$ rpki-client -vvf rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft File: OoXUR-GGdf7VrgXJKTee761by8A.mft (raw, json) Hash identifier: uRlKFKY7SbDQYpC8y1f7XSVMQZiZuQRSCUZdOmSbBUI= Subject key identifier: 0A:02:15:17:72:BD:A4:77:72:36:AF:AE:25:C3:C7:36:F2:A7:B9:84 Authority key identifier: 3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0 Certificate issuer: /CN=A91E838F/serialNumber=3A85D447E18675FED5AE05C929379EEFAD5BCBC0 Certificate serial: 07C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft Manifest number: 07A8 Signing time: Wed 04 Jun 2025 21:11:19 +0000 Manifest this update: Wed 04 Jun 2025 21:11:19 +0000 Manifest next update: Wed 11 Jun 2025 21:11:19 +0000 Files and hashes: 1: OoXUR-GGdf7VrgXJKTee761by8A.crl (hash: 0QC/qYPvyzPQ1BZjdv4VgdbdALXKiUg2W6erYBIoYnA=) 2: 3A80616C853811EFA2F05E2FC4F9AE02.roa (hash: VacwFfXxfWfasplgXF9A1AX11wCHDuK5XANfDyd18Pc=) 3: 9E393ADA657011EB96AF8F49C4F9AE02.roa (hash: nh4OlofqMh099kYvPNfjQ05/jiIH5vP8fVdEV6he48g=) 4: DACBD9F638F911EBB13C034CC4F9AE02.roa (hash: KuZID6pq906VPDfvmGsN77h7hBvEwQX/7r+oBn+hpC0=) 5: EC8B7E82450E11EB887ECF6FC4F9AE02.roa (hash: MChKj8CysBVpKBL1Yc5KnUgJyLD5UeDlW+DQqjWmTk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.crl rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 21:11:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1984 (0x7c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E838F, serialNumber=3A85D447E18675FED5AE05C929379EEFAD5BCBC0 Validity Not Before: Jun 4 21:11:19 2025 GMT Not After : Jun 11 21:11:19 2025 GMT Subject: CN=6840b677-7179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:83:5a:42:4d:6d:c4:8e:be:5b:7b:94:53:72: 66:06:06:95:12:fa:c1:91:5a:c0:5d:cd:09:61:3f: c6:c0:bb:aa:68:45:d1:b6:14:38:42:6c:db:d7:38: cd:ce:e3:72:30:78:44:d0:31:37:8a:44:46:e8:e2: 6c:94:b3:8e:91:74:de:b0:a6:5c:7a:7c:2d:57:72: 3a:a6:79:9e:44:1f:a6:f0:c7:39:51:44:7e:02:0a: fa:b3:f9:0c:02:ab:85:7e:0f:26:d2:f2:f5:e2:81: 07:b0:2d:8a:f4:95:7b:2f:f2:15:41:2c:1b:ed:19: 54:f5:27:22:9a:85:98:e8:76:a6:fb:29:eb:3b:b9: b6:0b:95:58:b2:38:a9:1e:fd:d1:b8:5c:54:cc:59: 1e:b4:74:58:29:3e:c3:d7:3f:11:0e:a0:52:88:85: 15:65:df:3c:2f:c5:11:62:17:83:5a:04:6b:91:fd: 4a:7e:c9:f7:f1:f1:f1:52:e3:55:1c:0c:3a:17:5a: 63:9d:92:92:a9:7d:4d:3d:56:9e:de:45:75:c7:97: 4d:3f:b3:cb:5b:be:2d:46:49:08:c0:29:1b:01:c1: 5a:b7:4b:2c:54:b3:62:82:f6:3f:c3:a6:18:00:56: 76:8a:c6:d8:c1:55:d5:c9:8c:94:57:cd:7a:28:f8: 44:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:02:15:17:72:BD:A4:77:72:36:AF:AE:25:C3:C7:36:F2:A7:B9:84 X509v3 Authority Key Identifier: keyid:3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:90:8c:21:cd:28:a7:cb:f7:27:a7:93:08:15:8f:2b:eb:8d: a9:db:b7:88:8f:d5:29:ed:83:eb:17:a4:2c:16:8a:8f:1e:55: b2:70:a3:76:d4:4f:e6:fe:e4:fc:d2:e9:ec:ce:55:82:b6:fd: b7:79:dd:05:86:3b:d9:52:e0:8c:d5:ad:41:e2:33:69:d1:68: 1d:35:64:3b:90:bb:56:70:72:9f:62:af:a9:bd:5d:46:b0:cb: 16:ab:5a:e4:93:9e:5c:7e:54:b7:94:b6:f1:bb:1e:de:ac:d3: 67:3b:45:63:d6:30:34:82:a1:d8:b9:91:04:8c:99:ed:d7:d7: aa:ad:65:87:b5:e9:24:82:80:bc:26:cb:02:67:82:f3:83:ff: 82:ba:0d:23:a0:82:0d:85:ba:f1:40:d5:87:bc:fa:67:f6:ad: 69:79:ab:97:98:e3:af:e5:a1:e0:35:23:6a:13:f0:ba:6b:ff: c5:fa:7c:11:39:dd:41:43:e7:a6:be:5d:10:c6:bb:a9:8a:d2: 74:a7:f6:e2:cb:a6:46:66:43:c4:ff:fa:3c:b0:cd:2f:6c:ab: 61:76:69:d0:ae:df:45:7b:33:c9:5d:82:68:b7:af:cb:6d:fa: d3:64:96:74:df:44:4d:c9:6e:6e:34:b6:b7:eb:44:ae:52:60: 69:4f:63:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgzOEYxMTAvBgNVBAUTKDNBODVENDQ3RTE4Njc1RkVENUFFMDVDOTI5Mzc5RUVG QUQ1QkNCQzAwHhcNMjUwNjA0MjExMTE5WhcNMjUwNjExMjExMTE5WjAYMRYwFAYD VQQDEw02ODQwYjY3Ny03MTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr4NaQk1txI6+W3uUU3JmBgaVEvrBkVrAXc0JYT/GwLuqaEXRthQ4Qmzb1zjN zuNyMHhE0DE3ikRG6OJslLOOkXTesKZcenwtV3I6pnmeRB+m8Mc5UUR+Agr6s/kM AquFfg8m0vL14oEHsC2K9JV7L/IVQSwb7RlU9ScimoWY6Ham+ynrO7m2C5VYsjip Hv3RuFxUzFketHRYKT7D1z8RDqBSiIUVZd88L8URYheDWgRrkf1Kfsn38fHxUuNV HAw6F1pjnZKSqX1NPVae3kV1x5dNP7PLW74tRkkIwCkbAcFat0ssVLNigvY/w6YY AFZ2isbYwVXVyYyUV816KPhEwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAoCFRdy vaR3cjavriXDxzbyp7mEMB8GA1UdIwQYMBaAFDqF1EfhhnX+1a4FySk3nu+tW8vA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODM4Ri9BOUY3NzM5ODA2 RTExMUVCOUIzMzVDNkRDNEY5QUUwMi9Pb1hVUi1HR2RmN1ZyZ1hKS1RlZTc2MWJ5 OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09vWFVSLUdHZGY3VnJnWEpLVGVlNzYxYnk4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODM4Ri9BOUY3NzM5ODA2RTExMUVCOUIzMzVDNkRDNEY5QUUwMi9Pb1hVUi1HR2Rm N1ZyZ1hKS1RlZTc2MWJ5OEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhkIwhzSiny/cnp5MIFY8r642p27eIj9Up7YPrF6QsFoqPHlWycKN2 1E/m/uT80unszlWCtv23ed0FhjvZUuCM1a1B4jNp0WgdNWQ7kLtWcHKfYq+pvV1G sMsWq1rkk55cflS3lLbxux7erNNnO0Vj1jA0gqHYuZEEjJnt19eqrWWHtekkgoC8 JssCZ4Lzg/+Cug0joIINhbrxQNWHvPpn9q1peauXmOOv5aHgNSNqE/C6a//F+nwR Od1BQ+emvl0QxrupitJ0p/biy6ZGZkPE//o8sM0vbKthdmnQrt9FezPJXYJot6/L bfrTZJZ030RNyW5uNLa360SuUmBpT2MK -----END CERTIFICATE-----Generated at Thu Jun 5 20:00:26 2025 by rpki-client