$ rpki-client -vvf rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft File: 4OynvFsloMo3TZqDzEz5DdbPIgk.mft (raw, json) Hash identifier: RKkQMoQpmC9yhodNW08M1RK/vjNFDTVHs31mPKferzo= Subject key identifier: 58:FD:FC:C9:10:D5:7E:65:70:9B:08:B9:AD:08:87:68:16:B0:11:BE Authority key identifier: E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09 Certificate issuer: /CN=A91C74B5/serialNumber=E0ECA7BC5B25A0CA374D9A83CC4CF90DD6CF2209 Certificate serial: 0181 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft Manifest number: 0173 Signing time: Wed 23 Jul 2025 04:02:22 +0000 Manifest this update: Wed 23 Jul 2025 04:02:21 +0000 Manifest next update: Wed 30 Jul 2025 04:02:21 +0000 Files and hashes: 1: 4OynvFsloMo3TZqDzEz5DdbPIgk.crl (hash: aG+qQMjomOuS+b47lZlylOhA0Gtdn4PecSKivU/ZF80=) 2: FBCA5E628A4E11EE8EFFA44BC4F9AE02.roa (hash: n7d+wfVovpgFh/VPuHK0Be+tZJiAokXkxVBH6z58Cdo=) 3: 23E0203034AF11EE90E6263DC4F9AE02.roa (hash: qRwojUTlxnLhuw/Mk800h2tw73R4wHeoNMLoVaIWLSQ=) 4: FE53F0DE34AA11EE85FF0735C4F9AE02.roa (hash: FSryM40tOFsx9/9SakfMh/QfDHk+qmxC9WGqNR/nxQA=) 5: 2343647034AF11EE90E6263DC4F9AE02.roa (hash: O7wU5uPOsDFh8TlK1r/cSTqhuO+kftwlxz4zNibCfJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 04:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 385 (0x181) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C74B5, serialNumber=E0ECA7BC5B25A0CA374D9A83CC4CF90DD6CF2209 Validity Not Before: Jul 23 04:02:21 2025 GMT Not After : Jul 30 04:02:21 2025 GMT Subject: CN=68805ece-d314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:bf:d2:db:2f:a1:ad:c6:e6:04:9b:f3:c1:f2: 7a:cf:da:df:a3:ac:34:1b:4d:cf:a6:34:4d:12:bd: 6a:7d:69:7c:3b:48:ff:33:51:0f:60:cb:33:85:b5: 35:ef:6d:c4:35:0c:ae:5e:01:a2:8b:9f:a0:28:ff: ce:bb:13:a4:a7:dc:ca:ce:ed:43:5f:c5:d4:fb:5f: c3:75:c7:9e:48:a6:22:c2:ba:04:bf:ae:ea:d9:9c: 40:ed:0c:25:d5:b1:7d:34:78:7e:79:67:7a:0d:b6: b0:38:64:74:9d:1e:80:22:f0:f0:ec:e9:32:90:3b: 37:41:cf:41:05:bd:f0:5e:74:78:49:75:6f:01:d6: 82:a3:1e:5f:52:b3:47:b8:d0:a5:45:04:2b:5d:a0: 88:84:35:1b:a9:4c:a6:5b:fc:22:0c:b8:a8:71:ff: f1:92:74:0e:dd:a2:0b:af:c9:cd:1f:7d:b6:ad:66: 40:ef:49:9a:08:e9:c3:07:ae:57:08:d3:b2:8f:ee: fc:ad:df:ae:3e:80:79:f9:68:ac:c4:b8:36:f7:ba: 74:44:43:d2:0c:fa:8d:fd:a5:9e:df:fd:dc:12:5d: 0c:d3:59:d3:cb:5a:09:62:b7:4f:4c:06:d7:5b:ea: ca:fd:c1:68:71:d3:ec:3c:ef:91:fc:a1:94:db:85: ef:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:FD:FC:C9:10:D5:7E:65:70:9B:08:B9:AD:08:87:68:16:B0:11:BE X509v3 Authority Key Identifier: keyid:E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:fb:32:a8:e0:1d:de:ac:95:f1:a1:88:ce:ec:c2:7a:8d:b9: b7:ce:7f:25:f1:b0:fd:8e:77:0f:e1:84:ef:c0:c0:49:89:46: 9f:29:c5:ba:f0:f8:45:e9:92:40:2b:a0:58:98:a4:12:fb:f0: 84:af:6c:3a:c1:37:de:67:e3:cb:57:0f:f6:4f:2d:0c:14:7f: 1e:2c:fc:75:de:96:a1:dc:ad:75:03:bc:c0:b0:67:55:93:bf: 89:13:57:6a:c3:ff:e5:e6:48:21:f2:56:8a:14:37:8c:f2:62: 45:1e:93:7e:f7:7b:26:ab:45:de:e8:f6:31:3c:05:a2:f8:71: ea:65:4e:3e:1e:9b:15:52:f7:ad:78:20:eb:71:c9:3f:84:27: c5:42:d8:e7:67:f2:40:dc:67:68:42:2c:09:e1:01:f9:c3:20: 72:5d:fa:21:a9:f6:1f:7d:3b:d7:1d:12:a0:9d:bc:89:ba:6b: 25:cc:a6:98:21:da:34:5c:ae:ff:cb:fa:26:ab:6a:02:f3:d7: e2:5e:f8:e2:39:7e:0d:e2:a4:89:f2:9e:28:b9:6d:c5:71:44: 5c:b9:14:06:3b:59:1f:09:70:be:bc:a4:f0:7d:18:54:2d:8a: c6:38:97:45:1c:e2:46:1b:3b:0a:8b:2a:8a:31:14:66:aa:c4: 75:36:a2:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc0QjUxMTAvBgNVBAUTKEUwRUNBN0JDNUIyNUEwQ0EzNzREOUE4M0NDNENGOTBE RDZDRjIyMDkwHhcNMjUwNzIzMDQwMjIxWhcNMjUwNzMwMDQwMjIxWjAYMRYwFAYD VQQDEw02ODgwNWVjZS1kMzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+L/S2y+hrcbmBJvzwfJ6z9rfo6w0G03PpjRNEr1qfWl8O0j/M1EPYMszhbU1 723ENQyuXgGii5+gKP/OuxOkp9zKzu1DX8XU+1/DdceeSKYiwroEv67q2ZxA7Qwl 1bF9NHh+eWd6DbawOGR0nR6AIvDw7OkykDs3Qc9BBb3wXnR4SXVvAdaCox5fUrNH uNClRQQrXaCIhDUbqUymW/wiDLiocf/xknQO3aILr8nNH322rWZA70maCOnDB65X CNOyj+78rd+uPoB5+WisxLg297p0REPSDPqN/aWe3/3cEl0M01nTy1oJYrdPTAbX W+rK/cFocdPsPO+R/KGU24XvYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFj9/MkQ 1X5lcJsIua0Ih2gWsBG+MB8GA1UdIwQYMBaAFODsp7xbJaDKN02ag8xM+Q3WzyIJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzRCNS85ODA0MzU2RTM0 QUExMUVFQTA2QUUxMzNDNEY5QUUwMi80T3ludkZzbG9NbzNUWnFEekV6NURkYlBJ Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRPeW52RnNsb01vM1RacUR6RXo1RGRiUElnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzRCNS85ODA0MzU2RTM0QUExMUVFQTA2QUUxMzNDNEY5QUUwMi80T3ludkZzbG9N bzNUWnFEekV6NURkYlBJZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAI+zKo4B3erJXxoYjO7MJ6jbm3zn8l8bD9jncP4YTvwMBJiUafKcW6 8PhF6ZJAK6BYmKQS+/CEr2w6wTfeZ+PLVw/2Ty0MFH8eLPx13pah3K11A7zAsGdV k7+JE1dqw//l5kgh8laKFDeM8mJFHpN+93smq0Xe6PYxPAWi+HHqZU4+HpsVUvet eCDrcck/hCfFQtjnZ/JA3GdoQiwJ4QH5wyByXfohqfYffTvXHRKgnbyJumslzKaY Ido0XK7/y/omq2oC89fiXvjiOX4N4qSJ8p4ouW3FcURcuRQGO1kfCXC+vKTwfRhU LYrGOJdFHOJGGzsKiyqKMRRmqsR1NqL3 -----END CERTIFICATE-----Generated at Thu Jul 24 08:32:00 2025 by rpki-client