$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft File: oYXAxXSCnF_NcURUSeU0za70E5Y.mft (raw, json) Hash identifier: VS+zIzKbFRsebCKdPDHMSWwQIEqKdHud7vYRC79EB+M= Subject key identifier: 57:62:B7:73:89:D8:2C:8E:FC:E2:7D:E8:9D:4E:7D:16:F4:0F:DB:7B Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96 Certificate issuer: /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396 Certificate serial: 0340 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft Manifest number: 02FA Signing time: Sat 19 Jul 2025 01:52:37 +0000 Manifest this update: Sat 19 Jul 2025 01:52:36 +0000 Manifest next update: Sat 26 Jul 2025 01:52:36 +0000 Files and hashes: 1: oYXAxXSCnF_NcURUSeU0za70E5Y.crl (hash: TJE+217v73/sR7LcRUF65mfqw6Qb6E6kYioTGoqXVuI=) 2: 212691F85C8A11F09D065A67C4F9AE02.roa (hash: iyDMS6tOGnY0vV2tRBpkImtDJt2yb1m8IIZ76sEjG28=) 3: AF5AD402224711F0B0CDB07DC4F9AE02.roa (hash: Rd9F0rhnVp5Iq5KfDW7kM6BcAp4B6e5cA4C+HDxhcWk=) 4: 2D153A4648B711F0B6D4592EC4F9AE02.roa (hash: 2idrkUiE1glbbdM/t25K//0O3gKsqe5+guvE9Yfyva4=) 5: 1C8BEF04E24511EF96354978C4F9AE02.roa (hash: emdOoNHeNPd2I/1TXnCpTax46mU70PVq1qcXN4YL9To=) 6: A3571FDE47EC11EFB51C3666C4F9AE02.roa (hash: oa1DI9U4A4Nx6Hk3PHDp1mXpYhzRJyPS5jmqfG2Om0Y=) 7: B111111288B411EF80480527C4F9AE02.roa (hash: qLIDrHWS/i6A8fwW8H8k+xkymy4Akbi61wq5s13V2Ww=) 8: 97F3D14844EC11F09F53687EC4F9AE02.roa (hash: fNYl4lQvJVaS1IGx7O+r3WOftbmCBCZKIKM0IJ9pL3A=) 9: 205AD1805C8A11F09D065A67C4F9AE02.roa (hash: /HSo5jxbj7peidwO9alg4qXB6CLHjHvT7Exk5bMgxFc=) 10: CD90ED68057211F0B6E2301BC4F9AE02.roa (hash: DFlr8Tn/hG96eJuSS2hv0WiijRfajfy1iDPzEugU79I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 01:52:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 832 (0x340) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4E32, serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396 Validity Not Before: Jul 19 01:52:36 2025 GMT Not After : Jul 26 01:52:36 2025 GMT Subject: CN=687afa65-525d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:24:70:e0:f4:24:ad:da:99:90:08:1b:de:d5: 2b:7d:cb:a8:44:0d:6d:30:3f:28:f0:cd:db:c1:db: c4:5c:31:c5:4d:7e:47:5c:29:cb:96:a9:ef:b9:49: 74:dc:01:d6:25:30:a9:39:cf:d0:03:71:d4:15:27: da:36:17:a9:b4:d0:82:03:08:ee:66:90:41:65:d1: 2a:98:91:bb:dd:07:9d:ba:e0:eb:84:c9:dd:24:c4: 50:56:97:cf:9f:97:e1:a6:fd:39:5b:ef:cd:cb:92: 99:de:e1:0a:ae:fc:98:47:55:9b:d8:dc:a4:35:83: 66:45:09:9d:c3:73:da:3e:f5:42:7a:c7:c7:72:9d: 4b:ea:e7:c8:0e:eb:23:4d:0c:cd:97:d9:0b:62:ae: cd:cb:a0:63:42:26:da:0d:80:76:35:69:23:d3:1a: 72:ac:de:69:e9:0e:19:47:c8:6b:2a:dd:cd:26:44: da:9b:9d:4b:31:d3:67:6c:e1:d9:7e:bb:ab:8b:e2: 2f:27:6e:07:73:42:19:a6:7a:69:41:51:35:dd:9f: 36:2c:44:0c:28:02:64:4e:cc:ac:78:eb:6f:24:55: bb:d9:de:10:43:56:00:2c:e6:d0:fb:43:56:84:4e: 6c:ed:f7:74:f6:6f:23:b8:32:4b:46:32:07:fc:8c: c1:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:62:B7:73:89:D8:2C:8E:FC:E2:7D:E8:9D:4E:7D:16:F4:0F:DB:7B X509v3 Authority Key Identifier: keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:24:a8:8e:18:66:08:e0:19:a2:d4:a5:3f:0e:df:84:93:77: d8:85:0c:cd:2a:27:af:6b:60:b6:58:37:f1:1c:30:73:e1:e5: fe:c7:9c:3a:c7:58:41:96:e9:0e:bb:cb:ea:ce:7a:e4:eb:b6: a3:ea:a1:8c:a0:03:e8:ba:9f:47:fd:d2:ae:e6:d0:25:1a:bd: 82:9a:9d:b6:eb:05:54:77:ba:54:ee:18:bf:20:e5:3a:00:62: c9:08:97:2b:a8:e0:e8:5a:a7:ca:d5:a8:78:b5:99:02:96:0e: 6e:f9:21:91:33:e0:9e:4b:78:03:f9:d1:91:40:cc:f0:8d:30: 13:87:7f:8a:76:46:1d:ce:6c:05:7d:b3:d6:42:92:27:20:09: 8c:aa:7b:1b:3f:e1:c0:04:4a:49:ab:e4:5e:7f:85:5b:9f:f9: 40:fe:03:a5:c1:95:5b:0c:a0:49:d0:a1:38:03:d1:35:f5:9d: 81:96:c2:74:6d:cd:05:55:3e:b6:db:5f:11:9c:5e:f8:c2:72: 5e:b6:7c:f6:90:02:0d:ea:55:54:64:9a:4e:83:86:71:7f:18: 91:16:3c:0d:9a:9f:30:a1:14:8f:8d:cc:9c:a4:1a:fa:f5:cc: b8:da:82:97:f5:a2:fb:06:31:66:0d:9c:f3:68:08:f5:ee:3f: 32:50:fb:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFMzIxMTAvBgNVBAUTKEExODVDMEM1NzQ4MjlDNUZDRDcxNDQ1NDQ5RTUzNENE QUVGNDEzOTYwHhcNMjUwNzE5MDE1MjM2WhcNMjUwNzI2MDE1MjM2WjAYMRYwFAYD VQQDEw02ODdhZmE2NS01MjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtSRw4PQkrdqZkAgb3tUrfcuoRA1tMD8o8M3bwdvEXDHFTX5HXCnLlqnvuUl0 3AHWJTCpOc/QA3HUFSfaNheptNCCAwjuZpBBZdEqmJG73QeduuDrhMndJMRQVpfP n5fhpv05W+/Ny5KZ3uEKrvyYR1Wb2NykNYNmRQmdw3PaPvVCesfHcp1L6ufIDusj TQzNl9kLYq7Ny6BjQibaDYB2NWkj0xpyrN5p6Q4ZR8hrKt3NJkTam51LMdNnbOHZ fruri+IvJ24Hc0IZpnppQVE13Z82LEQMKAJkTsyseOtvJFW72d4QQ1YALObQ+0NW hE5s7fd09m8juDJLRjIH/IzBcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFdit3OJ 2CyO/OJ96J1OfRb0D9t7MB8GA1UdIwQYMBaAFKGFwMV0gpxfzXFEVEnlNM2u9BOW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEUzMi83MjA5NTlGQzAx QzAxMUVEQkQ3QzZGNThDNEY5QUUwMi9vWVhBeFhTQ25GX05jVVJVU2VVMHphNzBF NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29ZWEF4WFNDbkZfTmNVUlVTZVUwemE3MEU1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEUzMi83MjA5NTlGQzAxQzAxMUVEQkQ3QzZGNThDNEY5QUUwMi9vWVhBeFhTQ25G X05jVVJVU2VVMHphNzBFNVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjJKiOGGYI4Bmi1KU/Dt+Ek3fYhQzNKieva2C2WDfxHDBz4eX+x5w6 x1hBlukOu8vqznrk67aj6qGMoAPoup9H/dKu5tAlGr2Cmp226wVUd7pU7hi/IOU6 AGLJCJcrqODoWqfK1ah4tZkClg5u+SGRM+CeS3gD+dGRQMzwjTATh3+KdkYdzmwF fbPWQpInIAmMqnsbP+HABEpJq+Ref4Vbn/lA/gOlwZVbDKBJ0KE4A9E19Z2BlsJ0 bc0FVT62218RnF74wnJetnz2kAIN6lVUZJpOg4ZxfxiRFjwNmp8woRSPjcycpBr6 9cy42oKX9aL7BjFmDZzzaAj17j8yUPs7 -----END CERTIFICATE-----Generated at Sun Jul 20 16:49:34 2025 by rpki-client