$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft File: OopqLuXcCfyqgv8BjwnBr4S0EZY.mft (raw, json) Hash identifier: zFUiojJIFFl8BoqgJDeFzLogWbvOgtytok0gh4SuRNo= Subject key identifier: 1E:D4:B6:AF:1A:C6:46:6A:68:CB:19:E0:AE:F6:3C:E5:B3:4E:05:27 Authority key identifier: 3A:8A:6A:2E:E5:DC:09:FC:AA:82:FF:01:8F:09:C1:AF:84:B4:11:96 Certificate issuer: /CN=A91CCCDD/serialNumber=3A8A6A2EE5DC09FCAA82FF018F09C1AF84B41196 Certificate serial: 01D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft Manifest number: 01CD Signing time: Thu 03 Jul 2025 02:59:08 +0000 Manifest this update: Thu 03 Jul 2025 02:59:07 +0000 Manifest next update: Thu 10 Jul 2025 02:59:07 +0000 Files and hashes: 1: OopqLuXcCfyqgv8BjwnBr4S0EZY.crl (hash: 2i7LxKwuzn1i2xEFnM+/EZfylpyelKjBjBjfaD2Kcw0=) 2: F77C1438964111EDAAB8E74AC4F9AE02.roa (hash: +ky0h0oGrZVCR4A5CboiQnDyV8XIz9Expq1wyF8Uy80=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.crl rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:59:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 465 (0x1d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCCDD, serialNumber=3A8A6A2EE5DC09FCAA82FF018F09C1AF84B41196 Validity Not Before: Jul 3 02:59:07 2025 GMT Not After : Jul 10 02:59:07 2025 GMT Subject: CN=6865f1fb-b14c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:71:95:00:3a:a8:6b:3e:35:32:c6:ac:88:dc: d2:9b:1b:f4:46:79:b6:2a:d9:c3:0f:a1:30:ab:7a: bb:ac:54:8e:35:bd:33:7b:fb:f1:78:a8:5e:6c:78: 7c:41:07:11:1b:e8:92:0c:14:45:c0:b9:73:56:84: e1:96:0f:2a:3c:e8:51:0e:3d:22:89:33:d7:f5:e9: 83:4a:0b:b2:57:b5:e9:8b:96:cd:a9:93:5a:21:2f: 74:34:a6:33:96:dd:f3:10:18:1c:f4:da:89:f8:c8: 32:e6:e0:b3:b7:24:6b:49:2d:c0:b4:3b:02:1b:20: 60:12:6f:ef:5a:32:94:af:d1:a5:37:34:e3:5b:8b: 6e:f7:79:53:13:0d:8b:7f:06:7b:eb:7f:1b:03:6d: 4f:04:2b:a7:2d:64:3c:25:37:de:d7:a5:2b:2e:06: 33:ff:d6:3e:49:b8:b1:f7:2d:d2:e8:e1:c4:c9:b5: dd:ce:65:c4:f5:a0:83:bf:5d:9f:70:61:93:45:74: 44:de:2d:00:96:5e:6d:0c:ff:34:89:e6:bb:31:45: 35:ea:6e:aa:02:22:71:ab:71:e6:f5:11:19:47:8e: 21:37:97:a5:78:91:70:e8:72:08:39:7b:d2:65:a5: c8:87:49:d8:78:91:e3:a3:2c:98:b4:32:38:24:d9: 1a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:D4:B6:AF:1A:C6:46:6A:68:CB:19:E0:AE:F6:3C:E5:B3:4E:05:27 X509v3 Authority Key Identifier: keyid:3A:8A:6A:2E:E5:DC:09:FC:AA:82:FF:01:8F:09:C1:AF:84:B4:11:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:f4:c7:b1:75:f0:d4:02:ce:99:ce:e2:be:5e:cc:1a:de:26: 96:4c:c7:72:aa:9c:97:3c:21:2a:dc:38:52:25:78:58:9c:52: 80:2c:77:c6:f4:37:be:70:15:d2:a6:58:3d:7b:63:cb:27:5c: 8a:ea:c6:6e:58:a6:62:5a:79:ae:5b:80:a1:69:6f:15:98:79: 46:81:1d:98:c6:f5:ba:b4:5b:52:4b:15:52:df:e1:5e:f9:31: 4e:f6:10:ec:be:57:5c:fa:7c:0c:98:21:a8:38:5e:14:2a:97: d8:be:2f:8d:3b:02:77:45:5c:1b:16:13:53:ca:09:94:43:60: 19:41:1c:03:28:82:39:41:b3:76:87:96:74:ff:83:41:4f:d2: d5:3f:0a:7d:90:27:60:f6:4b:29:6b:8c:13:31:0b:40:0b:9d: 05:bd:3b:a6:37:56:9a:35:65:87:a8:7b:3f:ff:64:9f:6b:ab: 11:81:ba:8a:51:10:b5:d9:53:f3:8e:c8:5d:a4:87:15:17:1d: 04:2a:bb:93:76:5c:95:5a:8d:bc:85:17:d7:b4:6a:dc:8e:c4: d4:1b:ca:1c:be:a5:d7:ec:77:28:84:25:5e:29:e1:e7:ea:b4: c5:71:83:fa:9f:1a:2c:e1:e2:fd:3f:23:c3:9b:5f:6d:f9:df: aa:67:79:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NDREQxMTAvBgNVBAUTKDNBOEE2QTJFRTVEQzA5RkNBQTgyRkYwMThGMDlDMUFG ODRCNDExOTYwHhcNMjUwNzAzMDI1OTA3WhcNMjUwNzEwMDI1OTA3WjAYMRYwFAYD VQQDEw02ODY1ZjFmYi1iMTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsnGVADqoaz41MsasiNzSmxv0Rnm2KtnDD6Ewq3q7rFSONb0ze/vxeKhebHh8 QQcRG+iSDBRFwLlzVoThlg8qPOhRDj0iiTPX9emDSguyV7Xpi5bNqZNaIS90NKYz lt3zEBgc9NqJ+Mgy5uCztyRrSS3AtDsCGyBgEm/vWjKUr9GlNzTjW4tu93lTEw2L fwZ7638bA21PBCunLWQ8JTfe16UrLgYz/9Y+Sbix9y3S6OHEybXdzmXE9aCDv12f cGGTRXRE3i0All5tDP80iea7MUU16m6qAiJxq3Hm9REZR44hN5eleJFw6HIIOXvS ZaXIh0nYeJHjoyyYtDI4JNka6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB7Utq8a xkZqaMsZ4K72POWzTgUnMB8GA1UdIwQYMBaAFDqKai7l3An8qoL/AY8Jwa+EtBGW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0NERC9GM0JCRTc2RTk2 M0QxMUVEQkUzRkQwMUFDNEY5QUUwMi9Pb3BxTHVYY0NmeXFndjhCanduQnI0UzBF WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09vcHFMdVhjQ2Z5cWd2OEJqd25CcjRTMEVaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0NERC9GM0JCRTc2RTk2M0QxMUVEQkUzRkQwMUFDNEY5QUUwMi9Pb3BxTHVYY0Nm eXFndjhCanduQnI0UzBFWlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB29MexdfDUAs6ZzuK+Xswa3iaWTMdyqpyXPCEq3DhSJXhYnFKALHfG 9De+cBXSplg9e2PLJ1yK6sZuWKZiWnmuW4ChaW8VmHlGgR2YxvW6tFtSSxVS3+Fe +TFO9hDsvldc+nwMmCGoOF4UKpfYvi+NOwJ3RVwbFhNTygmUQ2AZQRwDKII5QbN2 h5Z0/4NBT9LVPwp9kCdg9kspa4wTMQtAC50FvTumN1aaNWWHqHs//2Sfa6sRgbqK URC12VPzjshdpIcVFx0EKruTdlyVWo28hRfXtGrcjsTUG8ocvqXX7HcohCVeKeHn 6rTFcYP6nxos4eL9PyPDm19t+d+qZ3n3 -----END CERTIFICATE-----Generated at Fri Jul 4 08:20:55 2025 by rpki-client