$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.mft File: DOBgwuQw3YUYEMnyD-wbohGZ49Y.mft (raw, json) Hash identifier: b7Cpm3Bf3QlhEvMYKZZGN8iVn4/O3KzRrMBPy6hXhrs= Subject key identifier: BB:B6:D5:44:14:91:DD:D7:9D:81:2E:36:17:12:0F:BA:12:AD:05:C0 Authority key identifier: 0C:E0:60:C2:E4:30:DD:85:18:10:C9:F2:0F:EC:1B:A2:11:99:E3:D6 Certificate issuer: /CN=A91F2C07/serialNumber=0CE060C2E430DD851810C9F20FEC1BA21199E3D6 Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOBgwuQw3YUYEMnyD-wbohGZ49Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.mft Manifest number: 14 Signing time: Sat 31 May 2025 07:33:36 +0000 Manifest this update: Sat 31 May 2025 07:33:36 +0000 Manifest next update: Sat 07 Jun 2025 07:33:35 +0000 Files and hashes: 1: DOBgwuQw3YUYEMnyD-wbohGZ49Y.crl (hash: 0eUkThqxzBjzsotxLRvcJanlakDLwUOf2UOahkohKpI=) 2: FDD4FA341E6111F0B8D45B79C4F9AE02.roa (hash: 7JB/cgKUwfUR4YGlIPTezqpMMVQ3OA1LBmpMpECbKmQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.crl rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOBgwuQw3YUYEMnyD-wbohGZ49Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:33:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2C07, serialNumber=0CE060C2E430DD851810C9F20FEC1BA21199E3D6 Validity Not Before: May 31 07:33:36 2025 GMT Not After : Jun 7 07:33:35 2025 GMT Subject: CN=683ab0d0-0db5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:13:95:40:51:ac:c3:82:cd:75:ef:cd:3b:46: 52:78:47:c3:db:e9:28:d9:87:93:ad:d7:3c:40:7d: f8:b5:36:9d:63:4a:ea:28:0a:d9:35:c8:c8:79:92: 15:19:99:ac:fe:70:44:de:ff:5a:d2:5d:b3:68:ed: 79:8c:c8:d6:f8:5b:64:25:7a:ce:71:d6:96:46:7b: 57:3e:31:22:5a:2e:a4:8a:55:c4:8f:66:c8:de:25: 2e:d6:ee:72:ce:97:04:1e:c0:d9:29:8d:77:23:71: 04:3c:84:a8:5e:0e:ac:5d:f9:86:8c:be:ca:81:f5: 01:c4:17:e1:fd:eb:43:e7:7b:4e:81:39:27:5a:5a: 63:2d:99:4b:f7:e9:69:0b:5c:e3:51:27:25:3b:d0: c5:8d:60:a7:87:4c:b2:c1:54:e3:b4:25:a0:62:bb: 4e:63:52:88:ff:9d:c7:38:1c:07:59:d1:07:8e:5c: fd:29:6b:10:42:82:70:6b:4a:c8:e2:40:18:7d:5e: 8f:cf:69:20:a5:66:98:c4:93:d4:45:b4:0c:fe:73: f2:27:62:ba:bd:bd:bc:f0:2a:07:a5:b6:25:75:03: c1:81:dd:e1:d5:56:74:99:cf:d0:17:40:74:60:f6: d9:94:00:21:1c:cb:fa:b7:6f:00:e0:47:81:d0:95: 57:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B6:D5:44:14:91:DD:D7:9D:81:2E:36:17:12:0F:BA:12:AD:05:C0 X509v3 Authority Key Identifier: keyid:0C:E0:60:C2:E4:30:DD:85:18:10:C9:F2:0F:EC:1B:A2:11:99:E3:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOBgwuQw3YUYEMnyD-wbohGZ49Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:1b:9c:91:27:41:b8:29:90:8e:5d:d0:f0:ca:5d:0c:2c:0c: 54:22:bc:14:63:28:b5:c4:03:92:d0:fa:00:e9:78:51:a6:96: 8b:e6:26:6c:8b:62:44:fd:58:c6:50:b8:54:9c:66:f9:1c:c7: 99:d4:9d:72:c0:8e:93:22:d6:aa:73:b7:35:9e:10:74:bf:23: c2:f5:91:e0:5d:2c:48:50:b3:6d:4f:35:46:30:be:47:7b:50: 15:9b:b4:4f:ed:ed:1b:93:75:42:0c:55:4f:31:12:74:f5:4b: 16:5d:f9:d8:b8:88:b0:4b:29:d5:48:46:0b:86:6f:d6:55:4c: cb:d2:c9:26:6d:91:00:fd:25:7c:16:4a:cf:f1:1f:12:f9:e1: 70:f2:6c:f0:ae:9c:dc:46:91:cc:e1:a3:1b:91:11:73:f6:7f: b5:81:71:82:bc:94:40:b9:db:0b:7f:a5:33:86:3d:75:1d:cb: 2a:10:2b:d0:0c:14:69:d0:f6:ab:3c:3b:63:24:3c:7f:38:d4: c6:ac:da:ed:86:c3:e0:f4:bd:f5:77:36:cb:1c:77:47:9b:a0: 69:d7:f9:d9:60:31:3b:00:33:89:91:6b:07:63:8a:75:1a:76: 56:2e:7f:6f:36:f4:2c:6a:44:53:f5:90:75:b1:a3:2e:12:77: 69:39:31:4b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MkMwNzExMC8GA1UEBRMoMENFMDYwQzJFNDMwREQ4NTE4MTBDOUYyMEZFQzFCQTIx MTk5RTNENjAeFw0yNTA1MzEwNzMzMzZaFw0yNTA2MDcwNzMzMzVaMBgxFjAUBgNV BAMTDTY4M2FiMGQwLTBkYjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDaE5VAUazDgs117807RlJ4R8Pb6SjZh5Ot1zxAffi1Np1jSuooCtk1yMh5khUZ maz+cETe/1rSXbNo7XmMyNb4W2Qles5x1pZGe1c+MSJaLqSKVcSPZsjeJS7W7nLO lwQewNkpjXcjcQQ8hKheDqxd+YaMvsqB9QHEF+H960Pne06BOSdaWmMtmUv36WkL XONRJyU70MWNYKeHTLLBVOO0JaBiu05jUoj/ncc4HAdZ0QeOXP0paxBCgnBrSsji QBh9Xo/PaSClZpjEk9RFtAz+c/InYrq9vbzwKgeltiV1A8GB3eHVVnSZz9AXQHRg 9tmUACEcy/q3bwDgR4HQlVdbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUu7bVRBSR 3dedgS42FxIPuhKtBcAwHwYDVR0jBBgwFoAUDOBgwuQw3YUYEMnyD+wbohGZ49Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYyQzA3L0E3NzRBOUNFMUU2 MDExRjBCN0RDNzY1NEM0RjlBRTAyL0RPQmd3dVF3M1lVWUVNbnlELXdib2hHWjQ5 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRE9CZ3d1UXczWVVZRU1ueUQtd2JvaEdaNDlZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYy QzA3L0E3NzRBOUNFMUU2MDExRjBCN0RDNzY1NEM0RjlBRTAyL0RPQmd3dVF3M1lV WUVNbnlELXdib2hHWjQ5WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD8bnJEnQbgpkI5d0PDKXQwsDFQivBRjKLXEA5LQ+gDpeFGmlovmJmyL YkT9WMZQuFScZvkcx5nUnXLAjpMi1qpztzWeEHS/I8L1keBdLEhQs21PNUYwvkd7 UBWbtE/t7RuTdUIMVU8xEnT1SxZd+di4iLBLKdVIRguGb9ZVTMvSySZtkQD9JXwW Ss/xHxL54XDybPCunNxGkczhoxuREXP2f7WBcYK8lEC52wt/pTOGPXUdyyoQK9AM FGnQ9qs8O2MkPH841Mas2u2Gw+D0vfV3Nsscd0eboGnX+dlgMTsAM4mRawdjinUa dlYuf2829CxqRFP1kHWxoy4Sd2k5MUs= -----END CERTIFICATE-----Generated at Sat May 31 17:47:29 2025 by rpki-client