$ rpki-client -vvf rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.mft File: OM4nbIW20tDq_p0_ilpQjN26uWg.mft (raw, json) Hash identifier: 8COc+82bOwfzkLOMI+d8K/+3cXNlsRLapVq1aNjupc0= Subject key identifier: 57:0F:49:08:4F:C7:A8:4D:87:07:3D:E3:15:61:B0:36:98:46:D5:F5 Authority key identifier: 38:CE:27:6C:85:B6:D2:D0:EA:FE:9D:3F:8A:5A:50:8C:DD:BA:B9:68 Certificate issuer: /CN=A91F053E/serialNumber=38CE276C85B6D2D0EAFE9D3F8A5A508CDDBAB968 Certificate serial: 06A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OM4nbIW20tDq_p0_ilpQjN26uWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.mft Manifest number: 06A1 Signing time: Fri 30 May 2025 22:24:44 +0000 Manifest this update: Fri 30 May 2025 22:24:43 +0000 Manifest next update: Fri 06 Jun 2025 22:24:43 +0000 Files and hashes: 1: OM4nbIW20tDq_p0_ilpQjN26uWg.crl (hash: X35ruE0O1AdZjmaR2vqpqG96FL0iEhm/yapwv3PSgxo=) 2: 6473BE24979811EB97001639C4F9AE02.roa (hash: 2h+gg3bjxIldHS97Lzce3I89lkJGy2giiZHmYtJCKjs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.crl rsync://rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OM4nbIW20tDq_p0_ilpQjN26uWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:24:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1704 (0x6a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F053E, serialNumber=38CE276C85B6D2D0EAFE9D3F8A5A508CDDBAB968 Validity Not Before: May 30 22:24:43 2025 GMT Not After : Jun 6 22:24:43 2025 GMT Subject: CN=683a302c-8e5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5b:24:c8:c5:6d:85:fa:bc:e6:00:77:35:25: 2b:dd:db:54:f8:60:77:aa:8a:9b:20:59:47:97:d9: c5:e2:0f:21:7c:6c:b3:9e:d2:8c:ec:d2:99:c5:24: 90:60:9c:88:63:4a:79:ae:aa:e0:ef:f6:fd:44:20: d2:67:1b:67:29:ef:36:6d:85:24:62:44:dd:87:22: e3:14:e3:35:e1:ac:80:a0:22:24:dc:11:ff:ed:30: 58:b9:61:f2:5a:45:20:9f:8a:c9:21:44:86:7e:72: 05:27:61:2b:63:77:7a:f3:92:a9:59:1f:75:80:88: 0e:03:3a:b9:5c:11:9d:ad:04:f8:24:4a:12:61:3f: d7:68:76:9f:94:7e:bc:e7:6d:e9:6e:9a:f6:95:7f: 9e:af:9a:27:af:76:62:64:67:a8:28:a5:79:24:13: 20:17:c2:d7:2d:21:0d:8a:ce:4d:4b:a2:da:ad:d5: e6:70:ef:a6:f6:83:70:fa:b5:d0:71:6f:67:bb:b1: 1b:94:4e:20:6b:63:24:e7:be:57:61:6c:1e:db:bc: a6:cd:c6:46:68:ed:da:5e:f8:c8:70:e2:4f:9c:71: 29:aa:bd:21:0b:c1:29:9c:d6:01:35:7a:1c:7f:44: 92:f8:5a:df:e8:06:ac:c9:8d:34:32:03:42:3d:96: 1e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:0F:49:08:4F:C7:A8:4D:87:07:3D:E3:15:61:B0:36:98:46:D5:F5 X509v3 Authority Key Identifier: keyid:38:CE:27:6C:85:B6:D2:D0:EA:FE:9D:3F:8A:5A:50:8C:DD:BA:B9:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OM4nbIW20tDq_p0_ilpQjN26uWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:81:a6:da:50:8f:1f:a3:1f:9d:a7:ba:fc:1c:e2:ac:7e:50: ce:c7:7b:70:66:cf:11:3d:de:e5:4c:e8:59:69:f3:3f:51:c8: b3:c7:ae:6c:7d:ef:e7:25:24:2d:89:6f:96:b9:05:6a:3e:80: f6:93:73:6f:d6:5e:6a:34:ad:d2:9f:e4:ee:64:d0:1a:7d:f9: 76:b0:01:64:a2:31:c1:dd:ed:e0:0b:26:f6:27:e1:18:1e:02: 6d:65:fc:ff:76:8a:ee:03:ec:e6:4a:f9:2e:7e:1b:d0:08:4e: 06:61:31:d8:24:2c:73:a1:9c:d6:b2:b2:f3:d1:8d:12:bd:2c: e9:f0:cd:c1:ff:75:c5:45:cf:74:60:f2:79:d2:95:37:7a:53: 29:d1:85:12:ef:02:11:77:81:b0:0a:7c:b3:41:68:be:e2:10: 27:90:33:b4:7d:28:25:01:16:29:66:13:a3:51:48:4a:e4:11: 63:ad:cd:73:92:6e:2a:30:05:c8:b2:54:26:c6:a5:09:3d:2c: 1d:cc:b9:5c:c4:ee:8f:d6:7d:c8:72:3c:2f:90:d7:f1:14:9e: e1:9b:f3:d8:5e:75:c5:59:b2:8e:fd:0f:e4:bb:7e:0a:d8:61: d8:9d:02:c8:c4:c2:d5:c3:1b:dc:f8:b4:ad:a8:da:68:aa:fa: 59:0b:00:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjA1M0UxMTAvBgNVBAUTKDM4Q0UyNzZDODVCNkQyRDBFQUZFOUQzRjhBNUE1MDhD RERCQUI5NjgwHhcNMjUwNTMwMjIyNDQzWhcNMjUwNjA2MjIyNDQzWjAYMRYwFAYD VQQDEw02ODNhMzAyYy04ZTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtVskyMVthfq85gB3NSUr3dtU+GB3qoqbIFlHl9nF4g8hfGyzntKM7NKZxSSQ YJyIY0p5rqrg7/b9RCDSZxtnKe82bYUkYkTdhyLjFOM14ayAoCIk3BH/7TBYuWHy WkUgn4rJIUSGfnIFJ2ErY3d685KpWR91gIgOAzq5XBGdrQT4JEoSYT/XaHaflH68 523pbpr2lX+er5onr3ZiZGeoKKV5JBMgF8LXLSENis5NS6LardXmcO+m9oNw+rXQ cW9nu7EblE4ga2Mk575XYWwe27ymzcZGaO3aXvjIcOJPnHEpqr0hC8EpnNYBNXoc f0SS+Frf6AasyY00MgNCPZYeNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFcPSQhP x6hNhwc94xVhsDaYRtX1MB8GA1UdIwQYMBaAFDjOJ2yFttLQ6v6dP4paUIzdurlo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDUzRS80RUVCQzIwODZC NkIxMUVCODUxMjRCMkFDNEY5QUUwMi9PTTRuYklXMjB0RHFfcDBfaWxwUWpOMjZ1 V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09NNG5iSVcyMHREcV9wMF9pbHBRak4yNnVXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDUzRS80RUVCQzIwODZCNkIxMUVCODUxMjRCMkFDNEY5QUUwMi9PTTRuYklXMjB0 RHFfcDBfaWxwUWpOMjZ1V2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqgabaUI8fox+dp7r8HOKsflDOx3twZs8RPd7lTOhZafM/Ucizx65s fe/nJSQtiW+WuQVqPoD2k3Nv1l5qNK3Sn+TuZNAaffl2sAFkojHB3e3gCyb2J+EY HgJtZfz/doruA+zmSvkufhvQCE4GYTHYJCxzoZzWsrLz0Y0SvSzp8M3B/3XFRc90 YPJ50pU3elMp0YUS7wIRd4GwCnyzQWi+4hAnkDO0fSglARYpZhOjUUhK5BFjrc1z km4qMAXIslQmxqUJPSwdzLlcxO6P1n3IcjwvkNfxFJ7hm/PYXnXFWbKO/Q/ku34K 2GHYnQLIxMLVwxvc+LStqNpoqvpZCwBS -----END CERTIFICATE-----Generated at Sat May 31 17:06:21 2025 by rpki-client