$ rpki-client -vvf rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft File: o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft (raw, json) Hash identifier: y8wN94cCikIddMuxHBF89GFKSiyH0xzpH0DdW9Y9pyE= Subject key identifier: 6B:51:49:6F:56:87:9E:52:2A:8D:25:5E:8A:0F:DB:01:64:69:BA:24 Authority key identifier: A3:47:1C:31:53:3B:88:D1:BF:8A:40:A3:2A:7D:DE:3B:A0:BB:1C:BF Certificate issuer: /CN=A91C913E/serialNumber=A3471C31533B88D1BF8A40A32A7DDE3BA0BB1CBF Certificate serial: 034B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft Manifest number: 0346 Signing time: Mon 21 Jul 2025 01:18:30 +0000 Manifest this update: Mon 21 Jul 2025 01:18:29 +0000 Manifest next update: Mon 28 Jul 2025 01:18:29 +0000 Files and hashes: 1: o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl (hash: /Uoxrrar38VeFjSv67NaiMt1O9ZgGENThWiC3eNSYq0=) 2: 24578ECED56A11EFB764F716C4F9AE02.roa (hash: t5WMcFCD2OO+gp845WzQi07gNbar1uWW5UXsijptYhw=) 3: 1445557CC6C011EC9D09EF1DC4F9AE02.roa (hash: JL3deikXqirsZKv5Pglr4MkJVud4y4Ww4HTgjluu/lA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 01:18:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 843 (0x34b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C913E, serialNumber=A3471C31533B88D1BF8A40A32A7DDE3BA0BB1CBF Validity Not Before: Jul 21 01:18:29 2025 GMT Not After : Jul 28 01:18:29 2025 GMT Subject: CN=687d9565-64f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:02:b3:b5:e9:8f:cc:87:98:91:2a:f1:70:42: 44:9a:af:95:0d:19:d9:62:f8:14:ae:0c:b7:fc:bd: 3b:57:ca:7e:e7:10:01:f3:62:d4:ab:5e:a9:f3:0f: f8:a7:07:11:5a:d5:e7:99:44:4f:9d:f4:3c:71:fb: 99:2f:cf:e4:78:79:d2:de:31:12:1a:0b:7a:36:61: 31:4a:a4:e1:9c:38:69:d7:a2:72:80:fa:6a:72:82: b2:69:36:ba:4a:60:ea:ab:08:b5:d8:fa:79:80:b1: 07:48:f1:7d:67:e3:05:08:85:87:d8:a2:4f:0a:9d: 2f:bf:01:4e:ea:9f:25:53:5a:5c:fd:dd:f2:e0:54: 3c:a8:cf:e3:ec:88:23:8c:68:84:f0:97:c0:a2:ba: a9:69:5c:df:66:e9:da:d2:39:d8:89:b8:58:1b:e0: 22:96:35:cd:94:ec:1a:1d:52:59:9b:0e:89:10:02: 4a:e4:de:e7:fe:5d:93:a9:34:b8:b4:64:38:62:49: 78:13:59:19:90:f8:79:0e:6d:99:01:ea:54:b3:52: 31:41:a9:a3:2e:e7:fd:de:f1:47:1d:34:97:0f:8e: b0:21:be:79:a5:3d:6a:81:30:68:43:f3:b5:7e:fd: 63:7a:0a:b7:e7:50:25:ea:c5:c4:a0:82:4d:ea:82: 15:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:51:49:6F:56:87:9E:52:2A:8D:25:5E:8A:0F:DB:01:64:69:BA:24 X509v3 Authority Key Identifier: keyid:A3:47:1C:31:53:3B:88:D1:BF:8A:40:A3:2A:7D:DE:3B:A0:BB:1C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:7c:7b:9c:80:02:ca:91:fa:cb:4f:b6:3f:86:09:1e:c7:d0: 80:80:f0:fd:df:25:7c:1a:b3:5d:93:a4:92:18:69:26:bb:4f: b1:e5:de:87:05:87:df:15:0a:e6:5a:d1:36:d4:2a:99:7d:df: 78:e7:f2:64:39:35:d2:34:14:b2:e9:be:2b:98:cc:aa:77:fe: fd:96:a5:9e:f4:5f:68:57:68:c2:b5:5a:de:bb:8e:fc:e5:b6: 43:46:27:37:e9:66:e8:3e:bc:bc:ea:93:3d:aa:59:06:8c:4c: 24:9e:59:51:43:b1:5b:ce:2a:6d:56:b3:44:63:43:30:47:20: 72:6e:b1:be:ed:58:f5:ce:75:38:33:e1:aa:56:a1:64:58:72: db:d0:01:6e:4f:81:ff:04:0e:74:6d:89:cb:3c:70:d9:a1:36: 0c:3e:53:29:9c:51:97:9c:16:47:9c:6a:d6:97:86:5f:7a:0a: 76:81:42:70:c0:e9:f6:6c:85:80:8a:e0:ef:0c:f6:af:39:3b: d2:a5:88:1f:18:48:cd:7d:cd:b9:db:87:d2:4f:a6:4b:4f:4f: 98:38:68:48:0b:96:d3:0f:94:42:23:75:e0:ac:01:e6:fe:45: c5:75:fe:16:02:b2:e0:32:7a:bb:7b:98:fd:58:9f:26:83:5c: 1d:1b:ff:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkxM0UxMTAvBgNVBAUTKEEzNDcxQzMxNTMzQjg4RDFCRjhBNDBBMzJBN0RERTNC QTBCQjFDQkYwHhcNMjUwNzIxMDExODI5WhcNMjUwNzI4MDExODI5WjAYMRYwFAYD VQQDEw02ODdkOTU2NS02NGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxwKztemPzIeYkSrxcEJEmq+VDRnZYvgUrgy3/L07V8p+5xAB82LUq16p8w/4 pwcRWtXnmURPnfQ8cfuZL8/keHnS3jESGgt6NmExSqThnDhp16JygPpqcoKyaTa6 SmDqqwi12Pp5gLEHSPF9Z+MFCIWH2KJPCp0vvwFO6p8lU1pc/d3y4FQ8qM/j7Igj jGiE8JfAorqpaVzfZuna0jnYibhYG+AiljXNlOwaHVJZmw6JEAJK5N7n/l2TqTS4 tGQ4Ykl4E1kZkPh5Dm2ZAepUs1IxQamjLuf93vFHHTSXD46wIb55pT1qgTBoQ/O1 fv1jegq351Al6sXEoIJN6oIVMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGtRSW9W h55SKo0lXooP2wFkabokMB8GA1UdIwQYMBaAFKNHHDFTO4jRv4pAoyp93juguxy/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTEzRS9ERDA4OThGMEM2 QkQxMUVDODk2Mzc0MURDNEY5QUUwMi9vMGNjTVZNN2lOR19pa0NqS24zZU82QzdI TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28wY2NNVk03aU5HX2lrQ2pLbjNlTzZDN0hMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTEzRS9ERDA4OThGMEM2QkQxMUVDODk2Mzc0MURDNEY5QUUwMi9vMGNjTVZNN2lO R19pa0NqS24zZU82QzdITDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwfHucgALKkfrLT7Y/hgkex9CAgPD93yV8GrNdk6SSGGkmu0+x5d6H BYffFQrmWtE21CqZfd945/JkOTXSNBSy6b4rmMyqd/79lqWe9F9oV2jCtVreu478 5bZDRic36WboPry86pM9qlkGjEwknllRQ7FbziptVrNEY0MwRyBybrG+7Vj1znU4 M+GqVqFkWHLb0AFuT4H/BA50bYnLPHDZoTYMPlMpnFGXnBZHnGrWl4Zfegp2gUJw wOn2bIWAiuDvDPavOTvSpYgfGEjNfc2524fST6ZLT0+YOGhIC5bTD5RCI3XgrAHm /kXFdf4WArLgMnq7e5j9WJ8mg1wdG//j -----END CERTIFICATE-----Generated at Mon Jul 21 07:43:21 2025 by rpki-client