$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft File: oYXAxXSCnF_NcURUSeU0za70E5Y.mft (raw, json) Hash identifier: BbOOoaVDxKr0Jx6xMcRqXT69LQIVmcnwiRk//tTJATw= Subject key identifier: FC:80:03:91:FD:19:D5:A7:3A:60:5C:7B:F7:34:0B:6C:C5:C7:E4:27 Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96 Certificate issuer: /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396 Certificate serial: 032D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft Manifest number: 02EB Signing time: Thu 03 Jul 2025 01:52:07 +0000 Manifest this update: Thu 03 Jul 2025 01:52:06 +0000 Manifest next update: Thu 10 Jul 2025 01:52:06 +0000 Files and hashes: 1: oYXAxXSCnF_NcURUSeU0za70E5Y.crl (hash: SZ3H4CcDdk/ObOwCEhIxkxkGjgfRyN5XFXA5yrLSKT8=) 2: 83F4528044EC11F0BA9B197EC4F9AE02.roa (hash: +BmgdPuzoWdNsTrE6vC9fAaO9CFYy8JAww7JP01Li30=) 3: 84C2EDA244EC11F0BA9B197EC4F9AE02.roa (hash: lYT+fiN+QsiOtOHi8s7yipjbvt5PmRmSGAx3uVcXNUM=) 4: AF5AD402224711F0B0CDB07DC4F9AE02.roa (hash: Rd9F0rhnVp5Iq5KfDW7kM6BcAp4B6e5cA4C+HDxhcWk=) 5: 2D153A4648B711F0B6D4592EC4F9AE02.roa (hash: 2idrkUiE1glbbdM/t25K//0O3gKsqe5+guvE9Yfyva4=) 6: 1C8BEF04E24511EF96354978C4F9AE02.roa (hash: emdOoNHeNPd2I/1TXnCpTax46mU70PVq1qcXN4YL9To=) 7: 97F3D14844EC11F09F53687EC4F9AE02.roa (hash: F40vlGc0sA6DCQ0+vg7YI6wYbLqtB8Yrjl6oKgiGs2c=) 8: A3571FDE47EC11EFB51C3666C4F9AE02.roa (hash: oa1DI9U4A4Nx6Hk3PHDp1mXpYhzRJyPS5jmqfG2Om0Y=) 9: B111111288B411EF80480527C4F9AE02.roa (hash: qLIDrHWS/i6A8fwW8H8k+xkymy4Akbi61wq5s13V2Ww=) 10: B137DB2670EF11EFBEF21935C4F9AE02.roa (hash: Q8Gm3CZSt+4xJ/j9FkVaNYUYcHQfhVaTrwvAU8Wt+0Q=) 11: D4E4D8FCA7C311EFB1AAAD55C4F9AE02.roa (hash: FqQJp4PO4N8z2PXz6LINHD4lWrJJd8cewpLii4ob3bo=) 12: CD90ED68057211F0B6E2301BC4F9AE02.roa (hash: DFlr8Tn/hG96eJuSS2hv0WiijRfajfy1iDPzEugU79I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 813 (0x32d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4E32, serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396 Validity Not Before: Jul 3 01:52:06 2025 GMT Not After : Jul 10 01:52:06 2025 GMT Subject: CN=6865e247-ec3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:71:bd:40:b0:96:35:46:50:8f:51:36:92:39: e3:b9:6d:b2:dc:68:0d:d9:39:55:45:0c:ae:f3:fa: 23:c5:9a:75:e6:a1:52:3a:f2:7a:ec:66:91:58:cc: 61:1b:28:e7:1e:9d:c7:02:c2:24:ae:3b:62:17:56: 0e:5a:d5:b8:1a:72:08:82:4e:fe:3d:22:8e:1c:52: 71:6f:77:66:f2:04:db:60:5c:66:b6:52:ee:ad:cf: 92:2a:2b:b2:41:ee:3f:ac:12:ff:66:2e:49:7f:f8: 0b:f2:2c:89:5c:fe:a6:93:d3:b5:1b:4a:e7:bb:4b: de:b1:d0:ef:ee:29:57:7c:c1:06:fb:ac:46:b3:ed: 2c:8d:85:c5:55:69:b4:86:26:69:09:b4:52:ca:d1: 72:bd:d0:55:91:3e:6f:cb:5b:c9:18:73:62:4e:64: a8:69:fd:be:a8:26:de:61:6d:bd:2e:75:c5:5d:85: 72:f8:da:37:2e:8a:e2:c9:fb:24:36:6c:26:c2:b3: 8e:a7:cf:17:d9:d1:6d:79:a4:21:07:a2:aa:5d:37: 6e:0f:8f:09:27:25:08:b4:1d:32:50:43:a5:8a:62: 36:e6:66:fd:9a:7c:6f:78:9a:cd:ca:30:d0:fb:c2: 2b:6d:b4:37:9c:0c:37:c2:39:44:19:c8:4d:a7:a5: 62:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:80:03:91:FD:19:D5:A7:3A:60:5C:7B:F7:34:0B:6C:C5:C7:E4:27 X509v3 Authority Key Identifier: keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:60:54:2b:ea:2d:0c:07:bd:c1:49:40:dd:d3:12:ba:ce:1a: d3:11:33:d2:9b:68:8c:17:b3:ed:67:4b:6b:09:aa:16:3a:7a: a1:45:d6:e2:53:18:f2:14:38:74:31:98:0d:62:90:b7:55:d1: 8f:62:9e:8a:af:5e:58:64:29:0e:ec:b2:94:a7:83:12:6c:ee: db:6a:bc:39:9d:ef:30:3c:96:0e:50:54:80:b2:5d:26:8d:87: de:dd:80:38:d2:99:b9:41:e5:71:a5:cb:84:c8:cb:ef:ec:15: ce:c6:bf:71:11:b5:25:16:af:c1:2a:48:b3:38:a3:6d:57:2c: d5:45:10:b0:7e:fc:29:b5:04:85:7a:fa:0e:8f:da:5a:50:e3: ea:9d:56:6d:ec:c4:e9:f2:7c:20:4c:38:ad:5f:d8:11:c3:bc: 76:d4:ce:a3:93:b4:69:15:88:f0:bb:1e:35:84:1e:66:f1:8d: b7:65:be:1e:2c:2a:8a:70:eb:25:9a:f4:26:ce:ac:c7:82:15: c9:6f:77:2d:48:70:97:f3:38:c2:1b:9a:96:f5:e3:10:2c:fb: 57:df:c2:44:66:8f:fb:9f:e7:1e:77:a6:7d:50:db:02:c7:cb: 9e:c5:8e:bf:69:74:df:d0:a4:b3:b2:b2:17:2d:6d:db:93:73: d2:6e:b4:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAy0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFMzIxMTAvBgNVBAUTKEExODVDMEM1NzQ4MjlDNUZDRDcxNDQ1NDQ5RTUzNENE QUVGNDEzOTYwHhcNMjUwNzAzMDE1MjA2WhcNMjUwNzEwMDE1MjA2WjAYMRYwFAYD VQQDEw02ODY1ZTI0Ny1lYzNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApnG9QLCWNUZQj1E2kjnjuW2y3GgN2TlVRQyu8/ojxZp15qFSOvJ67GaRWMxh GyjnHp3HAsIkrjtiF1YOWtW4GnIIgk7+PSKOHFJxb3dm8gTbYFxmtlLurc+SKiuy Qe4/rBL/Zi5Jf/gL8iyJXP6mk9O1G0rnu0vesdDv7ilXfMEG+6xGs+0sjYXFVWm0 hiZpCbRSytFyvdBVkT5vy1vJGHNiTmSoaf2+qCbeYW29LnXFXYVy+No3Loriyfsk NmwmwrOOp88X2dFteaQhB6KqXTduD48JJyUItB0yUEOlimI25mb9mnxveJrNyjDQ +8IrbbQ3nAw3wjlEGchNp6Vi4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPyAA5H9 GdWnOmBce/c0C2zFx+QnMB8GA1UdIwQYMBaAFKGFwMV0gpxfzXFEVEnlNM2u9BOW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEUzMi83MjA5NTlGQzAx QzAxMUVEQkQ3QzZGNThDNEY5QUUwMi9vWVhBeFhTQ25GX05jVVJVU2VVMHphNzBF NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29ZWEF4WFNDbkZfTmNVUlVTZVUwemE3MEU1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEUzMi83MjA5NTlGQzAxQzAxMUVEQkQ3QzZGNThDNEY5QUUwMi9vWVhBeFhTQ25G X05jVVJVU2VVMHphNzBFNVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuYFQr6i0MB73BSUDd0xK6zhrTETPSm2iMF7PtZ0trCaoWOnqhRdbi UxjyFDh0MZgNYpC3VdGPYp6Kr15YZCkO7LKUp4MSbO7barw5ne8wPJYOUFSAsl0m jYfe3YA40pm5QeVxpcuEyMvv7BXOxr9xEbUlFq/BKkizOKNtVyzVRRCwfvwptQSF evoOj9paUOPqnVZt7MTp8nwgTDitX9gRw7x21M6jk7RpFYjwux41hB5m8Y23Zb4e LCqKcOslmvQmzqzHghXJb3ctSHCX8zjCG5qW9eMQLPtX38JEZo/7n+ced6Z9UNsC x8uexY6/aXTf0KSzsrIXLW3bk3PSbrSS -----END CERTIFICATE-----Generated at Thu Jul 3 06:10:07 2025 by rpki-client