$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft File: OdCbSlNggIIFqdaRRxnguYnPVgs.mft (raw, json) Hash identifier: yBUZQJi1UfMN0k6mMrSB+k8dyVPX2m6oG2sIgMrGwOw= Subject key identifier: 11:E1:6C:B5:C3:7C:61:7C:53:9A:8F:D2:35:3A:79:B2:D3:F8:8C:71 Authority key identifier: 39:D0:9B:4A:53:60:80:82:05:A9:D6:91:47:19:E0:B9:89:CF:56:0B Certificate issuer: /CN=A91FDCF0/serialNumber=39D09B4A5360808205A9D6914719E0B989CF560B Certificate serial: 1793 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdCbSlNggIIFqdaRRxnguYnPVgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft Manifest number: 178A Signing time: Fri 30 May 2025 16:46:27 +0000 Manifest this update: Fri 30 May 2025 16:46:26 +0000 Manifest next update: Fri 06 Jun 2025 16:46:26 +0000 Files and hashes: 1: OdCbSlNggIIFqdaRRxnguYnPVgs.crl (hash: OA6UeKVGI2upD6+j4xp7ZjlHQvefvBUS4FsksNnG6Mk=) 2: D8D34E92100411EE9849087AC4F9AE02.roa (hash: NYe/OwRHgWBG4n1tEVTichlRmY2tFDrc7PdcIFXXIB4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.crl rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdCbSlNggIIFqdaRRxnguYnPVgs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6035 (0x1793) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDCF0, serialNumber=39D09B4A5360808205A9D6914719E0B989CF560B Validity Not Before: May 30 16:46:26 2025 GMT Not After : Jun 6 16:46:26 2025 GMT Subject: CN=6839e0e2-0a64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b4:5b:5e:16:d4:3b:c1:05:b8:21:e5:07:55: ff:18:f3:78:2c:c8:6c:7b:4c:37:77:dd:ec:57:f5: 94:40:bc:cc:97:7e:37:64:44:ae:65:6c:42:e6:c3: d3:d5:e9:62:65:18:ef:d3:57:79:34:40:07:f3:d5: bb:9b:40:8c:e2:bf:66:18:e9:6e:f4:ee:d3:98:10: 92:86:52:47:76:73:95:4d:84:9e:82:4e:c6:fd:cb: a4:6a:1c:53:e5:9f:e4:3c:86:b8:1e:f6:82:36:3d: d9:9d:fb:61:c2:e1:dc:07:bf:f5:ad:26:5d:0f:a7: bf:c8:46:35:3a:ef:21:de:77:9c:ee:a8:85:6f:78: 0b:b1:81:b4:c6:b7:55:70:a2:11:f9:99:b9:8f:97: 40:e4:b5:c8:5b:d5:59:0b:d3:e8:4f:c6:6f:be:cb: 79:c1:41:02:a1:ff:46:cc:71:d0:62:2f:44:b3:5e: 98:2e:04:a2:52:3f:a0:2e:10:77:94:6b:a3:09:d0: 46:13:c0:b3:bb:26:76:4c:e2:7a:24:a9:b8:00:49: 0a:44:71:17:5f:31:c9:cd:a7:79:63:88:e1:1d:50: b8:81:f8:5c:ec:81:0e:58:fd:51:96:d2:60:b1:71: 04:98:5f:a4:7b:6b:d4:53:5c:9a:2e:0f:07:c3:21: d3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:E1:6C:B5:C3:7C:61:7C:53:9A:8F:D2:35:3A:79:B2:D3:F8:8C:71 X509v3 Authority Key Identifier: keyid:39:D0:9B:4A:53:60:80:82:05:A9:D6:91:47:19:E0:B9:89:CF:56:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdCbSlNggIIFqdaRRxnguYnPVgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:67:5f:f1:dc:ff:30:71:02:93:b3:9e:9b:0e:80:be:b5:21: c5:48:f9:9f:5a:1b:ea:43:96:bc:a4:6b:e8:d3:8b:d4:68:58: 36:81:17:94:a6:39:ee:77:89:ef:e6:cd:2f:46:42:36:d7:c7: 95:86:84:d5:96:5f:83:b9:2e:d7:24:fe:3b:97:0d:5c:5e:84: 66:8f:e2:b9:6d:3a:37:c1:ca:62:80:a4:ff:69:35:59:5b:1f: 59:c7:5a:4b:a2:e3:0b:05:e9:d3:97:7b:0d:96:10:76:a6:cb: 1d:60:47:75:3e:61:0a:16:39:e6:f0:31:b8:34:5a:aa:6d:8f: df:77:6a:9d:db:4a:7f:0f:cd:98:21:7a:87:ab:85:de:5b:c5: bd:d9:39:a2:97:11:32:0c:21:61:5a:e2:47:58:ca:73:1c:a3: 36:71:9f:e3:b5:93:c5:13:cf:d6:ef:ff:41:65:58:a1:fc:86: 9a:c4:92:0e:a4:47:7a:5e:8a:2c:ee:d9:08:70:6f:9c:82:19: 99:4e:3c:a2:c6:e1:2c:a6:84:1e:40:91:b0:ec:2f:fa:87:f4: 9b:70:0a:e8:45:cb:e7:a5:2a:92:2b:5e:90:8f:ec:73:5d:f1: e1:50:0f:e5:81:45:ab:cc:f3:30:d7:72:6b:9c:33:d1:0b:58: ab:9a:1f:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF5MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRDRjAxMTAvBgNVBAUTKDM5RDA5QjRBNTM2MDgwODIwNUE5RDY5MTQ3MTlFMEI5 ODlDRjU2MEIwHhcNMjUwNTMwMTY0NjI2WhcNMjUwNjA2MTY0NjI2WjAYMRYwFAYD VQQDEw02ODM5ZTBlMi0wYTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtrRbXhbUO8EFuCHlB1X/GPN4LMhse0w3d93sV/WUQLzMl343ZESuZWxC5sPT 1eliZRjv01d5NEAH89W7m0CM4r9mGOlu9O7TmBCShlJHdnOVTYSegk7G/cukahxT 5Z/kPIa4HvaCNj3ZnfthwuHcB7/1rSZdD6e/yEY1Ou8h3nec7qiFb3gLsYG0xrdV cKIR+Zm5j5dA5LXIW9VZC9PoT8Zvvst5wUECof9GzHHQYi9Es16YLgSiUj+gLhB3 lGujCdBGE8CzuyZ2TOJ6JKm4AEkKRHEXXzHJzad5Y4jhHVC4gfhc7IEOWP1RltJg sXEEmF+ke2vUU1yaLg8HwyHTIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBHhbLXD fGF8U5qP0jU6ebLT+IxxMB8GA1UdIwQYMBaAFDnQm0pTYICCBanWkUcZ4LmJz1YL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRENGMC8zMTI3QjAxOENF QUUxMUU3ODk3ODQ4MjVDNEY5QUUwMi9PZENiU2xOZ2dJSUZxZGFSUnhuZ3VZblBW Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09kQ2JTbE5nZ0lJRnFkYVJSeG5ndVluUFZncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RENGMC8zMTI3QjAxOENFQUUxMUU3ODk3ODQ4MjVDNEY5QUUwMi9PZENiU2xOZ2dJ SUZxZGFSUnhuZ3VZblBWZ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBZ1/x3P8wcQKTs56bDoC+tSHFSPmfWhvqQ5a8pGvo04vUaFg2gReU pjnud4nv5s0vRkI218eVhoTVll+DuS7XJP47lw1cXoRmj+K5bTo3wcpigKT/aTVZ Wx9Zx1pLouMLBenTl3sNlhB2pssdYEd1PmEKFjnm8DG4NFqqbY/fd2qd20p/D82Y IXqHq4XeW8W92TmilxEyDCFhWuJHWMpzHKM2cZ/jtZPFE8/W7/9BZVih/IaaxJIO pEd6Xoos7tkIcG+cghmZTjyixuEspoQeQJGw7C/6h/SbcAroRcvnpSqSK16Qj+xz XfHhUA/lgUWrzPMw13JrnDPRC1irmh9m -----END CERTIFICATE-----Generated at Sat May 31 15:02:51 2025 by rpki-client