$ rpki-client -vvf rpki.apnic.net/member_repository/A91778D4/D9D5693A905111ECA3699615C4F9AE02/OIes3fccvvSnUh2EUe7LrrJRnv0.mft File: OIes3fccvvSnUh2EUe7LrrJRnv0.mft (raw, json) Hash identifier: rvg/EyC5uZ1xgj5igxQyrB9/FM2TejjExq8Lh7afLEc= Subject key identifier: BA:51:F7:D3:57:31:01:FD:96:77:05:BA:D8:1D:06:65:9A:E3:E2:79 Authority key identifier: 38:87:AC:DD:F7:1C:BE:F4:A7:52:1D:84:51:EE:CB:AE:B2:51:9E:FD Certificate issuer: /CN=A91778D4/serialNumber=3887ACDDF71CBEF4A7521D8451EECBAEB2519EFD Certificate serial: 03D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIes3fccvvSnUh2EUe7LrrJRnv0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91778D4/D9D5693A905111ECA3699615C4F9AE02/OIes3fccvvSnUh2EUe7LrrJRnv0.mft Manifest number: 03D0 Signing time: Mon 21 Jul 2025 00:51:49 +0000 Manifest this update: Mon 21 Jul 2025 00:51:48 +0000 Manifest next update: Mon 28 Jul 2025 00:51:48 +0000 Files and hashes: 1: OIes3fccvvSnUh2EUe7LrrJRnv0.crl (hash: EziVmuTIgdeuJ9TrhXb/JSn67YBABa/NN9RwTUrvvWc=) 2: 13F9F650905511EC9A978D19C4F9AE02.roa (hash: CfbtaxsbT8QkNpB+dr8l4I71elKTP/TaO4DWd5BrJjY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91778D4/D9D5693A905111ECA3699615C4F9AE02/OIes3fccvvSnUh2EUe7LrrJRnv0.crl rsync://rpki.apnic.net/member_repository/A91778D4/D9D5693A905111ECA3699615C4F9AE02/OIes3fccvvSnUh2EUe7LrrJRnv0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIes3fccvvSnUh2EUe7LrrJRnv0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 00:51:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 980 (0x3d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91778D4, serialNumber=3887ACDDF71CBEF4A7521D8451EECBAEB2519EFD Validity Not Before: Jul 21 00:51:48 2025 GMT Not After : Jul 28 00:51:48 2025 GMT Subject: CN=687d8f25-4b77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f3:5f:c0:99:c0:a7:55:d0:fe:44:42:99:0a: 33:65:af:b4:b7:30:72:bb:d0:64:f2:ad:1c:a1:03: bc:db:1b:71:ef:51:77:d0:7d:35:74:57:0a:8d:fe: d3:8d:40:bf:7c:7c:f2:e0:0a:12:7a:84:79:c7:26: b5:ba:3d:7a:56:26:e3:98:a3:27:94:b7:f8:38:0e: 78:d4:22:e1:68:00:4d:a3:f4:b3:bb:97:cf:25:f3: ab:28:01:51:e0:22:74:7f:ac:1d:fb:bd:53:e4:48: 45:84:01:10:f3:3e:be:7d:54:47:b5:a0:a6:a8:75: a7:2c:43:49:b1:15:30:9a:09:9d:10:89:ed:e1:b2: 23:b3:99:ca:af:b6:19:2d:c2:b3:33:1e:92:c2:30: a5:15:d1:c6:21:a0:de:34:a4:f6:3f:a6:4c:1b:13: 19:35:8d:11:8b:14:c0:5e:37:ce:8f:46:1b:71:72: 14:f1:8f:68:96:23:da:50:68:2c:9f:7d:f4:be:85: 89:f3:5a:94:86:4d:dd:04:b9:c5:37:3f:e1:10:96: 04:ca:b4:21:bf:4f:45:02:ab:e3:bf:33:b5:32:2e: 2e:87:be:b5:ff:6f:3d:fc:2e:b3:7a:98:69:58:b7: e5:9e:58:c9:c5:fe:c6:21:e3:4c:38:69:f8:59:ac: 40:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:51:F7:D3:57:31:01:FD:96:77:05:BA:D8:1D:06:65:9A:E3:E2:79 X509v3 Authority Key Identifier: keyid:38:87:AC:DD:F7:1C:BE:F4:A7:52:1D:84:51:EE:CB:AE:B2:51:9E:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91778D4/D9D5693A905111ECA3699615C4F9AE02/OIes3fccvvSnUh2EUe7LrrJRnv0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIes3fccvvSnUh2EUe7LrrJRnv0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91778D4/D9D5693A905111ECA3699615C4F9AE02/OIes3fccvvSnUh2EUe7LrrJRnv0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:85:1c:d2:42:10:0c:2b:bb:96:d5:02:17:de:d7:ca:cc:9b: 3e:0d:6f:72:52:04:25:c6:c2:d4:7f:56:04:3d:1c:52:04:6f: d0:8c:43:be:a8:15:18:c3:90:89:49:98:35:af:bc:1e:9f:9b: 05:f4:4c:94:d1:e7:24:5a:37:1e:ab:e8:88:6b:e4:41:bf:84: 68:95:78:f3:57:ba:6c:62:b2:1e:0f:b9:bd:66:d8:25:bb:5e: 4d:85:f3:bc:72:86:47:76:c6:27:91:f0:ee:1a:85:8c:e0:6b: 32:d1:eb:5a:22:66:fa:2f:9a:5d:34:83:49:99:6a:58:e2:d6: 56:ae:0a:34:ea:f9:1d:06:98:77:26:4e:cc:89:37:c3:52:e6: e7:f6:4e:b0:f1:88:ed:04:8c:d6:77:67:57:a9:5d:7e:0a:a5: e9:2f:35:03:53:f0:59:ff:0b:ff:f9:6a:a7:02:26:93:ee:c8: 2f:75:4c:94:a0:c5:1c:10:a2:f2:97:81:de:1c:cd:1e:07:69: a5:a1:9b:f4:09:17:d0:05:2b:cb:e4:99:c5:65:24:c0:e3:69: f3:57:eb:98:c6:69:5f:4e:32:a8:77:e3:5c:88:62:53:c1:0d: dc:6d:5e:19:95:dd:c1:ea:a9:9b:46:95:31:77:5d:03:e7:d7: 6f:5e:0b:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc4RDQxMTAvBgNVBAUTKDM4ODdBQ0RERjcxQ0JFRjRBNzUyMUQ4NDUxRUVDQkFF QjI1MTlFRkQwHhcNMjUwNzIxMDA1MTQ4WhcNMjUwNzI4MDA1MTQ4WjAYMRYwFAYD VQQDEw02ODdkOGYyNS00Yjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvNfwJnAp1XQ/kRCmQozZa+0tzByu9Bk8q0coQO82xtx71F30H01dFcKjf7T jUC/fHzy4AoSeoR5xya1uj16VibjmKMnlLf4OA541CLhaABNo/Szu5fPJfOrKAFR 4CJ0f6wd+71T5EhFhAEQ8z6+fVRHtaCmqHWnLENJsRUwmgmdEInt4bIjs5nKr7YZ LcKzMx6SwjClFdHGIaDeNKT2P6ZMGxMZNY0RixTAXjfOj0YbcXIU8Y9oliPaUGgs n330voWJ81qUhk3dBLnFNz/hEJYEyrQhv09FAqvjvzO1Mi4uh761/289/C6zephp WLflnljJxf7GIeNMOGn4WaxAIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLpR99NX MQH9lncFutgdBmWa4+J5MB8GA1UdIwQYMBaAFDiHrN33HL70p1IdhFHuy66yUZ79 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzhENC9EOUQ1NjkzQTkw NTExMUVDQTM2OTk2MTVDNEY5QUUwMi9PSWVzM2ZjY3Z2U25VaDJFVWU3THJySlJu djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09JZXMzZmNjdnZTblVoMkVVZTdMcnJKUm52MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzhENC9EOUQ1NjkzQTkwNTExMUVDQTM2OTk2MTVDNEY5QUUwMi9PSWVzM2ZjY3Z2 U25VaDJFVWU3THJySlJudjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXhRzSQhAMK7uW1QIX3tfKzJs+DW9yUgQlxsLUf1YEPRxSBG/QjEO+ qBUYw5CJSZg1r7wen5sF9EyU0eckWjceq+iIa+RBv4RolXjzV7psYrIeD7m9Ztgl u15NhfO8coZHdsYnkfDuGoWM4Gsy0etaImb6L5pdNINJmWpY4tZWrgo06vkdBph3 Jk7MiTfDUubn9k6w8YjtBIzWd2dXqV1+CqXpLzUDU/BZ/wv/+WqnAiaT7sgvdUyU oMUcEKLyl4HeHM0eB2mloZv0CRfQBSvL5JnFZSTA42nzV+uYxmlfTjKod+NciGJT wQ3cbV4Zld3B6qmbRpUxd10D59dvXguH -----END CERTIFICATE-----Generated at Mon Jul 21 06:52:34 2025 by rpki-client