$ rpki-client -vvf rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft File: OoXUR-GGdf7VrgXJKTee761by8A.mft (raw, json) Hash identifier: njqlBrKrhfec/NKTZLwNQQg1CENFCfQNrwibKFSMI9M= Subject key identifier: 1B:CB:B7:AA:F0:7F:00:4A:B7:25:BF:BC:19:70:3B:EE:7F:B0:9B:60 Authority key identifier: 3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0 Certificate issuer: /CN=A91E838F/serialNumber=3A85D447E18675FED5AE05C929379EEFAD5BCBC0 Certificate serial: 07D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft Manifest number: 07C0 Signing time: Tue 22 Jul 2025 21:29:54 +0000 Manifest this update: Tue 22 Jul 2025 21:29:54 +0000 Manifest next update: Tue 29 Jul 2025 21:29:54 +0000 Files and hashes: 1: OoXUR-GGdf7VrgXJKTee761by8A.crl (hash: VNYS0gid9gce9njGxGkq54KQ6c3hhsN+BeARXVztMU4=) 2: 3A80616C853811EFA2F05E2FC4F9AE02.roa (hash: VacwFfXxfWfasplgXF9A1AX11wCHDuK5XANfDyd18Pc=) 3: 9E393ADA657011EB96AF8F49C4F9AE02.roa (hash: nh4OlofqMh099kYvPNfjQ05/jiIH5vP8fVdEV6he48g=) 4: DACBD9F638F911EBB13C034CC4F9AE02.roa (hash: KuZID6pq906VPDfvmGsN77h7hBvEwQX/7r+oBn+hpC0=) 5: EC8B7E82450E11EB887ECF6FC4F9AE02.roa (hash: MChKj8CysBVpKBL1Yc5KnUgJyLD5UeDlW+DQqjWmTk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.crl rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 21:29:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2008 (0x7d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E838F, serialNumber=3A85D447E18675FED5AE05C929379EEFAD5BCBC0 Validity Not Before: Jul 22 21:29:54 2025 GMT Not After : Jul 29 21:29:54 2025 GMT Subject: CN=688002d2-9dcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5c:af:b6:03:d0:9e:af:45:6f:b1:48:f7:e0: b4:64:b5:33:f4:ed:7c:3e:25:3e:bd:f9:e0:7e:ff: c3:3f:4b:50:e6:33:c2:91:6c:87:c4:1f:04:0b:ca: e8:c3:c1:b4:25:42:b8:2f:8d:1c:bf:7b:9d:80:e2: ed:94:a7:37:27:88:8d:90:e8:4c:ac:80:6c:6b:d6: f6:34:06:6f:e7:79:5d:6c:3c:b6:87:0d:05:e1:90: bf:70:d2:d9:0c:ad:37:f9:a4:fe:07:89:43:c4:79: f4:3a:de:96:96:ee:a8:cd:c3:a3:93:89:12:3b:a8: e8:e2:cd:d3:cc:fd:d6:6a:d9:99:42:a6:7e:db:0b: d0:4e:c6:1a:8f:fb:16:ef:b4:7d:6a:4f:59:3d:71: e0:2f:37:60:31:a3:8d:e4:c5:1d:9c:38:e8:ce:0e: 0e:74:81:45:9c:51:87:2b:5f:3c:7b:32:a4:95:92: b0:27:42:fe:05:5f:2c:b5:e2:c7:af:5b:a3:2c:25: ba:51:b9:16:23:1c:6f:4b:d2:e3:cb:ba:1a:7a:5e: c8:e7:66:f3:5f:19:e6:f5:55:b6:53:53:78:c0:25: 63:4b:bf:12:b9:8c:81:da:a9:83:93:6c:a3:5b:e9: 22:61:47:88:4c:36:76:72:56:47:53:51:5d:be:0b: 01:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:CB:B7:AA:F0:7F:00:4A:B7:25:BF:BC:19:70:3B:EE:7F:B0:9B:60 X509v3 Authority Key Identifier: keyid:3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:8b:14:8e:76:57:38:d2:f4:6a:a6:32:0a:ab:91:94:d5:83: 9d:e9:00:a1:a9:f0:b7:a2:84:b6:b2:c3:9d:23:3f:93:3a:a3: 06:96:df:2a:44:69:5e:9c:9b:9d:33:fa:23:6a:ea:0e:a8:f5: a1:47:82:27:6a:b2:19:ae:c3:a4:1a:68:b1:4b:d1:2c:28:b2: d6:19:bb:c7:77:f7:b5:43:e1:c5:4d:fb:c4:57:63:cc:4d:0f: 2f:45:0c:ca:6f:6a:5b:0f:bb:da:c5:1d:0a:b9:41:e3:8b:2a: c3:fc:94:14:6c:d3:dd:b8:35:a3:42:71:20:f4:27:49:dd:10: 5a:35:6c:f5:91:95:56:75:e5:16:48:32:d8:01:06:ed:dd:aa: fe:0c:2d:40:a0:89:72:88:3a:63:45:d5:d3:1a:c7:29:2b:0b: e3:17:dc:88:3e:e0:34:32:22:a0:dc:2d:6d:f2:b6:6e:38:d3: b2:54:ba:e9:a3:43:58:ee:6a:64:8a:fa:ac:58:d5:40:f0:f2: e0:7a:07:2b:65:cf:8a:81:d9:10:3e:2e:7d:06:16:e0:fb:65: 61:7f:cb:2b:d3:90:86:bf:1b:9c:18:52:8f:3f:e4:82:7c:e2: 25:93:69:ee:c1:75:6e:81:9e:6a:5f:4f:d5:65:fa:38:ed:e1: d8:38:6b:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgzOEYxMTAvBgNVBAUTKDNBODVENDQ3RTE4Njc1RkVENUFFMDVDOTI5Mzc5RUVG QUQ1QkNCQzAwHhcNMjUwNzIyMjEyOTU0WhcNMjUwNzI5MjEyOTU0WjAYMRYwFAYD VQQDEw02ODgwMDJkMi05ZGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApVyvtgPQnq9Fb7FI9+C0ZLUz9O18PiU+vfngfv/DP0tQ5jPCkWyHxB8EC8ro w8G0JUK4L40cv3udgOLtlKc3J4iNkOhMrIBsa9b2NAZv53ldbDy2hw0F4ZC/cNLZ DK03+aT+B4lDxHn0Ot6Wlu6ozcOjk4kSO6jo4s3TzP3WatmZQqZ+2wvQTsYaj/sW 77R9ak9ZPXHgLzdgMaON5MUdnDjozg4OdIFFnFGHK188ezKklZKwJ0L+BV8steLH r1ujLCW6UbkWIxxvS9Ljy7oael7I52bzXxnm9VW2U1N4wCVjS78SuYyB2qmDk2yj W+kiYUeITDZ2clZHU1FdvgsBGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBvLt6rw fwBKtyW/vBlwO+5/sJtgMB8GA1UdIwQYMBaAFDqF1EfhhnX+1a4FySk3nu+tW8vA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODM4Ri9BOUY3NzM5ODA2 RTExMUVCOUIzMzVDNkRDNEY5QUUwMi9Pb1hVUi1HR2RmN1ZyZ1hKS1RlZTc2MWJ5 OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09vWFVSLUdHZGY3VnJnWEpLVGVlNzYxYnk4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODM4Ri9BOUY3NzM5ODA2RTExMUVCOUIzMzVDNkRDNEY5QUUwMi9Pb1hVUi1HR2Rm N1ZyZ1hKS1RlZTc2MWJ5OEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABixSOdlc40vRqpjIKq5GU1YOd6QChqfC3ooS2ssOdIz+TOqMGlt8q RGlenJudM/ojauoOqPWhR4InarIZrsOkGmixS9EsKLLWGbvHd/e1Q+HFTfvEV2PM TQ8vRQzKb2pbD7vaxR0KuUHjiyrD/JQUbNPduDWjQnEg9CdJ3RBaNWz1kZVWdeUW SDLYAQbt3ar+DC1AoIlyiDpjRdXTGscpKwvjF9yIPuA0MiKg3C1t8rZuONOyVLrp o0NY7mpkivqsWNVA8PLgegcrZc+KgdkQPi59Bhbg+2Vhf8sr05CGvxucGFKPP+SC fOIlk2nuwXVugZ5qX0/VZfo47eHYOGvF -----END CERTIFICATE-----Generated at Wed Jul 23 06:27:49 2025 by rpki-client