$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.mft File: oPojd21UTId5RsrHxId0ZRmTfbg.mft (raw, json) Hash identifier: L//YfV+tJ0d8t17BulgXzozIaWn4+MkhCXeaRCyJMOY= Subject key identifier: 93:F8:39:0E:35:01:1B:64:BE:ED:91:53:97:D1:69:C2:86:2B:08:E7 Authority key identifier: A0:FA:23:77:6D:54:4C:87:79:46:CA:C7:C4:87:74:65:19:93:7D:B8 Certificate issuer: /CN=A91DD584/serialNumber=A0FA23776D544C877946CAC7C487746519937DB8 Certificate serial: 80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPojd21UTId5RsrHxId0ZRmTfbg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.mft Manifest number: 7D Signing time: Tue 01 Jul 2025 07:29:35 +0000 Manifest this update: Tue 01 Jul 2025 07:29:35 +0000 Manifest next update: Tue 08 Jul 2025 07:29:35 +0000 Files and hashes: 1: oPojd21UTId5RsrHxId0ZRmTfbg.crl (hash: kXzoiiHA6MZAtHsTEq4QOgRssvBOF6DtpGv9AR6RvxQ=) 2: B4C685B09CB111EFA6F8E627C4F9AE02.roa (hash: GuNo7IUV7Thwoh9B3txt8mnx9fY3g5B8M+APQokJxqg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.crl rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPojd21UTId5RsrHxId0ZRmTfbg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:29:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 128 (0x80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD584, serialNumber=A0FA23776D544C877946CAC7C487746519937DB8 Validity Not Before: Jul 1 07:29:35 2025 GMT Not After : Jul 8 07:29:35 2025 GMT Subject: CN=68638e5f-7a62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:bb:6a:2a:fb:cb:6b:8e:9b:fd:3e:ad:c4:7e: 7f:f5:dd:c0:d9:eb:c4:1c:88:31:91:42:ca:15:69: 7a:05:bf:fc:12:f2:b0:1f:c6:a6:17:d9:da:1a:0e: ca:5b:bf:08:4e:12:4a:40:0c:3f:b6:3e:17:69:fc: a3:6b:76:73:c5:d7:4a:7d:95:51:cd:27:ec:fe:a7: df:a5:d5:c4:48:9b:93:a1:ef:6e:4a:63:38:d6:13: 0e:cf:17:6a:b0:0a:76:bb:f1:55:57:91:19:0a:90: bd:77:3d:27:bb:82:12:97:48:d0:f8:60:2d:16:f6: 93:08:b6:ee:a4:ee:a0:87:ee:15:68:5b:2b:a1:a7: 26:3e:77:38:20:13:7c:fd:15:20:6c:91:c4:43:bf: 95:84:eb:46:51:85:2e:01:14:8f:a8:3f:26:7a:33: 11:12:91:46:fb:4c:94:55:1e:71:8e:16:51:54:36: 56:2c:90:5d:f2:16:4e:41:44:37:05:87:d1:69:9f: 92:85:31:7b:7d:c4:01:97:d7:67:4d:14:88:cc:00: 61:14:1c:35:e5:42:63:d5:ab:48:83:51:0b:5d:18: ef:11:39:82:f0:ba:fa:9e:f1:24:29:65:e3:8c:10: b6:ca:cb:9f:2e:7d:c2:1e:db:dc:f6:21:d9:eb:55: 80:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:F8:39:0E:35:01:1B:64:BE:ED:91:53:97:D1:69:C2:86:2B:08:E7 X509v3 Authority Key Identifier: keyid:A0:FA:23:77:6D:54:4C:87:79:46:CA:C7:C4:87:74:65:19:93:7D:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPojd21UTId5RsrHxId0ZRmTfbg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:5c:67:c5:9f:eb:af:e3:87:35:44:12:3c:03:52:af:a4:4a: 9b:65:e6:b5:b6:fe:59:bf:2f:7c:d6:8c:e9:f2:0d:89:60:79: 5c:13:c2:62:dc:1f:1c:ac:08:e6:81:7f:b1:30:bb:1f:fa:85: f7:22:1b:e6:70:c6:91:f6:87:e1:00:b9:65:03:6c:b0:58:a1: 5c:9e:d9:33:f9:a7:08:2e:70:3e:0e:75:7f:4d:3d:f8:c3:40: 87:2b:10:01:d7:85:5a:b8:45:f5:b4:23:96:16:69:ab:75:88: 9f:22:a9:a6:c2:07:cd:e9:2e:43:01:43:51:10:09:f9:91:40: 74:45:6a:4c:97:e6:31:1b:1c:7a:a0:56:3a:04:18:a2:67:de: c0:51:c8:bb:59:6e:1b:a5:99:65:13:c5:cf:93:04:6e:22:4a: a0:69:a8:68:d9:d8:b7:df:fc:7c:bc:b7:92:a7:cb:ed:24:d0: eb:74:94:a9:3f:51:3c:57:6b:64:50:38:b2:9b:ef:aa:44:c2: c1:cb:23:e6:ad:23:03:79:5c:51:0a:6e:bd:d1:64:0c:a0:50: 7e:79:25:fa:5a:d4:8a:18:b4:c0:03:02:bf:47:6d:27:99:51: 24:a5:df:7f:eb:a1:08:4b:a9:64:b7:67:6c:84:d6:79:cf:d1: ac:a7:0a:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ1ODQxMTAvBgNVBAUTKEEwRkEyMzc3NkQ1NDRDODc3OTQ2Q0FDN0M0ODc3NDY1 MTk5MzdEQjgwHhcNMjUwNzAxMDcyOTM1WhcNMjUwNzA4MDcyOTM1WjAYMRYwFAYD VQQDEw02ODYzOGU1Zi03YTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAobtqKvvLa46b/T6txH5/9d3A2evEHIgxkULKFWl6Bb/8EvKwH8amF9naGg7K W78IThJKQAw/tj4Xafyja3ZzxddKfZVRzSfs/qffpdXESJuToe9uSmM41hMOzxdq sAp2u/FVV5EZCpC9dz0nu4ISl0jQ+GAtFvaTCLbupO6gh+4VaFsroacmPnc4IBN8 /RUgbJHEQ7+VhOtGUYUuARSPqD8mejMREpFG+0yUVR5xjhZRVDZWLJBd8hZOQUQ3 BYfRaZ+ShTF7fcQBl9dnTRSIzABhFBw15UJj1atIg1ELXRjvETmC8Lr6nvEkKWXj jBC2ysufLn3CHtvc9iHZ61WAKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJP4OQ41 ARtkvu2RU5fRacKGKwjnMB8GA1UdIwQYMBaAFKD6I3dtVEyHeUbKx8SHdGUZk324 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDU4NC8zMjcwNzM4MjlD QjExMUVGQUVBMDBEMjVDNEY5QUUwMi9vUG9qZDIxVVRJZDVSc3JIeElkMFpSbVRm YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Qb2pkMjFVVElkNVJzckh4SWQwWlJtVGZiZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDU4NC8zMjcwNzM4MjlDQjExMUVGQUVBMDBEMjVDNEY5QUUwMi9vUG9qZDIxVVRJ ZDVSc3JIeElkMFpSbVRmYmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdXGfFn+uv44c1RBI8A1KvpEqbZea1tv5Zvy981ozp8g2JYHlcE8Ji 3B8crAjmgX+xMLsf+oX3IhvmcMaR9ofhALllA2ywWKFcntkz+acILnA+DnV/TT34 w0CHKxAB14VauEX1tCOWFmmrdYifIqmmwgfN6S5DAUNREAn5kUB0RWpMl+YxGxx6 oFY6BBiiZ97AUci7WW4bpZllE8XPkwRuIkqgaaho2di33/x8vLeSp8vtJNDrdJSp P1E8V2tkUDiym++qRMLByyPmrSMDeVxRCm690WQMoFB+eSX6WtSKGLTAAwK/R20n mVEkpd9/66EIS6lkt2dshNZ5z9Gspwr8 -----END CERTIFICATE-----Generated at Thu Jul 3 01:12:48 2025 by rpki-client