$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft File: mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft (raw, json) Hash identifier: +4GNo6sgB5GcyQGA+7Iya0bxNqgPt9/ztgGfUEXDl4E= Subject key identifier: 36:A8:E1:E8:F2:E4:CE:C6:1A:36:36:A9:B5:AC:84:5B:F8:CA:D9:18 Authority key identifier: 98:E8:63:E4:4B:59:7B:64:CA:8C:81:FE:3F:6D:CB:CD:DF:E1:F6:55 Certificate issuer: /CN=A91A4707/serialNumber=98E863E44B597B64CA8C81FE3F6DCBCDDFE1F655 Certificate serial: 0520 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhj5EtZe2TKjIH-P23Lzd_h9lU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft Manifest number: 0515 Signing time: Thu 24 Jul 2025 23:56:35 +0000 Manifest this update: Thu 24 Jul 2025 23:56:34 +0000 Manifest next update: Thu 31 Jul 2025 23:56:34 +0000 Files and hashes: 1: mOhj5EtZe2TKjIH-P23Lzd_h9lU.crl (hash: 1edBAydbaq3da7w+ndrC7wpl4CKEL4567to55mP6818=) 2: 52B59ED2108D11ECA2542150C4F9AE02.roa (hash: YHM2Ry9OqK4ZQ8qnXB/9z3rSEtR8bDIhVl02jmEtILs=) 3: 5202131C108D11ECA2542150C4F9AE02.roa (hash: f0fj2CiJrQsqOvPb5aCJ72sWUs4weqyglPKr75EglVo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.crl rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhj5EtZe2TKjIH-P23Lzd_h9lU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 23:56:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1312 (0x520) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4707, serialNumber=98E863E44B597B64CA8C81FE3F6DCBCDDFE1F655 Validity Not Before: Jul 24 23:56:34 2025 GMT Not After : Jul 31 23:56:34 2025 GMT Subject: CN=6882c833-57c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4a:e0:f8:e6:92:fd:6e:01:5c:72:a1:36:de: 06:56:46:86:17:5c:f7:e4:1e:a2:8e:f2:b8:f6:c5: ad:3c:aa:8f:f3:4e:2d:bf:ed:83:60:2c:07:c9:22: 66:af:6a:dd:4c:f6:63:b7:84:ec:0d:a3:40:28:ba: 28:91:c3:e9:eb:e9:18:43:08:55:f5:ba:bf:12:e7: c0:34:c2:a4:e5:18:a1:e7:31:d5:14:50:50:90:9e: 67:b6:42:d7:29:ae:3a:86:86:f2:60:ba:12:24:1d: 1a:59:08:b2:9c:3e:94:64:85:2b:e9:57:c4:4f:a5: fb:02:62:cf:c3:36:ca:82:9f:f5:e0:98:f2:e3:6c: f0:c4:9d:9d:d2:90:74:33:57:bd:d2:7f:ce:09:3c: 9a:b3:0c:33:9f:1d:53:0a:98:c5:da:3d:c0:2a:00: 9e:7c:95:f3:65:98:8e:a4:28:bb:1f:6e:60:ac:cf: c3:37:76:5b:e5:30:df:35:61:6e:c7:ca:0e:f2:2e: 94:48:98:29:3f:db:dc:d8:72:2d:44:a0:52:6e:c3: ad:10:36:e5:9f:1c:a7:33:dc:82:6c:c8:33:b9:45: e6:22:fa:7b:cb:eb:b4:96:60:24:49:c6:98:4f:24: 35:6c:87:df:89:3f:b8:03:12:63:5e:ec:61:0a:43: 40:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:A8:E1:E8:F2:E4:CE:C6:1A:36:36:A9:B5:AC:84:5B:F8:CA:D9:18 X509v3 Authority Key Identifier: keyid:98:E8:63:E4:4B:59:7B:64:CA:8C:81:FE:3F:6D:CB:CD:DF:E1:F6:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhj5EtZe2TKjIH-P23Lzd_h9lU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:04:81:b7:51:f6:1b:3d:f6:07:7a:c3:5a:55:d6:bc:95:ce: 92:d9:d3:f3:3d:b0:f5:10:c7:e1:2a:93:a4:36:be:a8:fc:ab: df:2a:21:cd:9f:ce:fa:6e:4b:d6:88:84:b3:83:ba:f5:9b:09: cf:5d:f9:1d:2b:e3:c0:ac:35:5d:68:8d:65:b1:c4:2c:e4:4a: 5a:4e:de:9e:fa:d2:9e:0a:96:5b:29:97:e2:a0:e5:28:05:7e: 3b:97:77:6b:de:a4:f9:fb:1e:70:69:6c:fb:f2:ea:2a:b7:9b: c6:a8:b3:16:7f:50:2d:24:b2:a9:d4:f6:12:2a:a1:a8:14:47: 19:86:69:5e:fe:46:5c:e2:e9:0e:02:d7:50:e0:65:76:48:51: c8:10:31:24:3a:63:84:9d:2c:a0:00:f9:80:55:4a:42:77:0a: 45:43:9c:4b:2d:44:a7:1b:f7:a1:92:a0:1d:34:b7:b6:de:c2: 7c:bc:d7:c0:ad:a1:db:8b:36:33:f4:58:5d:a5:6e:3c:f2:96: 08:14:95:62:ec:15:5c:70:b4:4d:1e:0a:5e:e9:0e:11:e1:81: d8:11:77:6e:8b:e2:8b:b5:0a:03:0c:63:b7:8a:9e:8b:1d:9b: 24:dc:9d:2c:e7:50:31:1a:aa:28:9b:a7:e5:98:2f:42:eb:f7: 3b:68:94:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ3MDcxMTAvBgNVBAUTKDk4RTg2M0U0NEI1OTdCNjRDQThDODFGRTNGNkRDQkNE REZFMUY2NTUwHhcNMjUwNzI0MjM1NjM0WhcNMjUwNzMxMjM1NjM0WjAYMRYwFAYD VQQDEw02ODgyYzgzMy01N2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2krg+OaS/W4BXHKhNt4GVkaGF1z35B6ijvK49sWtPKqP804tv+2DYCwHySJm r2rdTPZjt4TsDaNAKLookcPp6+kYQwhV9bq/EufANMKk5Rih5zHVFFBQkJ5ntkLX Ka46hobyYLoSJB0aWQiynD6UZIUr6VfET6X7AmLPwzbKgp/14Jjy42zwxJ2d0pB0 M1e90n/OCTyaswwznx1TCpjF2j3AKgCefJXzZZiOpCi7H25grM/DN3Zb5TDfNWFu x8oO8i6USJgpP9vc2HItRKBSbsOtEDblnxynM9yCbMgzuUXmIvp7y+u0lmAkScaY TyQ1bIffiT+4AxJjXuxhCkNA3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDao4ejy 5M7GGjY2qbWshFv4ytkYMB8GA1UdIwQYMBaAFJjoY+RLWXtkyoyB/j9ty83f4fZV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDcwNy8yODY2QzIzNDEw OEIxMUVDODc4RjFCNEZDNEY5QUUwMi9tT2hqNUV0WmUyVEtqSUgtUDIzTHpkX2g5 bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21PaGo1RXRaZTJUS2pJSC1QMjNMemRfaDlsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDcwNy8yODY2QzIzNDEwOEIxMUVDODc4RjFCNEZDNEY5QUUwMi9tT2hqNUV0WmUy VEtqSUgtUDIzTHpkX2g5bFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4BIG3UfYbPfYHesNaVda8lc6S2dPzPbD1EMfhKpOkNr6o/KvfKiHN n876bkvWiISzg7r1mwnPXfkdK+PArDVdaI1lscQs5EpaTt6e+tKeCpZbKZfioOUo BX47l3dr3qT5+x5waWz78uoqt5vGqLMWf1AtJLKp1PYSKqGoFEcZhmle/kZc4ukO AtdQ4GV2SFHIEDEkOmOEnSygAPmAVUpCdwpFQ5xLLUSnG/ehkqAdNLe23sJ8vNfA raHbizYz9FhdpW488pYIFJVi7BVccLRNHgpe6Q4R4YHYEXdui+KLtQoDDGO3ip6L HZsk3J0s51AxGqoom6flmC9C6/c7aJRP -----END CERTIFICATE-----Generated at Sat Jul 26 02:00:56 2025 by rpki-client