$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD4DF/310D3542399311EFA08D2E1BC4F9AE02/o222tflxI3VeVEH6xWqmu6BbCAo.mft File: o222tflxI3VeVEH6xWqmu6BbCAo.mft (raw, json) Hash identifier: VlqVh+/BLptCCpoO5VMtJCJTPC1dWnf/9W0uS9ekqE0= Subject key identifier: 82:77:25:E1:16:C7:A8:8C:96:03:FE:31:7B:75:79:02:CA:B2:94:CF Authority key identifier: A3:6D:B6:B5:F9:71:23:75:5E:54:41:FA:C5:6A:A6:BB:A0:5B:08:0A Certificate issuer: /CN=A91BD4DF/serialNumber=A36DB6B5F97123755E5441FAC56AA6BBA05B080A Certificate serial: C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o222tflxI3VeVEH6xWqmu6BbCAo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD4DF/310D3542399311EFA08D2E1BC4F9AE02/o222tflxI3VeVEH6xWqmu6BbCAo.mft Manifest number: BE Signing time: Tue 01 Jul 2025 06:33:44 +0000 Manifest this update: Tue 01 Jul 2025 06:33:44 +0000 Manifest next update: Tue 08 Jul 2025 06:33:44 +0000 Files and hashes: 1: o222tflxI3VeVEH6xWqmu6BbCAo.crl (hash: nOdWgq3O4UE9McAocrI5Ffbgztvhc9bp5LobtZByi0M=) 2: 4136642C39AA11EF933F9583C4F9AE02.roa (hash: +fFDWaDnFu7mpfAvBElCeG8uNXNIs5iwZjBDkX/SJz0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD4DF/310D3542399311EFA08D2E1BC4F9AE02/o222tflxI3VeVEH6xWqmu6BbCAo.crl rsync://rpki.apnic.net/member_repository/A91BD4DF/310D3542399311EFA08D2E1BC4F9AE02/o222tflxI3VeVEH6xWqmu6BbCAo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o222tflxI3VeVEH6xWqmu6BbCAo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 06:33:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 193 (0xc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD4DF, serialNumber=A36DB6B5F97123755E5441FAC56AA6BBA05B080A Validity Not Before: Jul 1 06:33:44 2025 GMT Not After : Jul 8 06:33:44 2025 GMT Subject: CN=68638148-c5b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:69:6f:17:ac:f7:5c:53:14:1d:e0:f7:79:b4: 28:1a:a6:1a:ac:4d:18:62:4c:67:14:ac:df:93:4f: 3b:02:82:82:65:52:48:72:da:94:20:c7:13:69:aa: e4:49:6c:f5:3f:b8:e1:22:80:57:b5:88:b4:28:10: 22:ed:3d:87:9d:e0:74:70:f7:80:ad:8e:41:73:c0: ab:86:2f:db:1e:87:b5:ce:6c:d5:8a:d6:56:5a:47: 01:11:3c:b1:d6:bd:b4:12:ea:16:c8:59:47:82:01: 06:b1:e4:bf:d0:ae:50:96:23:0d:c9:7f:20:bd:04: 85:f5:43:6a:50:59:30:52:43:bf:fb:0c:40:78:9c: fb:da:55:d1:68:56:6d:ec:8a:5d:50:04:3d:12:f1: b2:00:5a:07:ec:53:a8:23:af:c0:7d:3a:18:c1:77: f0:50:8d:8e:d7:13:3a:b9:26:28:2c:68:2c:af:99: 95:18:f4:c1:04:da:07:d6:54:10:4b:88:06:59:13: a2:94:ee:96:85:00:c2:46:b3:ae:42:c5:b7:df:10: 57:3d:03:3e:89:25:15:6d:b3:2b:8e:4d:5c:a4:fd: 66:57:37:83:07:a6:90:be:bb:81:a4:37:dd:1b:9e: fb:b8:78:ec:46:fa:46:27:f0:a6:19:58:3e:bc:b0: dd:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:77:25:E1:16:C7:A8:8C:96:03:FE:31:7B:75:79:02:CA:B2:94:CF X509v3 Authority Key Identifier: keyid:A3:6D:B6:B5:F9:71:23:75:5E:54:41:FA:C5:6A:A6:BB:A0:5B:08:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD4DF/310D3542399311EFA08D2E1BC4F9AE02/o222tflxI3VeVEH6xWqmu6BbCAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o222tflxI3VeVEH6xWqmu6BbCAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD4DF/310D3542399311EFA08D2E1BC4F9AE02/o222tflxI3VeVEH6xWqmu6BbCAo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:b0:f8:e5:e3:62:21:0f:03:b7:c7:ba:5b:33:f2:1f:19:83: 1d:03:a9:38:2f:5d:a6:01:6b:3c:32:4e:c6:20:24:27:e8:ad: a6:c9:f9:d6:a6:02:17:05:df:42:0c:d8:d4:a0:ee:0c:8d:cd: 12:02:1b:17:b8:0c:79:35:82:4d:79:fe:a4:43:ef:a8:77:62: 22:00:4d:05:42:e8:a0:74:ea:a9:46:96:82:cd:35:bc:d0:3f: 11:b7:57:44:a9:37:0c:5a:68:ed:83:ce:5a:a2:30:ba:ae:26: 25:6c:bb:30:17:6e:b0:23:c2:dd:96:54:85:c0:ff:aa:71:3b: 2a:48:e3:02:d5:b5:2a:f9:a4:4a:45:64:bb:cf:c8:91:55:f9: 29:5d:37:c2:56:e3:fc:f7:45:2a:ad:f4:1d:5e:e2:c5:e4:ae: 29:ed:8f:44:8c:dd:36:f8:5d:4e:1a:23:2a:40:90:03:da:d7: 1d:d0:94:aa:d3:0e:cc:08:85:23:c4:32:4a:78:26:e5:06:6a: 54:be:74:82:b8:6d:8c:18:20:db:ba:3b:9e:90:44:21:53:1f: 58:ab:33:cd:d4:78:15:43:92:69:6a:d5:d7:3c:7e:2f:91:9f: fa:64:a5:b1:a5:58:62:5e:52:94:6a:b5:33:23:1d:0a:ee:e9: d2:76:d0:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ0REYxMTAvBgNVBAUTKEEzNkRCNkI1Rjk3MTIzNzU1RTU0NDFGQUM1NkFBNkJC QTA1QjA4MEEwHhcNMjUwNzAxMDYzMzQ0WhcNMjUwNzA4MDYzMzQ0WjAYMRYwFAYD VQQDEw02ODYzODE0OC1jNWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtGlvF6z3XFMUHeD3ebQoGqYarE0YYkxnFKzfk087AoKCZVJIctqUIMcTaark SWz1P7jhIoBXtYi0KBAi7T2HneB0cPeArY5Bc8Crhi/bHoe1zmzVitZWWkcBETyx 1r20EuoWyFlHggEGseS/0K5QliMNyX8gvQSF9UNqUFkwUkO/+wxAeJz72lXRaFZt 7IpdUAQ9EvGyAFoH7FOoI6/AfToYwXfwUI2O1xM6uSYoLGgsr5mVGPTBBNoH1lQQ S4gGWROilO6WhQDCRrOuQsW33xBXPQM+iSUVbbMrjk1cpP1mVzeDB6aQvruBpDfd G577uHjsRvpGJ/CmGVg+vLDdUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIJ3JeEW x6iMlgP+MXt1eQLKspTPMB8GA1UdIwQYMBaAFKNttrX5cSN1XlRB+sVqprugWwgK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDRERi8zMTBEMzU0MjM5 OTMxMUVGQTA4RDJFMUJDNEY5QUUwMi9vMjIydGZseEkzVmVWRUg2eFdxbXU2QmJD QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28yMjJ0Zmx4STNWZVZFSDZ4V3FtdTZCYkNBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDRERi8zMTBEMzU0MjM5OTMxMUVGQTA4RDJFMUJDNEY5QUUwMi9vMjIydGZseEkz VmVWRUg2eFdxbXU2QmJDQW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWsPjl42IhDwO3x7pbM/IfGYMdA6k4L12mAWs8Mk7GICQn6K2myfnW pgIXBd9CDNjUoO4Mjc0SAhsXuAx5NYJNef6kQ++od2IiAE0FQuigdOqpRpaCzTW8 0D8Rt1dEqTcMWmjtg85aojC6riYlbLswF26wI8LdllSFwP+qcTsqSOMC1bUq+aRK RWS7z8iRVfkpXTfCVuP890UqrfQdXuLF5K4p7Y9EjN02+F1OGiMqQJAD2tcd0JSq 0w7MCIUjxDJKeCblBmpUvnSCuG2MGCDbujuekEQhUx9YqzPN1HgVQ5JpatXXPH4v kZ/6ZKWxpVhiXlKUarUzIx0K7unSdtBP -----END CERTIFICATE-----Generated at Thu Jul 3 03:04:30 2025 by rpki-client