$ rpki-client -vvf rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft File: mOHsvUXXh5-byUOfTGwvJxStNvU.mft (raw, json) Hash identifier: S7G+eqaJlVtjDmeTZXyiJtdTJccQen03aZt/XlV/3NM= Subject key identifier: 82:FD:32:DA:92:D1:84:BB:E4:CA:FF:A2:76:8E:CE:05:EA:BA:BD:B7 Authority key identifier: 98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5 Certificate issuer: /CN=A91623B9/serialNumber=98E1ECBD45D7879F9BC9439F4C6C2F2714AD36F5 Certificate serial: 0514 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft Manifest number: 04F1 Signing time: Sat 19 Jul 2025 00:09:22 +0000 Manifest this update: Sat 19 Jul 2025 00:09:21 +0000 Manifest next update: Sat 26 Jul 2025 00:09:21 +0000 Files and hashes: 1: mOHsvUXXh5-byUOfTGwvJxStNvU.crl (hash: +ZV6qyAS+Md3frlJ9UF9qbdDYm90oVOxvjSuGIc2Evo=) 2: 4C304B9EA12F11EFBF514933C4F9AE02.roa (hash: lIJvzLYrLtuFIE0gyMhPk2/yxHi1SCB/LUlp5AIoj+E=) 3: 3B943DB8A12F11EF8A121F33C4F9AE02.roa (hash: wlCYlDts3RjNxBy/eT/e5B1Vtzz4yVgtwvYVdQThmhs=) 4: 6762893A976211EFA4D0606CC4F9AE02.roa (hash: /gYeqqbk6WlA+N6Yv/cuDVmH4COmNboDX4ybOjU2VTk=) 5: 5A67D452A12F11EF8CA59833C4F9AE02.roa (hash: u0zCnyDN76eHB+CmzgwmvJ+3FVkHG07LYemqATFaMtk=) 6: 29B935BCA12F11EF9FAFE232C4F9AE02.roa (hash: DkBXKwosqunys840APEr3udcdpKlpKYanK0TdpOCbNM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.crl rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:09:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1300 (0x514) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91623B9, serialNumber=98E1ECBD45D7879F9BC9439F4C6C2F2714AD36F5 Validity Not Before: Jul 19 00:09:21 2025 GMT Not After : Jul 26 00:09:21 2025 GMT Subject: CN=687ae231-c719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:91:39:da:d5:c3:25:67:27:dd:b7:44:fe:d6: 0c:d7:b3:0a:e4:39:89:85:5e:89:3b:44:65:44:56: 8d:f6:3b:ed:58:5f:ec:01:53:e4:25:30:4a:b6:22: 9a:5a:6f:46:36:e8:cf:26:6b:f9:b6:9d:a3:18:12: fc:2c:32:e2:1c:57:be:68:74:39:2b:91:c5:c0:9c: 43:57:27:1c:05:6f:1f:45:59:a9:f9:84:b1:b0:d6: d7:db:11:8a:35:28:e3:87:d2:99:43:7f:bd:3d:80: 1d:c9:da:a4:9b:94:39:8b:db:2c:13:79:c2:66:88: 43:52:b4:2f:16:ca:b6:c4:9e:b6:8d:1c:36:8f:db: de:ea:cc:9f:ee:fe:14:88:43:45:bd:8d:57:9b:07: f1:82:80:cc:79:8a:39:aa:e2:63:a7:61:02:cd:75: d9:94:81:f8:5b:c3:50:4a:ac:4f:ac:41:09:2f:ae: 0b:be:86:8e:17:f7:82:b2:38:67:c6:40:31:a6:c5: 7d:87:1c:6e:59:13:aa:22:f4:ea:94:c9:3c:5e:1f: 29:c4:d6:93:70:8b:8b:d8:a8:2a:d1:61:ac:9f:f8: b2:cc:7e:62:01:8d:99:f6:50:58:e7:0c:f6:79:c8: 48:e2:da:46:9c:0e:d4:a1:22:ea:5e:a0:84:8f:76: 98:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:FD:32:DA:92:D1:84:BB:E4:CA:FF:A2:76:8E:CE:05:EA:BA:BD:B7 X509v3 Authority Key Identifier: keyid:98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:ac:2c:f1:b6:e2:44:0f:3b:00:56:6f:9e:59:8a:15:64:01: ce:21:f2:5e:56:bd:9d:9f:19:99:a9:24:0b:eb:bb:16:36:04: 26:5a:b5:c2:3f:5f:39:17:e5:b6:73:d0:9b:c8:d8:0d:73:94: 1d:61:97:50:6b:11:53:76:13:b6:4f:4e:ef:40:0d:96:2e:94: 8c:ca:23:c1:b6:af:d2:65:a6:74:07:b8:91:27:7b:15:88:4d: a3:b6:1b:c4:53:c3:b7:09:d3:4a:3c:30:c3:c6:ad:3b:b8:fa: 35:9f:d2:3b:28:1d:10:4d:42:3a:d1:b1:9d:4e:e8:a9:04:4e: 88:84:d6:3b:4d:6a:87:50:fe:35:ca:e9:95:c9:6d:9c:9f:cb: fa:b6:20:a1:f8:8b:e3:59:b1:cf:2b:d7:7d:d5:e0:d6:14:75: 24:6b:59:c5:0f:e1:15:a7:73:29:71:c9:54:47:c6:1e:ff:0e: d2:f1:47:1b:55:dd:65:03:54:63:42:26:c7:e5:3f:06:f9:a6: f1:1a:d7:f0:a7:71:06:a5:f6:67:23:16:fd:5e:b5:8d:82:b2: be:ed:37:27:c6:9b:29:75:1b:5f:91:6a:2c:af:b8:a9:89:11: 5b:b0:14:27:0d:ee:8e:ef:79:b6:b9:f9:1b:e1:ef:33:15:68: 31:db:b0:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIzQjkxMTAvBgNVBAUTKDk4RTFFQ0JENDVENzg3OUY5QkM5NDM5RjRDNkMyRjI3 MTRBRDM2RjUwHhcNMjUwNzE5MDAwOTIxWhcNMjUwNzI2MDAwOTIxWjAYMRYwFAYD VQQDEw02ODdhZTIzMS1jNzE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA15E52tXDJWcn3bdE/tYM17MK5DmJhV6JO0RlRFaN9jvtWF/sAVPkJTBKtiKa Wm9GNujPJmv5tp2jGBL8LDLiHFe+aHQ5K5HFwJxDVyccBW8fRVmp+YSxsNbX2xGK NSjjh9KZQ3+9PYAdydqkm5Q5i9ssE3nCZohDUrQvFsq2xJ62jRw2j9ve6syf7v4U iENFvY1XmwfxgoDMeYo5quJjp2ECzXXZlIH4W8NQSqxPrEEJL64LvoaOF/eCsjhn xkAxpsV9hxxuWROqIvTqlMk8Xh8pxNaTcIuL2Kgq0WGsn/iyzH5iAY2Z9lBY5wz2 echI4tpGnA7UoSLqXqCEj3aYIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIL9MtqS 0YS75Mr/onaOzgXqur23MB8GA1UdIwQYMBaAFJjh7L1F14efm8lDn0xsLycUrTb1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjNCOS83OENFQUNCQzJC MzYxMUVDQUQ1OTVCN0NDNEY5QUUwMi9tT0hzdlVYWGg1LWJ5VU9mVEd3dkp4U3RO dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21PSHN2VVhYaDUtYnlVT2ZUR3d2SnhTdE52VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjNCOS83OENFQUNCQzJCMzYxMUVDQUQ1OTVCN0NDNEY5QUUwMi9tT0hzdlVYWGg1 LWJ5VU9mVEd3dkp4U3ROdlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCArCzxtuJEDzsAVm+eWYoVZAHOIfJeVr2dnxmZqSQL67sWNgQmWrXC P185F+W2c9CbyNgNc5QdYZdQaxFTdhO2T07vQA2WLpSMyiPBtq/SZaZ0B7iRJ3sV iE2jthvEU8O3CdNKPDDDxq07uPo1n9I7KB0QTUI60bGdTuipBE6IhNY7TWqHUP41 yumVyW2cn8v6tiCh+IvjWbHPK9d91eDWFHUka1nFD+EVp3MpcclUR8Ye/w7S8Ucb Vd1lA1RjQibH5T8G+abxGtfwp3EGpfZnIxb9XrWNgrK+7TcnxpspdRtfkWosr7ip iRFbsBQnDe6O73m2ufkb4e8zFWgx27A2 -----END CERTIFICATE-----Generated at Sun Jul 20 10:06:48 2025 by rpki-client