$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.mft File: oPojd21UTId5RsrHxId0ZRmTfbg.mft (raw, json) Hash identifier: 5bDewESIt9B+/+BrsRKVJ0GyftNRO7ZL6inMMagtpXI= Subject key identifier: 02:46:8A:8B:40:04:6F:9A:33:88:B0:A8:B2:8F:21:69:20:B0:23:31 Authority key identifier: A0:FA:23:77:6D:54:4C:87:79:46:CA:C7:C4:87:74:65:19:93:7D:B8 Certificate issuer: /CN=A91DD584/serialNumber=A0FA23776D544C877946CAC7C487746519937DB8 Certificate serial: 89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPojd21UTId5RsrHxId0ZRmTfbg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.mft Manifest number: 86 Signing time: Sat 19 Jul 2025 06:51:44 +0000 Manifest this update: Sat 19 Jul 2025 06:51:43 +0000 Manifest next update: Sat 26 Jul 2025 06:51:43 +0000 Files and hashes: 1: oPojd21UTId5RsrHxId0ZRmTfbg.crl (hash: 20nK8sQv/EcsyKrQ5h46fVZBEgHkkTl6tJo1VxoNFck=) 2: B4C685B09CB111EFA6F8E627C4F9AE02.roa (hash: GuNo7IUV7Thwoh9B3txt8mnx9fY3g5B8M+APQokJxqg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.crl rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPojd21UTId5RsrHxId0ZRmTfbg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:51:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD584, serialNumber=A0FA23776D544C877946CAC7C487746519937DB8 Validity Not Before: Jul 19 06:51:43 2025 GMT Not After : Jul 26 06:51:43 2025 GMT Subject: CN=687b407f-f5d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:21:ad:95:4d:0c:b4:a4:77:cf:d5:ff:14:1e: bc:75:10:6c:ef:ce:6c:cf:50:a3:22:10:88:15:17: e0:68:25:3c:15:ed:44:89:f4:9a:22:f2:81:5d:92: b3:cf:0a:e0:05:cb:a6:b7:db:36:4e:13:4d:b3:00: 52:34:13:f0:8b:6a:1c:d8:c9:b8:22:f7:6d:d7:8d: 10:a4:fa:e8:72:fa:7d:4b:81:25:2f:a0:d5:4d:20: 9c:f5:05:41:b9:fe:42:54:e4:f8:e1:f5:1e:d6:95: 50:86:6f:40:5c:7d:42:36:0a:44:89:37:67:c3:95: 8c:ce:b4:2d:b0:ae:1e:cc:15:dc:30:d4:f9:d4:68: fc:56:f9:f6:71:1b:83:0f:71:76:e2:64:34:87:31: 02:e7:10:a3:37:dc:ee:c1:55:4d:a6:3e:7d:5a:69: 99:f8:ab:57:c4:4d:6d:bc:cd:a7:82:36:b0:c9:a8: dd:df:ff:58:f3:ed:d6:c6:ce:f9:3f:c0:6f:65:30: 70:cf:51:83:fd:ef:d2:e2:5b:38:3e:da:97:b2:01: 7d:42:cf:51:37:5c:b5:98:a7:40:f1:17:aa:fb:6a: ee:c8:09:e5:53:94:45:08:d1:15:d6:fc:4f:93:a5: 81:c9:c9:9d:8d:b9:d2:8e:51:e7:e7:7e:3b:e1:e6: d5:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:46:8A:8B:40:04:6F:9A:33:88:B0:A8:B2:8F:21:69:20:B0:23:31 X509v3 Authority Key Identifier: keyid:A0:FA:23:77:6D:54:4C:87:79:46:CA:C7:C4:87:74:65:19:93:7D:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPojd21UTId5RsrHxId0ZRmTfbg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:7c:5c:53:2b:4b:ab:25:f9:02:56:01:ae:c4:10:52:fb:0e: ac:6c:c7:fb:44:13:46:22:f6:fb:13:77:72:c0:01:92:30:e1: 78:4a:63:c7:5b:67:b1:48:d2:7c:14:cf:74:66:bf:69:04:54: 76:91:16:ed:a4:27:97:2d:27:7d:10:89:bf:29:66:72:a4:be: 0e:a1:0d:27:fe:15:1c:32:10:b9:0c:97:2e:60:0b:32:4c:7c: ab:39:7b:57:3e:00:18:54:e5:18:ad:51:14:e2:f5:f0:f8:87: 8f:59:43:fe:8c:bf:f0:25:e3:d4:76:4a:85:b4:cf:78:a2:20: 76:7f:0b:3b:8b:3f:65:21:53:db:d0:21:11:bc:8a:b5:2f:ba: b2:c1:9e:56:d4:0a:2d:36:a7:af:ae:98:c6:f3:b9:54:cc:d7: 8c:24:23:9f:55:ed:4f:88:56:45:58:87:32:89:b8:fe:c7:f9: 62:16:db:9c:6d:fd:28:fd:7f:70:ce:75:fb:26:2f:20:87:71: a8:6b:a7:49:b8:fa:b3:ea:2d:08:b4:00:bf:91:76:06:7f:c2: e1:5c:14:34:5a:bf:8c:c7:ac:34:4a:29:95:53:6f:5d:76:4a: 0f:02:44:65:e1:76:0e:37:a1:a9:df:df:01:d3:71:a9:a7:5d: e6:43:af:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ1ODQxMTAvBgNVBAUTKEEwRkEyMzc3NkQ1NDRDODc3OTQ2Q0FDN0M0ODc3NDY1 MTk5MzdEQjgwHhcNMjUwNzE5MDY1MTQzWhcNMjUwNzI2MDY1MTQzWjAYMRYwFAYD VQQDEw02ODdiNDA3Zi1mNWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8yGtlU0MtKR3z9X/FB68dRBs785sz1CjIhCIFRfgaCU8Fe1EifSaIvKBXZKz zwrgBcumt9s2ThNNswBSNBPwi2oc2Mm4Ivdt140QpProcvp9S4ElL6DVTSCc9QVB uf5CVOT44fUe1pVQhm9AXH1CNgpEiTdnw5WMzrQtsK4ezBXcMNT51Gj8Vvn2cRuD D3F24mQ0hzEC5xCjN9zuwVVNpj59WmmZ+KtXxE1tvM2ngjawyajd3/9Y8+3Wxs75 P8BvZTBwz1GD/e/S4ls4PtqXsgF9Qs9RN1y1mKdA8Req+2ruyAnlU5RFCNEV1vxP k6WBycmdjbnSjlHn53474ebVQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAJGiotA BG+aM4iwqLKPIWkgsCMxMB8GA1UdIwQYMBaAFKD6I3dtVEyHeUbKx8SHdGUZk324 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDU4NC8zMjcwNzM4MjlD QjExMUVGQUVBMDBEMjVDNEY5QUUwMi9vUG9qZDIxVVRJZDVSc3JIeElkMFpSbVRm YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Qb2pkMjFVVElkNVJzckh4SWQwWlJtVGZiZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDU4NC8zMjcwNzM4MjlDQjExMUVGQUVBMDBEMjVDNEY5QUUwMi9vUG9qZDIxVVRJ ZDVSc3JIeElkMFpSbVRmYmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDfFxTK0urJfkCVgGuxBBS+w6sbMf7RBNGIvb7E3dywAGSMOF4SmPH W2exSNJ8FM90Zr9pBFR2kRbtpCeXLSd9EIm/KWZypL4OoQ0n/hUcMhC5DJcuYAsy THyrOXtXPgAYVOUYrVEU4vXw+IePWUP+jL/wJePUdkqFtM94oiB2fws7iz9lIVPb 0CERvIq1L7qywZ5W1AotNqevrpjG87lUzNeMJCOfVe1PiFZFWIcyibj+x/liFtuc bf0o/X9wznX7Ji8gh3Goa6dJuPqz6i0ItAC/kXYGf8LhXBQ0Wr+Mx6w0SimVU29d dkoPAkRl4XYON6Gp398B03Gpp13mQ69u -----END CERTIFICATE-----Generated at Sun Jul 20 07:45:06 2025 by rpki-client