$ rpki-client -vvf rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft File: o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft (raw, json) Hash identifier: w5SwH4Zm1KAQMDoKBkjezSj24YiSGzAbBIO/ct6KsIU= Subject key identifier: A2:FA:F7:95:DC:97:4B:3C:8F:DB:63:ED:66:95:53:75:A1:24:B7:D8 Authority key identifier: A3:65:2D:9E:54:E9:64:68:B2:30:47:93:73:17:FA:4E:CD:7B:36:48 Certificate issuer: /CN=A91A36A7/serialNumber=A3652D9E54E96468B23047937317FA4ECD7B3648 Certificate serial: 05FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft Manifest number: 05F7 Signing time: Tue 22 Jul 2025 23:16:01 +0000 Manifest this update: Tue 22 Jul 2025 23:16:01 +0000 Manifest next update: Tue 29 Jul 2025 23:16:01 +0000 Files and hashes: 1: o2UtnlTpZGiyMEeTcxf6Ts17Nkg.crl (hash: EKXbiDTHopJjJrJL7LN7Imzbnd8ShsFmvAypGHLLRCs=) 2: F0CA090EB94A11EBAF5BDD5AC4F9AE02.roa (hash: AxnCXioU+pzcVhOQczSiGNqFZn1BtxYji3/Mt/svcQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.crl rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 23:16:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1534 (0x5fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A36A7, serialNumber=A3652D9E54E96468B23047937317FA4ECD7B3648 Validity Not Before: Jul 22 23:16:01 2025 GMT Not After : Jul 29 23:16:01 2025 GMT Subject: CN=68801bb1-ac85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c5:a1:f4:5a:99:e3:05:ea:47:05:e8:96:be: 03:e7:d7:6c:9d:40:ad:16:7b:01:4d:54:a9:61:c1: 00:1a:99:8c:7f:90:33:17:b2:a3:31:b2:fd:5a:77: 47:2c:9d:bd:74:f7:a2:cb:51:7e:50:19:86:3c:4e: 5a:98:91:66:44:9c:d8:b9:0d:6c:f4:54:29:2e:9c: 1d:4c:bf:3f:0a:33:d9:fb:cc:6a:5c:4d:67:86:a3: 77:7a:3d:16:64:fd:8a:36:1c:cc:41:e6:6b:7f:1a: b4:90:0d:a4:a5:a6:c3:80:e7:72:2f:ca:ee:f1:69: b3:3f:53:83:e9:af:b3:7c:fb:f1:a7:76:4f:3a:c0: 91:67:55:be:73:f3:4d:99:f0:b1:d5:d2:dd:de:6d: 90:b3:03:aa:25:42:a4:6d:1f:06:e0:ea:0f:b3:b2: 88:cd:10:ab:90:f2:cc:2d:c1:b6:45:99:58:92:22: 91:fa:0a:a0:d7:c5:39:05:4a:fb:91:7c:62:d1:c9: dc:0d:d9:e9:27:b4:db:92:21:40:be:7a:37:28:3b: 86:e4:f6:1c:ff:cf:64:cc:94:40:ae:a8:44:cc:3e: b9:01:66:6d:c1:8a:8a:80:b1:e2:8e:d0:36:3c:20: 83:89:56:00:b1:24:c6:a2:4f:41:17:c6:01:c9:4e: 63:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:FA:F7:95:DC:97:4B:3C:8F:DB:63:ED:66:95:53:75:A1:24:B7:D8 X509v3 Authority Key Identifier: keyid:A3:65:2D:9E:54:E9:64:68:B2:30:47:93:73:17:FA:4E:CD:7B:36:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:7d:78:88:09:87:84:96:43:9a:d3:57:f3:e2:40:88:39:7c: 71:c5:6c:6e:53:f6:6a:e7:ba:cf:df:19:87:c1:41:0a:5b:87: 21:98:12:6e:98:76:b1:4d:1b:23:6e:f1:4b:23:06:c7:ec:bf: 0f:49:8d:53:31:82:a4:12:41:78:f6:6e:ef:5b:41:f6:41:ee: c2:8e:d5:70:99:84:f4:88:60:66:98:a2:78:b7:26:4b:45:dc: 6b:6b:33:3b:87:f3:c9:13:b9:23:f1:e2:c9:2d:d5:05:b1:0d: 3d:97:d4:34:b6:b3:9a:15:9a:7b:6d:99:14:cd:68:21:c9:bd: 7a:ed:a8:ad:4e:a9:34:be:09:e3:11:c7:f4:36:b9:b9:ef:b1: fe:47:af:ea:68:c7:41:3e:bd:fc:3d:76:91:9e:70:9c:46:31: 7b:f4:d0:53:ce:d9:82:5f:e7:10:47:b9:64:bd:dd:db:e0:4f: 26:0d:d9:7d:d3:e7:aa:9a:9e:ae:8a:e7:27:b1:24:81:56:b1: 19:9a:11:f8:67:2c:4a:b5:8a:b1:0e:68:a8:31:72:d5:4f:b2: ce:88:a1:4c:a2:97:48:a4:d5:c2:4e:d9:70:46:78:43:0c:a8: 67:f9:db:80:43:03:11:e2:b1:0a:e6:c0:9b:05:17:85:2c:ec: 7a:04:9c:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM2QTcxMTAvBgNVBAUTKEEzNjUyRDlFNTRFOTY0NjhCMjMwNDc5MzczMTdGQTRF Q0Q3QjM2NDgwHhcNMjUwNzIyMjMxNjAxWhcNMjUwNzI5MjMxNjAxWjAYMRYwFAYD VQQDEw02ODgwMWJiMS1hYzg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtcWh9FqZ4wXqRwXolr4D59dsnUCtFnsBTVSpYcEAGpmMf5AzF7KjMbL9WndH LJ29dPeiy1F+UBmGPE5amJFmRJzYuQ1s9FQpLpwdTL8/CjPZ+8xqXE1nhqN3ej0W ZP2KNhzMQeZrfxq0kA2kpabDgOdyL8ru8WmzP1OD6a+zfPvxp3ZPOsCRZ1W+c/NN mfCx1dLd3m2QswOqJUKkbR8G4OoPs7KIzRCrkPLMLcG2RZlYkiKR+gqg18U5BUr7 kXxi0cncDdnpJ7TbkiFAvno3KDuG5PYc/89kzJRArqhEzD65AWZtwYqKgLHijtA2 PCCDiVYAsSTGok9BF8YByU5jdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKL695Xc l0s8j9tj7WaVU3WhJLfYMB8GA1UdIwQYMBaAFKNlLZ5U6WRosjBHk3MX+k7NezZI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzZBNy84QUE2NUFGQ0I5 NDkxMUVCQkJCMzI1NUFDNEY5QUUwMi9vMlV0bmxUcFpHaXlNRWVUY3hmNlRzMTdO a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28yVXRubFRwWkdpeU1FZVRjeGY2VHMxN05rZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzZBNy84QUE2NUFGQ0I5NDkxMUVCQkJCMzI1NUFDNEY5QUUwMi9vMlV0bmxUcFpH aXlNRWVUY3hmNlRzMTdOa2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhfXiICYeElkOa01fz4kCIOXxxxWxuU/Zq57rP3xmHwUEKW4chmBJu mHaxTRsjbvFLIwbH7L8PSY1TMYKkEkF49m7vW0H2Qe7CjtVwmYT0iGBmmKJ4tyZL RdxrazM7h/PJE7kj8eLJLdUFsQ09l9Q0trOaFZp7bZkUzWghyb167aitTqk0vgnj Ecf0Nrm577H+R6/qaMdBPr38PXaRnnCcRjF79NBTztmCX+cQR7lkvd3b4E8mDdl9 0+eqmp6uiucnsSSBVrEZmhH4ZyxKtYqxDmioMXLVT7LOiKFMopdIpNXCTtlwRnhD DKhn+duAQwMR4rEK5sCbBReFLOx6BJyl -----END CERTIFICATE-----Generated at Thu Jul 24 08:44:06 2025 by rpki-client