$ rpki-client -vvf rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.mft File: oXkseNMOEHMKPERWHH5YIufxwvg.mft (raw, json) Hash identifier: EESuzdaglS54WzGtTMPcJAufJDfqpCOPhNaptpSmiCY= Subject key identifier: C3:B8:DC:FA:0B:46:B7:01:5E:65:63:3A:FB:25:CE:9A:3D:D5:79:93 Authority key identifier: A1:79:2C:78:D3:0E:10:73:0A:3C:44:56:1C:7E:58:22:E7:F1:C2:F8 Certificate issuer: /CN=A91A093A/serialNumber=A1792C78D30E10730A3C44561C7E5822E7F1C2F8 Certificate serial: 086A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXkseNMOEHMKPERWHH5YIufxwvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.mft Manifest number: 085E Signing time: Wed 02 Jul 2025 20:58:16 +0000 Manifest this update: Wed 02 Jul 2025 20:58:15 +0000 Manifest next update: Wed 09 Jul 2025 20:58:15 +0000 Files and hashes: 1: oXkseNMOEHMKPERWHH5YIufxwvg.crl (hash: JxEbNYCo4iLm3rVz4VmW0RkiRaIXNogsgs4ox9VPXbI=) 2: 153A3AE86A9111EF905C3C37C4F9AE02.roa (hash: LYF+KadzZ69diyD5rWiKHJlYkwO/eA/Z250K04w+xPI=) 3: AA973CB86A8B11EFB0774B61C4F9AE02.roa (hash: +w6DPiK2iGC1sFd6+H0KMfGyjFvRHYPwKc/prnzBHkc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.crl rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXkseNMOEHMKPERWHH5YIufxwvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:58:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2154 (0x86a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A093A, serialNumber=A1792C78D30E10730A3C44561C7E5822E7F1C2F8 Validity Not Before: Jul 2 20:58:15 2025 GMT Not After : Jul 9 20:58:15 2025 GMT Subject: CN=68659d67-25e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c2:57:ed:a1:fa:a7:b4:73:ef:34:8a:9f:91: 3e:0e:af:fb:41:ec:e9:e7:86:1a:be:9e:05:f5:6d: 81:8b:0f:cb:ff:2e:e9:71:e2:d2:b3:28:52:57:ad: 2f:0e:74:98:4a:07:a2:c0:3f:cb:5a:81:52:c6:8a: cb:0a:44:9b:10:b5:bd:f8:31:54:34:61:93:e0:bc: b0:8f:15:10:ee:9c:e1:41:a3:7d:51:dc:62:d3:49: a2:a7:2d:27:df:fc:a7:bf:43:e9:53:6c:4c:b3:a4: 0d:84:c5:d0:b0:2c:c5:fa:60:57:76:24:db:91:d2: e7:4d:aa:a8:f9:bd:36:26:a0:ce:d2:cd:4a:b0:90: dd:15:5e:b7:7a:d1:ca:e8:57:9d:1c:b1:12:8d:f1: ab:71:9a:cd:c6:45:c2:c3:f8:a4:b3:4e:f8:ab:3b: 4d:a1:e4:3d:8d:8b:ec:57:c3:d9:53:f1:03:2e:4c: 57:cf:c8:1c:7f:58:de:48:f3:ae:51:5d:1c:b2:b5: 1b:04:93:ab:4f:06:3a:d0:e5:99:41:24:76:2a:c4: 85:99:f7:00:02:82:3f:e3:ee:a6:5c:00:1b:6c:77: 76:ba:d6:7e:d7:06:ef:31:fb:ec:0f:64:a1:6f:0b: a4:9f:1a:2b:8a:24:cc:a8:4a:d8:95:f7:e2:45:0f: 60:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:B8:DC:FA:0B:46:B7:01:5E:65:63:3A:FB:25:CE:9A:3D:D5:79:93 X509v3 Authority Key Identifier: keyid:A1:79:2C:78:D3:0E:10:73:0A:3C:44:56:1C:7E:58:22:E7:F1:C2:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXkseNMOEHMKPERWHH5YIufxwvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:a2:44:ee:90:e6:73:ed:ee:5d:4a:10:a1:58:96:b5:ab:7f: 8a:8f:4a:7f:f6:bd:5b:6b:24:b6:32:dc:e2:b8:48:c0:d6:f4: 24:00:c7:38:a0:cb:24:5d:23:c3:b4:b3:ee:9e:4c:ef:1e:ed: cd:86:5b:66:f6:e6:7a:5a:2a:ef:4b:90:c8:98:39:4d:8d:f9: 9d:a3:44:9d:4c:21:8e:47:8e:e7:73:6d:53:7a:ed:09:fc:ad: a8:c7:0b:fd:70:90:6a:11:9c:d6:3e:f9:48:f1:50:29:30:c7: cb:31:12:54:c5:73:73:0b:a7:09:4f:52:fe:56:a2:62:cf:f7: a9:a0:0c:13:6b:ae:a6:d0:2f:f5:98:70:32:52:47:23:8a:13: 09:42:26:d1:38:ad:b7:69:d9:01:fd:9e:74:ef:35:69:4b:ce: 97:cd:51:65:35:f5:a5:90:7c:5f:f1:2b:33:83:56:b5:b1:73: fd:58:f1:25:56:82:03:79:b9:e3:22:bb:d4:7b:cc:64:97:19: 00:6c:e1:5e:37:b4:2c:19:93:91:21:6a:9e:b8:1f:c2:0d:b7: 97:ec:42:e3:fc:ab:dc:f2:8f:eb:1b:a4:25:77:50:19:73:63: 7f:74:75:d7:fd:56:b6:42:80:45:9a:1d:c3:75:c7:05:55:b4: e4:e5:bc:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA5M0ExMTAvBgNVBAUTKEExNzkyQzc4RDMwRTEwNzMwQTNDNDQ1NjFDN0U1ODIy RTdGMUMyRjgwHhcNMjUwNzAyMjA1ODE1WhcNMjUwNzA5MjA1ODE1WjAYMRYwFAYD VQQDEw02ODY1OWQ2Ny0yNWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2sJX7aH6p7Rz7zSKn5E+Dq/7Qezp54Yavp4F9W2Biw/L/y7pceLSsyhSV60v DnSYSgeiwD/LWoFSxorLCkSbELW9+DFUNGGT4LywjxUQ7pzhQaN9Udxi00mipy0n 3/ynv0PpU2xMs6QNhMXQsCzF+mBXdiTbkdLnTaqo+b02JqDO0s1KsJDdFV63etHK 6FedHLESjfGrcZrNxkXCw/iks074qztNoeQ9jYvsV8PZU/EDLkxXz8gcf1jeSPOu UV0csrUbBJOrTwY60OWZQSR2KsSFmfcAAoI/4+6mXAAbbHd2utZ+1wbvMfvsD2Sh bwuknxoriiTMqErYlffiRQ9gcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMO43PoL RrcBXmVjOvslzpo91XmTMB8GA1UdIwQYMBaAFKF5LHjTDhBzCjxEVhx+WCLn8cL4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDkzQS9FQkEzNTMxRUNC RDgxMUVBODY3QUZCNEZDNEY5QUUwMi9vWGtzZU5NT0VITUtQRVJXSEg1WUl1Znh3 dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Ya3NlTk1PRUhNS1BFUldISDVZSXVmeHd2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDkzQS9FQkEzNTMxRUNCRDgxMUVBODY3QUZCNEZDNEY5QUUwMi9vWGtzZU5NT0VI TUtQRVJXSEg1WUl1Znh3dmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARokTukOZz7e5dShChWJa1q3+Kj0p/9r1bayS2MtziuEjA1vQkAMc4 oMskXSPDtLPunkzvHu3Nhltm9uZ6WirvS5DImDlNjfmdo0SdTCGOR47nc21Teu0J /K2oxwv9cJBqEZzWPvlI8VApMMfLMRJUxXNzC6cJT1L+VqJiz/epoAwTa66m0C/1 mHAyUkcjihMJQibROK23adkB/Z507zVpS86XzVFlNfWlkHxf8Sszg1a1sXP9WPEl VoIDebnjIrvUe8xklxkAbOFeN7QsGZORIWqeuB/CDbeX7ELj/Kvc8o/rG6Qld1AZ c2N/dHXX/Va2QoBFmh3DdccFVbTk5by2 -----END CERTIFICATE-----Generated at Thu Jul 3 07:30:51 2025 by rpki-client