$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.mft File: O407UYT_W0gbWw5ZsLIpzAbWCR4.mft (raw, json) Hash identifier: RvMwJ46xMpgVHswE+3iLjOQPIq1zf+WsXuRcrVSVyMY= Subject key identifier: 59:7D:04:5D:80:4F:6C:47:05:B6:3A:44:C8:8A:53:62:19:3E:B7:58 Authority key identifier: 3B:8D:3B:51:84:FF:5B:48:1B:5B:0E:59:B0:B2:29:CC:06:D6:09:1E Certificate issuer: /CN=A91EA944/serialNumber=3B8D3B5184FF5B481B5B0E59B0B229CC06D6091E Certificate serial: 107E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O407UYT_W0gbWw5ZsLIpzAbWCR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.mft Manifest number: 1075 Signing time: Fri 18 Jul 2025 17:31:39 +0000 Manifest this update: Fri 18 Jul 2025 17:31:39 +0000 Manifest next update: Fri 25 Jul 2025 17:31:39 +0000 Files and hashes: 1: O407UYT_W0gbWw5ZsLIpzAbWCR4.crl (hash: odtzTqtkCRIXgl4CSU+zKq2IDa1dRkfMk8Ryv5zt4MI=) 2: E3272FE036B911E99F4D9A5CC4F9AE02.roa (hash: zsPveXQ2Zd6a9Te4YhLc43ZEsJlTYYnv+fpeJR8IN2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.crl rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O407UYT_W0gbWw5ZsLIpzAbWCR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4222 (0x107e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA944, serialNumber=3B8D3B5184FF5B481B5B0E59B0B229CC06D6091E Validity Not Before: Jul 18 17:31:39 2025 GMT Not After : Jul 25 17:31:39 2025 GMT Subject: CN=687a84fb-83f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c5:43:75:c6:52:a4:fa:95:ba:11:7f:8d:52: d6:8d:32:1c:a8:a4:6a:86:ad:11:bb:82:2f:4d:57: 2b:fb:f7:4d:2a:b3:b3:30:e1:47:ea:b7:18:2a:6f: 2f:3c:ad:fd:54:1e:e2:24:c1:1a:de:16:f4:6a:b2: 98:ee:4f:13:db:50:fc:a3:03:f8:4c:d4:67:0d:27: bb:4d:e6:4e:60:75:f8:3d:9a:97:e6:00:3e:c3:e4: fa:11:9f:f1:ff:1d:60:4b:be:9c:49:e9:27:4a:73: 03:93:06:b7:62:6c:60:f8:aa:5f:74:79:7e:6f:62: 2d:4b:84:f1:92:e0:b8:7f:69:74:2f:3d:c4:37:29: b8:1a:e8:6f:69:56:87:52:a3:e9:34:4d:2e:74:b0: 2b:38:54:a6:7d:6e:ab:b9:6f:08:ab:b8:82:91:6b: c1:96:13:85:d1:e1:00:47:a2:eb:52:b7:58:5d:53: 3f:fb:88:78:4c:48:4d:6d:ca:9a:b1:62:66:3e:b0: 2c:b8:2a:24:37:ab:b5:32:92:c8:82:82:95:f8:c1: 97:15:9d:a4:2c:1a:87:a1:3a:04:e5:95:17:19:5b: d7:ba:0d:cf:7f:80:6a:e0:24:17:93:2c:91:5a:e0: f3:2b:b6:5e:8a:7f:ce:36:04:e8:13:07:a7:1c:39: 60:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:7D:04:5D:80:4F:6C:47:05:B6:3A:44:C8:8A:53:62:19:3E:B7:58 X509v3 Authority Key Identifier: keyid:3B:8D:3B:51:84:FF:5B:48:1B:5B:0E:59:B0:B2:29:CC:06:D6:09:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O407UYT_W0gbWw5ZsLIpzAbWCR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:1d:4a:8c:fa:7f:99:b2:0d:50:1d:6c:a6:79:a8:1c:c6:17: 2a:8c:6d:00:0d:9e:f4:b2:eb:a2:6a:5a:3f:4c:35:52:2c:a0: 66:58:00:98:b5:45:d4:36:fb:4b:17:61:8f:1d:83:7d:33:92: 0b:6c:5d:d4:a8:85:1e:6f:dc:18:3a:33:d2:9d:50:5c:07:2a: 23:c6:1c:16:aa:53:0f:07:48:9e:dd:89:c8:b7:4c:e0:ce:5c: 88:ce:3a:ef:ef:db:10:84:7a:d7:52:fa:d1:eb:5b:a8:99:ee: fc:83:b1:8a:0f:7f:2e:29:f9:8b:c6:05:75:47:45:87:fb:c9: 3e:de:3b:9a:47:36:7e:ce:b0:74:8e:98:ec:33:76:f8:1c:df: a0:0c:47:19:63:e7:bc:5e:e5:cf:54:0e:26:5b:47:aa:80:a7: e3:03:57:1c:e9:aa:0e:07:b3:42:a3:37:8f:b8:f5:5d:60:e4: 88:2c:ba:82:35:3a:91:6c:96:07:84:dc:c0:7e:ba:7c:06:3e: 3f:d1:36:93:9e:65:9d:04:d1:77:fd:a3:68:42:a6:a6:d6:3f: 24:c0:36:f5:66:b9:6e:3f:87:7c:88:c0:c5:bc:d2:23:c8:5d: 0a:94:84:2f:cf:0e:c3:09:4b:14:06:b3:ba:40:c3:36:6a:ea: 17:1e:80:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5NDQxMTAvBgNVBAUTKDNCOEQzQjUxODRGRjVCNDgxQjVCMEU1OUIwQjIyOUND MDZENjA5MUUwHhcNMjUwNzE4MTczMTM5WhcNMjUwNzI1MTczMTM5WjAYMRYwFAYD VQQDEw02ODdhODRmYi04M2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsMVDdcZSpPqVuhF/jVLWjTIcqKRqhq0Ru4IvTVcr+/dNKrOzMOFH6rcYKm8v PK39VB7iJMEa3hb0arKY7k8T21D8owP4TNRnDSe7TeZOYHX4PZqX5gA+w+T6EZ/x /x1gS76cSeknSnMDkwa3Ymxg+KpfdHl+b2ItS4TxkuC4f2l0Lz3ENym4GuhvaVaH UqPpNE0udLArOFSmfW6ruW8Iq7iCkWvBlhOF0eEAR6LrUrdYXVM/+4h4TEhNbcqa sWJmPrAsuCokN6u1MpLIgoKV+MGXFZ2kLBqHoToE5ZUXGVvXug3Pf4Bq4CQXkyyR WuDzK7Zein/ONgToEwenHDlgtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFl9BF2A T2xHBbY6RMiKU2IZPrdYMB8GA1UdIwQYMBaAFDuNO1GE/1tIG1sOWbCyKcwG1gke MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTk0NC83OTZDOUQ3NDM2 QjkxMUU5OTg0Qjc2NUNDNEY5QUUwMi9PNDA3VVlUX1cwZ2JXdzVac0xJcHpBYldD UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL080MDdVWVRfVzBnYld3NVpzTElwekFiV0NSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTk0NC83OTZDOUQ3NDM2QjkxMUU5OTg0Qjc2NUNDNEY5QUUwMi9PNDA3VVlUX1cw Z2JXdzVac0xJcHpBYldDUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsHUqM+n+Zsg1QHWymeagcxhcqjG0ADZ70suuialo/TDVSLKBmWACY tUXUNvtLF2GPHYN9M5ILbF3UqIUeb9wYOjPSnVBcByojxhwWqlMPB0ie3YnIt0zg zlyIzjrv79sQhHrXUvrR61uome78g7GKD38uKfmLxgV1R0WH+8k+3juaRzZ+zrB0 jpjsM3b4HN+gDEcZY+e8XuXPVA4mW0eqgKfjA1cc6aoOB7NCozePuPVdYOSILLqC NTqRbJYHhNzAfrp8Bj4/0TaTnmWdBNF3/aNoQqam1j8kwDb1ZrluP4d8iMDFvNIj yF0KlIQvzw7DCUsUBrO6QMM2auoXHoAd -----END CERTIFICATE-----Generated at Sun Jul 20 12:23:25 2025 by rpki-client