$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.mft File: uOlsag2VSKKgQMvnGZdFun2x7Sg.mft (raw, json) Hash identifier: NEiV2AJK+D+5o9CaWrMv+3ubcA+iqqJj5jDHXt2TprM= Subject key identifier: 59:1E:73:6F:69:3C:10:4D:76:77:6A:23:C9:04:34:1C:CE:96:9A:6A Authority key identifier: B8:E9:6C:6A:0D:95:48:A2:A0:40:CB:E7:19:97:45:BA:7D:B1:ED:28 Certificate issuer: /CN=A91B2D29/serialNumber=B8E96C6A0D9548A2A040CBE7199745BA7DB1ED28 Certificate serial: 09CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOlsag2VSKKgQMvnGZdFun2x7Sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.mft Manifest number: 46C7 Signing time: Sun 20 Jul 2025 15:48:58 +0000 Manifest this update: Sun 20 Jul 2025 15:48:57 +0000 Manifest next update: Sun 27 Jul 2025 15:48:57 +0000 Files and hashes: 1: uOlsag2VSKKgQMvnGZdFun2x7Sg.crl (hash: OwaSEcIzL5zuDpABE5Mv73ieV6aNVSoEYgElZEvg5lU=) 2: 7CEC1452E17E11ECAB421316C4F9AE02.roa (hash: HQMuxFH+p0cd5TxCsDJ5OnEAYnLT5yZN5O7uVIpfgdA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.crl rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOlsag2VSKKgQMvnGZdFun2x7Sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 15:48:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2508 (0x9cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D29, serialNumber=B8E96C6A0D9548A2A040CBE7199745BA7DB1ED28 Validity Not Before: Jul 20 15:48:57 2025 GMT Not After : Jul 27 15:48:57 2025 GMT Subject: CN=687d0fea-1546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:42:88:3c:a2:f3:0b:dc:11:7a:c9:86:a1:20: 36:f2:3e:5f:e3:29:be:e3:87:ab:32:cb:48:78:e2: 83:ea:ef:f5:57:fe:64:cf:76:37:62:4f:00:d2:09: 4e:24:1f:22:fa:b7:2d:ec:8a:2f:aa:0a:4f:fa:cc: 71:a2:a8:d3:a5:cd:99:82:ba:80:75:5a:4c:09:6e: 05:47:eb:65:97:d8:a0:fc:69:f7:cd:2f:1f:f5:09: 6d:1a:38:77:da:19:fd:7e:a7:72:d9:84:ca:e8:01: b7:c7:6e:e4:21:2a:7f:73:d8:11:01:9f:0f:06:33: 51:92:ed:cd:15:25:ef:a7:e9:17:b7:dd:80:25:95: e4:86:66:d1:ef:e8:73:22:2b:a1:30:af:e4:75:77: 2c:47:18:68:de:06:4e:a6:41:43:c4:95:8e:10:7b: 1e:06:f6:b3:4b:fa:1a:c2:fd:27:d6:05:62:6b:ad: 1c:e0:f5:82:f3:d3:19:71:cf:76:90:0a:91:7b:08: 3f:8a:40:15:31:96:fe:de:4d:2d:5a:9c:be:b2:57: 3b:3d:87:d7:4a:d9:c3:60:26:e5:f1:1a:a8:e2:8c: fc:e6:df:16:9e:ab:0d:d4:4a:5c:0f:52:d6:0a:f9: 35:d3:54:5d:0f:90:65:4c:9d:6f:c4:45:f6:7a:1c: 03:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:1E:73:6F:69:3C:10:4D:76:77:6A:23:C9:04:34:1C:CE:96:9A:6A X509v3 Authority Key Identifier: keyid:B8:E9:6C:6A:0D:95:48:A2:A0:40:CB:E7:19:97:45:BA:7D:B1:ED:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOlsag2VSKKgQMvnGZdFun2x7Sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:2e:1e:7e:23:32:89:45:58:5e:dc:f7:80:fa:13:47:27:94: f2:f4:9c:c4:39:2e:ee:1b:89:be:e9:db:11:3e:70:6f:33:ef: 16:a6:0f:68:f9:a5:9c:db:55:0e:3c:2f:1d:66:b1:e6:91:3c: 10:3d:fd:31:ac:25:9c:f3:79:4c:f3:28:5e:70:b7:ec:90:6f: 8e:b8:c5:c5:23:c8:c2:13:1d:e1:ee:49:73:37:87:f6:3e:63: 7f:7b:ca:34:9c:26:b1:49:99:ca:d1:98:ce:bb:04:c5:10:6b: 53:2d:3c:76:58:c6:f0:44:61:06:22:9b:1f:fa:31:7c:a8:99: fa:ef:13:19:60:17:19:88:e3:28:c0:6d:9f:20:98:90:fd:d4: b0:63:f0:bf:05:4f:44:98:92:78:0a:a8:26:e3:b2:73:c4:95: fd:3f:c1:80:14:4e:d9:ed:13:ab:db:fd:89:fa:67:c6:1d:2a: ae:35:0f:ec:d4:d6:49:9c:d0:70:13:bd:57:10:a7:34:31:88: 47:fd:45:fe:08:b9:7e:8f:ea:32:68:77:1f:b0:ce:6a:24:48: b9:0b:dd:bf:b8:d3:28:35:d3:5a:e9:8b:da:44:76:78:c9:5f: 0c:32:c6:28:df:5c:a3:c2:91:4b:5c:18:55:e6:a6:15:1d:61: ca:56:6b:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJEMjkxMTAvBgNVBAUTKEI4RTk2QzZBMEQ5NTQ4QTJBMDQwQ0JFNzE5OTc0NUJB N0RCMUVEMjgwHhcNMjUwNzIwMTU0ODU3WhcNMjUwNzI3MTU0ODU3WjAYMRYwFAYD VQQDEw02ODdkMGZlYS0xNTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwEKIPKLzC9wResmGoSA28j5f4ym+44erMstIeOKD6u/1V/5kz3Y3Yk8A0glO JB8i+rct7IovqgpP+sxxoqjTpc2ZgrqAdVpMCW4FR+tll9ig/Gn3zS8f9QltGjh3 2hn9fqdy2YTK6AG3x27kISp/c9gRAZ8PBjNRku3NFSXvp+kXt92AJZXkhmbR7+hz IiuhMK/kdXcsRxho3gZOpkFDxJWOEHseBvazS/oawv0n1gVia60c4PWC89MZcc92 kAqRewg/ikAVMZb+3k0tWpy+slc7PYfXStnDYCbl8Rqo4oz85t8WnqsN1EpcD1LW Cvk101RdD5BlTJ1vxEX2ehwDXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFkec29p PBBNdndqI8kENBzOlppqMB8GA1UdIwQYMBaAFLjpbGoNlUiioEDL5xmXRbp9se0o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkQyOS9GNzFFNzE2NjU1 MjExMUU1QURCMjA5MkFDNEY5QUUwMi91T2xzYWcyVlNLS2dRTXZuR1pkRnVuMng3 U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VPbHNhZzJWU0tLZ1FNdm5HWmRGdW4yeDdTZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkQyOS9GNzFFNzE2NjU1MjExMUU1QURCMjA5MkFDNEY5QUUwMi91T2xzYWcyVlNL S2dRTXZuR1pkRnVuMng3U2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDLh5+IzKJRVhe3PeA+hNHJ5Ty9JzEOS7uG4m+6dsRPnBvM+8Wpg9o +aWc21UOPC8dZrHmkTwQPf0xrCWc83lM8yhecLfskG+OuMXFI8jCEx3h7klzN4f2 PmN/e8o0nCaxSZnK0ZjOuwTFEGtTLTx2WMbwRGEGIpsf+jF8qJn67xMZYBcZiOMo wG2fIJiQ/dSwY/C/BU9EmJJ4Cqgm47JzxJX9P8GAFE7Z7ROr2/2J+mfGHSquNQ/s 1NZJnNBwE71XEKc0MYhH/UX+CLl+j+oyaHcfsM5qJEi5C92/uNMoNdNa6YvaRHZ4 yV8MMsYo31yjwpFLXBhV5qYVHWHKVmt+ -----END CERTIFICATE-----Generated at Mon Jul 21 05:41:58 2025 by rpki-client