$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.mft File: OZp7H8QgfroHB6hRUZXMaOg2q_g.mft (raw, json) Hash identifier: d5aANMG4yGuLtCAMKKhhY3yBzA/zyP1MWW4id4VY8p8= Subject key identifier: C3:5C:03:D3:53:14:54:B4:57:1B:78:42:B7:56:83:67:23:74:1C:8D Authority key identifier: 39:9A:7B:1F:C4:20:7E:BA:07:07:A8:51:51:95:CC:68:E8:36:AB:F8 Certificate issuer: /CN=A91C1025/serialNumber=399A7B1FC4207EBA0707A8515195CC68E836ABF8 Certificate serial: 82 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZp7H8QgfroHB6hRUZXMaOg2q_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.mft Manifest number: 7F Signing time: Thu 03 Jul 2025 06:57:54 +0000 Manifest this update: Thu 03 Jul 2025 06:57:54 +0000 Manifest next update: Thu 10 Jul 2025 06:57:54 +0000 Files and hashes: 1: OZp7H8QgfroHB6hRUZXMaOg2q_g.crl (hash: XNX0aFlFeniXlTkfC1ErxGOl7hdPajhSvNN8+dz7BTU=) 2: 4996A7209D9211EFAD3DCF45C4F9AE02.roa (hash: X6VArMN74z4tgeDbEQQzHaT88BAEASciUle7rIza6xc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.crl rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZp7H8QgfroHB6hRUZXMaOg2q_g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 130 (0x82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1025, serialNumber=399A7B1FC4207EBA0707A8515195CC68E836ABF8 Validity Not Before: Jul 3 06:57:54 2025 GMT Not After : Jul 10 06:57:54 2025 GMT Subject: CN=686629f2-ff82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e2:00:17:26:88:6e:ee:14:7a:e6:af:58:51: f9:3a:1f:fb:7e:66:b8:d0:8e:c6:c6:6a:a9:8d:05: 70:e5:7d:b0:78:cb:b6:b1:d8:e9:5d:ec:72:ab:7d: c4:c8:4b:d0:66:97:0d:f8:20:07:d2:db:c7:cf:7c: 6d:3b:ab:21:e7:46:fa:0b:cd:64:0b:f8:89:86:e5: a7:ca:a2:57:08:be:91:bd:11:03:f8:ac:32:58:5e: 8f:ae:bf:d8:69:48:46:00:bb:0f:6a:df:e4:c9:88: 87:2e:06:d5:f7:d3:5b:92:53:fc:55:7b:c6:f8:d2: 66:a2:63:c0:e9:6d:4b:b1:01:4b:ed:97:f4:b9:93: e2:20:f2:60:4d:c3:b2:72:4b:65:85:f9:5b:08:a0: da:e3:51:d3:48:10:0b:f7:6f:f8:74:40:0c:23:2d: fe:f3:c1:2e:46:f2:c4:a3:00:a7:1f:ec:4e:90:4c: d3:62:23:9a:88:f6:1f:99:7f:9d:3d:5f:25:cb:cc: 54:d3:60:7a:c8:d1:65:bc:ce:a4:a1:ac:f6:ff:66: be:cf:99:28:37:8a:ea:ad:ab:98:01:33:b2:0b:5e: 3a:81:22:cd:b9:3e:7e:d2:27:84:45:72:03:80:ca: 99:32:07:ce:90:2d:2d:66:a1:df:67:c4:4a:82:0c: 1a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:5C:03:D3:53:14:54:B4:57:1B:78:42:B7:56:83:67:23:74:1C:8D X509v3 Authority Key Identifier: keyid:39:9A:7B:1F:C4:20:7E:BA:07:07:A8:51:51:95:CC:68:E8:36:AB:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZp7H8QgfroHB6hRUZXMaOg2q_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:22:60:4d:64:39:a3:f1:cc:ce:56:28:3c:c5:5f:1c:a1:a0: f7:d6:94:10:ee:cd:9a:49:d0:37:b0:ad:c2:2f:99:ca:06:21: 7b:c2:c3:a2:e3:a5:71:03:b7:f8:86:55:b4:e9:30:0c:2d:26: fd:9e:a9:7c:ea:dc:50:91:24:2e:51:62:f8:5d:ec:57:90:69: 1b:cf:4d:27:5f:7b:ec:63:b6:81:48:8a:ac:d5:85:ee:11:b5: b1:ab:3f:a9:90:af:1f:94:40:4b:a6:ba:59:24:9f:98:b9:f0: ee:00:dd:e7:4d:01:1c:e2:9d:37:fd:90:1d:7e:9e:19:63:29: 0c:f1:eb:d9:f2:39:07:3d:e9:69:28:5f:31:09:94:32:0a:dd: 78:2d:95:0c:b0:79:78:f0:2e:a4:f4:69:d7:c8:5d:a0:0b:2a: c4:57:7c:c1:53:4a:f5:25:e3:ed:56:13:19:a4:b8:4c:40:1c: 46:bc:5f:14:ac:a4:b8:6f:36:c3:54:d5:63:2a:6d:88:08:19: da:b4:68:54:ba:7d:70:0b:18:99:0f:22:dc:14:7b:90:14:ac: 31:a6:1d:14:e8:60:7a:e0:a5:f0:c7:2e:41:1c:b2:0f:96:81: 38:9b:e0:6e:10:45:a2:c8:39:52:77:cb:86:d4:f3:0b:5a:2b: 32:16:09:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEwMjUxMTAvBgNVBAUTKDM5OUE3QjFGQzQyMDdFQkEwNzA3QTg1MTUxOTVDQzY4 RTgzNkFCRjgwHhcNMjUwNzAzMDY1NzU0WhcNMjUwNzEwMDY1NzU0WjAYMRYwFAYD VQQDEw02ODY2MjlmMi1mZjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyOIAFyaIbu4UeuavWFH5Oh/7fma40I7GxmqpjQVw5X2weMu2sdjpXexyq33E yEvQZpcN+CAH0tvHz3xtO6sh50b6C81kC/iJhuWnyqJXCL6RvRED+KwyWF6Prr/Y aUhGALsPat/kyYiHLgbV99NbklP8VXvG+NJmomPA6W1LsQFL7Zf0uZPiIPJgTcOy cktlhflbCKDa41HTSBAL92/4dEAMIy3+88EuRvLEowCnH+xOkEzTYiOaiPYfmX+d PV8ly8xU02B6yNFlvM6koaz2/2a+z5koN4rqrauYATOyC146gSLNuT5+0ieERXID gMqZMgfOkC0tZqHfZ8RKggwa4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMNcA9NT FFS0Vxt4QrdWg2cjdByNMB8GA1UdIwQYMBaAFDmaex/EIH66BweoUVGVzGjoNqv4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTAyNS84RDdCOUJGMjlE ODQxMUVGODE3RTE0MjBDNEY5QUUwMi9PWnA3SDhRZ2Zyb0hCNmhSVVpYTWFPZzJx X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09acDdIOFFnZnJvSEI2aFJVWlhNYU9nMnFfZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTAyNS84RDdCOUJGMjlEODQxMUVGODE3RTE0MjBDNEY5QUUwMi9PWnA3SDhRZ2Zy b0hCNmhSVVpYTWFPZzJxX2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtImBNZDmj8czOVig8xV8coaD31pQQ7s2aSdA3sK3CL5nKBiF7wsOi 46VxA7f4hlW06TAMLSb9nql86txQkSQuUWL4XexXkGkbz00nX3vsY7aBSIqs1YXu EbWxqz+pkK8flEBLprpZJJ+YufDuAN3nTQEc4p03/ZAdfp4ZYykM8evZ8jkHPelp KF8xCZQyCt14LZUMsHl48C6k9GnXyF2gCyrEV3zBU0r1JePtVhMZpLhMQBxGvF8U rKS4bzbDVNVjKm2ICBnatGhUun1wCxiZDyLcFHuQFKwxph0U6GB64KXwxy5BHLIP loE4m+BuEEWiyDlSd8uG1PMLWisyFglx -----END CERTIFICATE-----Generated at Fri Jul 4 02:30:27 2025 by rpki-client