$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/AuOHDsPGHid3cW1wGLNMszV6AsQ.mft File: AuOHDsPGHid3cW1wGLNMszV6AsQ.mft (raw, json) Hash identifier: 8LiwJUzfdcX9RVStjDvFlfgasiYIo3i20VF/c3DthXc= Subject key identifier: 47:C9:96:A4:E2:59:F6:37:34:7C:FA:55:C8:28:38:C6:BD:DA:D9:BA Authority key identifier: 02:E3:87:0E:C3:C6:1E:27:77:71:6D:70:18:B3:4C:B3:35:7A:02:C4 Certificate issuer: /CN=A91F5B0D/serialNumber=02E3870EC3C61E2777716D7018B34CB3357A02C4 Certificate serial: 0689 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AuOHDsPGHid3cW1wGLNMszV6AsQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/AuOHDsPGHid3cW1wGLNMszV6AsQ.mft Manifest number: 0671 Signing time: Wed 02 Jul 2025 22:47:27 +0000 Manifest this update: Wed 02 Jul 2025 22:47:26 +0000 Manifest next update: Wed 09 Jul 2025 22:47:26 +0000 Files and hashes: 1: AuOHDsPGHid3cW1wGLNMszV6AsQ.crl (hash: OGu2HSFiW2tXALceIGHCxoL6EnGifijzrbIDqeZNKog=) 2: 78A3D4AE6AC011ED9C15EE6BC4F9AE02.roa (hash: abKS8DFxopy0SkfBdSlbneXvrNcWYhB7U9fJI/TJdHw=) 3: 79B5BD3A6AC011ED9C15EE6BC4F9AE02.roa (hash: OtQTBoAM9EmxMwAes+EtOCVgR6i+GiXjgoJuhPDzA28=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/AuOHDsPGHid3cW1wGLNMszV6AsQ.crl rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/AuOHDsPGHid3cW1wGLNMszV6AsQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AuOHDsPGHid3cW1wGLNMszV6AsQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:47:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1673 (0x689) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5B0D, serialNumber=02E3870EC3C61E2777716D7018B34CB3357A02C4 Validity Not Before: Jul 2 22:47:26 2025 GMT Not After : Jul 9 22:47:26 2025 GMT Subject: CN=6865b6ff-1182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6d:d1:02:06:15:92:8e:10:6e:5a:78:6e:0c: e2:12:ce:fe:07:03:36:ec:22:d9:31:83:d3:3f:a0: b5:79:99:39:59:93:ba:d3:70:b5:7d:10:0f:05:fe: c6:37:aa:14:29:fa:4b:6b:71:82:30:83:c2:53:b1: 65:94:21:7a:c8:78:18:8c:fa:93:a9:5d:e0:34:de: 07:a3:c4:4f:fa:46:b9:0f:b3:89:f2:d8:91:37:25: fb:aa:17:b0:c8:24:57:74:f8:db:5d:be:98:ff:24: 1a:bb:f5:8a:39:d6:23:a1:61:f9:96:6b:fb:87:0d: 58:e0:79:54:e0:1e:c1:33:d9:c6:f0:9d:93:e1:17: d2:33:de:0e:f7:af:39:3a:0f:96:24:d7:b1:24:f2: 8c:b7:f0:28:4c:f3:83:ec:b0:78:84:2f:c8:b7:d7: a5:fc:b2:fb:0e:4b:1b:d4:e5:ee:6e:2d:32:b7:22: 6a:da:c8:94:20:05:aa:3c:f7:3d:ef:f9:24:91:b4: bd:df:ac:b0:18:d3:d4:3e:e8:60:9e:89:a7:de:a9: b8:eb:d9:28:e9:94:ef:e3:06:c7:24:26:02:2f:42: 53:80:43:be:ee:a5:69:3d:7e:fa:22:66:e5:ab:a4: b4:14:6a:90:7a:ac:19:a8:42:7a:5c:3a:94:c1:bd: 23:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:C9:96:A4:E2:59:F6:37:34:7C:FA:55:C8:28:38:C6:BD:DA:D9:BA X509v3 Authority Key Identifier: keyid:02:E3:87:0E:C3:C6:1E:27:77:71:6D:70:18:B3:4C:B3:35:7A:02:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/AuOHDsPGHid3cW1wGLNMszV6AsQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AuOHDsPGHid3cW1wGLNMszV6AsQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/AuOHDsPGHid3cW1wGLNMszV6AsQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:71:e3:23:c8:36:48:c6:06:db:41:56:dc:b8:ec:18:39:4a: 68:3a:71:33:40:a4:73:e9:72:3f:81:24:1c:24:93:59:a5:92: d6:34:88:72:52:25:5b:69:64:fa:ec:3c:56:80:3c:c3:8c:0f: ee:c8:9d:90:ea:1f:1a:12:82:7a:e6:20:e4:5a:df:93:f2:0d: 13:21:e4:8a:1b:dc:e8:6a:d7:af:d9:05:98:c4:5d:9e:fe:b6: 6f:e0:bc:14:f8:b2:43:3d:44:8c:cf:2a:68:9d:9c:b7:21:9a: 34:b5:47:31:e6:e4:d7:ff:4c:e6:33:39:fa:12:b7:58:bf:61: 54:cb:b3:4c:f4:a4:df:bb:0f:40:44:0b:5c:75:79:75:df:2e: 3d:3b:8a:7c:7b:ec:f7:92:02:90:87:98:51:f0:75:ae:56:c7: 3a:fc:91:c3:77:28:eb:c7:26:73:45:ef:5a:bb:f4:db:05:5a: 50:fb:02:65:55:78:90:3b:c7:1b:57:f7:ad:b7:ab:59:42:61: 54:cf:5e:ba:e0:3f:19:71:34:3f:75:3d:d3:90:ba:0c:ca:b1: 5b:c1:24:50:6d:6e:6b:95:5c:27:64:7f:8e:e0:24:37:8c:21: 14:f1:01:9e:e8:fa:a4:42:b8:de:5d:e4:1a:e0:b3:d2:67:e3: 79:e4:af:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjVCMEQxMTAvBgNVBAUTKDAyRTM4NzBFQzNDNjFFMjc3NzcxNkQ3MDE4QjM0Q0Iz MzU3QTAyQzQwHhcNMjUwNzAyMjI0NzI2WhcNMjUwNzA5MjI0NzI2WjAYMRYwFAYD VQQDEw02ODY1YjZmZi0xMTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArG3RAgYVko4Qblp4bgziEs7+BwM27CLZMYPTP6C1eZk5WZO603C1fRAPBf7G N6oUKfpLa3GCMIPCU7FllCF6yHgYjPqTqV3gNN4Ho8RP+ka5D7OJ8tiRNyX7qhew yCRXdPjbXb6Y/yQau/WKOdYjoWH5lmv7hw1Y4HlU4B7BM9nG8J2T4RfSM94O9685 Og+WJNexJPKMt/AoTPOD7LB4hC/It9el/LL7Dksb1OXubi0ytyJq2siUIAWqPPc9 7/kkkbS936ywGNPUPuhgnomn3qm469ko6ZTv4wbHJCYCL0JTgEO+7qVpPX76Imbl q6S0FGqQeqwZqEJ6XDqUwb0jcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEfJlqTi WfY3NHz6VcgoOMa92tm6MB8GA1UdIwQYMBaAFALjhw7Dxh4nd3FtcBizTLM1egLE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNUIwRC84MzQwN0QyMDg4 QjUxMUVCOURBRUQ3MjJDNEY5QUUwMi9BdU9IRHNQR0hpZDNjVzF3R0xOTXN6VjZB c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F1T0hEc1BHSGlkM2NXMXdHTE5Nc3pWNkFzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NUIwRC84MzQwN0QyMDg4QjUxMUVCOURBRUQ3MjJDNEY5QUUwMi9BdU9IRHNQR0hp ZDNjVzF3R0xOTXN6VjZBc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6ceMjyDZIxgbbQVbcuOwYOUpoOnEzQKRz6XI/gSQcJJNZpZLWNIhy UiVbaWT67DxWgDzDjA/uyJ2Q6h8aEoJ65iDkWt+T8g0TIeSKG9zoatev2QWYxF2e /rZv4LwU+LJDPUSMzyponZy3IZo0tUcx5uTX/0zmMzn6ErdYv2FUy7NM9KTfuw9A RAtcdXl13y49O4p8e+z3kgKQh5hR8HWuVsc6/JHDdyjrxyZzRe9au/TbBVpQ+wJl VXiQO8cbV/ett6tZQmFUz1664D8ZcTQ/dT3TkLoMyrFbwSRQbW5rlVwnZH+O4CQ3 jCEU8QGe6PqkQrjeXeQa4LPSZ+N55K/W -----END CERTIFICATE-----Generated at Fri Jul 4 18:26:56 2025 by rpki-client