$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.mft File: MO7z6BnpmwANZl9r1ZSvpMYiai4.mft (raw, json) Hash identifier: pBFcFV58Do6p0pl3ismDpjg3oKXLm6Nxzwm8d0FgLMU= Subject key identifier: 2F:0E:78:B8:E8:6C:8B:E5:E2:FA:5D:40:1B:44:D6:5B:98:68:55:7D Authority key identifier: 30:EE:F3:E8:19:E9:9B:00:0D:66:5F:6B:D5:94:AF:A4:C6:22:6A:2E Certificate issuer: /CN=A91D5D9F/serialNumber=30EEF3E819E99B000D665F6BD594AFA4C6226A2E Certificate serial: 0226 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MO7z6BnpmwANZl9r1ZSvpMYiai4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.mft Manifest number: 0221 Signing time: Mon 21 Jul 2025 02:15:30 +0000 Manifest this update: Mon 21 Jul 2025 02:15:30 +0000 Manifest next update: Mon 28 Jul 2025 02:15:30 +0000 Files and hashes: 1: MO7z6BnpmwANZl9r1ZSvpMYiai4.crl (hash: 23hdqmmSE7m3V27uPuN2r16Pxgkqnm3xyiEx/unTwoU=) 2: D7803F3A3A5511EDB9410C50C4F9AE02.roa (hash: 5RvSp27bzJLpaJnE9Vp9OHr3zH1Dq7i1O2ke5dqvusQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.crl rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MO7z6BnpmwANZl9r1ZSvpMYiai4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 02:15:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 550 (0x226) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5D9F, serialNumber=30EEF3E819E99B000D665F6BD594AFA4C6226A2E Validity Not Before: Jul 21 02:15:30 2025 GMT Not After : Jul 28 02:15:30 2025 GMT Subject: CN=687da2c2-7892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6a:3b:8e:45:a0:fb:47:7a:6b:e6:31:4b:aa: e7:58:ae:51:ed:19:7b:24:59:8a:c9:40:36:85:da: eb:4a:e0:68:6f:30:b4:17:18:aa:33:35:76:1e:c6: 6f:1f:6c:d5:25:ea:50:db:36:7a:86:76:05:99:3a: c1:d1:c7:a2:19:c5:e5:41:08:6c:8e:bd:a2:07:d6: f6:b6:b9:44:db:d0:c3:bf:8e:11:35:85:35:fa:90: 2f:a7:bd:92:89:b8:b7:fe:89:28:a3:f4:09:03:60: e3:eb:56:e7:cf:37:03:bd:cf:c2:f6:d9:03:df:b3: fa:6e:ba:1d:4c:03:ae:69:cf:0c:e2:df:32:48:24: 4a:22:bb:ad:07:d7:f0:e5:36:eb:a0:ed:2d:70:79: 2f:6d:21:67:bd:1d:14:ff:30:2e:2a:b9:49:53:39: 4f:cb:1a:65:b7:e3:d7:df:0c:58:58:a6:56:96:28: 38:1d:83:15:4d:fd:45:7d:7c:09:9b:2e:0a:11:76: 15:06:46:02:e1:5b:be:38:61:a8:02:37:85:5b:12: fb:e1:04:d9:93:d9:32:05:e2:6d:83:9c:db:d9:a9: 32:fe:92:ad:ce:8b:7e:7d:00:02:57:cb:e0:90:f3: c8:5b:55:79:4d:aa:4c:ba:07:9a:d3:bf:35:a7:40: cc:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:0E:78:B8:E8:6C:8B:E5:E2:FA:5D:40:1B:44:D6:5B:98:68:55:7D X509v3 Authority Key Identifier: keyid:30:EE:F3:E8:19:E9:9B:00:0D:66:5F:6B:D5:94:AF:A4:C6:22:6A:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MO7z6BnpmwANZl9r1ZSvpMYiai4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:89:89:9a:f0:a3:e1:0f:10:a3:4b:52:ca:04:40:ec:90:be: 1d:85:b7:dd:8e:4c:a6:c2:99:b7:e7:53:74:f8:e2:2b:fb:6c: 0c:76:f4:f5:97:e7:a2:50:8c:fb:a2:c7:48:95:0c:da:15:0b: 75:6b:ad:2b:f6:6a:7a:c2:12:02:f1:7b:9a:bb:f4:cc:46:3a: 03:53:0e:22:18:6d:a6:76:60:db:ab:8e:c2:9d:39:86:fa:ec: c3:ba:58:d0:d5:fe:c6:d3:df:34:4c:64:88:47:63:d4:23:93: 25:63:e9:43:3f:85:f4:de:b6:11:dd:00:73:8c:41:93:87:a1: db:90:21:95:af:6e:76:d2:cd:bb:e0:a7:23:04:32:4b:26:ee: 7d:ee:a1:65:4c:95:34:5f:59:4a:17:66:4c:85:c8:8c:ad:33: 3f:c9:08:5b:e5:64:c1:9d:08:ec:97:79:c9:f6:ee:a1:b1:e4: 7b:39:c0:e3:94:11:92:d8:58:aa:8c:8d:97:97:6c:d7:58:8a: 65:cc:bf:cb:18:52:42:57:6b:87:2f:ac:fa:f7:22:8f:a8:8f: 76:f5:0b:74:cc:1a:40:2e:22:98:09:36:e6:d4:f2:60:20:5e: bd:a5:d8:80:c2:5c:bb:26:e7:c3:2a:6e:13:db:dd:3a:f4:2e: 5a:3d:9d:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVEOUYxMTAvBgNVBAUTKDMwRUVGM0U4MTlFOTlCMDAwRDY2NUY2QkQ1OTRBRkE0 QzYyMjZBMkUwHhcNMjUwNzIxMDIxNTMwWhcNMjUwNzI4MDIxNTMwWjAYMRYwFAYD VQQDEw02ODdkYTJjMi03ODkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmo7jkWg+0d6a+YxS6rnWK5R7Rl7JFmKyUA2hdrrSuBobzC0FxiqMzV2HsZv H2zVJepQ2zZ6hnYFmTrB0ceiGcXlQQhsjr2iB9b2trlE29DDv44RNYU1+pAvp72S ibi3/okoo/QJA2Dj61bnzzcDvc/C9tkD37P6brodTAOuac8M4t8ySCRKIrutB9fw 5TbroO0tcHkvbSFnvR0U/zAuKrlJUzlPyxplt+PX3wxYWKZWlig4HYMVTf1FfXwJ my4KEXYVBkYC4Vu+OGGoAjeFWxL74QTZk9kyBeJtg5zb2aky/pKtzot+fQACV8vg kPPIW1V5TapMugea0781p0DM/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC8OeLjo bIvl4vpdQBtE1luYaFV9MB8GA1UdIwQYMBaAFDDu8+gZ6ZsADWZfa9WUr6TGImou MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUQ5Ri85MjZGMzMzRTNB NEYxMUVEQjdCNkFFMjBDNEY5QUUwMi9NTzd6NkJucG13QU5abDlyMVpTdnBNWWlh aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01PN3o2Qm5wbXdBTlpsOXIxWlN2cE1ZaWFpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUQ5Ri85MjZGMzMzRTNBNEYxMUVEQjdCNkFFMjBDNEY5QUUwMi9NTzd6NkJucG13 QU5abDlyMVpTdnBNWWlhaTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/iYma8KPhDxCjS1LKBEDskL4dhbfdjkymwpm351N0+OIr+2wMdvT1 l+eiUIz7osdIlQzaFQt1a60r9mp6whIC8Xuau/TMRjoDUw4iGG2mdmDbq47CnTmG +uzDuljQ1f7G0980TGSIR2PUI5MlY+lDP4X03rYR3QBzjEGTh6HbkCGVr2520s27 4KcjBDJLJu597qFlTJU0X1lKF2ZMhciMrTM/yQhb5WTBnQjsl3nJ9u6hseR7OcDj lBGS2FiqjI2Xl2zXWIplzL/LGFJCV2uHL6z69yKPqI929Qt0zBpALiKYCTbm1PJg IF69pdiAwly7JufDKm4T29069C5aPZ14 -----END CERTIFICATE-----Generated at Mon Jul 21 05:43:36 2025 by rpki-client