$ rpki-client -vvf rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft File: 4OynvFsloMo3TZqDzEz5DdbPIgk.mft (raw, json) Hash identifier: iAMd55aICPcKVMIwvAUF95+SZ83x3avJZ7rklKm5YhU= Subject key identifier: 3B:EB:B5:26:52:53:6E:62:E3:29:88:FC:76:33:5D:6F:D6:89:10:33 Authority key identifier: E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09 Certificate issuer: /CN=A91C74B5/serialNumber=E0ECA7BC5B25A0CA374D9A83CC4CF90DD6CF2209 Certificate serial: 0177 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft Manifest number: 0169 Signing time: Thu 03 Jul 2025 04:01:43 +0000 Manifest this update: Thu 03 Jul 2025 04:01:43 +0000 Manifest next update: Thu 10 Jul 2025 04:01:43 +0000 Files and hashes: 1: 4OynvFsloMo3TZqDzEz5DdbPIgk.crl (hash: ErUbTwcqE2n7iOB2nZ3dT/Qv6dvf7fubYqCy/p9gWjU=) 2: FBCA5E628A4E11EE8EFFA44BC4F9AE02.roa (hash: n7d+wfVovpgFh/VPuHK0Be+tZJiAokXkxVBH6z58Cdo=) 3: 23E0203034AF11EE90E6263DC4F9AE02.roa (hash: qRwojUTlxnLhuw/Mk800h2tw73R4wHeoNMLoVaIWLSQ=) 4: FE53F0DE34AA11EE85FF0735C4F9AE02.roa (hash: FSryM40tOFsx9/9SakfMh/QfDHk+qmxC9WGqNR/nxQA=) 5: 2343647034AF11EE90E6263DC4F9AE02.roa (hash: O7wU5uPOsDFh8TlK1r/cSTqhuO+kftwlxz4zNibCfJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 375 (0x177) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C74B5, serialNumber=E0ECA7BC5B25A0CA374D9A83CC4CF90DD6CF2209 Validity Not Before: Jul 3 04:01:43 2025 GMT Not After : Jul 10 04:01:43 2025 GMT Subject: CN=686600a7-5382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:5c:55:76:05:d7:ba:b9:99:5b:43:2d:32:f7: 4f:79:0d:6a:2f:ca:8b:08:1f:70:f6:89:74:ea:22: 32:35:51:3e:92:8a:49:c9:fe:38:fd:fc:3e:ac:9d: 8f:de:af:25:a9:a2:ee:b8:11:12:3f:b6:6a:55:56: 3c:7d:3f:f6:97:c0:32:67:90:07:43:15:ea:72:e0: 85:06:e1:e2:ef:75:96:5a:68:1b:72:b3:44:0b:35: 94:6e:4f:40:dc:25:28:ba:57:d0:4a:66:06:79:03: fb:69:7b:c3:df:d2:18:44:14:53:df:54:4b:ac:3b: c8:58:0f:3e:d4:da:04:8d:0c:ea:fc:a3:56:7d:9c: 8d:05:19:e3:a6:2f:5e:7b:f4:05:4c:e5:d2:af:5a: 21:3d:54:64:76:fe:40:4f:67:5c:6b:56:45:45:9f: d6:59:0b:26:f9:a1:c6:dc:36:6c:55:3c:40:5a:e2: 71:99:bf:ff:73:3e:b4:9c:0f:f1:31:74:ed:60:1c: fa:30:0d:8e:f6:80:20:a7:af:bb:e5:b8:0e:f9:b4: 8f:35:f0:ea:4e:01:49:c7:ac:9f:e2:d1:0e:92:f8: e2:6e:e7:0d:c5:18:dd:db:8b:23:f7:4d:5b:b0:c1: b2:79:c4:a3:a1:d4:e3:66:66:c2:9d:6e:ea:ba:02: 15:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:EB:B5:26:52:53:6E:62:E3:29:88:FC:76:33:5D:6F:D6:89:10:33 X509v3 Authority Key Identifier: keyid:E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:7f:b8:5e:56:44:46:13:d9:e7:e1:e5:7e:c0:52:78:e4:fd: 4e:df:7e:40:7e:f0:d4:a5:b0:f2:98:35:67:72:8c:5c:10:8c: 4e:83:51:93:2d:b6:8f:ea:06:a6:94:d7:b0:2c:fb:7b:a8:30: 5b:d4:d7:8a:7b:50:5d:9e:e8:20:87:7f:f1:3f:86:00:31:dd: 45:f1:c9:49:52:06:d5:19:1c:fd:93:89:4a:2e:c4:ee:dc:a3: 22:ff:a8:a6:0d:a3:31:a2:81:59:3b:d2:1e:61:52:f2:72:37: f5:39:ee:2b:24:1d:72:1c:60:fb:bb:bd:50:32:b7:ff:49:37: ca:76:62:f9:b0:da:5f:c3:38:f0:92:64:50:69:bc:60:64:1e: 92:49:60:e9:64:00:ab:66:1e:83:f2:b9:dd:a8:8f:18:81:51: e4:4e:97:8d:eb:99:70:60:6a:3f:69:a8:e2:a3:c1:4a:b0:21: 77:7a:c4:6e:61:d2:ed:f7:18:4f:74:89:ec:5f:19:da:de:fd: 72:63:80:c0:22:bc:1d:a8:26:e6:80:ec:5c:14:43:41:11:8f: d3:07:f9:52:1e:03:78:e8:b0:1e:27:c0:63:b4:3b:76:e4:13: db:02:79:50:6c:54:96:f5:33:ca:22:1c:31:1e:01:0f:7f:dd: 8b:eb:24:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc0QjUxMTAvBgNVBAUTKEUwRUNBN0JDNUIyNUEwQ0EzNzREOUE4M0NDNENGOTBE RDZDRjIyMDkwHhcNMjUwNzAzMDQwMTQzWhcNMjUwNzEwMDQwMTQzWjAYMRYwFAYD VQQDEw02ODY2MDBhNy01MzgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4FxVdgXXurmZW0MtMvdPeQ1qL8qLCB9w9ol06iIyNVE+kopJyf44/fw+rJ2P 3q8lqaLuuBESP7ZqVVY8fT/2l8AyZ5AHQxXqcuCFBuHi73WWWmgbcrNECzWUbk9A 3CUoulfQSmYGeQP7aXvD39IYRBRT31RLrDvIWA8+1NoEjQzq/KNWfZyNBRnjpi9e e/QFTOXSr1ohPVRkdv5AT2dca1ZFRZ/WWQsm+aHG3DZsVTxAWuJxmb//cz60nA/x MXTtYBz6MA2O9oAgp6+75bgO+bSPNfDqTgFJx6yf4tEOkvjibucNxRjd24sj901b sMGyecSjodTjZmbCnW7qugIVnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDvrtSZS U25i4ymI/HYzXW/WiRAzMB8GA1UdIwQYMBaAFODsp7xbJaDKN02ag8xM+Q3WzyIJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzRCNS85ODA0MzU2RTM0 QUExMUVFQTA2QUUxMzNDNEY5QUUwMi80T3ludkZzbG9NbzNUWnFEekV6NURkYlBJ Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRPeW52RnNsb01vM1RacUR6RXo1RGRiUElnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzRCNS85ODA0MzU2RTM0QUExMUVFQTA2QUUxMzNDNEY5QUUwMi80T3ludkZzbG9N bzNUWnFEekV6NURkYlBJZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClf7heVkRGE9nn4eV+wFJ45P1O335AfvDUpbDymDVncoxcEIxOg1GT LbaP6gamlNewLPt7qDBb1NeKe1Bdnuggh3/xP4YAMd1F8clJUgbVGRz9k4lKLsTu 3KMi/6imDaMxooFZO9IeYVLycjf1Oe4rJB1yHGD7u71QMrf/STfKdmL5sNpfwzjw kmRQabxgZB6SSWDpZACrZh6D8rndqI8YgVHkTpeN65lwYGo/aajio8FKsCF3esRu YdLt9xhPdInsXxna3v1yY4DAIrwdqCbmgOxcFENBEY/TB/lSHgN46LAeJ8BjtDt2 5BPbAnlQbFSW9TPKIhwxHgEPf92L6ySE -----END CERTIFICATE-----Generated at Thu Jul 3 08:08:59 2025 by rpki-client