$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft File: Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft (raw, json) Hash identifier: zZPRvA2vJd5/1QzNrFsU3fDjEUeEGleT5V6R6NnkQJs= Subject key identifier: 11:6B:5B:80:CB:32:8D:74:6C:EB:C6:21:88:1C:1B:00:4A:F3:8C:99 Authority key identifier: 39:CE:15:DB:36:73:9A:22:CA:EE:64:E0:CF:8B:A3:1F:5A:6B:93:48 Certificate issuer: /CN=A91DF863/serialNumber=39CE15DB36739A22CAEE64E0CF8BA31F5A6B9348 Certificate serial: 3338 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft Manifest number: 32E2 Signing time: Thu 24 Jul 2025 15:27:48 +0000 Manifest this update: Thu 24 Jul 2025 15:27:47 +0000 Manifest next update: Thu 31 Jul 2025 15:27:47 +0000 Files and hashes: 1: Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl (hash: PWpOcRsmWrddLNzkqdgZIDhyZJJzeTtWNWJNG1qxm8I=) 2: 844CFD1C5BAA11EFBAF22B7FC4F9AE02.roa (hash: F0EI0pjKdFSXXJaNRIeZAVVcc/1UvTOq8MA6ZbeocbA=) 3: 902F4AAC567011EFA451BD7CC4F9AE02.roa (hash: qmlGrSLmYcGa18yom8d6PeePfMWIiWVkajsGQGVwEAE=) 4: 909AA4DC567011EFA451BD7CC4F9AE02.roa (hash: eNA7hmO0iaDh6B8QriE+uJJoAJhe22m7Y0RORTwFmBQ=) 5: 834D7D565BAA11EFBAF22B7FC4F9AE02.roa (hash: TJYAsaduMNFlCfCtpHImQhHzTtlz3kZi3/4L+kmyEYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 15:27:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13112 (0x3338) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF863, serialNumber=39CE15DB36739A22CAEE64E0CF8BA31F5A6B9348 Validity Not Before: Jul 24 15:27:47 2025 GMT Not After : Jul 31 15:27:47 2025 GMT Subject: CN=688250f4-21df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a4:8c:4f:41:71:f8:1e:66:cc:40:02:ab:5d: 52:18:82:a2:91:54:dc:40:11:18:92:4a:d1:85:9f: e0:10:55:a5:39:08:7c:f7:04:78:0c:b5:13:73:8d: db:77:e9:a9:53:15:13:c9:f3:a7:c9:6c:39:00:3e: 60:ac:fe:72:a2:6e:72:f9:9b:8b:65:e0:99:06:53: ce:86:89:00:29:3b:45:5f:a5:05:34:7a:bd:bb:25: 4f:51:18:b9:99:e2:8f:67:62:d3:af:b1:e4:a8:aa: 7a:9b:13:69:1b:89:4f:b2:c7:c7:90:ec:b7:d7:aa: 81:9a:61:4a:75:f3:1b:81:67:b9:4c:e8:7b:c3:89: 27:63:e7:37:f3:9b:de:e6:c0:70:e0:55:c8:0b:2e: 21:f7:b0:de:16:d6:b2:37:87:be:25:fa:19:ed:77: c2:f2:8d:05:51:ef:af:88:9f:6c:94:38:39:91:4c: 5c:cc:83:ee:77:86:82:31:c5:e7:0f:c7:52:da:d3: 27:69:24:9c:90:aa:3f:6a:0c:16:44:63:8d:9a:1a: 26:81:9a:f6:27:9d:3d:54:c0:ef:2a:33:cb:3c:8b: c0:36:17:31:34:10:bb:77:59:29:18:78:d0:a0:1e: 29:1e:68:c9:34:0f:53:22:0f:e3:ab:32:dd:0e:d2: 60:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:6B:5B:80:CB:32:8D:74:6C:EB:C6:21:88:1C:1B:00:4A:F3:8C:99 X509v3 Authority Key Identifier: keyid:39:CE:15:DB:36:73:9A:22:CA:EE:64:E0:CF:8B:A3:1F:5A:6B:93:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:10:24:3f:d6:9d:75:31:62:c2:d0:dc:36:1d:bf:5c:4d:00: 35:97:b8:90:70:9e:6b:39:a3:e8:b5:dc:77:83:e1:88:ed:26: bb:58:de:9a:6b:5a:84:eb:50:52:e2:1d:71:11:07:89:36:5c: 4b:23:57:94:c3:75:1b:9f:38:0d:ce:fd:b5:50:f7:83:74:20: 9e:2f:32:04:c0:e2:49:11:3e:c1:f8:b8:2a:05:60:55:e4:e5: d1:e9:e6:de:a9:10:aa:76:14:16:75:c0:a7:9f:6b:17:f1:74: 24:1f:9d:db:1a:53:4f:83:39:19:10:3a:4c:63:2c:6d:3e:91: 65:13:e4:9d:1e:13:52:58:7a:16:14:7f:cb:69:a0:75:b6:2a: 99:cb:ea:da:f7:c0:fa:26:65:8f:77:b8:65:ef:9c:04:64:f5: 8d:42:82:55:50:95:80:90:43:67:b3:bb:3d:85:07:c9:cd:63: 82:10:ab:9b:5a:04:2e:2d:f4:0a:94:08:6d:f6:0c:60:61:66: 8b:a3:51:8d:ae:f0:9b:52:1c:31:e4:f3:30:93:bf:70:42:8f: 8d:0a:87:c7:62:b4:bc:b4:a3:c8:ff:f0:bd:90:33:6d:70:99: 2b:8c:3b:a6:ba:2a:4d:e6:89:cb:31:7a:bf:2c:87:41:7e:24: 46:c5:6f:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY4NjMxMTAvBgNVBAUTKDM5Q0UxNURCMzY3MzlBMjJDQUVFNjRFMENGOEJBMzFG NUE2QjkzNDgwHhcNMjUwNzI0MTUyNzQ3WhcNMjUwNzMxMTUyNzQ3WjAYMRYwFAYD VQQDEw02ODgyNTBmNC0yMWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxaSMT0Fx+B5mzEACq11SGIKikVTcQBEYkkrRhZ/gEFWlOQh89wR4DLUTc43b d+mpUxUTyfOnyWw5AD5grP5yom5y+ZuLZeCZBlPOhokAKTtFX6UFNHq9uyVPURi5 meKPZ2LTr7HkqKp6mxNpG4lPssfHkOy316qBmmFKdfMbgWe5TOh7w4knY+c385ve 5sBw4FXICy4h97DeFtayN4e+JfoZ7XfC8o0FUe+viJ9slDg5kUxczIPud4aCMcXn D8dS2tMnaSSckKo/agwWRGONmhomgZr2J509VMDvKjPLPIvANhcxNBC7d1kpGHjQ oB4pHmjJNA9TIg/jqzLdDtJgEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBFrW4DL Mo10bOvGIYgcGwBK84yZMB8GA1UdIwQYMBaAFDnOFds2c5oiyu5k4M+Lox9aa5NI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjg2My9CRkU1NEE2ODgx NUIxMUUyOUI1OEE3M0IzMjkyQjVFOC9PYzRWMnpaem1pTEs3bVRnejR1akgxcHJr MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09jNFYyelp6bWlMSzdtVGd6NHVqSDFwcmswZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Rjg2My9CRkU1NEE2ODgxNUIxMUUyOUI1OEE3M0IzMjkyQjVFOC9PYzRWMnpaem1p TEs3bVRnejR1akgxcHJrMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQECQ/1p11MWLC0Nw2Hb9cTQA1l7iQcJ5rOaPotdx3g+GI7Sa7WN6a a1qE61BS4h1xEQeJNlxLI1eUw3UbnzgNzv21UPeDdCCeLzIEwOJJET7B+LgqBWBV 5OXR6ebeqRCqdhQWdcCnn2sX8XQkH53bGlNPgzkZEDpMYyxtPpFlE+SdHhNSWHoW FH/LaaB1tiqZy+ra98D6JmWPd7hl75wEZPWNQoJVUJWAkENns7s9hQfJzWOCEKub WgQuLfQKlAht9gxgYWaLo1GNrvCbUhwx5PMwk79wQo+NCofHYrS8tKPI//C9kDNt cJkrjDumuipN5onLMXq/LIdBfiRGxW+d -----END CERTIFICATE-----Generated at Fri Jul 25 01:13:02 2025 by rpki-client