$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft File: oL2xs_Hk5wTrTU8s5f405lA3uUM.mft (raw, json) Hash identifier: L5kFM+ZLtu5AqU97BbCVBesU+16KLGxpPo8E1IWBPKY= Subject key identifier: 98:A8:BC:E8:F2:69:A4:0A:20:B7:5B:11:7B:BA:8C:E8:F1:6A:45:83 Authority key identifier: A0:BD:B1:B3:F1:E4:E7:04:EB:4D:4F:2C:E5:FE:34:E6:50:37:B9:43 Certificate issuer: /CN=A91A5B83/serialNumber=A0BDB1B3F1E4E704EB4D4F2CE5FE34E65037B943 Certificate serial: 090A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft Manifest number: 08FF Signing time: Sun 20 Jul 2025 20:27:57 +0000 Manifest this update: Sun 20 Jul 2025 20:27:56 +0000 Manifest next update: Sun 27 Jul 2025 20:27:56 +0000 Files and hashes: 1: oL2xs_Hk5wTrTU8s5f405lA3uUM.crl (hash: bK1PweX7vGMbhzGlTKWcgWHZ4d+TTpl7ZkyJQJYlCg8=) 2: 975BB0CE73AD11EDAD75DB7DC4F9AE02.roa (hash: 3hcEUgYqoshOk8lFFnh68Ppk5C9DLTGbNkZXNe5ZLqA=) 3: A21F0938C44B11EB8CF88F1EC4F9AE02.roa (hash: ao7owdTBxv72fQFQJlEFwxw2v4nLgAcrWGOJHUBmOYs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.crl rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 20:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2314 (0x90a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5B83, serialNumber=A0BDB1B3F1E4E704EB4D4F2CE5FE34E65037B943 Validity Not Before: Jul 20 20:27:56 2025 GMT Not After : Jul 27 20:27:56 2025 GMT Subject: CN=687d514c-3b93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:92:32:6a:9e:66:05:d7:52:12:4f:98:34:4b: fa:c5:81:80:ae:ac:c1:ea:6b:02:96:9e:44:69:68: 6a:9f:c3:58:dc:e8:b4:69:94:5e:e4:86:ba:c7:1b: b9:08:02:42:e8:f1:0c:0b:35:46:99:62:f0:e4:2d: 46:2d:c3:e7:61:01:35:f2:0f:16:a2:5f:3a:4d:6a: 8d:2e:90:0e:a4:29:3f:89:7e:93:d6:4b:4a:c8:28: df:93:12:35:69:15:4f:e0:66:69:1d:11:76:33:74: 31:f1:0f:ab:fa:ab:a6:02:bc:1f:5d:26:27:f4:d9: e0:ae:18:15:0d:a2:df:1d:c9:69:96:c2:73:ca:a0: 0f:a1:3a:a1:ea:82:9d:74:be:e3:2a:2f:53:cc:61: 4c:a7:0f:1b:c2:b2:58:9e:be:95:84:e9:9c:27:93: 37:f7:d0:e5:eb:dd:68:f2:f0:2d:b8:20:4a:54:b6: b0:bf:1f:49:42:dc:13:e8:6f:e9:b2:0e:f4:e0:7b: e2:24:35:6e:05:36:20:57:28:be:72:01:8d:e8:7f: 89:8e:ff:95:20:d0:7b:de:0c:b0:c0:1e:ec:67:14: d2:e1:4e:8b:34:e8:67:1e:2b:8a:c9:e6:e5:55:80: af:cc:92:f7:ee:c8:bd:af:00:70:f2:fb:7b:69:4b: f1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:A8:BC:E8:F2:69:A4:0A:20:B7:5B:11:7B:BA:8C:E8:F1:6A:45:83 X509v3 Authority Key Identifier: keyid:A0:BD:B1:B3:F1:E4:E7:04:EB:4D:4F:2C:E5:FE:34:E6:50:37:B9:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:7e:de:7e:c0:18:5b:46:4b:3d:ac:be:5a:29:31:60:c5:57: 49:05:10:b6:93:0b:7e:0b:60:43:52:fe:7d:33:47:1a:ff:a9: 06:d5:0a:d7:22:2d:c0:6d:f6:89:c6:f2:9a:c7:e2:2b:ad:13: 3a:50:df:ea:31:73:c4:2b:c1:a5:09:fa:9e:6e:46:8e:3c:18: f1:a7:50:ec:35:d8:91:df:4f:da:3c:ad:67:2e:b1:c2:8b:49: cd:b9:52:cf:b2:06:7b:79:7d:07:27:07:aa:06:3b:be:95:0b: 6a:e5:b4:75:a9:fe:12:6f:79:e9:e6:2f:0d:c2:23:55:66:4b: 8f:3f:61:0f:c6:2c:6f:38:28:25:80:e0:07:cf:a2:46:10:4d: 50:2c:c2:cf:5b:aa:bb:74:e3:2b:8e:e6:96:37:3d:ee:57:84: 0a:e5:b6:3a:77:01:72:e7:a4:0c:51:18:8e:d0:bc:26:5a:23: 14:bb:5d:a6:bf:fd:09:24:d6:e0:2b:e2:23:e9:b5:24:9c:46: d3:ec:8d:f5:17:79:3f:9c:a3:f7:b5:fc:bf:8d:26:58:2d:f6: 88:82:de:8d:05:93:6a:0e:27:8f:a4:8e:cc:21:55:a9:9e:3f: 9a:00:cd:fc:3b:0b:96:79:0f:9b:8e:ed:23:07:4a:c2:5a:72: 33:f7:76:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVCODMxMTAvBgNVBAUTKEEwQkRCMUIzRjFFNEU3MDRFQjRENEYyQ0U1RkUzNEU2 NTAzN0I5NDMwHhcNMjUwNzIwMjAyNzU2WhcNMjUwNzI3MjAyNzU2WjAYMRYwFAYD VQQDEw02ODdkNTE0Yy0zYjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpIyap5mBddSEk+YNEv6xYGArqzB6msClp5EaWhqn8NY3Oi0aZRe5Ia6xxu5 CAJC6PEMCzVGmWLw5C1GLcPnYQE18g8Wol86TWqNLpAOpCk/iX6T1ktKyCjfkxI1 aRVP4GZpHRF2M3Qx8Q+r+qumArwfXSYn9NngrhgVDaLfHclplsJzyqAPoTqh6oKd dL7jKi9TzGFMpw8bwrJYnr6VhOmcJ5M399Dl691o8vAtuCBKVLawvx9JQtwT6G/p sg704HviJDVuBTYgVyi+cgGN6H+Jjv+VINB73gywwB7sZxTS4U6LNOhnHiuKyebl VYCvzJL37si9rwBw8vt7aUvx1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJiovOjy aaQKILdbEXu6jOjxakWDMB8GA1UdIwQYMBaAFKC9sbPx5OcE601PLOX+NOZQN7lD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUI4My8wRjQ2Q0E4Q0FE QUYxMUVBODRDMDRFMTBDNEY5QUUwMi9vTDJ4c19IazV3VHJUVThzNWY0MDVsQTN1 VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29MMnhzX0hrNXdUclRVOHM1ZjQwNWxBM3VVTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUI4My8wRjQ2Q0E4Q0FEQUYxMUVBODRDMDRFMTBDNEY5QUUwMi9vTDJ4c19IazV3 VHJUVThzNWY0MDVsQTN1VU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0ft5+wBhbRks9rL5aKTFgxVdJBRC2kwt+C2BDUv59M0ca/6kG1QrX Ii3AbfaJxvKax+IrrRM6UN/qMXPEK8GlCfqebkaOPBjxp1DsNdiR30/aPK1nLrHC i0nNuVLPsgZ7eX0HJweqBju+lQtq5bR1qf4Sb3np5i8NwiNVZkuPP2EPxixvOCgl gOAHz6JGEE1QLMLPW6q7dOMrjuaWNz3uV4QK5bY6dwFy56QMURiO0LwmWiMUu12m v/0JJNbgK+Ij6bUknEbT7I31F3k/nKP3tfy/jSZYLfaIgt6NBZNqDiePpI7MIVWp nj+aAM38OwuWeQ+bju0jB0rCWnIz93Yk -----END CERTIFICATE-----Generated at Tue Jul 22 05:01:22 2025 by rpki-client