$ rpki-client -vvf rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft File: OVr1eRN2M5r53uVtah4TtHq1xGY.mft (raw, json) Hash identifier: hUE/9MYm4cGtQ+G1ZCYbeEfPKV5PafXophpe5hGt6q0= Subject key identifier: 09:C1:2C:16:88:20:6B:02:4C:AB:AE:92:9C:80:F9:0F:FD:F1:64:14 Authority key identifier: 39:5A:F5:79:13:76:33:9A:F9:DE:E5:6D:6A:1E:13:B4:7A:B5:C4:66 Certificate issuer: /CN=A91316B0/serialNumber=395AF5791376339AF9DEE56D6A1E13B47AB5C466 Certificate serial: EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVr1eRN2M5r53uVtah4TtHq1xGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft Manifest number: 0547 Signing time: Sat 19 Jul 2025 00:38:10 +0000 Manifest this update: Sat 19 Jul 2025 00:38:09 +0000 Manifest next update: Sat 26 Jul 2025 00:38:09 +0000 Files and hashes: 1: OVr1eRN2M5r53uVtah4TtHq1xGY.crl (hash: XrF4LGhPnc0/VPc1YJRoe69dmcd5ExzhQshSov4LTqc=) 2: C6EFDF5C0C3311EFB37BD03FC4F9AE02.roa (hash: +baf+FBOvTO91WyGSxfLgP4c75Re+v5ehq0gcaeZq1U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.crl rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVr1eRN2M5r53uVtah4TtHq1xGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:38:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91316B0, serialNumber=395AF5791376339AF9DEE56D6A1E13B47AB5C466 Validity Not Before: Jul 19 00:38:09 2025 GMT Not After : Jul 26 00:38:09 2025 GMT Subject: CN=687ae8f1-fb63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:99:cb:e2:4d:10:16:4d:e3:14:83:e1:65:1b: a6:a4:25:1f:2f:ef:6b:57:c8:74:89:3d:66:83:2f: ae:41:0b:a8:74:5d:fb:fa:35:e9:25:c7:b6:a9:be: 5f:78:a4:ce:07:3f:16:bb:ae:d1:e4:3a:2d:0c:f9: b4:62:83:87:05:e3:59:44:f2:ad:5e:44:4f:97:ec: d1:f8:4c:92:1a:a2:ca:2a:e1:b6:8c:1b:f9:b6:48: 6b:50:57:0c:fe:cb:60:42:c2:a2:25:90:bf:ad:21: 85:6e:18:e6:6b:b6:29:b4:5b:ad:2e:c2:fc:78:a6: e9:7e:7f:40:d3:43:a4:47:0b:39:62:6b:a6:44:c6: 97:f8:57:56:23:bf:49:87:e6:b7:d6:cf:c4:87:dd: e8:b4:f4:11:34:a7:4d:12:31:4c:40:61:a0:c7:d7: b7:82:bc:49:7f:e2:61:bd:36:05:a9:d3:48:b9:4a: 9a:4f:62:86:42:c9:f5:07:bc:19:af:4b:f0:af:b1: 17:ff:8f:9a:98:75:d5:17:eb:88:69:70:e2:98:33: 37:90:44:67:52:82:91:67:90:af:cb:aa:82:38:2e: 5c:69:e1:47:b5:ab:0d:09:c0:ca:92:d6:6c:ab:78: f2:7a:19:c5:44:95:c9:f3:64:05:b5:7e:91:72:ef: ab:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C1:2C:16:88:20:6B:02:4C:AB:AE:92:9C:80:F9:0F:FD:F1:64:14 X509v3 Authority Key Identifier: keyid:39:5A:F5:79:13:76:33:9A:F9:DE:E5:6D:6A:1E:13:B4:7A:B5:C4:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVr1eRN2M5r53uVtah4TtHq1xGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:f7:f9:76:db:22:d1:a4:be:9a:d1:0c:7e:04:23:31:22:dd: 5d:6b:0a:d3:4d:e6:d8:30:fb:4f:94:9b:01:9f:35:a6:81:b3: dd:a0:7b:ef:70:4f:73:38:3c:f9:08:0f:99:22:1b:27:6e:9c: 6b:1b:78:3b:4c:8e:38:20:ee:97:07:91:7e:66:bf:a7:0e:cb: d7:00:3d:a6:7d:97:ce:ae:7c:68:0f:a1:4c:ae:0f:b8:9e:8d: 3e:af:c1:d6:52:d0:1f:d6:3b:77:45:56:08:10:01:12:7d:3c: 46:e4:ea:3e:14:72:ae:ae:0e:5d:0d:43:68:ae:9f:e1:a8:cc: fd:72:fd:1c:e5:57:0a:2c:6d:07:86:e2:6c:76:41:0c:9c:f1: ce:eb:2c:7e:4b:04:1b:1d:5b:60:5e:28:62:14:a7:8b:0c:74: 94:a8:fc:39:0a:ff:ed:29:fc:fe:0d:be:fe:92:8a:40:ca:13: 29:8b:3f:2f:96:a4:b6:f6:f7:f1:a0:f0:50:38:aa:fe:ca:76: f7:a4:86:4f:2e:ad:59:cd:49:b0:2e:1d:eb:b3:07:bf:73:b4: 7e:60:16:4d:77:e0:d7:1a:50:73:98:63:6b:a7:89:47:b7:59: c9:36:b0:8c:63:8c:a5:f2:c5:a1:b7:e7:10:22:a0:29:b1:bc: 00:0c:74:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE2QjAxMTAvBgNVBAUTKDM5NUFGNTc5MTM3NjMzOUFGOURFRTU2RDZBMUUxM0I0 N0FCNUM0NjYwHhcNMjUwNzE5MDAzODA5WhcNMjUwNzI2MDAzODA5WjAYMRYwFAYD VQQDEw02ODdhZThmMS1mYjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzpnL4k0QFk3jFIPhZRumpCUfL+9rV8h0iT1mgy+uQQuodF37+jXpJce2qb5f eKTOBz8Wu67R5DotDPm0YoOHBeNZRPKtXkRPl+zR+EySGqLKKuG2jBv5tkhrUFcM /stgQsKiJZC/rSGFbhjma7YptFutLsL8eKbpfn9A00OkRws5YmumRMaX+FdWI79J h+a31s/Eh93otPQRNKdNEjFMQGGgx9e3grxJf+JhvTYFqdNIuUqaT2KGQsn1B7wZ r0vwr7EX/4+amHXVF+uIaXDimDM3kERnUoKRZ5Cvy6qCOC5caeFHtasNCcDKktZs q3jyehnFRJXJ82QFtX6Rcu+r5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAnBLBaI IGsCTKuukpyA+Q/98WQUMB8GA1UdIwQYMBaAFDla9XkTdjOa+d7lbWoeE7R6tcRm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTZCMC8yMzM3RjIzMjVF M0UxMUVDQTFGRkVCNENDNEY5QUUwMi9PVnIxZVJOMk01cjUzdVZ0YWg0VHRIcTF4 R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09WcjFlUk4yTTVyNTN1VnRhaDRUdEhxMXhHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTZCMC8yMzM3RjIzMjVFM0UxMUVDQTFGRkVCNENDNEY5QUUwMi9PVnIxZVJOMk01 cjUzdVZ0YWg0VHRIcTF4R1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCH9/l22yLRpL6a0Qx+BCMxIt1dawrTTebYMPtPlJsBnzWmgbPdoHvv cE9zODz5CA+ZIhsnbpxrG3g7TI44IO6XB5F+Zr+nDsvXAD2mfZfOrnxoD6FMrg+4 no0+r8HWUtAf1jt3RVYIEAESfTxG5Oo+FHKurg5dDUNorp/hqMz9cv0c5VcKLG0H huJsdkEMnPHO6yx+SwQbHVtgXihiFKeLDHSUqPw5Cv/tKfz+Db7+kopAyhMpiz8v lqS29vfxoPBQOKr+ynb3pIZPLq1ZzUmwLh3rswe/c7R+YBZNd+DXGlBzmGNrp4lH t1nJNrCMY4yl8sWht+cQIqApsbwADHTN -----END CERTIFICATE-----Generated at Sun Jul 20 06:27:19 2025 by rpki-client