$ rpki-client -vvf rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft File: OUPUJhV5zeDoKgXKKrVLOHulGTM.mft (raw, json) Hash identifier: C/N7xa3KEgQJDDd+u428+MlScf3eVuT5B6cxM4C2tAU= Subject key identifier: FA:0B:17:53:7A:20:36:A3:87:84:D7:CE:39:34:8D:E8:B4:D6:A2:06 Authority key identifier: 39:43:D4:26:15:79:CD:E0:E8:2A:05:CA:2A:B5:4B:38:7B:A5:19:33 Certificate issuer: /CN=A919D88F/serialNumber=3943D4261579CDE0E82A05CA2AB54B387BA51933 Certificate serial: 84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUPUJhV5zeDoKgXKKrVLOHulGTM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft Manifest number: 83 Signing time: Tue 01 Jul 2025 07:22:10 +0000 Manifest this update: Tue 01 Jul 2025 07:22:09 +0000 Manifest next update: Tue 08 Jul 2025 07:22:09 +0000 Files and hashes: 1: OUPUJhV5zeDoKgXKKrVLOHulGTM.crl (hash: oxKj8w1XaLdjTMLBA67ggOthyDWiid1USvTgZ86gSpQ=) 2: 31C36B64905F11EFAF49EB6BC4F9AE02.roa (hash: L+MQl2N4HWMJyowT/sQLapWMqlpwpjacwTEIlXHA4EM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.crl rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUPUJhV5zeDoKgXKKrVLOHulGTM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:22:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D88F, serialNumber=3943D4261579CDE0E82A05CA2AB54B387BA51933 Validity Not Before: Jul 1 07:22:09 2025 GMT Not After : Jul 8 07:22:09 2025 GMT Subject: CN=68638ca1-950a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fe:0d:53:d0:44:16:3f:d2:2e:53:1b:6a:56: 76:52:80:05:d3:c6:10:38:83:84:79:83:58:2e:c9: ed:04:6e:82:53:be:2a:9a:16:cb:88:46:ce:ea:d0: 9f:c8:5a:b7:8f:12:6f:dd:3f:e8:4d:b1:10:0c:84: e8:27:b7:0f:2d:ea:0a:2a:c5:2a:c4:a2:af:60:a8: fe:58:a4:7e:c4:0a:ae:f6:c1:05:1c:f3:11:6c:99: 7c:6d:62:9a:8e:65:71:2b:bf:ce:ce:57:d5:0d:eb: 92:3b:74:fc:8e:24:1a:6c:ab:2f:a8:eb:6f:b5:7e: f1:8d:c0:a1:9b:6b:fa:e5:14:0a:00:85:34:3c:d3: 4a:ed:9b:12:4c:09:a8:23:05:62:bc:5e:f1:83:9c: aa:eb:dc:8f:de:e1:c1:cc:3c:bd:28:97:c2:82:5f: 8d:6b:06:58:13:c3:0d:93:3d:f4:38:e4:b3:de:3a: 3d:1c:1c:36:52:95:17:5d:3c:fa:29:cc:2d:72:1e: f2:b6:47:c5:06:6a:0e:95:f1:48:1b:b3:4f:c6:aa: f4:46:a9:d6:5d:6d:27:5d:e3:e5:d2:fe:75:b1:a9: c2:db:2a:43:3f:d9:95:59:b3:5b:9c:a4:73:0f:3e: c4:16:e9:20:61:57:62:40:56:dd:79:e6:02:6e:d3: 1b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:0B:17:53:7A:20:36:A3:87:84:D7:CE:39:34:8D:E8:B4:D6:A2:06 X509v3 Authority Key Identifier: keyid:39:43:D4:26:15:79:CD:E0:E8:2A:05:CA:2A:B5:4B:38:7B:A5:19:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUPUJhV5zeDoKgXKKrVLOHulGTM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:80:8b:9e:57:b7:b4:fd:a1:f6:c8:d9:64:27:ba:54:e2:c1: 7e:a3:3c:84:5b:f0:33:ff:0f:90:6e:3b:b1:28:3a:20:fa:eb: e2:5a:d1:aa:ea:94:3d:21:f8:76:89:eb:7f:2b:77:34:85:c7: 33:c2:04:4f:58:b8:1b:91:61:45:88:b0:e5:c4:25:40:cb:83: 78:3c:a5:9e:1a:86:c4:c7:7a:fa:de:57:10:3c:f5:eb:bc:61: 83:21:93:2a:2e:a8:85:72:f6:cf:2f:35:f8:b3:f0:30:77:99: 56:da:99:38:51:ec:c7:0d:6c:ac:42:fb:a2:3f:3f:c7:6a:1e: 76:04:e4:0f:4a:1b:a0:dd:7b:9a:71:48:cb:cb:44:7a:89:28: 81:01:fe:f1:e0:09:fc:73:b1:35:10:ee:a6:ce:29:1e:40:95: 0f:48:c7:27:35:fb:f8:58:26:91:de:79:f1:b4:99:16:f9:3a: f1:37:51:7c:f8:d6:c8:cf:48:fd:9b:83:22:32:65:ac:91:11: c9:b2:65:b4:b0:62:c5:f8:6a:6a:ab:f5:5b:f2:9b:90:dc:a8: be:af:6a:f2:ef:9d:af:35:31:be:98:40:21:0e:16:79:1b:0e: f6:57:7d:4a:23:0d:de:c1:e3:f9:5b:57:67:43:a6:90:aa:cf: 30:4b:e0:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ4OEYxMTAvBgNVBAUTKDM5NDNENDI2MTU3OUNERTBFODJBMDVDQTJBQjU0QjM4 N0JBNTE5MzMwHhcNMjUwNzAxMDcyMjA5WhcNMjUwNzA4MDcyMjA5WjAYMRYwFAYD VQQDEw02ODYzOGNhMS05NTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyP4NU9BEFj/SLlMbalZ2UoAF08YQOIOEeYNYLsntBG6CU74qmhbLiEbO6tCf yFq3jxJv3T/oTbEQDIToJ7cPLeoKKsUqxKKvYKj+WKR+xAqu9sEFHPMRbJl8bWKa jmVxK7/OzlfVDeuSO3T8jiQabKsvqOtvtX7xjcChm2v65RQKAIU0PNNK7ZsSTAmo IwVivF7xg5yq69yP3uHBzDy9KJfCgl+NawZYE8MNkz30OOSz3jo9HBw2UpUXXTz6 Kcwtch7ytkfFBmoOlfFIG7NPxqr0RqnWXW0nXePl0v51sanC2ypDP9mVWbNbnKRz Dz7EFukgYVdiQFbdeeYCbtMbrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPoLF1N6 IDajh4TXzjk0jei01qIGMB8GA1UdIwQYMBaAFDlD1CYVec3g6CoFyiq1Szh7pRkz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDg4Ri84NEE1QkM4MDkw NUQxMUVGQTRGMzFEMkVDNEY5QUUwMi9PVVBVSmhWNXplRG9LZ1hLS3JWTE9IdWxH VE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09VUFVKaFY1emVEb0tnWEtLclZMT0h1bEdUTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDg4Ri84NEE1QkM4MDkwNUQxMUVGQTRGMzFEMkVDNEY5QUUwMi9PVVBVSmhWNXpl RG9LZ1hLS3JWTE9IdWxHVE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUgIueV7e0/aH2yNlkJ7pU4sF+ozyEW/Az/w+QbjuxKDog+uviWtGq 6pQ9Ifh2iet/K3c0hcczwgRPWLgbkWFFiLDlxCVAy4N4PKWeGobEx3r63lcQPPXr vGGDIZMqLqiFcvbPLzX4s/Awd5lW2pk4UezHDWysQvuiPz/Hah52BOQPShug3Xua cUjLy0R6iSiBAf7x4An8c7E1EO6mzikeQJUPSMcnNfv4WCaR3nnxtJkW+TrxN1F8 +NbIz0j9m4MiMmWskRHJsmW0sGLF+Gpqq/Vb8puQ3Ki+r2ry752vNTG+mEAhDhZ5 Gw72V31KIw3eweP5W1dnQ6aQqs8wS+D3 -----END CERTIFICATE-----Generated at Thu Jul 3 02:46:04 2025 by rpki-client