$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft File: 1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft (raw, json) Hash identifier: d3YgOTtDLkb7O3tayuuX6DO9hFgQJJ0KaSoslOXQJ/M= Subject key identifier: FC:4B:70:2A:26:A0:8D:75:A3:1A:EF:67:F1:60:EB:9C:61:4E:30:4A Authority key identifier: D6:80:BF:3A:79:6A:35:5B:12:5A:60:2C:74:66:B9:A5:6D:34:42:54 Certificate issuer: /CN=A91AAE16/serialNumber=D680BF3A796A355B125A602C7466B9A56D344254 Certificate serial: 0FC7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft Manifest number: 0FBE Signing time: Fri 18 Jul 2025 17:40:30 +0000 Manifest this update: Fri 18 Jul 2025 17:40:30 +0000 Manifest next update: Fri 25 Jul 2025 17:40:30 +0000 Files and hashes: 1: 1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl (hash: /4iK77rj10qMEZSEdLaJ8JAFa3oM5jxOABYPb4qfSq4=) 2: 682B76C05BB211E9BF474F16C4F9AE02.roa (hash: vKLtsTjRDQmvaoDy2+JZ+X/edFfE0cROOj6FdGkYWZw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:40:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4039 (0xfc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAE16, serialNumber=D680BF3A796A355B125A602C7466B9A56D344254 Validity Not Before: Jul 18 17:40:30 2025 GMT Not After : Jul 25 17:40:30 2025 GMT Subject: CN=687a870e-1867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:27:16:0d:9a:54:a8:08:db:d5:84:f5:e4:76: b4:e7:fc:a2:c1:c9:d8:e9:33:cb:9a:c4:82:ed:e5: 17:83:6b:93:9f:14:b0:4f:b8:c5:49:44:cc:ad:f2: f7:56:5d:ab:92:06:ef:b3:7a:12:eb:7d:1d:47:6d: 6e:6c:2c:1e:ea:eb:72:42:30:c8:18:fb:f8:dd:23: a6:1c:a6:51:5e:12:53:b2:eb:6f:6c:fc:c8:25:20: da:e5:0e:6d:4b:59:d6:47:2c:0e:82:ce:ff:f8:51: 2e:3d:fc:6e:1c:8b:b6:d4:85:ff:fa:50:10:70:34: b1:ba:19:71:fc:4a:b6:d2:ee:4d:77:d5:8c:fe:ee: 7b:00:32:bc:f5:85:9b:fc:86:72:e9:e7:18:d4:80: 3a:0b:20:61:67:7c:7b:33:f5:d7:da:5d:63:17:95: c2:77:fb:17:5e:30:0a:ee:77:03:dc:84:eb:9f:31: fe:40:db:2f:3a:da:cd:13:06:71:38:e1:8e:5e:48: e5:c9:d9:fd:27:88:55:44:4e:d7:73:54:b3:e1:37: 43:8d:24:3d:8a:2d:36:a1:5d:92:35:01:89:e3:c6: f6:86:d9:a9:7f:5b:1e:41:09:2a:cb:ad:e8:57:64: 43:71:78:47:3d:42:3b:92:02:57:a2:76:00:54:9b: fa:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:4B:70:2A:26:A0:8D:75:A3:1A:EF:67:F1:60:EB:9C:61:4E:30:4A X509v3 Authority Key Identifier: keyid:D6:80:BF:3A:79:6A:35:5B:12:5A:60:2C:74:66:B9:A5:6D:34:42:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:fd:a6:1b:fc:15:51:17:ea:e4:43:8b:c2:2a:95:90:f9:32: ec:58:a9:28:eb:4c:57:4c:c9:16:65:1f:30:2a:35:b3:b1:bd: 65:ab:5b:d1:db:3a:45:00:a2:18:74:be:b8:de:01:19:61:c8: a1:12:6b:2e:d7:22:b3:4b:dd:87:61:c3:03:2f:4e:2f:64:2a: 44:02:b5:5c:02:0a:04:f5:b2:5b:a4:49:d6:71:de:bc:6c:e9: 4e:d7:ce:7e:79:43:7b:33:f4:9f:2f:9c:c1:98:d9:1c:9a:a8: 03:7b:13:a1:21:d1:d9:fe:d1:e7:cb:7a:c8:f8:20:9e:6c:68: 57:e0:16:ec:29:95:4f:28:4b:42:2c:b4:47:ac:02:c2:83:59: 0a:7b:b3:d6:81:b0:39:e1:7b:ab:48:2c:b1:4b:f8:7f:72:58: 95:24:e4:f4:c3:37:08:16:46:c5:7d:2c:52:2f:ff:f2:35:80: 90:03:df:5d:10:05:43:9d:8c:50:b6:45:f3:63:4c:b1:b2:e8: 06:66:14:ee:85:62:10:a4:9f:02:ce:19:89:df:53:e6:31:45: e1:9c:18:10:54:cf:84:71:98:dd:2e:e5:01:ab:8b:59:94:fa: 2c:68:cb:b5:c1:1f:18:31:b5:07:bf:5a:ec:83:74:23:d2:bb: d2:b2:94:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFMTYxMTAvBgNVBAUTKEQ2ODBCRjNBNzk2QTM1NUIxMjVBNjAyQzc0NjZCOUE1 NkQzNDQyNTQwHhcNMjUwNzE4MTc0MDMwWhcNMjUwNzI1MTc0MDMwWjAYMRYwFAYD VQQDEw02ODdhODcwZS0xODY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0icWDZpUqAjb1YT15Ha05/yiwcnY6TPLmsSC7eUXg2uTnxSwT7jFSUTMrfL3 Vl2rkgbvs3oS630dR21ubCwe6utyQjDIGPv43SOmHKZRXhJTsutvbPzIJSDa5Q5t S1nWRywOgs7/+FEuPfxuHIu21IX/+lAQcDSxuhlx/Eq20u5Nd9WM/u57ADK89YWb /IZy6ecY1IA6CyBhZ3x7M/XX2l1jF5XCd/sXXjAK7ncD3ITrnzH+QNsvOtrNEwZx OOGOXkjlydn9J4hVRE7Xc1Sz4TdDjSQ9ii02oV2SNQGJ48b2htmpf1seQQkqy63o V2RDcXhHPUI7kgJXonYAVJv6VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPxLcCom oI11oxrvZ/Fg65xhTjBKMB8GA1UdIwQYMBaAFNaAvzp5ajVbElpgLHRmuaVtNEJU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUUxNi8wRUFDRjgyQzVC QjExMUU5OEIxMDNCMTNDNEY5QUUwMi8xb0NfT25scU5Wc1NXbUFzZEdhNXBXMDBR bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFvQ19PbmxxTlZzU1dtQXNkR2E1cFcwMFFsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUUxNi8wRUFDRjgyQzVCQjExMUU5OEIxMDNCMTNDNEY5QUUwMi8xb0NfT25scU5W c1NXbUFzZEdhNXBXMDBRbFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCb/aYb/BVRF+rkQ4vCKpWQ+TLsWKko60xXTMkWZR8wKjWzsb1lq1vR 2zpFAKIYdL643gEZYcihEmsu1yKzS92HYcMDL04vZCpEArVcAgoE9bJbpEnWcd68 bOlO185+eUN7M/SfL5zBmNkcmqgDexOhIdHZ/tHny3rI+CCebGhX4BbsKZVPKEtC LLRHrALCg1kKe7PWgbA54XurSCyxS/h/cliVJOT0wzcIFkbFfSxSL//yNYCQA99d EAVDnYxQtkXzY0yxsugGZhTuhWIQpJ8CzhmJ31PmMUXhnBgQVM+EcZjdLuUBq4tZ lPosaMu1wR8YMbUHv1rsg3Qj0rvSspTE -----END CERTIFICATE-----Generated at Sun Jul 20 16:30:39 2025 by rpki-client