$ rpki-client -vvf rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft File: 0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft (raw, json) Hash identifier: GShLmsYEm23D0e0+H4GiW8mJiTeohgytYYDq6A8PhV8= Subject key identifier: C7:89:08:36:CF:7C:D6:54:CC:96:9A:18:70:42:ED:C5:AA:DB:8D:68 Authority key identifier: D3:03:8B:A4:49:0E:A8:15:AD:B0:9F:1A:38:65:8B:CD:8B:17:F4:82 Certificate issuer: /CN=A91F018E/serialNumber=D3038BA4490EA815ADB09F1A38658BCD8B17F482 Certificate serial: 0E6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wOLpEkOqBWtsJ8aOGWLzYsX9II.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft Manifest number: 0E66 Signing time: Sun 20 Jul 2025 17:45:04 +0000 Manifest this update: Sun 20 Jul 2025 17:45:04 +0000 Manifest next update: Sun 27 Jul 2025 17:45:03 +0000 Files and hashes: 1: 0wOLpEkOqBWtsJ8aOGWLzYsX9II.crl (hash: 067FQ/FG1VCETcAGccikF3RzrpVbzSIVN+2hUXaEh5Y=) 2: 7214B0AA9E1711E9B3710950C4F9AE02.roa (hash: c4C00IYUahMg/MQNhIkPwEgft6IPuKV052m4LGanBW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.crl rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wOLpEkOqBWtsJ8aOGWLzYsX9II.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 17:45:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3693 (0xe6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F018E, serialNumber=D3038BA4490EA815ADB09F1A38658BCD8B17F482 Validity Not Before: Jul 20 17:45:04 2025 GMT Not After : Jul 27 17:45:03 2025 GMT Subject: CN=687d2b20-38a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:13:69:b0:88:4c:eb:57:7d:36:f8:a6:11:c6: 4b:65:95:05:3e:4c:fc:a5:80:73:2e:92:e4:3b:ea: 6f:6c:f2:07:7b:37:6b:c1:b1:a3:b1:ed:74:f3:81: ad:4b:38:d6:50:35:4c:b0:b4:27:77:b5:8c:b3:61: ad:2f:24:74:25:f9:0d:47:49:f5:5c:21:9b:e5:b0: e1:79:fa:66:61:f7:c1:3d:95:94:22:bf:34:d1:50: 23:2b:2d:40:fc:7a:32:a3:24:df:da:7f:9a:cd:71: 56:33:81:2f:fd:32:16:37:23:c6:43:ac:e1:50:c3: 23:51:35:32:70:01:99:70:8f:2b:ab:64:f9:64:a2: d7:16:2c:cc:4d:65:59:4d:f0:00:7a:a5:64:69:c4: 1c:39:e7:d5:38:74:4d:77:8e:41:23:00:fd:c8:68: 77:7e:c8:38:ae:e6:1e:3e:de:d4:2d:70:08:0b:c1: ad:0f:96:4e:10:04:ec:bd:6b:0d:bd:50:31:62:06: d9:de:c2:af:c3:e6:58:4b:d8:90:0f:73:1c:e9:23: 59:d7:82:67:e3:db:2f:75:70:5e:0d:24:6a:aa:ae: e6:eb:0e:17:76:4d:97:bd:61:b3:fa:a8:a0:38:e7: 26:61:34:a1:74:e9:2f:90:9f:28:0b:b3:a4:7a:8b: e6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:89:08:36:CF:7C:D6:54:CC:96:9A:18:70:42:ED:C5:AA:DB:8D:68 X509v3 Authority Key Identifier: keyid:D3:03:8B:A4:49:0E:A8:15:AD:B0:9F:1A:38:65:8B:CD:8B:17:F4:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wOLpEkOqBWtsJ8aOGWLzYsX9II.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:68:a0:35:57:f8:a7:89:df:bf:23:30:45:89:c2:3d:1d:57: 2b:64:6c:e4:7e:29:b2:03:b0:10:66:19:63:78:26:28:89:84: 20:a6:a9:56:fd:f1:8d:a8:fe:ec:0e:2a:12:85:fa:38:14:91: 84:7a:ad:19:6e:b0:d8:ae:7b:46:ec:25:84:b5:21:25:82:00: 9e:10:46:a0:e1:a1:8f:32:18:22:ca:23:e2:0d:ac:d7:81:d6: 02:75:0f:ef:4e:b0:70:18:ff:55:09:34:f0:f4:21:95:ef:95: 49:b4:33:bb:46:f6:eb:b7:76:e1:a4:ea:0e:08:8e:57:cd:bf: 40:bc:cf:fd:17:67:b1:88:99:f6:74:38:a1:c8:d6:a9:da:88: 67:23:81:9a:c5:74:af:a9:38:e8:32:2e:a3:cd:b7:5c:01:ef: 0b:11:b8:fa:f0:b1:b8:5e:c0:e4:ca:22:af:b8:80:44:5e:70: 8c:70:28:49:c0:4c:c4:b4:0f:0a:ef:49:ce:68:6c:be:cd:af: 7d:c7:60:6c:b9:b3:ef:2c:d7:45:2a:ab:b0:cb:b7:b2:b1:55: 04:a8:25:3a:cf:ad:ab:dd:56:62:88:d7:26:9a:9b:06:47:cb: 00:87:b6:43:c9:8d:4a:c6:d4:66:ed:6d:75:06:b1:11:09:fb: d3:bb:b0:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjAxOEUxMTAvBgNVBAUTKEQzMDM4QkE0NDkwRUE4MTVBREIwOUYxQTM4NjU4QkNE OEIxN0Y0ODIwHhcNMjUwNzIwMTc0NTA0WhcNMjUwNzI3MTc0NTAzWjAYMRYwFAYD VQQDEw02ODdkMmIyMC0zOGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3BNpsIhM61d9NvimEcZLZZUFPkz8pYBzLpLkO+pvbPIHezdrwbGjse1084Gt SzjWUDVMsLQnd7WMs2GtLyR0JfkNR0n1XCGb5bDhefpmYffBPZWUIr800VAjKy1A /HoyoyTf2n+azXFWM4Ev/TIWNyPGQ6zhUMMjUTUycAGZcI8rq2T5ZKLXFizMTWVZ TfAAeqVkacQcOefVOHRNd45BIwD9yGh3fsg4ruYePt7ULXAIC8GtD5ZOEATsvWsN vVAxYgbZ3sKvw+ZYS9iQD3Mc6SNZ14Jn49svdXBeDSRqqq7m6w4Xdk2XvWGz+qig OOcmYTShdOkvkJ8oC7OkeovmUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMeJCDbP fNZUzJaaGHBC7cWq241oMB8GA1UdIwQYMBaAFNMDi6RJDqgVrbCfGjhli82LF/SC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDE4RS9GQTU2OEU1RTlF MTUxMUU5OTAxNTM2NEFDNEY5QUUwMi8wd09McEVrT3FCV3RzSjhhT0dXTHpZc1g5 SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB3T0xwRWtPcUJXdHNKOGFPR1dMellzWDlJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDE4RS9GQTU2OEU1RTlFMTUxMUU5OTAxNTM2NEFDNEY5QUUwMi8wd09McEVrT3FC V3RzSjhhT0dXTHpZc1g5SUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFaKA1V/inid+/IzBFicI9HVcrZGzkfimyA7AQZhljeCYoiYQgpqlW /fGNqP7sDioShfo4FJGEeq0ZbrDYrntG7CWEtSElggCeEEag4aGPMhgiyiPiDazX gdYCdQ/vTrBwGP9VCTTw9CGV75VJtDO7Rvbrt3bhpOoOCI5Xzb9AvM/9F2exiJn2 dDihyNap2ohnI4GaxXSvqTjoMi6jzbdcAe8LEbj68LG4XsDkyiKvuIBEXnCMcChJ wEzEtA8K70nOaGy+za99x2BsubPvLNdFKquwy7eysVUEqCU6z62r3VZiiNcmmpsG R8sAh7ZDyY1KxtRm7W11BrERCfvTu7Ds -----END CERTIFICATE-----Generated at Mon Jul 21 06:51:03 2025 by rpki-client