$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft File: uOpx0E7INugYCHPJ6dQM0uNVNwE.mft (raw, json) Hash identifier: YonxvMDtp3DHzLUcb7Q8RgTtuCDuyNIaxrjJoIAZ3Jc= Subject key identifier: 78:0F:11:63:B6:12:2A:E4:0D:A0:05:F3:87:75:19:B5:EA:6E:8B:6D Authority key identifier: B8:EA:71:D0:4E:C8:36:E8:18:08:73:C9:E9:D4:0C:D2:E3:55:37:01 Certificate issuer: /CN=A91CCF10/serialNumber=B8EA71D04EC836E8180873C9E9D40CD2E3553701 Certificate serial: 0211 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft Manifest number: 0200 Signing time: Mon 21 Jul 2025 02:28:21 +0000 Manifest this update: Mon 21 Jul 2025 02:28:21 +0000 Manifest next update: Mon 28 Jul 2025 02:28:21 +0000 Files and hashes: 1: uOpx0E7INugYCHPJ6dQM0uNVNwE.crl (hash: bW4ERwPUd4/Sxobt3PRkqGltmORbuNLrHAKWnzIaMI4=) 2: CC74271E8A8711ED98572D26C4F9AE02.roa (hash: rGioCcK4Zr+knzNA5J2qJp6M9oaPBmCCilGkVDkio+Y=) 3: 4D54B546616411F0B65D5F70C4F9AE02.roa (hash: CJJ1swHPV2FS2o94pZ274vtIWz1N4ntGwGv8bt1RfcY=) 4: C9E35E848A8711ED98572D26C4F9AE02.roa (hash: eHox8CScwy17I91npttE3xAPIO9P1S6yAPyglPvKM8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.crl rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 02:28:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 529 (0x211) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCF10, serialNumber=B8EA71D04EC836E8180873C9E9D40CD2E3553701 Validity Not Before: Jul 21 02:28:21 2025 GMT Not After : Jul 28 02:28:21 2025 GMT Subject: CN=687da5c5-fe1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:93:cd:ad:89:e3:40:12:a1:cd:45:6a:f3:8a: 9c:e0:73:10:37:ee:1e:c3:52:a2:e3:8a:d1:ee:34: 67:56:ce:3c:dc:de:42:32:9d:9c:cc:28:60:0b:47: 61:59:07:72:0c:09:ee:4e:58:40:10:f0:8f:df:53: 90:8d:91:14:13:63:8c:06:59:8d:77:2f:50:90:2a: b0:db:08:62:3e:ca:4a:37:44:e3:fd:46:68:3c:62: 8a:cf:15:7c:60:f6:02:02:e7:02:7e:c1:b3:bf:df: 48:ba:20:9a:59:cf:dd:27:31:5b:00:10:6f:bf:be: 54:e9:c6:4b:7f:72:1a:24:1b:88:70:c6:8d:dd:5b: 2b:52:65:9b:1a:fe:cd:8a:2a:d0:19:f2:64:cf:21: 9a:ea:ab:cc:5e:b8:46:1c:4b:c9:e9:6f:82:d1:23: 3d:11:32:66:48:89:46:fb:4b:8b:d9:bb:d8:28:ad: 11:50:ce:95:37:92:4a:bd:3a:68:8e:2d:36:58:df: 38:7a:a6:38:ed:43:df:7b:8f:2d:a0:0d:68:cd:e4: e7:0f:db:05:38:60:ab:83:fc:f5:b3:27:b0:ff:ed: 0c:33:cb:32:e5:7f:5f:66:04:e3:4d:c8:88:4f:87: 8e:1a:0c:e6:a0:bd:76:15:94:d5:a0:4e:47:ea:19: fb:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:0F:11:63:B6:12:2A:E4:0D:A0:05:F3:87:75:19:B5:EA:6E:8B:6D X509v3 Authority Key Identifier: keyid:B8:EA:71:D0:4E:C8:36:E8:18:08:73:C9:E9:D4:0C:D2:E3:55:37:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:f7:51:ec:d7:46:70:2a:e9:ec:dc:93:51:37:d1:ff:c8:41: fa:09:44:ee:c7:a1:22:ee:f0:5f:f7:13:db:9c:28:a8:0b:db: a8:1d:ca:97:8e:4f:83:8c:6f:c3:43:28:f1:c5:1e:96:ca:29: 50:90:9c:f0:85:13:e6:b8:e8:0d:eb:69:e0:a1:72:bf:c4:32: 47:6e:c3:c2:c2:5a:68:43:9b:06:1e:e6:29:00:d5:6b:3f:61: 7e:32:06:93:3b:86:58:10:07:88:b9:1c:51:99:da:90:31:23: c0:59:15:9e:e7:c6:66:e3:e4:b1:d8:9b:24:fe:99:1d:94:fa: 54:77:d0:ac:22:ac:94:07:74:de:66:42:b2:d9:5d:cf:40:f6: e4:50:3d:a9:b1:d1:ae:4f:ed:bf:90:d4:c6:96:44:4b:a4:a1: 09:2d:ca:c4:2c:d5:c8:14:c2:3a:88:93:66:17:c0:30:6e:ec: 10:8f:b9:fc:e2:71:81:7e:0c:a9:f9:2a:4f:07:19:18:41:df: 06:dd:cc:f0:18:f2:08:60:55:f5:09:d2:4b:ac:b7:18:8f:d0: 4e:77:a0:78:c8:83:1c:16:4d:e9:b3:16:bb:15:d0:85:5d:1d: 96:25:f7:a8:14:bc:d3:43:b8:ff:36:07:7d:34:9e:f9:b2:04: e1:e3:aa:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NGMTAxMTAvBgNVBAUTKEI4RUE3MUQwNEVDODM2RTgxODA4NzNDOUU5RDQwQ0Qy RTM1NTM3MDEwHhcNMjUwNzIxMDIyODIxWhcNMjUwNzI4MDIyODIxWjAYMRYwFAYD VQQDEw02ODdkYTVjNS1mZTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwpPNrYnjQBKhzUVq84qc4HMQN+4ew1Ki44rR7jRnVs483N5CMp2czChgC0dh WQdyDAnuTlhAEPCP31OQjZEUE2OMBlmNdy9QkCqw2whiPspKN0Tj/UZoPGKKzxV8 YPYCAucCfsGzv99IuiCaWc/dJzFbABBvv75U6cZLf3IaJBuIcMaN3VsrUmWbGv7N iirQGfJkzyGa6qvMXrhGHEvJ6W+C0SM9ETJmSIlG+0uL2bvYKK0RUM6VN5JKvTpo ji02WN84eqY47UPfe48toA1ozeTnD9sFOGCrg/z1syew/+0MM8sy5X9fZgTjTciI T4eOGgzmoL12FZTVoE5H6hn7QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHgPEWO2 EirkDaAF84d1GbXqbottMB8GA1UdIwQYMBaAFLjqcdBOyDboGAhzyenUDNLjVTcB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0YxMC9FQzY3MzMzRTYw OTAxMUVEQTY3OTFBMERDNEY5QUUwMi91T3B4MEU3SU51Z1lDSFBKNmRRTTB1TlZO d0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VPcHgwRTdJTnVnWUNIUEo2ZFFNMHVOVk53RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0YxMC9FQzY3MzMzRTYwOTAxMUVEQTY3OTFBMERDNEY5QUUwMi91T3B4MEU3SU51 Z1lDSFBKNmRRTTB1TlZOd0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAI91Hs10ZwKuns3JNRN9H/yEH6CUTux6Ei7vBf9xPbnCioC9uoHcqX jk+DjG/DQyjxxR6WyilQkJzwhRPmuOgN62ngoXK/xDJHbsPCwlpoQ5sGHuYpANVr P2F+MgaTO4ZYEAeIuRxRmdqQMSPAWRWe58Zm4+Sx2Jsk/pkdlPpUd9CsIqyUB3Te ZkKy2V3PQPbkUD2psdGuT+2/kNTGlkRLpKEJLcrELNXIFMI6iJNmF8AwbuwQj7n8 4nGBfgyp+SpPBxkYQd8G3czwGPIIYFX1CdJLrLcYj9BOd6B4yIMcFk3psxa7FdCF XR2WJfeoFLzTQ7j/Ngd9NJ75sgTh46py -----END CERTIFICATE-----Generated at Mon Jul 21 12:35:30 2025 by rpki-client