$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft File: oE50OtMfT4PwncXS9-9Pq-HvaHs.mft (raw, json) Hash identifier: kw/lJJyQ566iCklQJTh4MiSeMToE218ZfF5s30I/1kw= Subject key identifier: 47:D8:4B:FF:76:DA:5D:BB:28:79:8B:09:6C:9A:8E:E0:26:C7:90:9F Authority key identifier: A0:4E:74:3A:D3:1F:4F:83:F0:9D:C5:D2:F7:EF:4F:AB:E1:EF:68:7B Certificate issuer: /CN=A91E0EF8/serialNumber=A04E743AD31F4F83F09DC5D2F7EF4FABE1EF687B Certificate serial: 05E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft Manifest number: 05C8 Signing time: Fri 18 Jul 2025 23:25:51 +0000 Manifest this update: Fri 18 Jul 2025 23:25:50 +0000 Manifest next update: Fri 25 Jul 2025 23:25:50 +0000 Files and hashes: 1: oE50OtMfT4PwncXS9-9Pq-HvaHs.crl (hash: y7+hXsYkH27SYKDsj+chRK3lOiMsAhMu61cIfpb5p7A=) 2: 2F581CEA33F311EEABFC7410C4F9AE02.roa (hash: weFEOxrVQ1R73fykzCNyC6/gZBqdWvZXSpKP3W9J0hQ=) 3: 180DF9BE93C711EDB3D8A867C4F9AE02.roa (hash: SoMp5duXOAwol503IxpDfQSWDWEVUuEjZp2f9lzEdw8=) 4: 1767CE4A93C711EDB3D8A867C4F9AE02.roa (hash: MXR9v07MaUgaUp2EpRPUYi0YWE/byXOzVwu5NXbaWsg=) 5: 16A4DFE893C711EDB3D8A867C4F9AE02.roa (hash: vWRcSTu3hKVKTzFiY2NVAPZ7PA6+HMwNwvKyVpnCyx8=) 6: 1614034C93C711EDB3D8A867C4F9AE02.roa (hash: ywF33ZMJOUcpgMUIi20lZlpyg8JGMBrKC6zMJ/6wuTs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.crl rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:25:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1506 (0x5e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0EF8, serialNumber=A04E743AD31F4F83F09DC5D2F7EF4FABE1EF687B Validity Not Before: Jul 18 23:25:50 2025 GMT Not After : Jul 25 23:25:50 2025 GMT Subject: CN=687ad7ff-a0d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:91:d7:14:f0:1e:48:9a:07:c5:ba:e1:69:a4: 7a:d4:b5:38:3b:4b:5b:d4:fc:d3:65:0a:8f:6f:47: 5f:e5:ca:74:fc:7a:86:1d:9f:a5:4f:f3:29:82:2c: 88:89:19:8f:8f:90:11:f9:6a:b7:8f:5b:f8:d1:26: 5f:92:77:cc:3e:eb:53:fd:52:2c:d7:7b:3a:92:d4: 0a:14:44:4b:aa:95:26:de:c2:9f:3b:0f:e2:f5:c5: 92:5b:3d:12:77:46:e8:0f:fa:d2:a7:cb:f7:9f:ce: 9a:2a:46:f3:05:39:7e:f1:09:99:6f:48:4a:da:16: a9:74:50:b0:37:e6:59:62:ce:42:d8:1b:df:3d:74: 62:60:c9:c6:b1:bd:fd:2a:a9:68:6e:25:d1:5c:5c: d1:a3:db:e1:0d:87:83:d1:53:05:f9:07:bc:e6:23: e1:ee:0c:d7:0b:2a:b3:87:5d:01:d8:81:ed:70:01: dd:97:e6:3e:78:91:83:ef:10:85:54:42:04:e5:cb: d4:f1:ad:f7:08:94:fb:63:c4:81:a0:43:c1:cd:bd: 54:84:d5:9e:c3:77:73:51:88:1b:fc:4f:59:05:a6: a6:d6:f1:2f:d0:79:b3:f3:b9:d8:5f:0b:d4:de:61: 54:97:c9:8a:aa:24:38:0d:6b:13:16:77:71:7b:fe: b4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D8:4B:FF:76:DA:5D:BB:28:79:8B:09:6C:9A:8E:E0:26:C7:90:9F X509v3 Authority Key Identifier: keyid:A0:4E:74:3A:D3:1F:4F:83:F0:9D:C5:D2:F7:EF:4F:AB:E1:EF:68:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:42:2e:53:e9:03:1d:98:08:a5:81:aa:1c:84:55:36:4f:ec: cf:43:72:50:53:7b:45:0f:4c:a2:5f:7b:f7:f8:b8:ce:33:4d: 23:16:70:d0:89:cd:34:f7:db:2d:66:1f:88:5b:22:98:b7:25: 63:a8:3a:18:4c:ab:9a:ba:db:91:10:ed:8e:ef:73:1b:b2:ed: 6f:df:c9:0b:26:71:8f:f2:02:3a:cd:96:2d:5c:b5:60:02:f3: 94:bb:58:ee:70:b0:ec:a6:ce:cd:7e:b6:c1:c7:6e:36:50:5a: 18:dd:36:1a:e6:1b:a1:eb:42:6a:06:25:5d:d9:16:32:21:af: 23:b6:a6:fd:cd:2d:6a:6d:21:3f:f9:06:61:94:66:5f:53:c1: 8b:b7:18:3a:00:a9:3a:04:42:4e:73:37:3e:f0:e0:30:fd:04: eb:6e:54:4e:7c:10:38:69:e7:90:06:61:67:bb:25:ef:74:85: 7c:0c:a4:8e:90:7f:1c:be:3d:11:dd:d5:63:32:62:ab:40:63: 9e:1c:7f:b8:de:72:72:57:a3:57:65:e5:03:85:d2:7b:d1:43: 66:3c:ea:67:79:cf:4e:32:51:4c:24:60:57:43:46:6a:50:c8: 5d:37:93:58:da:6e:e2:36:83:b0:22:fa:e0:1b:4e:74:b0:ee: 58:95:30:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBFRjgxMTAvBgNVBAUTKEEwNEU3NDNBRDMxRjRGODNGMDlEQzVEMkY3RUY0RkFC RTFFRjY4N0IwHhcNMjUwNzE4MjMyNTUwWhcNMjUwNzI1MjMyNTUwWjAYMRYwFAYD VQQDEw02ODdhZDdmZi1hMGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA35HXFPAeSJoHxbrhaaR61LU4O0tb1PzTZQqPb0df5cp0/HqGHZ+lT/MpgiyI iRmPj5AR+Wq3j1v40SZfknfMPutT/VIs13s6ktQKFERLqpUm3sKfOw/i9cWSWz0S d0boD/rSp8v3n86aKkbzBTl+8QmZb0hK2hapdFCwN+ZZYs5C2BvfPXRiYMnGsb39 KqlobiXRXFzRo9vhDYeD0VMF+Qe85iPh7gzXCyqzh10B2IHtcAHdl+Y+eJGD7xCF VEIE5cvU8a33CJT7Y8SBoEPBzb1UhNWew3dzUYgb/E9ZBaam1vEv0Hmz87nYXwvU 3mFUl8mKqiQ4DWsTFndxe/60uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEfYS/92 2l27KHmLCWyajuAmx5CfMB8GA1UdIwQYMBaAFKBOdDrTH0+D8J3F0vfvT6vh72h7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEVGOC9DOTM4RDEwNkNC NTQxMUVCQTNEMzZDNUJDNEY5QUUwMi9vRTUwT3RNZlQ0UHduY1hTOS05UHEtSHZh SHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29FNTBPdE1mVDRQd25jWFM5LTlQcS1IdmFIcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEVGOC9DOTM4RDEwNkNCNTQxMUVCQTNEMzZDNUJDNEY5QUUwMi9vRTUwT3RNZlQ0 UHduY1hTOS05UHEtSHZhSHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgQi5T6QMdmAilgaochFU2T+zPQ3JQU3tFD0yiX3v3+LjOM00jFnDQ ic0099stZh+IWyKYtyVjqDoYTKuautuREO2O73Mbsu1v38kLJnGP8gI6zZYtXLVg AvOUu1jucLDsps7NfrbBx242UFoY3TYa5huh60JqBiVd2RYyIa8jtqb9zS1qbSE/ +QZhlGZfU8GLtxg6AKk6BEJOczc+8OAw/QTrblROfBA4aeeQBmFnuyXvdIV8DKSO kH8cvj0R3dVjMmKrQGOeHH+43nJyV6NXZeUDhdJ70UNmPOpnec9OMlFMJGBXQ0Zq UMhdN5NY2m7iNoOwIvrgG050sO5YlTBg -----END CERTIFICATE-----Generated at Sun Jul 20 13:45:56 2025 by rpki-client