$ rpki-client -vvf rpki.apnic.net/member_repository/A911D080/5C24970AE4AC11EB99710A15C4F9AE02/ORpvZ19Lqtwh3Xmpu0_wlWNWV7I.mft File: ORpvZ19Lqtwh3Xmpu0_wlWNWV7I.mft (raw, json) Hash identifier: jTJ9Bjda3lK6y4Zhk0PjybEprg7kU2nmDaFVfU5ies4= Subject key identifier: 73:CB:91:C9:DA:37:77:67:B2:0A:33:08:75:CB:81:ED:F5:53:69:A2 Authority key identifier: 39:1A:6F:67:5F:4B:AA:DC:21:DD:79:A9:BB:4F:F0:95:63:56:57:B2 Certificate issuer: /CN=A911D080/serialNumber=391A6F675F4BAADC21DD79A9BB4FF095635657B2 Certificate serial: 0582 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORpvZ19Lqtwh3Xmpu0_wlWNWV7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D080/5C24970AE4AC11EB99710A15C4F9AE02/ORpvZ19Lqtwh3Xmpu0_wlWNWV7I.mft Manifest number: 057B Signing time: Mon 30 Jun 2025 23:42:37 +0000 Manifest this update: Mon 30 Jun 2025 23:42:36 +0000 Manifest next update: Mon 07 Jul 2025 23:42:36 +0000 Files and hashes: 1: ORpvZ19Lqtwh3Xmpu0_wlWNWV7I.crl (hash: 3wsVViXSUlaI0lB4DOofJfYwUUosM9wP2XLxhlQlVlE=) 2: 0D0106EAE5BF11EB801D410DC4F9AE02.roa (hash: Vy8MJrdeSiPIr3JrTpVK+MSmKs+H+gy2bX59wqQW2c8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D080/5C24970AE4AC11EB99710A15C4F9AE02/ORpvZ19Lqtwh3Xmpu0_wlWNWV7I.crl rsync://rpki.apnic.net/member_repository/A911D080/5C24970AE4AC11EB99710A15C4F9AE02/ORpvZ19Lqtwh3Xmpu0_wlWNWV7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORpvZ19Lqtwh3Xmpu0_wlWNWV7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 23:42:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1410 (0x582) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D080, serialNumber=391A6F675F4BAADC21DD79A9BB4FF095635657B2 Validity Not Before: Jun 30 23:42:36 2025 GMT Not After : Jul 7 23:42:36 2025 GMT Subject: CN=686320ec-d335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d4:9c:42:7a:59:e5:f5:2a:3f:5f:b7:28:d8: 2f:b6:19:48:ef:7d:cf:35:48:ca:c4:36:97:71:d6: e2:d8:57:4f:a3:7b:43:04:e9:f5:b7:d9:27:eb:93: 71:48:2b:b0:f7:97:1e:ad:fa:38:b9:ba:82:98:52: 9b:e8:20:24:7c:04:80:99:76:f8:4e:e0:8e:88:83: a2:29:e2:8e:e8:c7:76:58:44:62:12:21:c1:0f:15: 49:6f:0e:82:6c:55:c0:81:ef:d0:1f:21:19:f0:e5: e1:66:39:d2:db:20:19:51:72:07:bb:ba:1a:b5:6b: e8:77:37:b5:32:96:f0:0a:ac:f0:6b:c4:39:d4:87: 86:e1:6f:25:ee:f6:fa:11:6f:27:7c:5d:78:46:3e: d2:5a:af:ff:8f:94:f6:75:fb:e1:32:3a:b2:46:18: ce:33:4e:1c:f2:bb:70:e5:75:b8:c0:cf:6a:49:c1: 63:6f:4b:ce:84:ed:ab:81:ce:3a:6b:60:56:15:77: cb:d5:f1:e0:96:f5:8a:86:e7:07:71:60:76:4f:40: ca:31:a3:b0:51:75:64:6b:3a:4a:91:41:ba:c6:8b: f0:66:81:fe:5c:92:37:90:d3:12:f1:a6:2c:bb:2c: 66:10:7f:66:7d:ba:0e:2d:e3:14:7a:90:53:81:a5: f4:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:CB:91:C9:DA:37:77:67:B2:0A:33:08:75:CB:81:ED:F5:53:69:A2 X509v3 Authority Key Identifier: keyid:39:1A:6F:67:5F:4B:AA:DC:21:DD:79:A9:BB:4F:F0:95:63:56:57:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D080/5C24970AE4AC11EB99710A15C4F9AE02/ORpvZ19Lqtwh3Xmpu0_wlWNWV7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORpvZ19Lqtwh3Xmpu0_wlWNWV7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D080/5C24970AE4AC11EB99710A15C4F9AE02/ORpvZ19Lqtwh3Xmpu0_wlWNWV7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:52:1c:c5:f4:48:e1:cb:64:ba:33:cf:a2:cd:43:78:83:ca: e4:79:df:24:f0:e4:9a:74:26:03:73:68:42:19:09:40:83:50: 99:d3:27:f8:b2:7f:24:f1:15:70:b1:72:04:44:26:31:71:f2: 4c:89:5d:72:94:bb:eb:fd:2f:76:67:72:12:f1:c3:8d:a1:8b: 8b:43:e0:d6:59:a8:53:5a:eb:c5:e8:ba:65:1c:de:32:e6:6a: c6:e9:fa:1f:78:de:54:1d:45:f2:2f:5e:ff:af:c3:9d:f7:37: 37:22:e0:a2:43:68:f4:01:ff:3c:60:9f:4f:88:05:b3:ff:da: 51:a5:e3:fa:80:56:87:bd:42:af:b6:ed:7e:37:14:e6:03:86: 85:5e:f1:a3:69:3d:d9:29:ab:f8:cb:a1:49:d7:33:6d:8f:cf: cc:ba:b5:b2:9f:9b:cf:b1:bd:8d:4e:c9:1d:d5:ae:8f:2a:62: ec:59:02:d6:33:a6:de:a9:7d:09:1c:43:cf:9d:d5:95:51:72: 50:f0:2a:a7:ff:d6:d0:e4:4b:28:d4:7c:20:d6:39:db:f2:06: f1:b8:03:ce:f9:42:e8:f5:00:4d:ae:fa:af:7a:d7:08:6a:69: 52:b5:fc:84:22:05:d6:2e:8d:6b:47:fb:ff:c6:5e:0b:cc:79: 47:55:37:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQwODAxMTAvBgNVBAUTKDM5MUE2RjY3NUY0QkFBREMyMURENzlBOUJCNEZGMDk1 NjM1NjU3QjIwHhcNMjUwNjMwMjM0MjM2WhcNMjUwNzA3MjM0MjM2WjAYMRYwFAYD VQQDEw02ODYzMjBlYy1kMzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr9ScQnpZ5fUqP1+3KNgvthlI733PNUjKxDaXcdbi2FdPo3tDBOn1t9kn65Nx SCuw95cerfo4ubqCmFKb6CAkfASAmXb4TuCOiIOiKeKO6Md2WERiEiHBDxVJbw6C bFXAge/QHyEZ8OXhZjnS2yAZUXIHu7oatWvodze1MpbwCqzwa8Q51IeG4W8l7vb6 EW8nfF14Rj7SWq//j5T2dfvhMjqyRhjOM04c8rtw5XW4wM9qScFjb0vOhO2rgc46 a2BWFXfL1fHglvWKhucHcWB2T0DKMaOwUXVkazpKkUG6xovwZoH+XJI3kNMS8aYs uyxmEH9mfboOLeMUepBTgaX0xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHPLkcna N3dnsgozCHXLge31U2miMB8GA1UdIwQYMBaAFDkab2dfS6rcId15qbtP8JVjVley MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDA4MC81QzI0OTcwQUU0 QUMxMUVCOTk3MTBBMTVDNEY5QUUwMi9PUnB2WjE5THF0d2gzWG1wdTBfd2xXTldW N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09ScHZaMTlMcXR3aDNYbXB1MF93bFdOV1Y3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDA4MC81QzI0OTcwQUU0QUMxMUVCOTk3MTBBMTVDNEY5QUUwMi9PUnB2WjE5THF0 d2gzWG1wdTBfd2xXTldWN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjUhzF9Ejhy2S6M8+izUN4g8rked8k8OSadCYDc2hCGQlAg1CZ0yf4 sn8k8RVwsXIERCYxcfJMiV1ylLvr/S92Z3IS8cONoYuLQ+DWWahTWuvF6LplHN4y 5mrG6fofeN5UHUXyL17/r8Od9zc3IuCiQ2j0Af88YJ9PiAWz/9pRpeP6gFaHvUKv tu1+NxTmA4aFXvGjaT3ZKav4y6FJ1zNtj8/MurWyn5vPsb2NTskd1a6PKmLsWQLW M6beqX0JHEPPndWVUXJQ8Cqn/9bQ5Eso1Hwg1jnb8gbxuAPO+ULo9QBNrvqvetcI amlStfyEIgXWLo1rR/v/xl4LzHlHVTcs -----END CERTIFICATE-----Generated at Wed Jul 2 06:15:08 2025 by rpki-client