$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft File: oE50OtMfT4PwncXS9-9Pq-HvaHs.mft (raw, json) Hash identifier: ci62s5nl773N70ApH5JTZrRgnV2CVcmcMR72VlD5KqM= Subject key identifier: EB:4F:A3:AD:56:3E:86:E7:F3:21:54:BF:BB:9D:73:8D:48:9D:2B:24 Authority key identifier: A0:4E:74:3A:D3:1F:4F:83:F0:9D:C5:D2:F7:EF:4F:AB:E1:EF:68:7B Certificate issuer: /CN=A91E0EF8/serialNumber=A04E743AD31F4F83F09DC5D2F7EF4FABE1EF687B Certificate serial: 05D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft Manifest number: 05BF Signing time: Wed 02 Jul 2025 23:25:50 +0000 Manifest this update: Wed 02 Jul 2025 23:25:50 +0000 Manifest next update: Wed 09 Jul 2025 23:25:50 +0000 Files and hashes: 1: oE50OtMfT4PwncXS9-9Pq-HvaHs.crl (hash: fEqAUjsLs69ym1hWcwEzKJWLxV8zaARbnYM/jthbmes=) 2: 2F581CEA33F311EEABFC7410C4F9AE02.roa (hash: 0O6TcMZ7cyiTOQX6a4lo9IW8lZvmQl+TflI94IQBsXg=) 3: 180DF9BE93C711EDB3D8A867C4F9AE02.roa (hash: QypSaOJWNZPEYJNaUp+tgMHOgSp9cYSc6zUXtXVCQpg=) 4: 1767CE4A93C711EDB3D8A867C4F9AE02.roa (hash: 5EMVY+mr8MeziaFmHYoIUZ8HY+OW0Ux+vJdDqNYyM+A=) 5: 16A4DFE893C711EDB3D8A867C4F9AE02.roa (hash: BMRoArOkK6XKfXiCgVXjRFI7Ts9ZVPZguMrIduSzckU=) 6: 1614034C93C711EDB3D8A867C4F9AE02.roa (hash: o0PMmxNvCxGi4Ma1i/XdkAnkuomNueTn7pJoxsJKzxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.crl rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:25:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1491 (0x5d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0EF8, serialNumber=A04E743AD31F4F83F09DC5D2F7EF4FABE1EF687B Validity Not Before: Jul 2 23:25:50 2025 GMT Not After : Jul 9 23:25:50 2025 GMT Subject: CN=6865bffe-b8d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:90:7a:57:cb:74:cc:c1:5d:99:ec:e1:ed:12: cf:21:d5:c8:4e:03:69:35:19:94:08:95:19:7e:89: 61:59:e4:28:a1:e5:a5:b7:b0:4a:27:37:ae:08:54: 99:3b:f0:c3:26:6b:03:6a:e5:2f:db:3e:78:f7:2c: bc:6d:e2:3e:c9:2e:12:ee:2c:61:34:77:c2:44:e1: 78:c1:96:31:5a:bb:55:58:d3:de:c3:6e:d1:22:50: 7a:e2:0c:a6:ec:eb:18:08:30:b1:ef:8a:d1:9b:1a: f4:09:ca:67:25:12:a6:c9:af:da:08:e0:10:4c:35: 4e:d1:71:e3:b0:6b:56:28:1c:4b:02:a2:27:4e:d3: e3:a4:11:0b:f7:3a:34:ac:08:3b:d4:a6:96:3e:6c: 41:95:f7:6a:ee:76:5f:93:99:8a:18:29:e1:28:1e: ed:c9:2e:14:8e:49:02:7c:53:53:0b:9c:f0:9c:ad: 4a:c5:66:4c:7f:a3:1e:23:99:cf:bb:1d:65:0b:86: 3a:17:96:9f:10:65:86:31:ea:e9:a0:85:10:43:8b: ec:25:44:6b:c9:01:94:df:a6:55:87:e8:02:e1:28: 24:03:89:24:f1:ff:32:fc:ae:b1:8d:b2:6c:57:4c: 22:26:7b:e7:e9:31:ce:2b:21:a4:22:e1:21:b3:45: 83:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:4F:A3:AD:56:3E:86:E7:F3:21:54:BF:BB:9D:73:8D:48:9D:2B:24 X509v3 Authority Key Identifier: keyid:A0:4E:74:3A:D3:1F:4F:83:F0:9D:C5:D2:F7:EF:4F:AB:E1:EF:68:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:c3:fe:d6:b6:a2:1f:39:a9:6d:46:71:db:11:90:cc:a8:38: eb:fd:94:7a:43:4b:43:ae:39:ff:f6:07:c5:05:c9:ce:be:6c: f8:15:dc:6d:9f:2a:bb:c2:d7:e9:4e:d9:0b:1e:33:8c:09:5c: ce:4b:31:ed:c3:62:7d:c4:0c:15:db:0c:30:17:c3:17:85:22: 3e:4e:93:c2:96:ea:b4:07:3f:1e:32:b2:17:84:c3:53:e8:80: 91:d2:b8:e4:bd:0d:2f:4b:8c:ed:60:12:4a:ed:7f:12:bc:1c: e5:8d:26:fd:04:ac:ad:1f:73:e3:27:29:40:fa:5e:bc:19:14: cb:39:be:2f:16:e2:cc:1b:b7:cf:11:54:5f:25:4b:4e:9f:29: 67:82:bc:cd:52:e2:f4:ad:03:12:85:13:ee:e4:65:e8:aa:cd: 9b:55:fb:a5:b7:d5:e6:2c:04:77:e8:7d:69:69:74:6e:cd:a3: 91:8d:c4:63:1b:5a:c6:f6:8f:f0:a8:04:7d:4f:2d:96:8a:16: f9:09:e1:3c:3c:c1:32:36:75:f1:99:41:38:10:3a:e0:18:02: 5c:47:17:87:44:03:fd:89:04:05:da:a1:20:a5:37:4c:7f:95: c8:c7:33:f5:c3:96:6e:09:78:6c:cd:df:62:b9:1a:15:b2:0c: df:c0:9e:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBFRjgxMTAvBgNVBAUTKEEwNEU3NDNBRDMxRjRGODNGMDlEQzVEMkY3RUY0RkFC RTFFRjY4N0IwHhcNMjUwNzAyMjMyNTUwWhcNMjUwNzA5MjMyNTUwWjAYMRYwFAYD VQQDEw02ODY1YmZmZS1iOGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAypB6V8t0zMFdmezh7RLPIdXITgNpNRmUCJUZfolhWeQooeWlt7BKJzeuCFSZ O/DDJmsDauUv2z549yy8beI+yS4S7ixhNHfCROF4wZYxWrtVWNPew27RIlB64gym 7OsYCDCx74rRmxr0CcpnJRKmya/aCOAQTDVO0XHjsGtWKBxLAqInTtPjpBEL9zo0 rAg71KaWPmxBlfdq7nZfk5mKGCnhKB7tyS4UjkkCfFNTC5zwnK1KxWZMf6MeI5nP ux1lC4Y6F5afEGWGMerpoIUQQ4vsJURryQGU36ZVh+gC4SgkA4kk8f8y/K6xjbJs V0wiJnvn6THOKyGkIuEhs0WDDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOtPo61W Pobn8yFUv7udc41InSskMB8GA1UdIwQYMBaAFKBOdDrTH0+D8J3F0vfvT6vh72h7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEVGOC9DOTM4RDEwNkNC NTQxMUVCQTNEMzZDNUJDNEY5QUUwMi9vRTUwT3RNZlQ0UHduY1hTOS05UHEtSHZh SHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29FNTBPdE1mVDRQd25jWFM5LTlQcS1IdmFIcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEVGOC9DOTM4RDEwNkNCNTQxMUVCQTNEMzZDNUJDNEY5QUUwMi9vRTUwT3RNZlQ0 UHduY1hTOS05UHEtSHZhSHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIw/7WtqIfOaltRnHbEZDMqDjr/ZR6Q0tDrjn/9gfFBcnOvmz4Fdxt nyq7wtfpTtkLHjOMCVzOSzHtw2J9xAwV2wwwF8MXhSI+TpPCluq0Bz8eMrIXhMNT 6ICR0rjkvQ0vS4ztYBJK7X8SvBzljSb9BKytH3PjJylA+l68GRTLOb4vFuLMG7fP EVRfJUtOnylngrzNUuL0rQMShRPu5GXoqs2bVfult9XmLAR36H1paXRuzaORjcRj G1rG9o/wqAR9Ty2Wihb5CeE8PMEyNnXxmUE4EDrgGAJcRxeHRAP9iQQF2qEgpTdM f5XIxzP1w5ZuCXhszd9iuRoVsgzfwJ5j -----END CERTIFICATE-----Generated at Thu Jul 3 16:59:02 2025 by rpki-client