$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft File: opeisJM4LkUIbKB87myXs2vkws0.mft (raw, json) Hash identifier: F+EkdCEBI3lx0SkN1TNmLECZMhJThKFO5hTwsnwE8mc= Subject key identifier: 95:16:B8:82:B6:C3:DA:94:71:A1:F4:6D:DB:15:8A:57:4E:9C:E2:35 Authority key identifier: A2:97:A2:B0:93:38:2E:45:08:6C:A0:7C:EE:6C:97:B3:6B:E4:C2:CD Certificate issuer: /CN=A91B1C82/serialNumber=A297A2B093382E45086CA07CEE6C97B36BE4C2CD Certificate serial: 0726 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opeisJM4LkUIbKB87myXs2vkws0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft Manifest number: 071F Signing time: Sat 28 Jun 2025 21:28:01 +0000 Manifest this update: Sat 28 Jun 2025 21:28:00 +0000 Manifest next update: Sat 05 Jul 2025 21:28:00 +0000 Files and hashes: 1: opeisJM4LkUIbKB87myXs2vkws0.crl (hash: 7Q0GlYQC8F8NF7SO+u7ARkpHAcmQ7BhY6nZAF/wl+rI=) 2: 48005BEC3DEA11EBBCCD2322C4F9AE02.roa (hash: YjRfOOPCw2f3bTp4JIxEV1Qp+ImYc99rwjJvwjX7itk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.crl rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opeisJM4LkUIbKB87myXs2vkws0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 21:28:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1830 (0x726) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1C82, serialNumber=A297A2B093382E45086CA07CEE6C97B36BE4C2CD Validity Not Before: Jun 28 21:28:00 2025 GMT Not After : Jul 5 21:28:00 2025 GMT Subject: CN=68605e60-ce9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a5:84:52:0b:ff:7f:ff:57:da:a9:12:4f:28: 6a:35:25:99:c6:73:3e:8b:50:10:26:d4:92:f2:f3: 3d:fb:71:ea:a3:08:35:02:00:33:f8:cb:c1:f2:1f: a7:1f:5d:4e:af:32:de:9a:ed:4e:2f:97:2d:a4:e8: 9d:19:ff:aa:4d:3c:d5:4a:84:56:58:76:1c:73:ea: f4:b6:eb:f7:87:ac:5c:2b:46:54:75:7b:50:cd:e9: 8c:de:d7:e1:fc:2d:63:eb:af:4c:e1:8b:75:11:7d: 28:c5:9f:10:a5:0b:1d:e7:29:c4:1e:17:74:2e:f4: 13:75:84:2a:89:72:44:ff:18:ba:ae:3b:e3:5a:ad: 68:34:e6:81:52:e7:30:20:c4:44:ed:75:81:eb:22: cc:c6:ab:f3:bd:15:63:c8:de:47:47:6e:21:c3:a8: 49:a7:4c:35:85:31:e4:70:c6:82:66:cf:47:e5:67: 3c:ac:07:70:cd:2b:80:40:f3:d9:60:d8:e1:d9:d6: 66:b8:e2:02:25:ed:65:01:2a:45:1b:75:42:9c:a7: 06:1f:a9:41:cb:f8:49:a1:5a:5a:c1:8a:ec:a8:d4: 76:fd:e3:21:ef:db:47:20:ce:01:6d:0a:d5:c1:48: d3:0e:46:3f:2d:96:ec:51:30:93:e1:24:e4:41:57: d6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:16:B8:82:B6:C3:DA:94:71:A1:F4:6D:DB:15:8A:57:4E:9C:E2:35 X509v3 Authority Key Identifier: keyid:A2:97:A2:B0:93:38:2E:45:08:6C:A0:7C:EE:6C:97:B3:6B:E4:C2:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opeisJM4LkUIbKB87myXs2vkws0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:c0:2e:60:b4:4f:57:d9:62:6c:09:54:fe:6d:2d:8a:98:52: 5a:d3:75:ba:a2:27:2d:3e:ed:a2:25:43:0d:78:2d:7d:fe:db: 41:27:04:cd:cc:00:8f:87:50:bc:42:54:e4:d8:ad:b4:0b:77: 32:c6:01:a5:e3:f3:1d:4a:8e:da:36:44:65:71:8e:59:30:c5: 89:af:31:fa:d7:13:b8:99:76:d9:d5:4f:d7:87:e3:45:d2:22: 91:8e:00:72:cd:66:8d:2c:ef:4c:cd:89:91:dc:be:da:31:49: 86:9e:98:fc:c2:74:07:2d:6b:b2:08:41:ac:bc:c3:8f:ec:f2: 52:ca:1a:2a:89:c8:ed:39:2a:b8:3d:31:04:71:cf:94:e9:79: 73:e4:17:ab:cd:16:1b:9c:8e:d7:75:8d:5f:5a:95:12:39:eb: 1c:a3:97:18:d9:72:23:f7:f1:5b:3b:ab:56:4c:c2:2a:fe:3d: 89:92:04:77:c1:8f:25:38:90:89:70:7e:99:74:95:ca:52:9a: 61:04:bf:f0:34:d1:87:e8:94:f7:fa:eb:02:4d:56:a9:da:b7: 0b:95:09:77:2a:2f:4a:17:25:6b:c0:2c:b0:f8:13:62:8e:bd: 06:b4:17:45:eb:63:1b:28:d6:f7:f7:9c:3b:89:5d:bc:b1:2b: ff:3e:42:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFDODIxMTAvBgNVBAUTKEEyOTdBMkIwOTMzODJFNDUwODZDQTA3Q0VFNkM5N0Iz NkJFNEMyQ0QwHhcNMjUwNjI4MjEyODAwWhcNMjUwNzA1MjEyODAwWjAYMRYwFAYD VQQDEw02ODYwNWU2MC1jZTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0KWEUgv/f/9X2qkSTyhqNSWZxnM+i1AQJtSS8vM9+3Hqowg1AgAz+MvB8h+n H11OrzLemu1OL5ctpOidGf+qTTzVSoRWWHYcc+r0tuv3h6xcK0ZUdXtQzemM3tfh /C1j669M4Yt1EX0oxZ8QpQsd5ynEHhd0LvQTdYQqiXJE/xi6rjvjWq1oNOaBUucw IMRE7XWB6yLMxqvzvRVjyN5HR24hw6hJp0w1hTHkcMaCZs9H5Wc8rAdwzSuAQPPZ YNjh2dZmuOICJe1lASpFG3VCnKcGH6lBy/hJoVpawYrsqNR2/eMh79tHIM4BbQrV wUjTDkY/LZbsUTCT4STkQVfWrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJUWuIK2 w9qUcaH0bdsVildOnOI1MB8GA1UdIwQYMBaAFKKXorCTOC5FCGygfO5sl7Nr5MLN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUM4Mi8xOEREQkZEMjNE RTgxMUVCQTM1RDUwMUZDNEY5QUUwMi9vcGVpc0pNNExrVUliS0I4N215WHMydmt3 czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29wZWlzSk00TGtVSWJLQjg3bXlYczJ2a3dzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUM4Mi8xOEREQkZEMjNERTgxMUVCQTM1RDUwMUZDNEY5QUUwMi9vcGVpc0pNNExr VUliS0I4N215WHMydmt3czAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+wC5gtE9X2WJsCVT+bS2KmFJa03W6oictPu2iJUMNeC19/ttBJwTN zACPh1C8QlTk2K20C3cyxgGl4/MdSo7aNkRlcY5ZMMWJrzH61xO4mXbZ1U/Xh+NF 0iKRjgByzWaNLO9MzYmR3L7aMUmGnpj8wnQHLWuyCEGsvMOP7PJSyhoqicjtOSq4 PTEEcc+U6Xlz5BerzRYbnI7XdY1fWpUSOesco5cY2XIj9/FbO6tWTMIq/j2JkgR3 wY8lOJCJcH6ZdJXKUpphBL/wNNGH6JT3+usCTVap2rcLlQl3Ki9KFyVrwCyw+BNi jr0GtBdF62MbKNb395w7iV28sSv/PkIN -----END CERTIFICATE-----Generated at Mon Jun 30 17:38:28 2025 by rpki-client