$ rpki-client -vvf rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft File: oVZKa9a5Cg-he_V9i-rJ4pJZves.mft (raw, json) Hash identifier: OjtIqs2fdnYPaq7+v5wc1qOld/oVZMiQCp8DHZ1XUSI= Subject key identifier: 2A:5F:C7:38:F4:F2:B0:0C:60:66:04:5E:C9:4C:87:4D:27:E1:4C:68 Authority key identifier: A1:56:4A:6B:D6:B9:0A:0F:A1:7B:F5:7D:8B:EA:C9:E2:92:59:BD:EB Certificate issuer: /CN=A91F61DA/serialNumber=A1564A6BD6B90A0FA17BF57D8BEAC9E29259BDEB Certificate serial: 0CB8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oVZKa9a5Cg-he_V9i-rJ4pJZves.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft Manifest number: 0CAF Signing time: Fri 04 Jul 2025 18:28:38 +0000 Manifest this update: Fri 04 Jul 2025 18:28:37 +0000 Manifest next update: Fri 11 Jul 2025 18:28:37 +0000 Files and hashes: 1: oVZKa9a5Cg-he_V9i-rJ4pJZves.crl (hash: 6TqGPheHTudYJLyxFOtJ+rdnrLoke/hEAXvWABVHiqk=) 2: EA18D5547D8F11EC8E894A1DC4F9AE02.roa (hash: Anh2GximFPk7REReNBXULcTH3P6lLG5IbasX9kKM4Fs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.crl rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oVZKa9a5Cg-he_V9i-rJ4pJZves.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3256 (0xcb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F61DA, serialNumber=A1564A6BD6B90A0FA17BF57D8BEAC9E29259BDEB Validity Not Before: Jul 4 18:28:37 2025 GMT Not After : Jul 11 18:28:37 2025 GMT Subject: CN=68681d56-4687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:8f:ef:62:48:c8:b5:96:2b:77:9a:bd:a5:33: da:08:dc:f3:a9:d0:89:17:47:e9:31:63:10:74:bd: 04:74:80:da:70:40:4b:a1:be:a1:c1:f9:15:d8:4c: c2:d3:d4:0d:00:1d:8f:64:cb:ef:80:ca:22:93:ad: ed:b6:c3:66:02:eb:3d:6a:04:f1:92:30:89:d2:c9: 7f:02:bb:36:c7:cb:e6:fc:71:ef:92:ac:b6:90:6c: 7c:d3:5b:96:3a:82:4f:7e:92:1d:e9:b9:0c:f4:71: 71:bf:ce:7d:51:93:d3:f9:a4:c2:09:ff:0b:51:80: c4:a5:bb:db:a7:27:88:e5:00:12:fb:a5:77:a7:4f: 85:79:12:8d:b5:5f:39:8e:20:c3:1a:55:d9:90:ca: b0:f4:41:c2:b0:3c:34:70:18:7c:20:aa:92:28:40: ab:79:ad:7d:5b:11:ce:3b:c4:10:76:90:32:a2:6c: f3:a8:c2:98:b8:2f:2a:e5:95:bb:8d:56:78:15:44: 5d:dc:7e:b2:47:2d:3a:64:1b:d2:12:48:5b:a3:a8: 92:72:d8:b8:f0:b0:93:25:7f:13:f2:5e:d7:a3:90: 7d:98:da:fb:4d:0b:b9:23:cf:73:0d:22:5b:39:ad: 50:b6:01:4b:93:b3:4a:b6:d9:c2:c5:e9:f7:c5:0f: e4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:5F:C7:38:F4:F2:B0:0C:60:66:04:5E:C9:4C:87:4D:27:E1:4C:68 X509v3 Authority Key Identifier: keyid:A1:56:4A:6B:D6:B9:0A:0F:A1:7B:F5:7D:8B:EA:C9:E2:92:59:BD:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oVZKa9a5Cg-he_V9i-rJ4pJZves.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:0b:37:d1:ec:c5:f4:af:c7:75:d0:87:80:43:27:90:85:a6: 0c:e4:73:e4:13:49:1d:83:6f:33:62:df:da:c2:31:d7:cc:bc: b0:60:e6:96:08:23:3b:dc:e1:08:23:bf:a7:05:64:1d:cf:4d: 2b:96:dd:a6:56:c1:1a:6f:51:8f:4d:11:5d:8d:ba:17:e0:9e: 67:50:dd:c5:00:67:df:5b:9e:5a:c6:8b:6b:23:e4:2a:59:fd: 05:46:d8:71:7a:c4:51:47:ff:e2:fa:34:6d:f6:7a:86:98:ee: 75:72:b3:4e:a0:c6:e0:51:27:eb:b5:6b:75:a5:e3:7e:35:f5: c5:46:59:5c:6b:a0:a5:68:47:ef:9a:5d:7d:94:9f:a1:b2:f4: 70:b9:13:6c:74:42:3d:d4:97:bf:5c:84:6d:68:03:79:68:4c: 82:f6:d8:08:8b:55:79:e4:ed:d6:60:a5:09:ce:ce:a6:61:c4: e3:66:08:9a:5d:26:b9:c6:56:5b:c1:22:d7:0b:ed:79:5a:77: 8b:7a:6c:b3:13:0a:7b:bb:57:31:ce:a1:90:e9:c5:5b:3b:30: 35:33:07:c1:a0:64:8f:3e:39:6e:17:cc:cc:94:6f:08:2b:be: 18:b8:2d:51:fd:7b:fc:17:93:11:cf:d0:fd:b9:d6:be:10:87: 5b:a0:fa:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjYxREExMTAvBgNVBAUTKEExNTY0QTZCRDZCOTBBMEZBMTdCRjU3RDhCRUFDOUUy OTI1OUJERUIwHhcNMjUwNzA0MTgyODM3WhcNMjUwNzExMTgyODM3WjAYMRYwFAYD VQQDEw02ODY4MWQ1Ni00Njg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Y/vYkjItZYrd5q9pTPaCNzzqdCJF0fpMWMQdL0EdIDacEBLob6hwfkV2EzC 09QNAB2PZMvvgMoik63ttsNmAus9agTxkjCJ0sl/Ars2x8vm/HHvkqy2kGx801uW OoJPfpId6bkM9HFxv859UZPT+aTCCf8LUYDEpbvbpyeI5QAS+6V3p0+FeRKNtV85 jiDDGlXZkMqw9EHCsDw0cBh8IKqSKECrea19WxHOO8QQdpAyomzzqMKYuC8q5ZW7 jVZ4FURd3H6yRy06ZBvSEkhbo6iScti48LCTJX8T8l7Xo5B9mNr7TQu5I89zDSJb Oa1QtgFLk7NKttnCxen3xQ/kpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCpfxzj0 8rAMYGYEXslMh00n4UxoMB8GA1UdIwQYMBaAFKFWSmvWuQoPoXv1fYvqyeKSWb3r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjFEQS8xN0M4MUZEMEY0 MUUxMUU5QTgzNDNBNzRDNEY5QUUwMi9vVlpLYTlhNUNnLWhlX1Y5aS1ySjRwSlp2 ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29WWkthOWE1Q2ctaGVfVjlpLXJKNHBKWnZlcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjFEQS8xN0M4MUZEMEY0MUUxMUU5QTgzNDNBNzRDNEY5QUUwMi9vVlpLYTlhNUNn LWhlX1Y5aS1ySjRwSlp2ZXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwCzfR7MX0r8d10IeAQyeQhaYM5HPkE0kdg28zYt/awjHXzLywYOaW CCM73OEII7+nBWQdz00rlt2mVsEab1GPTRFdjboX4J5nUN3FAGffW55axotrI+Qq Wf0FRthxesRRR//i+jRt9nqGmO51crNOoMbgUSfrtWt1peN+NfXFRllca6ClaEfv ml19lJ+hsvRwuRNsdEI91Je/XIRtaAN5aEyC9tgIi1V55O3WYKUJzs6mYcTjZgia XSa5xlZbwSLXC+15WneLemyzEwp7u1cxzqGQ6cVbOzA1MwfBoGSPPjluF8zMlG8I K74YuC1R/Xv8F5MRz9D9uda+EIdboPqk -----END CERTIFICATE-----Generated at Sat Jul 5 01:29:47 2025 by rpki-client