$ rpki-client -vvf rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft File: P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft (raw, json) Hash identifier: VUZnWx39GvnlZYzMgHNal5hDN3S2nf0791Baa7DPeXs= Subject key identifier: B9:E1:EA:4C:A6:15:63:B3:AE:55:A9:3D:2F:C1:52:83:E3:F4:DA:6E Authority key identifier: 3F:E3:AE:35:5A:92:77:B9:1D:73:E2:AC:52:F5:38:7F:09:5F:18:9A Certificate issuer: /CN=A91C37DD/serialNumber=3FE3AE355A9277B91D73E2AC52F5387F095F189A Certificate serial: ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-OuNVqSd7kdc-KsUvU4fwlfGJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft Manifest number: E5 Signing time: Thu 03 Jul 2025 05:43:01 +0000 Manifest this update: Thu 03 Jul 2025 05:43:00 +0000 Manifest next update: Thu 10 Jul 2025 05:43:00 +0000 Files and hashes: 1: P-OuNVqSd7kdc-KsUvU4fwlfGJo.crl (hash: HyIk2vEFn5Tm/6YnyCZNoF7qJdGSQqY2L/nhud3D/jo=) 2: 8670D60E096611EF99F30750C4F9AE02.roa (hash: sT0cMmz3LwTY9msFrBTT0GIkbrL7Fs7LTvjg3aLQ9/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.crl rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-OuNVqSd7kdc-KsUvU4fwlfGJo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 237 (0xed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C37DD, serialNumber=3FE3AE355A9277B91D73E2AC52F5387F095F189A Validity Not Before: Jul 3 05:43:00 2025 GMT Not After : Jul 10 05:43:00 2025 GMT Subject: CN=68661865-80e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:91:e1:41:b9:60:ce:c6:f1:9c:d8:f8:fd:12: e3:43:3c:75:0d:e7:36:48:f8:8a:e0:5b:20:8d:d3: ff:79:b3:8e:fc:6f:8d:78:62:4b:92:37:f8:ec:d2: 17:38:1e:a6:2a:d1:88:e0:3c:22:60:de:a0:88:c9: d9:69:2a:85:62:19:e6:f9:c2:75:8a:8c:c7:a4:51: 4f:7b:01:2c:b5:d7:34:dc:a2:55:c2:80:f8:cc:c0: 45:fc:9b:31:ae:67:7b:8b:f7:c1:1d:8e:a3:19:ad: f6:74:ba:a6:2b:7f:d7:7a:13:6e:73:39:75:e9:a3: 48:18:5b:90:1f:b7:ab:73:f6:1a:03:4c:7f:37:5f: be:0b:60:f5:35:55:a8:25:dc:52:c4:43:13:0e:f9: 73:c7:18:ae:3e:36:9c:f7:ec:2e:b4:5f:ed:f3:3e: d0:57:a5:5f:ac:0d:d6:3b:bd:11:2e:7a:c7:30:95: 00:c6:e6:14:1c:a9:67:e1:56:84:22:55:39:af:58: 0b:a7:3c:3f:99:9d:8c:40:2f:99:33:23:4a:ab:cc: 08:a1:0f:4e:d9:a7:ea:c9:7e:b7:9d:6f:c8:b7:7a: 29:7e:bb:48:22:96:28:de:82:cf:a9:7a:a4:0d:df: 64:fe:85:05:e0:5d:bd:ed:c9:23:3d:66:11:5e:ff: b1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E1:EA:4C:A6:15:63:B3:AE:55:A9:3D:2F:C1:52:83:E3:F4:DA:6E X509v3 Authority Key Identifier: keyid:3F:E3:AE:35:5A:92:77:B9:1D:73:E2:AC:52:F5:38:7F:09:5F:18:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-OuNVqSd7kdc-KsUvU4fwlfGJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:30:46:1f:bb:88:46:50:73:88:b5:9c:05:cf:6f:05:10:6e: be:8f:2e:e3:0f:01:ab:17:ba:83:13:91:e7:09:d8:30:a1:53: 5c:ad:5c:f7:06:3a:d3:16:d2:7b:3a:da:1e:3f:24:b3:66:4b: 50:bf:08:3c:e5:5c:d8:89:c9:99:50:4c:b6:72:29:82:cf:75: a0:ed:f9:66:11:6f:bf:65:07:ee:f5:ae:2d:a7:bf:e2:c4:a5: 58:e6:4d:25:79:82:be:0a:90:4e:df:a5:4d:43:0f:a0:09:3f: da:2c:d8:05:f2:9c:a1:29:33:d4:cd:cd:68:a5:d6:7c:07:78: 95:43:00:d4:14:53:18:93:91:a5:df:15:24:02:e7:0a:8f:61: 2a:0c:de:35:10:3a:1f:42:1c:3c:3e:f1:5e:7b:3f:0e:32:04: 21:a3:62:11:60:cc:ff:5b:bc:b0:3f:7d:9e:bd:0b:72:05:d8: 31:6e:c2:77:ba:92:f0:46:16:ef:07:6c:fa:34:30:c2:9c:d3: d6:89:2a:0e:9d:3d:88:79:6c:7b:50:e5:d4:cd:f7:5a:ca:03: 4f:cf:cf:07:30:b2:62:fa:7e:75:41:07:e9:87:d2:ef:6e:b3: 9e:b0:8a:9f:dc:61:de:85:7e:45:fe:b2:02:d9:03:a5:a8:d2: 11:a6:74:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM3REQxMTAvBgNVBAUTKDNGRTNBRTM1NUE5Mjc3QjkxRDczRTJBQzUyRjUzODdG MDk1RjE4OUEwHhcNMjUwNzAzMDU0MzAwWhcNMjUwNzEwMDU0MzAwWjAYMRYwFAYD VQQDEw02ODY2MTg2NS04MGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtpHhQblgzsbxnNj4/RLjQzx1Dec2SPiK4FsgjdP/ebOO/G+NeGJLkjf47NIX OB6mKtGI4DwiYN6giMnZaSqFYhnm+cJ1iozHpFFPewEstdc03KJVwoD4zMBF/Jsx rmd7i/fBHY6jGa32dLqmK3/XehNuczl16aNIGFuQH7erc/YaA0x/N1++C2D1NVWo JdxSxEMTDvlzxxiuPjac9+wutF/t8z7QV6VfrA3WO70RLnrHMJUAxuYUHKln4VaE IlU5r1gLpzw/mZ2MQC+ZMyNKq8wIoQ9O2afqyX63nW/It3opfrtIIpYo3oLPqXqk Dd9k/oUF4F297ckjPWYRXv+x/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLnh6kym FWOzrlWpPS/BUoPj9NpuMB8GA1UdIwQYMBaAFD/jrjVakne5HXPirFL1OH8JXxia MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzdERC8yNDg1NUQ4MDA5 NjUxMUVGQTRCQ0U4N0FDNEY5QUUwMi9QLU91TlZxU2Q3a2RjLUtzVXZVNGZ3bGZH Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AtT3VOVnFTZDdrZGMtS3NVdlU0ZndsZkdKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzdERC8yNDg1NUQ4MDA5NjUxMUVGQTRCQ0U4N0FDNEY5QUUwMi9QLU91TlZxU2Q3 a2RjLUtzVXZVNGZ3bGZHSm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgMEYfu4hGUHOItZwFz28FEG6+jy7jDwGrF7qDE5HnCdgwoVNcrVz3 BjrTFtJ7OtoePySzZktQvwg85VzYicmZUEy2cimCz3Wg7flmEW+/ZQfu9a4tp7/i xKVY5k0leYK+CpBO36VNQw+gCT/aLNgF8pyhKTPUzc1opdZ8B3iVQwDUFFMYk5Gl 3xUkAucKj2EqDN41EDofQhw8PvFeez8OMgQho2IRYMz/W7ywP32evQtyBdgxbsJ3 upLwRhbvB2z6NDDCnNPWiSoOnT2IeWx7UOXUzfdaygNPz88HMLJi+n51QQfph9Lv brOesIqf3GHehX5F/rIC2QOlqNIRpnQX -----END CERTIFICATE-----Generated at Thu Jul 3 11:06:23 2025 by rpki-client