$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft File: OG9viqHmbFJU6h5HiIwQP0U2Iio.mft (raw, json) Hash identifier: NQRen88ae5SAI9AmWuVyeie/py+AgkkHQ9RWP/KwH4s= Subject key identifier: 87:2B:02:D7:E4:CB:B9:70:1D:85:0C:F4:91:B8:9C:67:81:D6:BE:DD Authority key identifier: 38:6F:6F:8A:A1:E6:6C:52:54:EA:1E:47:88:8C:10:3F:45:36:22:2A Certificate issuer: /CN=A91EB077/serialNumber=386F6F8AA1E66C5254EA1E47888C103F4536222A Certificate serial: 1A84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft Manifest number: 1A4E Signing time: Fri 30 May 2025 16:32:02 +0000 Manifest this update: Fri 30 May 2025 16:32:02 +0000 Manifest next update: Fri 06 Jun 2025 16:32:02 +0000 Files and hashes: 1: OG9viqHmbFJU6h5HiIwQP0U2Iio.crl (hash: 7avddO/qd0f6QudDd3+cVNbbYK0nDbEqxZ/gLRiVlxU=) 2: 6C897E54597B11EDB603273AC4F9AE02.roa (hash: tECuYiObkHM8+lQ9pAL6rPX0WAXD3+sDD+oT9RLjEFY=) 3: 6E44CE88597B11EDB603273AC4F9AE02.roa (hash: uSAHzBc+YHmREVNWY2QOkLWbks+7w1YPJ8vpHREo1FM=) 4: 63B4F05E482611E7ABDEF831C4F9AE02.roa (hash: UvxhutC//RajTrYueD0iUFQneJ/UQC0+drD5TAjJyFQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.crl rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:32:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6788 (0x1a84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB077, serialNumber=386F6F8AA1E66C5254EA1E47888C103F4536222A Validity Not Before: May 30 16:32:02 2025 GMT Not After : Jun 6 16:32:02 2025 GMT Subject: CN=6839dd82-ff66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a2:c1:2f:66:7d:59:35:19:2a:43:6f:8b:cc: b6:a0:af:f6:e1:56:83:ac:80:fe:02:6d:7c:e5:61: a2:a8:58:1b:49:8e:07:ee:9a:29:1b:bc:69:46:7f: 52:1b:0c:5c:ad:d4:36:04:6f:91:3a:d4:d1:8e:20: d9:40:de:45:b7:3a:1c:0a:66:4d:75:a8:f9:61:9a: ea:a7:72:0e:7c:91:f8:c2:6c:5d:02:1c:d0:c2:77: 60:b1:d5:40:c5:59:ae:c6:c9:bf:bd:d8:f0:c3:b6: b4:a5:07:79:da:51:b2:c9:fe:26:cb:d4:ea:74:1d: 54:44:2c:28:0f:20:7c:86:b9:09:a1:0e:55:71:6d: 0a:19:5c:84:42:b4:0f:1a:13:ee:a3:a0:e8:71:d1: 21:aa:16:65:7f:dd:d9:81:87:b7:fd:3e:03:27:e1: 2c:78:d3:9b:0f:be:a0:c7:3b:8a:36:d3:ab:cc:dd: 47:6b:d2:76:6d:13:95:b9:d0:bd:47:b2:14:0a:b7: 83:56:e4:a3:55:f1:19:9d:bb:7b:3a:62:73:da:bb: 87:33:d7:37:07:8d:25:34:ed:1a:d7:16:ba:81:c6: 0e:7e:ac:2a:2c:fb:f6:fa:4f:9f:a1:01:a3:ad:46: 2d:5e:21:64:e1:25:a0:dc:dc:c9:b1:aa:a6:b9:73: 32:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:2B:02:D7:E4:CB:B9:70:1D:85:0C:F4:91:B8:9C:67:81:D6:BE:DD X509v3 Authority Key Identifier: keyid:38:6F:6F:8A:A1:E6:6C:52:54:EA:1E:47:88:8C:10:3F:45:36:22:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:fb:4e:da:66:bf:0c:57:3f:d0:17:79:db:a3:9d:a7:11:0f: 31:df:1e:76:13:f8:d3:67:b4:8a:2c:ed:f3:6a:c8:70:fd:a0: 2d:2b:75:11:93:68:22:f9:d6:d7:64:45:0f:ee:2f:e1:47:3e: 6b:33:ed:37:a2:7b:0c:0e:a7:33:66:d0:b1:bc:da:20:59:d1: 3f:c5:a3:39:aa:ec:7a:88:1b:58:9c:73:57:05:33:fb:f9:21: 1e:84:ad:ad:41:1f:aa:8f:93:00:2f:72:8c:7e:d2:19:ad:3c: 91:e9:77:6e:89:62:05:39:a1:ec:de:58:96:45:c1:d9:64:ea: fe:37:45:d0:24:a7:ca:05:38:17:15:52:eb:42:ae:2b:d2:de: 38:c2:f7:6c:3e:b1:2d:28:19:4b:a3:73:b4:cb:8a:47:96:75: 0a:2a:ca:b7:59:ab:fd:69:b7:29:1c:e7:7c:3f:bd:fb:7f:f7: 1c:81:70:37:68:a4:12:ba:76:b8:4a:dc:ae:e4:ab:7d:26:ac: af:20:f8:9c:fc:96:3a:b4:c0:b6:02:7c:82:c2:98:37:61:d4: df:4a:c3:e1:e9:e3:7a:cd:5f:78:17:dc:98:1e:c4:55:e7:5e: 87:16:5d:48:be:51:69:76:32:fd:4c:dc:1e:27:0b:1f:76:d3: 2a:54:70:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIwNzcxMTAvBgNVBAUTKDM4NkY2RjhBQTFFNjZDNTI1NEVBMUU0Nzg4OEMxMDNG NDUzNjIyMkEwHhcNMjUwNTMwMTYzMjAyWhcNMjUwNjA2MTYzMjAyWjAYMRYwFAYD VQQDEw02ODM5ZGQ4Mi1mZjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw6LBL2Z9WTUZKkNvi8y2oK/24VaDrID+Am185WGiqFgbSY4H7popG7xpRn9S GwxcrdQ2BG+ROtTRjiDZQN5FtzocCmZNdaj5YZrqp3IOfJH4wmxdAhzQwndgsdVA xVmuxsm/vdjww7a0pQd52lGyyf4my9TqdB1URCwoDyB8hrkJoQ5VcW0KGVyEQrQP GhPuo6DocdEhqhZlf93ZgYe3/T4DJ+EseNObD76gxzuKNtOrzN1Ha9J2bROVudC9 R7IUCreDVuSjVfEZnbt7OmJz2ruHM9c3B40lNO0a1xa6gcYOfqwqLPv2+k+foQGj rUYtXiFk4SWg3NzJsaqmuXMywQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIcrAtfk y7lwHYUM9JG4nGeB1r7dMB8GA1UdIwQYMBaAFDhvb4qh5mxSVOoeR4iMED9FNiIq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjA3Ny9EQjdCNzAwNjQ4 MjQxMUU3OTQwNDFEMkRDNEY5QUUwMi9PRzl2aXFIbWJGSlU2aDVIaUl3UVAwVTJJ aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09HOXZpcUhtYkZKVTZoNUhpSXdRUDBVMklpby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjA3Ny9EQjdCNzAwNjQ4MjQxMUU3OTQwNDFEMkRDNEY5QUUwMi9PRzl2aXFIbWJG SlU2aDVIaUl3UVAwVTJJaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDP+07aZr8MVz/QF3nbo52nEQ8x3x52E/jTZ7SKLO3zashw/aAtK3UR k2gi+dbXZEUP7i/hRz5rM+03onsMDqczZtCxvNogWdE/xaM5qux6iBtYnHNXBTP7 +SEehK2tQR+qj5MAL3KMftIZrTyR6XduiWIFOaHs3liWRcHZZOr+N0XQJKfKBTgX FVLrQq4r0t44wvdsPrEtKBlLo3O0y4pHlnUKKsq3Wav9abcpHOd8P737f/ccgXA3 aKQSuna4Styu5Kt9JqyvIPic/JY6tMC2AnyCwpg3YdTfSsPh6eN6zV94F9yYHsRV 516HFl1IvlFpdjL9TNweJwsfdtMqVHDi -----END CERTIFICATE-----Generated at Sat May 31 16:36:45 2025 by rpki-client