$ rpki-client -vvf rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft File: rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft (raw, json) Hash identifier: e53KB7A6FmNuq8pso6UwTvRkx4k4TCPZu+5twJYPmIY= Subject key identifier: E5:C4:67:F6:0A:F4:62:9B:73:43:91:8C:05:11:F3:AA:0C:9F:27:5E Authority key identifier: AC:E2:C4:CC:B0:89:D2:1B:37:04:54:B0:0E:6B:59:3A:F2:88:62:F6 Certificate issuer: /CN=A91702B9/serialNumber=ACE2C4CCB089D21B370454B00E6B593AF28862F6 Certificate serial: 0356 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft Manifest number: 034D Signing time: Mon 21 Jul 2025 01:17:59 +0000 Manifest this update: Mon 21 Jul 2025 01:17:58 +0000 Manifest next update: Mon 28 Jul 2025 01:17:58 +0000 Files and hashes: 1: rOLEzLCJ0hs3BFSwDmtZOvKIYvY.crl (hash: yTUPUYP7tJ8MlFVBmmBZONV8iEYG6v7+2okFcsWfhi8=) 2: FC159BECF4D911EFB4F5FC16C4F9AE02.roa (hash: SFUw1crOwEdM2KZGmzmI0Y/ekMkiUyOErHqNpQ3ZimY=) 3: A047A07AD56811EFB57A5D33C4F9AE02.roa (hash: hW5FiSV5239AbImQE/mYJwi40OATdFzGCdVUMZFhemo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.crl rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 01:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 854 (0x356) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91702B9, serialNumber=ACE2C4CCB089D21B370454B00E6B593AF28862F6 Validity Not Before: Jul 21 01:17:58 2025 GMT Not After : Jul 28 01:17:58 2025 GMT Subject: CN=687d9547-ef54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:65:4a:3f:a7:90:df:54:46:01:ad:0a:e0:2c: e4:54:89:59:af:ce:15:31:c4:82:3e:44:db:23:50: 6a:66:9a:32:4d:1c:8f:57:f3:77:84:37:12:2f:99: 48:0c:ec:5e:eb:94:24:fe:88:e1:8f:76:06:26:66: 8f:6b:9d:21:d9:f5:1f:ba:56:80:cb:66:49:3a:28: 28:b1:ac:e2:cf:0a:dd:42:ba:ca:68:02:f1:ee:75: d8:41:79:8a:0d:0a:6f:51:64:45:fd:17:92:c9:b9: d4:02:45:8a:a6:0d:a6:17:00:38:d1:75:bd:59:fb: 72:64:d5:ec:e6:51:40:db:84:a6:f6:0e:37:4f:4a: a2:bb:84:98:39:40:a3:93:88:93:e2:78:a1:eb:da: 83:2d:31:7a:34:02:85:9b:c2:80:07:82:83:da:1d: 81:dd:57:b7:16:cc:55:bc:0b:2e:11:41:f4:ce:a4: 7c:3f:c9:3a:3f:42:27:e5:0f:66:d8:32:b1:31:d6: 2d:c4:1d:02:df:69:f8:dd:c5:e0:12:4b:97:14:2b: 01:f2:ae:b3:39:19:5b:ae:19:77:89:a6:99:e4:f8: b3:4f:b4:d2:16:50:7f:f4:fd:0f:06:32:35:fd:1d: 41:29:79:e9:e5:03:22:22:38:cf:94:94:4e:8e:8a: 9a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:C4:67:F6:0A:F4:62:9B:73:43:91:8C:05:11:F3:AA:0C:9F:27:5E X509v3 Authority Key Identifier: keyid:AC:E2:C4:CC:B0:89:D2:1B:37:04:54:B0:0E:6B:59:3A:F2:88:62:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:6c:68:02:c1:f1:1d:7b:b1:75:5c:af:0c:f9:72:0c:7b:d0: 7f:f7:69:2e:a7:c7:eb:10:d7:f8:43:6e:f7:24:b5:fe:13:ad: 63:d2:d3:a4:e6:13:9f:f6:38:f8:07:6e:0a:1f:cf:ed:0b:b1: 4b:7b:a6:ae:ac:b0:8f:a1:5d:fe:f2:28:fa:a4:ff:5c:cb:a5: 38:61:6a:1d:2f:40:7a:fa:c9:a0:e1:80:27:87:4e:e9:de:79: a5:d9:06:bb:75:63:7b:3f:66:02:f4:f1:96:9d:03:46:6e:62: 11:8a:0a:2b:a7:44:58:ce:c8:38:3d:a2:1f:a7:42:b4:77:63: 5e:05:17:3a:d1:4d:96:ea:ca:da:1e:83:7e:2e:ff:1d:fd:ac: eb:53:80:f5:5e:24:37:e4:49:dd:0d:46:62:f4:22:1a:5f:bb: 21:51:ae:6e:4e:f6:ed:5b:eb:f3:82:56:3f:82:2e:74:d6:f3: 64:1e:88:0c:b4:b5:f5:c8:b5:5c:82:76:0f:d7:b1:e4:74:fb: 0e:37:ae:e5:28:d1:0d:6d:49:63:0b:0e:17:bf:b6:1e:19:56: c8:42:4c:9c:a1:d4:38:d7:41:92:00:7a:76:66:6a:08:6b:a9: 92:04:ac:01:1f:75:d4:39:b3:f9:52:f1:68:0b:4d:4f:4d:fa: 9a:bb:d9:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAyQjkxMTAvBgNVBAUTKEFDRTJDNENDQjA4OUQyMUIzNzA0NTRCMDBFNkI1OTNB RjI4ODYyRjYwHhcNMjUwNzIxMDExNzU4WhcNMjUwNzI4MDExNzU4WjAYMRYwFAYD VQQDEw02ODdkOTU0Ny1lZjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxGVKP6eQ31RGAa0K4CzkVIlZr84VMcSCPkTbI1BqZpoyTRyPV/N3hDcSL5lI DOxe65Qk/ojhj3YGJmaPa50h2fUfulaAy2ZJOigosazizwrdQrrKaALx7nXYQXmK DQpvUWRF/ReSybnUAkWKpg2mFwA40XW9WftyZNXs5lFA24Sm9g43T0qiu4SYOUCj k4iT4nih69qDLTF6NAKFm8KAB4KD2h2B3Ve3FsxVvAsuEUH0zqR8P8k6P0In5Q9m 2DKxMdYtxB0C32n43cXgEkuXFCsB8q6zORlbrhl3iaaZ5PizT7TSFlB/9P0PBjI1 /R1BKXnp5QMiIjjPlJROjoqaEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOXEZ/YK 9GKbc0ORjAUR86oMnydeMB8GA1UdIwQYMBaAFKzixMywidIbNwRUsA5rWTryiGL2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDJCOS8zQjcyRUU5MEM2 MDUxMUVDQUI3NEQ5NjJDNEY5QUUwMi9yT0xFekxDSjBoczNCRlN3RG10Wk92S0lZ dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JPTEV6TENKMGhzM0JGU3dEbXRaT3ZLSVl2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDJCOS8zQjcyRUU5MEM2MDUxMUVDQUI3NEQ5NjJDNEY5QUUwMi9yT0xFekxDSjBo czNCRlN3RG10Wk92S0lZdlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrbGgCwfEde7F1XK8M+XIMe9B/92kup8frENf4Q273JLX+E61j0tOk 5hOf9jj4B24KH8/tC7FLe6aurLCPoV3+8ij6pP9cy6U4YWodL0B6+smg4YAnh07p 3nml2Qa7dWN7P2YC9PGWnQNGbmIRigorp0RYzsg4PaIfp0K0d2NeBRc60U2W6sra HoN+Lv8d/azrU4D1XiQ35EndDUZi9CIaX7shUa5uTvbtW+vzglY/gi501vNkHogM tLX1yLVcgnYP17HkdPsON67lKNENbUljCw4Xv7YeGVbIQkycodQ410GSAHp2ZmoI a6mSBKwBH3XUObP5UvFoC01PTfqau9nC -----END CERTIFICATE-----Generated at Mon Jul 21 23:45:56 2025 by rpki-client