$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft File: Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft (raw, json) Hash identifier: A/2vki4tdMI8GHHCYRnJlJseSOP+mKzwsVIP19PQ98A= Subject key identifier: 7E:5B:9B:45:C7:CF:4C:67:A7:E9:18:BF:D7:CC:3E:E4:88:78:80:32 Authority key identifier: 3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4 Certificate issuer: /CN=A91F0EBF/serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4 Certificate serial: 21F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft Manifest number: 21AF Signing time: Fri 18 Jul 2025 16:00:28 +0000 Manifest this update: Fri 18 Jul 2025 16:00:27 +0000 Manifest next update: Fri 25 Jul 2025 16:00:27 +0000 Files and hashes: 1: Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl (hash: XSuU70KRC2+Sk7lb8Ff0CJBGYE4qw84OuN4PoEEkC2U=) 2: 5F649D88F27E11EE8704D12FC4F9AE02.roa (hash: 1ES+epsnD/DNY/mamto14c9DZbko73ok/bvGYlpnZRA=) 3: 5EDC2B56F27E11EE8704D12FC4F9AE02.roa (hash: RV1/DDfUdeMeAI1f60SGG8y1uSkd4aEtHJsKEOkYdXA=) 4: 586B33AEF44611EBA78C117AC4F9AE02.roa (hash: xubGUlPUlNCBLJe5+NADMrf4YV/wbfCmoqj7rhjCN20=) 5: 5480D316764D11EA8CB5C039C4F9AE02.roa (hash: ftobPRBcc8wlVTCOH3GxCPMFHQM9ebuoV2KFpLluNR4=) 6: 11DE1CDA467611EC988CDC09C4F9AE02.roa (hash: RArCcLO/kSE5acBXMMlQcl8HS4RV4DSQfZAIgouxT+4=) 7: A73C0BF6D93511E6B2617F7BC4F9AE02.roa (hash: 8McChURwVN9JYUVHRVTAHRcHa/Hxc6L3gNtxVyOyx0g=) 8: 63BFE4C0292811EEAF894530C4F9AE02.roa (hash: 4gXXPKgdGkdsiTu4Fh+U84K4r4ojzbdg0Z4yEj+nXpA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 16:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8689 (0x21f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0EBF, serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4 Validity Not Before: Jul 18 16:00:27 2025 GMT Not After : Jul 25 16:00:27 2025 GMT Subject: CN=687a6f9b-da26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a3:38:04:6f:2b:6d:8a:20:a1:09:85:c0:40: ba:98:08:51:87:d1:7e:2f:76:56:fc:70:b7:ec:51: 46:a4:12:ff:6f:1a:a2:32:ce:e9:71:81:58:e6:4e: 64:df:bd:d1:a4:10:eb:34:e1:91:18:ac:56:72:b1: 9a:38:d8:0b:a2:5e:be:d1:05:31:aa:36:58:97:f4: 44:c7:1a:a4:75:ec:1f:87:aa:a4:70:88:02:91:fd: 78:05:58:fc:75:41:ee:97:c5:9c:5d:cb:8f:57:2f: 2d:3e:84:70:22:0e:14:d5:45:2b:dd:d3:3a:ad:62: f0:9b:42:39:f4:6c:0a:7c:4c:3c:9e:8e:ac:90:2e: 0e:3e:45:5c:62:91:48:90:a5:86:2d:61:79:29:cf: 8e:6b:ea:22:38:59:16:29:3a:b3:a0:7a:64:0a:b0: bf:2f:83:c9:3f:0d:1c:da:06:86:63:43:59:e6:55: bb:ad:3a:c1:83:95:de:f1:77:c8:7a:50:f1:45:23: 98:f6:06:8e:05:4f:fe:c8:f0:c2:56:a5:4f:bc:06: 59:e4:c3:04:ac:4e:f2:52:da:a4:e7:32:97:19:08: 0c:1e:0c:9b:5e:6b:8a:66:0a:fe:dc:ca:38:8d:50: da:d4:06:32:29:a6:59:ae:75:4f:3c:0f:fb:7a:4b: 2d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:5B:9B:45:C7:CF:4C:67:A7:E9:18:BF:D7:CC:3E:E4:88:78:80:32 X509v3 Authority Key Identifier: keyid:3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:90:d4:54:cd:15:69:d2:ff:96:48:01:ba:72:48:04:6a:31: 3f:13:87:a3:8a:2b:fc:be:d2:f7:cf:bc:61:6b:03:55:39:9b: 09:38:07:b6:f8:f4:22:a4:54:97:d7:bf:52:8d:29:0a:07:3a: 40:d1:f6:b7:21:09:ce:d1:dc:aa:d7:6b:9f:f8:9f:57:28:a4: 05:79:e2:32:f8:aa:5e:81:5b:85:2f:80:cf:17:65:1a:0c:72: c5:dc:cb:58:00:e8:11:e1:67:fb:30:4f:3e:a1:bb:f3:dc:46: 50:37:89:fe:ec:ce:70:82:22:85:61:a7:db:37:f8:34:5f:39: 9c:72:06:00:10:5b:2b:e8:39:86:7d:21:a4:8d:bc:ff:bc:08: cf:b5:37:b5:0e:8b:e6:fc:4e:dc:e0:fa:37:05:d2:c2:95:14: 5c:66:03:7d:c4:b9:b8:da:c8:b1:81:38:56:c0:9a:e3:f1:33: 36:91:70:da:ea:ad:79:ec:f1:ac:68:f3:88:67:9a:86:d3:86: ea:cf:98:3d:53:de:d2:56:53:8b:4c:33:44:47:c6:54:93:06: ec:17:90:e1:ff:b3:89:d2:93:40:f7:07:a2:2a:76:29:b1:d2: 5f:22:d6:79:fe:91:9f:0d:aa:65:93:3f:32:d8:15:bb:bb:a1: e0:a8:21:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBFQkYxMTAvBgNVBAUTKDNBQ0NCNjk1MzlBQzlGNDI4OEJDRDBGMEE1NDI1MEQ1 OTJGNTQwRDQwHhcNMjUwNzE4MTYwMDI3WhcNMjUwNzI1MTYwMDI3WjAYMRYwFAYD VQQDEw02ODdhNmY5Yi1kYTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuqM4BG8rbYogoQmFwEC6mAhRh9F+L3ZW/HC37FFGpBL/bxqiMs7pcYFY5k5k 373RpBDrNOGRGKxWcrGaONgLol6+0QUxqjZYl/RExxqkdewfh6qkcIgCkf14BVj8 dUHul8WcXcuPVy8tPoRwIg4U1UUr3dM6rWLwm0I59GwKfEw8no6skC4OPkVcYpFI kKWGLWF5Kc+Oa+oiOFkWKTqzoHpkCrC/L4PJPw0c2gaGY0NZ5lW7rTrBg5Xe8XfI elDxRSOY9gaOBU/+yPDCVqVPvAZZ5MMErE7yUtqk5zKXGQgMHgybXmuKZgr+3Mo4 jVDa1AYyKaZZrnVPPA/7ekstRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH5bm0XH z0xnp+kYv9fMPuSIeIAyMB8GA1UdIwQYMBaAFDrMtpU5rJ9CiLzQ8KVCUNWS9UDU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEVCRi81Rjg0RDdEOERC ODAxMUU1OUFCN0VEMUVDNEY5QUUwMi9Pc3kybFRtc24wS0l2TkR3cFVKUTFaTDFR TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09zeTJsVG1zbjBLSXZORHdwVUpRMVpMMVFOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEVCRi81Rjg0RDdEOERCODAxMUU1OUFCN0VEMUVDNEY5QUUwMi9Pc3kybFRtc24w S0l2TkR3cFVKUTFaTDFRTlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7kNRUzRVp0v+WSAG6ckgEajE/E4ejiiv8vtL3z7xhawNVOZsJOAe2 +PQipFSX179SjSkKBzpA0fa3IQnO0dyq12uf+J9XKKQFeeIy+KpegVuFL4DPF2Ua DHLF3MtYAOgR4Wf7ME8+obvz3EZQN4n+7M5wgiKFYafbN/g0XzmccgYAEFsr6DmG fSGkjbz/vAjPtTe1Dovm/E7c4Po3BdLClRRcZgN9xLm42sixgThWwJrj8TM2kXDa 6q157PGsaPOIZ5qG04bqz5g9U97SVlOLTDNER8ZUkwbsF5Dh/7OJ0pNA9weiKnYp sdJfItZ5/pGfDaplkz8y2BW7u6HgqCHF -----END CERTIFICATE-----Generated at Sun Jul 20 07:25:14 2025 by rpki-client