$ rpki-client -vvf rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft File: oVZKa9a5Cg-he_V9i-rJ4pJZves.mft (raw, json) Hash identifier: tejs5HG9O9txldMlf6ptelRHLq30XxBBh2tFoKKSZ1U= Subject key identifier: 1A:44:90:C4:46:C3:26:AC:86:D0:F6:9A:82:95:6D:55:72:12:C8:80 Authority key identifier: A1:56:4A:6B:D6:B9:0A:0F:A1:7B:F5:7D:8B:EA:C9:E2:92:59:BD:EB Certificate issuer: /CN=A91F61DA/serialNumber=A1564A6BD6B90A0FA17BF57D8BEAC9E29259BDEB Certificate serial: 0CC0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oVZKa9a5Cg-he_V9i-rJ4pJZves.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft Manifest number: 0CB7 Signing time: Sun 20 Jul 2025 18:11:19 +0000 Manifest this update: Sun 20 Jul 2025 18:11:18 +0000 Manifest next update: Sun 27 Jul 2025 18:11:18 +0000 Files and hashes: 1: oVZKa9a5Cg-he_V9i-rJ4pJZves.crl (hash: rNsmwnf2mojKR7cl5RJY8mQM4UCDoeKR6rnTwV0dm24=) 2: EA18D5547D8F11EC8E894A1DC4F9AE02.roa (hash: Anh2GximFPk7REReNBXULcTH3P6lLG5IbasX9kKM4Fs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.crl rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oVZKa9a5Cg-he_V9i-rJ4pJZves.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 18:11:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3264 (0xcc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F61DA, serialNumber=A1564A6BD6B90A0FA17BF57D8BEAC9E29259BDEB Validity Not Before: Jul 20 18:11:18 2025 GMT Not After : Jul 27 18:11:18 2025 GMT Subject: CN=687d3147-1832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:88:bf:d8:93:d0:1e:1e:73:67:8d:d4:10:0d: 25:15:e7:80:a1:e0:d0:d4:ff:a3:4d:a3:65:0a:58: fd:2f:d0:ad:75:ab:d1:67:a3:87:44:a6:a1:b5:0a: b2:9b:ea:83:43:a5:1f:30:e7:06:f8:22:09:2e:a3: fa:a2:df:10:c0:5a:67:cf:73:ae:d5:5c:f7:03:8c: 6c:6b:a9:be:d7:27:c9:1e:9a:da:a3:72:d9:ef:ac: f2:4e:cd:7b:a8:85:18:82:7c:fc:e3:e4:b1:b0:1f: 32:05:f7:2e:19:0b:2b:4d:d3:af:4e:7f:2b:b8:30: 30:9b:4e:9c:cb:be:7f:f6:8b:48:b6:bb:a9:fe:87: 92:d1:fd:89:a0:1b:00:48:ba:52:da:9f:79:18:34: c7:2e:ae:82:bc:b6:5d:82:3b:3e:ad:af:52:4e:c8: b5:f8:1e:60:f2:bd:4f:f8:31:d3:b0:4c:43:0d:95: e8:4d:fe:ae:40:9b:67:dd:ba:53:c5:10:92:32:df: ab:7e:7c:34:87:70:6c:a6:d5:d2:5a:78:ba:68:63: 31:8a:d6:1c:01:b6:aa:a0:ff:1e:94:db:52:e1:f1: aa:a1:f2:8f:14:49:9b:d3:78:69:94:ea:ca:b1:dc: 09:14:ba:85:0e:d0:3d:80:87:5d:d4:eb:86:5f:f7: 43:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:44:90:C4:46:C3:26:AC:86:D0:F6:9A:82:95:6D:55:72:12:C8:80 X509v3 Authority Key Identifier: keyid:A1:56:4A:6B:D6:B9:0A:0F:A1:7B:F5:7D:8B:EA:C9:E2:92:59:BD:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oVZKa9a5Cg-he_V9i-rJ4pJZves.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:dd:76:92:e1:20:41:08:e6:cc:07:99:15:3e:49:25:8a:83: a4:22:94:3b:2d:b6:3a:c3:e7:12:ae:77:85:77:8b:2b:cb:cf: ad:c9:fa:2a:86:20:80:5d:e9:b2:e8:f7:d4:c8:c5:0f:ce:91: b2:3f:7d:52:04:ad:d8:56:f2:d0:96:90:fa:ac:fe:36:e2:6c: a8:f7:6c:04:84:34:df:b0:a7:a4:06:d4:f6:71:c9:c1:d1:bc: d8:f7:7b:36:1a:d8:00:1d:bf:ed:c8:04:e3:82:99:dd:c2:31: 82:8d:10:3c:bb:f6:fa:3f:61:bf:ad:12:2d:a6:09:4e:e3:dc: 0a:25:93:3a:eb:d6:ec:b2:23:fa:10:18:a1:a1:99:8c:b6:5c: 3d:f8:61:e0:a3:a3:a3:4b:0e:1e:80:bd:dd:05:c8:dc:f0:5a: 7c:36:b3:49:b1:23:cf:03:74:3a:9f:c3:09:54:26:0c:d5:81: e0:8f:0c:94:75:2f:b1:99:e5:ac:8f:b4:4b:52:0f:f9:05:9a: 2a:75:45:90:75:5f:00:97:4a:5d:51:fb:86:74:ee:31:6e:ea: 89:bb:f7:be:ed:9e:54:62:ed:67:d4:0c:42:b7:79:d0:fa:ab: 77:4d:09:cd:47:03:48:92:32:83:ec:2d:b5:bc:d1:d6:63:f0: dd:ce:1a:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjYxREExMTAvBgNVBAUTKEExNTY0QTZCRDZCOTBBMEZBMTdCRjU3RDhCRUFDOUUy OTI1OUJERUIwHhcNMjUwNzIwMTgxMTE4WhcNMjUwNzI3MTgxMTE4WjAYMRYwFAYD VQQDEw02ODdkMzE0Ny0xODMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA24i/2JPQHh5zZ43UEA0lFeeAoeDQ1P+jTaNlClj9L9CtdavRZ6OHRKahtQqy m+qDQ6UfMOcG+CIJLqP6ot8QwFpnz3Ou1Vz3A4xsa6m+1yfJHprao3LZ76zyTs17 qIUYgnz84+SxsB8yBfcuGQsrTdOvTn8ruDAwm06cy75/9otItrup/oeS0f2JoBsA SLpS2p95GDTHLq6CvLZdgjs+ra9STsi1+B5g8r1P+DHTsExDDZXoTf6uQJtn3bpT xRCSMt+rfnw0h3BsptXSWni6aGMxitYcAbaqoP8elNtS4fGqofKPFEmb03hplOrK sdwJFLqFDtA9gIdd1OuGX/dDGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBpEkMRG wyashtD2moKVbVVyEsiAMB8GA1UdIwQYMBaAFKFWSmvWuQoPoXv1fYvqyeKSWb3r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjFEQS8xN0M4MUZEMEY0 MUUxMUU5QTgzNDNBNzRDNEY5QUUwMi9vVlpLYTlhNUNnLWhlX1Y5aS1ySjRwSlp2 ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29WWkthOWE1Q2ctaGVfVjlpLXJKNHBKWnZlcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjFEQS8xN0M4MUZEMEY0MUUxMUU5QTgzNDNBNzRDNEY5QUUwMi9vVlpLYTlhNUNn LWhlX1Y5aS1ySjRwSlp2ZXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAY3XaS4SBBCObMB5kVPkklioOkIpQ7LbY6w+cSrneFd4sry8+tyfoq hiCAXemy6PfUyMUPzpGyP31SBK3YVvLQlpD6rP424myo92wEhDTfsKekBtT2ccnB 0bzY93s2GtgAHb/tyATjgpndwjGCjRA8u/b6P2G/rRItpglO49wKJZM669bssiP6 EBihoZmMtlw9+GHgo6OjSw4egL3dBcjc8Fp8NrNJsSPPA3Q6n8MJVCYM1YHgjwyU dS+xmeWsj7RLUg/5BZoqdUWQdV8Al0pdUfuGdO4xbuqJu/e+7Z5UYu1n1AxCt3nQ +qt3TQnNRwNIkjKD7C21vNHWY/Ddzhoj -----END CERTIFICATE-----Generated at Mon Jul 21 06:16:37 2025 by rpki-client