$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.mft File: 4Om5OZuKSl_c3iCfxb7AeK-Vz3s.mft (raw, json) Hash identifier: /MHOk8faEtPLilUwF+i08TTrPd1vsBRumRcRXawzcoM= Subject key identifier: AE:4C:01:1F:34:84:7E:68:9F:03:74:5F:BE:BC:9F:0B:96:AB:90:1B Authority key identifier: E0:E9:B9:39:9B:8A:4A:5F:DC:DE:20:9F:C5:BE:C0:78:AF:95:CF:7B Certificate issuer: /CN=A91E1887/serialNumber=E0E9B9399B8A4A5FDCDE209FC5BEC078AF95CF7B Certificate serial: 0749 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.mft Manifest number: 0742 Signing time: Tue 22 Jul 2025 22:02:45 +0000 Manifest this update: Tue 22 Jul 2025 22:02:45 +0000 Manifest next update: Tue 29 Jul 2025 22:02:45 +0000 Files and hashes: 1: 4Om5OZuKSl_c3iCfxb7AeK-Vz3s.crl (hash: uVv0xFjbWr0TUxwQgc8pOA9dmnNET+W2ohTZ4iaZAEc=) 2: 9F46C468355711EBA5B81020C4F9AE02.roa (hash: 03WpwA3JZLQp184AJleW1z4TTnMqm9OpYp8fSIGXxK0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.crl rsync://rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 22:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1865 (0x749) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1887, serialNumber=E0E9B9399B8A4A5FDCDE209FC5BEC078AF95CF7B Validity Not Before: Jul 22 22:02:45 2025 GMT Not After : Jul 29 22:02:45 2025 GMT Subject: CN=68800a85-e78d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:84:a8:76:5d:45:54:bf:0a:48:4a:48:4a:30: 1a:b7:55:17:3c:59:68:76:be:af:17:e9:fe:7e:91: d2:92:a8:04:08:01:ed:58:95:ad:f1:65:1b:c8:98: 3a:90:68:ca:b5:75:68:3e:e2:74:14:29:6a:e7:a5: d4:77:4d:c4:5e:9f:a4:1c:05:c2:0e:d6:51:c7:21: 90:d5:58:04:b9:02:ed:43:45:77:f4:d2:4e:0f:65: 6e:14:f5:bc:fc:cd:fd:08:67:14:06:72:cc:f9:ec: 81:fd:ef:c2:6a:42:3f:44:3f:95:7d:a0:94:cd:26: 64:19:cc:65:62:fe:a9:03:c4:7e:a5:b7:de:e4:9c: 75:f9:43:2d:c3:2e:99:26:8f:86:90:f4:02:c5:06: 32:28:85:3e:78:81:95:db:9b:fc:02:da:a1:8f:c8: 5e:a0:2e:98:bc:07:a7:c3:b7:83:42:34:5b:ee:7a: fd:3c:1c:cb:14:e6:35:1d:f1:b4:17:0f:b5:bb:25: c0:ca:03:37:f9:21:f6:04:00:4b:ce:d8:13:e7:38: 39:b3:ad:3f:47:91:45:3d:d3:fd:e7:cd:3f:f4:ac: 66:b1:07:d7:86:2f:4e:c8:6b:06:8c:35:76:03:5b: 9f:24:2d:77:53:2f:81:ae:b2:cc:85:4c:47:65:3e: 5a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:4C:01:1F:34:84:7E:68:9F:03:74:5F:BE:BC:9F:0B:96:AB:90:1B X509v3 Authority Key Identifier: keyid:E0:E9:B9:39:9B:8A:4A:5F:DC:DE:20:9F:C5:BE:C0:78:AF:95:CF:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:ac:eb:f1:7e:dd:2a:85:9f:b6:e1:fe:36:ec:c5:3b:ea:3a: 4c:8f:ad:8f:23:d2:c3:91:e0:df:7e:6d:ba:2e:cb:9c:92:7e: 77:69:32:9e:06:b8:d3:a8:25:70:e1:40:9d:af:7d:39:4e:4e: 25:22:3a:7c:43:82:ee:a1:c9:ba:b0:87:18:9a:86:46:19:09: 61:35:a4:fc:bc:85:9c:44:59:32:cd:2c:20:3c:f3:f8:b7:d9: da:43:05:0c:8b:58:79:4c:d2:6d:3f:46:6a:78:92:7a:aa:b9: e0:c3:1c:2d:4f:38:28:62:1e:cc:e4:f3:98:09:a4:41:47:d0: 07:3b:48:0c:31:d8:61:4c:ea:06:c0:86:7d:f7:12:8d:fa:ac: 32:37:94:04:d3:f9:b0:f4:33:30:42:22:15:69:dc:69:88:e3: 98:52:22:3e:e5:df:e4:09:05:c7:21:da:af:cb:ae:c6:c2:f4: f6:59:e3:da:33:c5:39:ff:27:fc:60:53:4d:3b:30:f1:8a:54: b1:0f:09:58:bd:38:8a:58:8e:7c:2a:24:b2:d7:bd:f2:57:6c: 0a:51:95:03:5d:c0:07:eb:28:59:6d:89:33:7c:24:eb:a2:86: 23:e4:4e:fe:f2:50:fb:1b:17:8b:76:94:db:a2:16:5a:ab:69: 49:b5:20:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE4ODcxMTAvBgNVBAUTKEUwRTlCOTM5OUI4QTRBNUZEQ0RFMjA5RkM1QkVDMDc4 QUY5NUNGN0IwHhcNMjUwNzIyMjIwMjQ1WhcNMjUwNzI5MjIwMjQ1WjAYMRYwFAYD VQQDEw02ODgwMGE4NS1lNzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt4Sodl1FVL8KSEpISjAat1UXPFlodr6vF+n+fpHSkqgECAHtWJWt8WUbyJg6 kGjKtXVoPuJ0FClq56XUd03EXp+kHAXCDtZRxyGQ1VgEuQLtQ0V39NJOD2VuFPW8 /M39CGcUBnLM+eyB/e/CakI/RD+VfaCUzSZkGcxlYv6pA8R+pbfe5Jx1+UMtwy6Z Jo+GkPQCxQYyKIU+eIGV25v8Atqhj8heoC6YvAenw7eDQjRb7nr9PBzLFOY1HfG0 Fw+1uyXAygM3+SH2BABLztgT5zg5s60/R5FFPdP9580/9KxmsQfXhi9OyGsGjDV2 A1ufJC13Uy+BrrLMhUxHZT5aEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK5MAR80 hH5onwN0X768nwuWq5AbMB8GA1UdIwQYMBaAFODpuTmbikpf3N4gn8W+wHivlc97 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTg4Ny84NEVFOEI2MDM1 NTExMUVCOUY0MTk1MEVDNEY5QUUwMi80T201T1p1S1NsX2MzaUNmeGI3QWVLLVZ6 M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRPbTVPWnVLU2xfYzNpQ2Z4YjdBZUstVnozcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTg4Ny84NEVFOEI2MDM1NTExMUVCOUY0MTk1MEVDNEY5QUUwMi80T201T1p1S1Ns X2MzaUNmeGI3QWVLLVZ6M3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAerOvxft0qhZ+24f427MU76jpMj62PI9LDkeDffm26Lsuckn53aTKe BrjTqCVw4UCdr305Tk4lIjp8Q4Luocm6sIcYmoZGGQlhNaT8vIWcRFkyzSwgPPP4 t9naQwUMi1h5TNJtP0ZqeJJ6qrngwxwtTzgoYh7M5POYCaRBR9AHO0gMMdhhTOoG wIZ99xKN+qwyN5QE0/mw9DMwQiIVadxpiOOYUiI+5d/kCQXHIdqvy67GwvT2WePa M8U5/yf8YFNNOzDxilSxDwlYvTiKWI58KiSy173yV2wKUZUDXcAH6yhZbYkzfCTr ooYj5E7+8lD7GxeLdpTbohZaq2lJtSDW -----END CERTIFICATE-----Generated at Wed Jul 23 14:54:18 2025 by rpki-client