$ rpki-client -vvf rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.mft File: cOiFV7DAgsmwbs9ZuPKKdwOmOAE.mft (raw, json) Hash identifier: mJNmjZ3KRFqJtnE9/Ku5gefylUU79lOazytWeBQQ4Bo= Subject key identifier: 3F:71:E9:46:F1:3A:74:6D:41:8E:F8:6F:69:C4:15:FE:A1:EC:6F:CB Authority key identifier: 70:E8:85:57:B0:C0:82:C9:B0:6E:CF:59:B8:F2:8A:77:03:A6:38:01 Certificate issuer: /CN=A91764E1/serialNumber=70E88557B0C082C9B06ECF59B8F28A7703A63801 Certificate serial: 0107 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.mft Manifest number: 0105 Signing time: Thu 03 Jul 2025 05:13:49 +0000 Manifest this update: Thu 03 Jul 2025 05:13:49 +0000 Manifest next update: Thu 10 Jul 2025 05:13:49 +0000 Files and hashes: 1: cOiFV7DAgsmwbs9ZuPKKdwOmOAE.crl (hash: Aey+4Ofs6uTKXhMKpkkX404aV1iDpEMrhiiO+k/61DE=) 2: 0C708FB4C67E11EE87B34958C4F9AE02.roa (hash: Emtdf6B32dUyriQRU+z92VLtRvSD7HNe+9gqK+EmXtg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.crl rsync://rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 263 (0x107) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91764E1, serialNumber=70E88557B0C082C9B06ECF59B8F28A7703A63801 Validity Not Before: Jul 3 05:13:49 2025 GMT Not After : Jul 10 05:13:49 2025 GMT Subject: CN=6866118d-6474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:06:fc:2f:76:44:4d:28:5f:ed:5d:10:4d:57: bd:b6:00:a0:8c:61:7f:11:df:13:ee:43:a2:ba:b5: e2:7e:30:b0:82:04:24:71:d2:85:e9:a2:95:bc:f0: d3:f7:36:7f:be:3f:48:86:e4:fd:f8:a4:ad:5a:a8: af:de:e9:29:da:a6:15:cd:74:28:27:93:c1:3f:76: 03:c6:ce:3c:2f:e5:0f:0c:d1:7a:36:dc:cb:5f:0a: c5:cf:4a:16:c9:1a:74:7c:4b:c8:c9:3f:8b:e9:73: 9a:05:a9:70:ba:48:af:df:81:5c:03:e4:ea:38:96: 33:11:44:4f:92:8e:e4:e3:d7:7c:db:b6:42:14:1f: cb:90:03:60:75:80:4a:fb:47:62:97:12:81:1a:2d: 1a:22:7a:b0:17:70:e9:59:83:ae:a7:a3:b1:b3:aa: e8:a1:23:f6:05:ab:7c:88:cf:49:5f:38:2d:2d:ef: 63:c8:47:23:98:18:50:14:e1:26:c2:6e:cc:2e:1a: ee:76:72:4a:8f:9d:92:26:7a:5c:ef:df:d2:2e:2d: c6:71:bc:1c:91:e4:1b:3a:34:f4:32:59:25:b2:11: 58:ff:06:81:f3:9c:ed:d4:88:8f:b3:ce:5c:92:25: f5:cd:24:e1:7d:60:b4:35:d4:4d:41:cf:e4:34:cb: 2f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:71:E9:46:F1:3A:74:6D:41:8E:F8:6F:69:C4:15:FE:A1:EC:6F:CB X509v3 Authority Key Identifier: keyid:70:E8:85:57:B0:C0:82:C9:B0:6E:CF:59:B8:F2:8A:77:03:A6:38:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:fc:21:eb:4a:95:3b:7a:ba:13:4c:03:76:30:34:82:8f:82: fd:7b:4f:b8:fe:a1:0b:04:1a:4e:73:2d:61:bc:4f:2c:21:31: 22:03:35:38:27:e3:78:d7:ec:1d:b8:92:b2:59:aa:be:a8:c4: 37:2a:ff:45:42:83:de:e1:c1:bf:0c:d9:e5:67:f4:be:51:f5: c7:74:0c:0d:04:ef:90:a6:e5:a9:e2:fb:66:da:ef:1c:df:21: c8:89:80:93:c7:c8:63:0b:de:0a:8d:c4:55:1a:08:6d:c4:97: ca:29:e4:54:cf:89:0b:4c:86:c9:cf:86:91:f1:84:b6:e7:0a: 0d:51:e9:18:a4:59:5e:90:f0:57:27:69:6b:41:2d:d7:b8:56: 3d:92:e5:72:42:ec:77:18:93:d6:bb:69:54:26:a2:34:c0:de: 64:18:34:1d:82:76:fa:ab:b1:58:ca:18:16:e3:8f:9a:78:2e: eb:bb:83:6b:2d:43:1d:da:7e:3f:1c:b6:ab:23:06:0b:dc:a1: ea:72:82:2f:4d:9d:67:ba:5b:01:f7:e9:31:65:79:2e:55:cc: b8:54:4f:94:89:ad:38:60:55:7d:8f:ad:ba:67:2c:19:5a:bc: 47:cb:72:e9:ea:17:86:59:3e:95:f9:23:46:de:82:cc:aa:38: d2:50:25:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY0RTExMTAvBgNVBAUTKDcwRTg4NTU3QjBDMDgyQzlCMDZFQ0Y1OUI4RjI4QTc3 MDNBNjM4MDEwHhcNMjUwNzAzMDUxMzQ5WhcNMjUwNzEwMDUxMzQ5WjAYMRYwFAYD VQQDEw02ODY2MTE4ZC02NDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvgb8L3ZETShf7V0QTVe9tgCgjGF/Ed8T7kOiurXifjCwggQkcdKF6aKVvPDT 9zZ/vj9IhuT9+KStWqiv3ukp2qYVzXQoJ5PBP3YDxs48L+UPDNF6NtzLXwrFz0oW yRp0fEvIyT+L6XOaBalwukiv34FcA+TqOJYzEURPko7k49d827ZCFB/LkANgdYBK +0dilxKBGi0aInqwF3DpWYOup6Oxs6rooSP2Bat8iM9JXzgtLe9jyEcjmBhQFOEm wm7MLhrudnJKj52SJnpc79/SLi3GcbwckeQbOjT0MlklshFY/waB85zt1IiPs85c kiX1zSThfWC0NdRNQc/kNMsvuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD9x6Ubx OnRtQY74b2nEFf6h7G/LMB8GA1UdIwQYMBaAFHDohVewwILJsG7PWbjyincDpjgB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjRFMS82MjMxQTAyRUM2 N0QxMUVFODcwMjdCM0FDNEY5QUUwMi9jT2lGVjdEQWdzbXdiczladVBLS2R3T21P QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NPaUZWN0RBZ3Ntd2JzOVp1UEtLZHdPbU9BRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjRFMS82MjMxQTAyRUM2N0QxMUVFODcwMjdCM0FDNEY5QUUwMi9jT2lGVjdEQWdz bXdiczladVBLS2R3T21PQUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBY/CHrSpU7eroTTAN2MDSCj4L9e0+4/qELBBpOcy1hvE8sITEiAzU4 J+N41+wduJKyWaq+qMQ3Kv9FQoPe4cG/DNnlZ/S+UfXHdAwNBO+QpuWp4vtm2u8c 3yHIiYCTx8hjC94KjcRVGghtxJfKKeRUz4kLTIbJz4aR8YS25woNUekYpFlekPBX J2lrQS3XuFY9kuVyQux3GJPWu2lUJqI0wN5kGDQdgnb6q7FYyhgW44+aeC7ru4Nr LUMd2n4/HLarIwYL3KHqcoIvTZ1nulsB9+kxZXkuVcy4VE+Uia04YFV9j626ZywZ WrxHy3Lp6heGWT6V+SNG3oLMqjjSUCWh -----END CERTIFICATE-----Generated at Fri Jul 4 08:06:13 2025 by rpki-client