:c5:0a:53:21:0b:0e:c9:ae:30:88: e6:c2:6b:ce:c6:9d:9a:d3:ab:39:87:fb:b3:fe:50:2a:61:f3: 55:cf:7c:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAwQTUxMTAvBgNVBAUTKERFODZFNjVFRUExRTBCMzBFNEZEOEQ5MjQ1ODdFREY1 NzIzRDUwN0QwHhcNMjUwNjAxMDYyMDIyWhcNMjUwNjA4MDYyMDIyWjAYMRYwFAYD VQQDEw02ODNiZjEyNi04MGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6FoKPk5WBBEda9yIDhA8u0+nunxZD2TyNitPglI1BYeIOKQWSXVBVHPB1psy EHmXP6wQb9DVRX15Hks6jTOD7iH9TpOrM7YNENujB8XUgn2+M5dUpdnQ6kpNS+em a5K9/sPGMbWH9G26cHOEbBqSdw1khXHyGRiHI/7ibz0OY6zCa/uU+4TclPHhVGWj QJjSeLrbr7nablU5FQwtawqzzyDG+5nwv5+OHDIN75YHFEoKUiWA+WqjAjCZLL4Z kPU4ridx0i/V6ThEYQAQ7t62nAszx725/32cS/9PKf8IjrYqM0XvbHJNGOHvEQaS DerADYqQ7LOqBjzFQvzilGgXXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKLloeR7 y/OSqx1F6xSkcAL3DdvJMB8GA1UdIwQYMBaAFN6G5l7qHgsw5P2NkkWH7fVyPVB9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDBBNS9BNjQ4M0EzQzdB QkIxMUVGOTM3OUFFNTJDNEY5QUUwMi8zb2JtWHVvZUN6RGtfWTJTUllmdDlYSTlV SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNvYm1YdW9lQ3pEa19ZMlNSWWZ0OVhJOVVIMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDBBNS9BNjQ4M0EzQzdBQkIxMUVGOTM3OUFFNTJDNEY5QUUwMi8zb2JtWHVvZUN6 RGtfWTJTUllmdDlYSTlVSDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtS+Q1qKRl8RreBmd0/h7rV5hMlGRbfAKNHg0ZExwmT1qMj7nOwHNh l+sNpY0pk1ogWt/9/hitAA7vGmIx/V3LIJkbneWdlQaBGpAUEddZrCJxHV1iRpQH oiX8Z8Tqgp4s61d7mE/+DghH3qol2+2v5t7ovC4JlovjpRxZhVlUp7+HHAeUxUMZ /uZqtw52EyZ6ONSxx3S7EPSHHI4wEw1jAncE4MVHTpOThchtru+5ANcSfgOjaOsQ qyVsx0w/56Hk6Exs59gNH5a1mlVZ7N/BtWDMUbsL6lQnczdztXCSFsUKUyELDsmu MIjmwmvOxp2a06s5h/uz/lAqYfNVz3zI -----END CERTIFICATE-----Generated at Mon Jun 2 06:31:13 2025 by rpki-client