$ rpki-client -vvf rpki.apnic.net/member_repository/A91D318A/ECFF2AF887E611EE97E6C746C4F9AE02/OhVDvfN3KpjSlOuQAjgD3d3xHmI.mft File: OhVDvfN3KpjSlOuQAjgD3d3xHmI.mft (raw, json) Hash identifier: BPj132U3ochD88KmH/C/VtzimClh6tyX1kQDAzdCNYY= Subject key identifier: 56:C0:1E:FB:89:CE:61:67:48:5A:56:13:CA:22:2E:7E:B9:E4:19:DC Authority key identifier: 3A:15:43:BD:F3:77:2A:98:D2:94:EB:90:02:38:03:DD:DD:F1:1E:62 Certificate issuer: /CN=A91D318A/serialNumber=3A1543BDF3772A98D294EB90023803DDDDF11E62 Certificate serial: 0142 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OhVDvfN3KpjSlOuQAjgD3d3xHmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D318A/ECFF2AF887E611EE97E6C746C4F9AE02/OhVDvfN3KpjSlOuQAjgD3d3xHmI.mft Manifest number: 0139 Signing time: Sat 19 Jul 2025 04:39:46 +0000 Manifest this update: Sat 19 Jul 2025 04:39:46 +0000 Manifest next update: Sat 26 Jul 2025 04:39:46 +0000 Files and hashes: 1: OhVDvfN3KpjSlOuQAjgD3d3xHmI.crl (hash: y2vxD2EX5Y90Xe9KNab/l6eXAFpZwJ4uLgmm2ZBclNA=) 2: 67CB8C7287E711EEAC6C0B48C4F9AE02.roa (hash: F1mmz33PgwMDoRRZC6GtV9seLtgQSAErXHweDotrVWA=) 3: C1BECCFC68ED11EF85713047C4F9AE02.roa (hash: Sezt6J9wGq2uA81TOBF7C4CUuNihzkNfNyFAuKq+xQc=) 4: 675EE9DC87E711EEAC6C0B48C4F9AE02.roa (hash: drw42sYp0Yh/VWP9xaFHuMDcqO3Tii4R1NV32pLiPSM=) 5: 08310D28339011EFA4FD915FC4F9AE02.roa (hash: SpJu5nU/KENpOPLXjRvExSZV1G2bbDwfeZ2+Dj1X+E8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D318A/ECFF2AF887E611EE97E6C746C4F9AE02/OhVDvfN3KpjSlOuQAjgD3d3xHmI.crl rsync://rpki.apnic.net/member_repository/A91D318A/ECFF2AF887E611EE97E6C746C4F9AE02/OhVDvfN3KpjSlOuQAjgD3d3xHmI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OhVDvfN3KpjSlOuQAjgD3d3xHmI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:39:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 322 (0x142) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D318A, serialNumber=3A1543BDF3772A98D294EB90023803DDDDF11E62 Validity Not Before: Jul 19 04:39:46 2025 GMT Not After : Jul 26 04:39:46 2025 GMT Subject: CN=687b2192-2077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7c:5a:0e:1b:52:4b:04:2f:35:8a:d1:02:02: 26:c0:03:0c:9a:47:bc:69:ed:70:46:69:5d:04:bc: a8:fc:6f:97:31:a9:54:aa:10:d7:b1:96:e1:f6:31: 86:7e:86:de:2e:83:c7:6c:f9:ed:b4:4b:da:ce:b4: f7:60:b4:68:a0:86:98:b1:fe:8c:c5:f4:01:5a:7d: 80:f4:ef:d8:e6:51:83:55:fd:7d:e3:b1:34:d2:43: 4b:e5:c9:ee:62:ff:16:df:94:24:40:f8:24:88:a9: 6c:20:71:50:49:1a:96:20:c7:89:68:14:fc:3e:2c: 1c:dd:3a:30:0a:31:a3:77:4b:e1:b9:ff:7f:10:3a: 0c:16:3f:8c:f4:49:ca:a6:06:97:b5:02:9f:73:db: c0:66:09:76:49:ee:20:17:66:22:c4:4f:a3:68:cb: b0:c8:4f:bc:95:4c:c8:73:7f:09:bb:59:ce:78:3b: 4c:00:d4:89:43:fd:03:7c:22:ab:2f:3c:74:fe:47: 5e:67:ff:4c:41:11:5e:34:cb:bf:49:a2:6b:d3:51: fa:c8:fc:ba:83:d1:2e:b4:86:47:a0:ea:02:f9:65: 18:36:31:42:af:13:aa:20:6f:a5:e2:de:97:96:e3: bd:09:81:10:e4:9c:dd:25:90:1d:e9:0d:79:e4:96: c1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:C0:1E:FB:89:CE:61:67:48:5A:56:13:CA:22:2E:7E:B9:E4:19:DC X509v3 Authority Key Identifier: keyid:3A:15:43:BD:F3:77:2A:98:D2:94:EB:90:02:38:03:DD:DD:F1:1E:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D318A/ECFF2AF887E611EE97E6C746C4F9AE02/OhVDvfN3KpjSlOuQAjgD3d3xHmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OhVDvfN3KpjSlOuQAjgD3d3xHmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D318A/ECFF2AF887E611EE97E6C746C4F9AE02/OhVDvfN3KpjSlOuQAjgD3d3xHmI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:b8:0f:80:81:24:2c:4c:e4:48:75:e2:7a:5f:b0:3b:ee:d7: 14:94:dd:59:bc:0e:54:d6:ce:e9:9c:85:6a:ce:63:7d:44:64: 45:7c:d6:e2:0b:69:81:8e:8a:01:a5:4f:70:99:d8:d9:92:d5: c2:0e:89:48:24:7e:f7:87:c7:7c:af:5b:e3:11:13:05:f7:1e: fc:99:5b:3d:67:48:66:90:76:61:ff:98:19:90:37:73:e4:0c: 6d:97:bd:e0:6f:d4:14:1c:40:b8:a3:3b:36:bc:e9:19:af:c7: 50:83:72:53:d2:bd:6f:96:ef:22:f3:3a:ae:4a:42:f0:2b:1b: 4a:c9:55:cb:e5:f7:bf:04:2a:9f:5d:4a:1e:13:f5:90:2d:d5: 18:0b:40:88:71:e8:5c:2b:c0:ab:a5:eb:6e:17:f9:3e:54:14: 2d:8c:19:44:a3:39:9b:85:5e:bf:19:9d:ac:35:c7:a6:b5:a0: de:4e:b0:da:cd:5b:71:65:fb:d9:91:b8:47:f3:11:85:8c:34: f3:dd:b5:b1:cd:86:db:e6:69:b7:05:5b:d1:ca:f6:b9:16:74: 64:0e:97:9b:41:8f:98:03:41:f1:ee:bb:80:2a:1f:e5:72:3c: d5:11:c6:dd:fd:d0:97:16:4f:39:bb:19:81:c3:26:75:c8:f9: 4a:af:95:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMxOEExMTAvBgNVBAUTKDNBMTU0M0JERjM3NzJBOThEMjk0RUI5MDAyMzgwM0RE RERGMTFFNjIwHhcNMjUwNzE5MDQzOTQ2WhcNMjUwNzI2MDQzOTQ2WjAYMRYwFAYD VQQDEw02ODdiMjE5Mi0yMDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs3xaDhtSSwQvNYrRAgImwAMMmke8ae1wRmldBLyo/G+XMalUqhDXsZbh9jGG fobeLoPHbPnttEvazrT3YLRooIaYsf6MxfQBWn2A9O/Y5lGDVf1947E00kNL5cnu Yv8W35QkQPgkiKlsIHFQSRqWIMeJaBT8Piwc3TowCjGjd0vhuf9/EDoMFj+M9EnK pgaXtQKfc9vAZgl2Se4gF2YixE+jaMuwyE+8lUzIc38Ju1nOeDtMANSJQ/0DfCKr Lzx0/kdeZ/9MQRFeNMu/SaJr01H6yPy6g9EutIZHoOoC+WUYNjFCrxOqIG+l4t6X luO9CYEQ5JzdJZAd6Q155JbBBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFbAHvuJ zmFnSFpWE8oiLn655BncMB8GA1UdIwQYMBaAFDoVQ73zdyqY0pTrkAI4A93d8R5i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzE4QS9FQ0ZGMkFGODg3 RTYxMUVFOTdFNkM3NDZDNEY5QUUwMi9PaFZEdmZOM0twalNsT3VRQWpnRDNkM3hI bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09oVkR2Zk4zS3BqU2xPdVFBamdEM2QzeEhtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzE4QS9FQ0ZGMkFGODg3RTYxMUVFOTdFNkM3NDZDNEY5QUUwMi9PaFZEdmZOM0tw alNsT3VRQWpnRDNkM3hIbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTuA+AgSQsTORIdeJ6X7A77tcUlN1ZvA5U1s7pnIVqzmN9RGRFfNbi C2mBjooBpU9wmdjZktXCDolIJH73h8d8r1vjERMF9x78mVs9Z0hmkHZh/5gZkDdz 5Axtl73gb9QUHEC4ozs2vOkZr8dQg3JT0r1vlu8i8zquSkLwKxtKyVXL5fe/BCqf XUoeE/WQLdUYC0CIcehcK8CrpetuF/k+VBQtjBlEozmbhV6/GZ2sNcemtaDeTrDa zVtxZfvZkbhH8xGFjDTz3bWxzYbb5mm3BVvRyva5FnRkDpebQY+YA0Hx7ruAKh/l cjzVEcbd/dCXFk85uxmBwyZ1yPlKr5V9 -----END CERTIFICATE-----Generated at Sun Jul 20 07:29:15 2025 by rpki-client