$ rpki-client -vvf rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft File: OoeHHjuuZe3i8xuxrVxZu3p0q90.mft (raw, json) Hash identifier: mlr3F/mnIubEjzrsOCjv9Nz1AKZ1OANnnt7OEoDyhdY= Subject key identifier: 10:BD:63:FC:9F:11:F6:F2:CE:4D:73:CC:33:E9:8D:12:27:BB:CD:35 Authority key identifier: 3A:87:87:1E:3B:AE:65:ED:E2:F3:1B:B1:AD:5C:59:BB:7A:74:AB:DD Certificate issuer: /CN=A91B87FC/serialNumber=3A87871E3BAE65EDE2F31BB1AD5C59BB7A74ABDD Certificate serial: 97 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft Manifest number: 94 Signing time: Sat 19 Jul 2025 06:40:12 +0000 Manifest this update: Sat 19 Jul 2025 06:40:11 +0000 Manifest next update: Sat 26 Jul 2025 06:40:11 +0000 Files and hashes: 1: OoeHHjuuZe3i8xuxrVxZu3p0q90.crl (hash: +wI0K67w1ZLPeFLtM+fI7bMR37aw/txF+LYZL1Cr9Z0=) 2: 5E85AD042B1B11F0AE3E223BC4F9AE02.roa (hash: ehnqd1f3QowHKupxZCgtiZG9EfVwv3NoZQIQlB2w/i4=) 3: 64517A3886E311EFA2B33527C4F9AE02.roa (hash: a8PUztMZjKwlO5oAsBw+JL1gQU9NMI2G6jad/TSX5I0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.crl rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:40:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 151 (0x97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B87FC, serialNumber=3A87871E3BAE65EDE2F31BB1AD5C59BB7A74ABDD Validity Not Before: Jul 19 06:40:11 2025 GMT Not After : Jul 26 06:40:11 2025 GMT Subject: CN=687b3dcb-a22d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0a:55:a5:b5:ad:82:ed:8f:9b:9c:2b:f4:6d: 9f:c1:3c:9e:fe:62:7b:28:f3:e3:5c:e3:ad:e4:0c: 0f:f8:e5:82:69:3a:b3:63:89:2a:31:0e:96:94:50: cc:ae:01:d2:95:56:25:b3:65:aa:b9:5d:91:93:49: 48:65:50:be:63:ce:50:72:ce:bb:58:6b:1e:12:33: ec:4a:e7:bb:1a:26:46:f1:e3:21:8d:b8:a7:8e:6d: 90:6c:85:07:33:c8:28:b5:d1:aa:6d:97:0b:72:72: 93:82:a2:b1:46:8e:2c:76:2e:8b:e9:cf:a2:db:9a: a5:87:56:b5:2c:1c:65:25:b4:00:50:bd:8c:49:b4: 64:d3:0e:50:02:90:8f:a3:a6:06:63:ee:5f:6a:b7: 21:b0:8f:55:82:50:9d:fc:20:70:6e:85:f5:b1:95: 2c:65:2a:72:34:16:c7:7a:93:98:11:0c:61:b7:2a: aa:57:16:b4:a5:9a:ca:40:38:8c:cb:27:a3:f4:51: 66:15:c4:6f:35:7d:dd:29:67:d9:4c:27:c9:4b:b2: 6d:b7:6a:ec:08:59:5d:de:9f:24:ad:95:b0:64:9c: cc:72:1c:9c:66:2f:d3:18:d9:30:43:11:c9:1e:b0: d1:97:81:bf:4f:d0:4a:c0:28:eb:64:b1:fd:96:43: c5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:BD:63:FC:9F:11:F6:F2:CE:4D:73:CC:33:E9:8D:12:27:BB:CD:35 X509v3 Authority Key Identifier: keyid:3A:87:87:1E:3B:AE:65:ED:E2:F3:1B:B1:AD:5C:59:BB:7A:74:AB:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:09:89:cf:5d:9d:a1:be:e8:d5:98:bc:5d:64:33:99:5d:f2: 6a:62:bc:99:db:e9:d6:db:86:76:22:d3:ac:41:b0:59:17:22: 17:e2:aa:2a:dc:25:29:76:23:29:e1:b1:cf:0b:9a:12:c4:86: f4:f4:67:61:8a:58:7b:ea:67:f3:ce:aa:8d:f1:e4:24:b0:86: 78:54:d9:c9:e4:3e:0f:aa:fd:68:ae:a2:e2:b3:b6:81:c9:07: 1a:5e:8a:23:7e:ee:38:c5:6c:67:df:91:bb:03:4d:d5:ea:75: 42:e2:51:52:ea:ad:4a:bc:be:55:30:a0:19:20:2e:da:49:22: 72:b5:3c:84:c0:89:1c:ba:e7:5f:c8:18:27:e7:87:00:59:f0: 97:61:9b:62:1a:85:75:95:b1:b1:92:ca:76:4c:ce:ad:fb:0a: 61:e7:a7:dc:bb:3a:43:93:f0:8b:a3:96:89:19:02:12:c8:b9: 45:2b:b6:d1:1c:fd:09:f5:ad:32:e1:48:93:d9:1b:a9:20:55: d7:5c:8c:07:98:cd:ec:ee:bd:99:4a:f2:5d:1b:1a:45:89:c6: 23:20:18:47:78:ae:a0:2b:7f:07:9c:73:d4:79:43:e0:c6:c8: e3:47:2d:86:17:78:de:e3:3d:f9:75:cb:44:1b:08:92:45:c4: 03:f0:e8:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg3RkMxMTAvBgNVBAUTKDNBODc4NzFFM0JBRTY1RURFMkYzMUJCMUFENUM1OUJC N0E3NEFCREQwHhcNMjUwNzE5MDY0MDExWhcNMjUwNzI2MDY0MDExWjAYMRYwFAYD VQQDEw02ODdiM2RjYi1hMjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmwpVpbWtgu2Pm5wr9G2fwTye/mJ7KPPjXOOt5AwP+OWCaTqzY4kqMQ6WlFDM rgHSlVYls2WquV2Rk0lIZVC+Y85Qcs67WGseEjPsSue7GiZG8eMhjbinjm2QbIUH M8gotdGqbZcLcnKTgqKxRo4sdi6L6c+i25qlh1a1LBxlJbQAUL2MSbRk0w5QApCP o6YGY+5farchsI9VglCd/CBwboX1sZUsZSpyNBbHepOYEQxhtyqqVxa0pZrKQDiM yyej9FFmFcRvNX3dKWfZTCfJS7Jtt2rsCFld3p8krZWwZJzMchycZi/TGNkwQxHJ HrDRl4G/T9BKwCjrZLH9lkPFlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBC9Y/yf Efbyzk1zzDPpjRInu801MB8GA1UdIwQYMBaAFDqHhx47rmXt4vMbsa1cWbt6dKvd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODdGQy8zOTc4RTMxNjg2 RTExMUVGOEY3NzNGODJDNEY5QUUwMi9Pb2VISGp1dVplM2k4eHV4clZ4WnUzcDBx OTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09vZUhIanV1WmUzaTh4dXhyVnhadTNwMHE5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODdGQy8zOTc4RTMxNjg2RTExMUVGOEY3NzNGODJDNEY5QUUwMi9Pb2VISGp1dVpl M2k4eHV4clZ4WnUzcDBxOTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDCYnPXZ2hvujVmLxdZDOZXfJqYryZ2+nW24Z2ItOsQbBZFyIX4qoq 3CUpdiMp4bHPC5oSxIb09Gdhilh76mfzzqqN8eQksIZ4VNnJ5D4Pqv1orqLis7aB yQcaXoojfu44xWxn35G7A03V6nVC4lFS6q1KvL5VMKAZIC7aSSJytTyEwIkcuudf yBgn54cAWfCXYZtiGoV1lbGxksp2TM6t+wph56fcuzpDk/CLo5aJGQISyLlFK7bR HP0J9a0y4UiT2RupIFXXXIwHmM3s7r2ZSvJdGxpFicYjIBhHeK6gK38HnHPUeUPg xsjjRy2GF3je4z35dctEGwiSRcQD8OgD -----END CERTIFICATE-----Generated at Sun Jul 20 03:43:00 2025 by rpki-client