$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD4DF/310D3542399311EFA08D2E1BC4F9AE02/o222tflxI3VeVEH6xWqmu6BbCAo.mft File: o222tflxI3VeVEH6xWqmu6BbCAo.mft (raw, json) Hash identifier: GwAkIEICENKi5SjoNfalqit+RwQlhaExf1hPZdaPoMw= Subject key identifier: 16:C2:BE:5E:3F:3B:EC:00:B0:D5:B0:62:5B:69:98:95:8D:3A:27:FA Authority key identifier: A3:6D:B6:B5:F9:71:23:75:5E:54:41:FA:C5:6A:A6:BB:A0:5B:08:0A Certificate issuer: /CN=A91BD4DF/serialNumber=A36DB6B5F97123755E5441FAC56AA6BBA05B080A Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o222tflxI3VeVEH6xWqmu6BbCAo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD4DF/310D3542399311EFA08D2E1BC4F9AE02/o222tflxI3VeVEH6xWqmu6BbCAo.mft Manifest number: C7 Signing time: Sat 19 Jul 2025 06:00:12 +0000 Manifest this update: Sat 19 Jul 2025 06:00:12 +0000 Manifest next update: Sat 26 Jul 2025 06:00:12 +0000 Files and hashes: 1: o222tflxI3VeVEH6xWqmu6BbCAo.crl (hash: ibPEEdPWz5xLa+v4FTaU9nQCI26DXXvjjo7zVYW+GBI=) 2: 4136642C39AA11EF933F9583C4F9AE02.roa (hash: +fFDWaDnFu7mpfAvBElCeG8uNXNIs5iwZjBDkX/SJz0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD4DF/310D3542399311EFA08D2E1BC4F9AE02/o222tflxI3VeVEH6xWqmu6BbCAo.crl rsync://rpki.apnic.net/member_repository/A91BD4DF/310D3542399311EFA08D2E1BC4F9AE02/o222tflxI3VeVEH6xWqmu6BbCAo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o222tflxI3VeVEH6xWqmu6BbCAo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD4DF, serialNumber=A36DB6B5F97123755E5441FAC56AA6BBA05B080A Validity Not Before: Jul 19 06:00:12 2025 GMT Not After : Jul 26 06:00:12 2025 GMT Subject: CN=687b346c-fad9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:eb:07:84:6e:68:8a:ea:c2:d5:81:78:f7:a1: c9:cd:1f:ec:30:ae:7c:71:41:cb:4b:b5:f6:7c:22: 33:98:ee:0a:53:f3:4e:af:14:ad:1e:c1:ea:5d:ab: 28:08:2e:9e:70:e4:2f:b4:67:6b:11:c4:97:be:7d: c6:e4:a5:31:a9:d9:b4:2f:de:c7:fa:3a:fd:9b:56: c6:4d:d0:69:48:47:52:b3:03:08:30:a3:9b:b5:1a: 49:66:20:ee:15:e0:89:32:e5:bf:32:11:a1:2b:5c: 07:14:7d:4e:b9:f6:94:3a:ab:9a:de:42:27:de:65: 63:e9:2c:6c:84:c7:1c:88:08:bc:dd:f8:5b:ff:2b: 81:41:41:b5:91:34:c0:9f:40:ea:c9:ee:59:98:d2: 62:90:a0:24:b7:88:d9:36:50:a5:0c:d2:99:4d:4a: 61:0a:a4:04:cf:c6:2f:b5:96:3b:8d:3b:af:13:3a: 5c:d6:f7:e6:52:92:ef:22:75:15:11:56:7d:81:49: 8b:a2:62:6d:f4:e9:90:b6:2b:b8:5e:93:62:9c:27: c2:ff:db:2b:b9:41:f5:7f:10:9b:17:c4:ae:fc:a0: 3c:52:e6:dc:c7:4c:c9:61:60:6d:b3:76:40:4e:57: f0:49:f8:e7:ca:71:9a:af:69:75:e4:43:40:06:cd: 3e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C2:BE:5E:3F:3B:EC:00:B0:D5:B0:62:5B:69:98:95:8D:3A:27:FA X509v3 Authority Key Identifier: keyid:A3:6D:B6:B5:F9:71:23:75:5E:54:41:FA:C5:6A:A6:BB:A0:5B:08:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD4DF/310D3542399311EFA08D2E1BC4F9AE02/o222tflxI3VeVEH6xWqmu6BbCAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o222tflxI3VeVEH6xWqmu6BbCAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD4DF/310D3542399311EFA08D2E1BC4F9AE02/o222tflxI3VeVEH6xWqmu6BbCAo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:d7:05:63:56:e2:ea:8a:cc:36:ce:b7:49:59:4f:08:e7:c5: 7e:a4:b4:3c:54:84:23:77:99:56:dd:88:91:60:74:85:e2:8b: 53:e2:94:27:9b:f8:10:4b:39:39:3d:9c:57:6c:cd:f7:42:eb: 4b:d9:ea:0c:29:d5:1b:70:8d:26:c7:3b:ee:30:61:b7:51:b6: 23:8c:bf:bf:e2:74:f5:8a:cf:9e:59:d8:3d:4d:18:75:7a:cf: 67:6d:73:1d:0e:82:2b:c3:df:52:fe:80:ba:ed:2a:75:2c:c2: 7f:44:cc:a6:c0:a0:ee:b0:05:17:47:1d:71:45:d8:c2:f9:66: 4a:37:1c:c5:13:fd:42:69:71:7f:9c:13:73:1d:d1:ab:23:63: 24:74:97:61:10:d9:81:ef:d9:6e:d3:4a:1e:9e:00:4c:b6:72: 73:e4:06:86:b8:ab:c9:75:8d:8d:15:40:3b:a3:4f:bf:92:64: 9a:d4:93:b0:82:ff:8f:10:25:a8:32:2c:e2:08:d6:53:4a:a2: 18:61:95:70:67:36:d6:3f:d6:3c:4d:cc:34:d3:d1:d5:3b:12: f4:2f:ad:81:29:0c:45:92:22:68:6a:0c:16:33:e3:5c:7f:de: 3b:ec:16:f7:12:1a:3e:46:40:26:a7:58:59:c8:f8:e3:c4:77: fb:26:2b:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ0REYxMTAvBgNVBAUTKEEzNkRCNkI1Rjk3MTIzNzU1RTU0NDFGQUM1NkFBNkJC QTA1QjA4MEEwHhcNMjUwNzE5MDYwMDEyWhcNMjUwNzI2MDYwMDEyWjAYMRYwFAYD VQQDEw02ODdiMzQ2Yy1mYWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp+sHhG5oiurC1YF496HJzR/sMK58cUHLS7X2fCIzmO4KU/NOrxStHsHqXaso CC6ecOQvtGdrEcSXvn3G5KUxqdm0L97H+jr9m1bGTdBpSEdSswMIMKObtRpJZiDu FeCJMuW/MhGhK1wHFH1OufaUOqua3kIn3mVj6SxshMcciAi83fhb/yuBQUG1kTTA n0Dqye5ZmNJikKAkt4jZNlClDNKZTUphCqQEz8YvtZY7jTuvEzpc1vfmUpLvInUV EVZ9gUmLomJt9OmQtiu4XpNinCfC/9sruUH1fxCbF8Su/KA8Uubcx0zJYWBts3ZA TlfwSfjnynGar2l15ENABs0+EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBbCvl4/ O+wAsNWwYltpmJWNOif6MB8GA1UdIwQYMBaAFKNttrX5cSN1XlRB+sVqprugWwgK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDRERi8zMTBEMzU0MjM5 OTMxMUVGQTA4RDJFMUJDNEY5QUUwMi9vMjIydGZseEkzVmVWRUg2eFdxbXU2QmJD QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28yMjJ0Zmx4STNWZVZFSDZ4V3FtdTZCYkNBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDRERi8zMTBEMzU0MjM5OTMxMUVGQTA4RDJFMUJDNEY5QUUwMi9vMjIydGZseEkz VmVWRUg2eFdxbXU2QmJDQW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBY1wVjVuLqisw2zrdJWU8I58V+pLQ8VIQjd5lW3YiRYHSF4otT4pQn m/gQSzk5PZxXbM33QutL2eoMKdUbcI0mxzvuMGG3UbYjjL+/4nT1is+eWdg9TRh1 es9nbXMdDoIrw99S/oC67Sp1LMJ/RMymwKDusAUXRx1xRdjC+WZKNxzFE/1CaXF/ nBNzHdGrI2MkdJdhENmB79lu00oengBMtnJz5AaGuKvJdY2NFUA7o0+/kmSa1JOw gv+PECWoMiziCNZTSqIYYZVwZzbWP9Y8Tcw009HVOxL0L62BKQxFkiJoagwWM+Nc f9477Bb3Eho+RkAmp1hZyPjjxHf7Jis1 -----END CERTIFICATE-----Generated at Sun Jul 20 15:12:48 2025 by rpki-client