$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft File: ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft (raw, json) Hash identifier: VUjPcP1Aw4vDAzQs2xPaOX0MG/FQrujFP/KRRwsuCNM= Subject key identifier: F9:FA:02:FB:25:31:F5:A5:85:37:ED:33:D4:F6:0D:49:36:B8:CA:CD Authority key identifier: A2:0C:57:F5:2C:E9:8C:88:48:F6:36:25:0E:4A:46:70:81:1B:50:76 Certificate issuer: /CN=A91E7656/serialNumber=A20C57F52CE98C8848F636250E4A4670811B5076 Certificate serial: 0C12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft Manifest number: 0C11 Signing time: Fri 30 May 2025 18:50:19 +0000 Manifest this update: Fri 30 May 2025 18:50:18 +0000 Manifest next update: Fri 06 Jun 2025 18:50:18 +0000 Files and hashes: 1: ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl (hash: 0ncuahDO9/i3aHQHMiUJ2V0fODzNnPzhjzSTf70rrvs=) 2: AF73E1423D2011F0ACC34F2BC4F9AE02.roa (hash: 6z4IvdKelJy7fw7SK3RJpHNkKU/zaX8zdMWrochmqvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3090 (0xc12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7656, serialNumber=A20C57F52CE98C8848F636250E4A4670811B5076 Validity Not Before: May 30 18:50:18 2025 GMT Not After : Jun 6 18:50:18 2025 GMT Subject: CN=6839fdeb-aa7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a4:36:02:dd:29:f9:f3:b1:1d:59:67:7a:cd: 8d:6f:8d:05:cd:4c:97:f1:73:02:99:6a:1e:d6:3b: 17:7a:b1:aa:df:7b:f2:95:64:64:a2:2a:48:f2:7e: 7b:42:9d:52:76:89:75:a6:c7:da:95:28:44:02:eb: 56:d2:11:0c:08:8b:8f:b0:2e:12:a7:88:75:9d:08: 5b:f1:cd:e8:19:7f:b4:a9:2e:79:21:9d:de:0b:7e: 59:de:61:60:24:fa:57:63:73:c3:08:0a:20:87:18: b0:0a:31:f9:de:c5:2b:b0:e1:2f:6a:b7:d5:33:8d: e9:16:ae:f5:89:79:b4:c2:bb:84:51:ff:c4:60:82: 20:e7:f1:ca:20:43:7b:8a:ab:b6:82:bd:a6:5c:a0: c0:10:ae:e9:af:46:19:95:92:eb:cd:ba:18:7b:98: 7e:db:45:2b:07:46:04:aa:03:11:59:2f:23:a7:2e: 3e:c8:43:f2:fc:80:8b:67:de:82:2a:f4:93:7c:09: 4b:a6:9c:7a:4e:a3:f7:dc:06:7b:2b:24:3e:d1:e1: 8e:ee:77:dd:a0:2b:6d:fc:ba:87:95:69:93:25:22: 1f:33:7c:1a:39:b8:d1:e2:e3:98:77:a3:0e:cc:27: 8e:8a:0e:e6:8c:d8:96:ee:3e:ea:51:85:4d:e8:cb: fd:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:FA:02:FB:25:31:F5:A5:85:37:ED:33:D4:F6:0D:49:36:B8:CA:CD X509v3 Authority Key Identifier: keyid:A2:0C:57:F5:2C:E9:8C:88:48:F6:36:25:0E:4A:46:70:81:1B:50:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:5e:34:d1:42:9e:3e:75:fb:10:fb:bf:a4:c1:b4:e6:6f:83: c5:d5:f4:21:54:a4:e7:48:9b:32:51:e2:96:71:92:f7:31:69: 10:10:2b:36:35:70:24:0c:9b:c5:93:d9:c9:70:d1:f5:f3:91: e9:ce:a0:0c:90:08:77:cf:3b:74:d7:bc:ff:8f:ba:75:84:32: 4a:a0:70:2d:70:49:0e:d8:75:e9:35:db:f2:14:8f:ec:76:dd: ab:50:a3:ae:a9:45:4e:51:4c:86:4c:9c:25:56:dd:53:f9:31: d3:a0:53:b8:84:c9:12:d7:92:1b:eb:3d:54:81:b5:4e:8f:f0: ef:6f:48:e5:07:54:28:85:f2:84:d6:11:b8:0a:88:ad:85:ba: 40:4c:9a:ce:5e:0d:7c:b5:67:4c:49:b4:e3:90:a9:22:a3:d9: 01:a4:e4:73:6d:a7:28:c3:e5:af:5a:50:c2:5d:16:87:b0:89: d3:8e:dc:58:83:00:46:5f:92:25:23:22:4c:2c:f6:47:51:38: 8b:ba:b6:d0:57:de:1e:43:03:e7:85:d3:f8:82:94:91:93:27: 1a:6f:f0:8c:f0:59:18:d6:be:d0:14:d1:a1:91:fb:52:7c:09: ba:ba:ea:02:b4:83:36:3f:c5:7a:cc:c0:25:16:2f:ef:87:90: c6:bb:d8:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc2NTYxMTAvBgNVBAUTKEEyMEM1N0Y1MkNFOThDODg0OEY2MzYyNTBFNEE0Njcw ODExQjUwNzYwHhcNMjUwNTMwMTg1MDE4WhcNMjUwNjA2MTg1MDE4WjAYMRYwFAYD VQQDEw02ODM5ZmRlYi1hYTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq6Q2At0p+fOxHVlnes2Nb40FzUyX8XMCmWoe1jsXerGq33vylWRkoipI8n57 Qp1Sdol1psfalShEAutW0hEMCIuPsC4Sp4h1nQhb8c3oGX+0qS55IZ3eC35Z3mFg JPpXY3PDCAoghxiwCjH53sUrsOEvarfVM43pFq71iXm0wruEUf/EYIIg5/HKIEN7 iqu2gr2mXKDAEK7pr0YZlZLrzboYe5h+20UrB0YEqgMRWS8jpy4+yEPy/ICLZ96C KvSTfAlLppx6TqP33AZ7KyQ+0eGO7nfdoCtt/LqHlWmTJSIfM3waObjR4uOYd6MO zCeOig7mjNiW7j7qUYVN6Mv9rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPn6Avsl MfWlhTftM9T2DUk2uMrNMB8GA1UdIwQYMBaAFKIMV/Us6YyISPY2JQ5KRnCBG1B2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzY1Ni8wRUUzQTVCQzBD RDYxMUVBQkY1NjI1NTNDNEY5QUUwMi9vZ3hYOVN6cGpJaEk5allsRGtwR2NJRWJV SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29neFg5U3pwakloSTlqWWxEa3BHY0lFYlVIWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzY1Ni8wRUUzQTVCQzBDRDYxMUVBQkY1NjI1NTNDNEY5QUUwMi9vZ3hYOVN6cGpJ aEk5allsRGtwR2NJRWJVSFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACXjTRQp4+dfsQ+7+kwbTmb4PF1fQhVKTnSJsyUeKWcZL3MWkQECs2 NXAkDJvFk9nJcNH185HpzqAMkAh3zzt017z/j7p1hDJKoHAtcEkO2HXpNdvyFI/s dt2rUKOuqUVOUUyGTJwlVt1T+THToFO4hMkS15Ib6z1UgbVOj/Dvb0jlB1QohfKE 1hG4CoithbpATJrOXg18tWdMSbTjkKkio9kBpORzbacow+WvWlDCXRaHsInTjtxY gwBGX5IlIyJMLPZHUTiLurbQV94eQwPnhdP4gpSRkycab/CM8FkY1r7QFNGhkftS fAm6uuoCtIM2P8V6zMAlFi/vh5DGu9hs -----END CERTIFICATE-----Generated at Sat May 31 17:37:51 2025 by rpki-client