$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6ADE/28739D3A41DF11ECA3DC2F85C4F9AE02/cOaM6FoDjZ4wcEODfKbmsaZglu4.mft File: cOaM6FoDjZ4wcEODfKbmsaZglu4.mft (raw, json) Hash identifier: yw16wQSFQ2ElIenfWcnvW/sKpVXJ9w0L0UOth7jJ6Vs= Subject key identifier: 74:4A:AE:2E:7D:C3:73:E8:AD:16:D2:B1:94:B2:E4:AB:AF:F5:CC:56 Authority key identifier: 70:E6:8C:E8:5A:03:8D:9E:30:70:43:83:7C:A6:E6:B1:A6:60:96:EE Certificate issuer: /CN=A91F6ADE/serialNumber=70E68CE85A038D9E307043837CA6E6B1A66096EE Certificate serial: 04A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOaM6FoDjZ4wcEODfKbmsaZglu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6ADE/28739D3A41DF11ECA3DC2F85C4F9AE02/cOaM6FoDjZ4wcEODfKbmsaZglu4.mft Manifest number: 049B Signing time: Mon 21 Jul 2025 00:12:18 +0000 Manifest this update: Mon 21 Jul 2025 00:12:18 +0000 Manifest next update: Mon 28 Jul 2025 00:12:18 +0000 Files and hashes: 1: cOaM6FoDjZ4wcEODfKbmsaZglu4.crl (hash: qGSNBuvApq6GGiV62ZBIdJZZGgcgebYSNMJd34IPfbA=) 2: FD0DCDCA41E111EC98FA0C0AC4F9AE02.roa (hash: CzraaquDZ9Uo+Rh3T+BRvbMkjKbruCD1g9kPUW6icAU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6ADE/28739D3A41DF11ECA3DC2F85C4F9AE02/cOaM6FoDjZ4wcEODfKbmsaZglu4.crl rsync://rpki.apnic.net/member_repository/A91F6ADE/28739D3A41DF11ECA3DC2F85C4F9AE02/cOaM6FoDjZ4wcEODfKbmsaZglu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOaM6FoDjZ4wcEODfKbmsaZglu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 00:12:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1185 (0x4a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6ADE, serialNumber=70E68CE85A038D9E307043837CA6E6B1A66096EE Validity Not Before: Jul 21 00:12:18 2025 GMT Not After : Jul 28 00:12:18 2025 GMT Subject: CN=687d85e2-50ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cc:7f:e7:41:7b:19:c6:8d:84:d9:50:7e:47: 49:4b:90:38:43:15:ed:bf:4a:8a:72:15:b7:c0:f0: 51:de:6f:ff:33:37:24:20:c7:db:0b:b0:2a:22:ec: 14:28:13:18:aa:98:ca:20:c0:af:f2:ba:2b:1b:d2: e8:66:50:80:a0:19:fc:4e:ce:a8:47:69:4b:37:13: c8:9c:5f:4a:c3:24:7c:e3:ed:30:a1:77:89:6f:37: 67:d9:6e:0e:e7:2c:c1:8f:fd:71:1f:34:c7:9e:5f: fe:b2:10:e7:e6:d1:30:e2:11:68:52:92:98:08:d8: ed:6f:4e:66:30:e1:42:d2:cd:a1:b3:8d:0a:10:c0: 1b:e6:58:b0:9e:00:18:eb:fe:51:8e:40:3f:ee:9c: d7:a0:72:39:d9:64:e5:bd:3b:6b:65:65:9f:6d:65: 37:6d:c0:1f:a5:01:2e:5e:06:ff:01:ff:df:e0:09: fc:26:f9:aa:59:7d:2f:68:5c:45:5b:b3:f3:b1:fe: 2f:24:1d:1c:15:43:f3:fd:7f:78:bf:e3:32:63:17: e6:5a:17:27:46:c3:64:50:94:7f:26:7d:0c:62:ff: fa:4d:c7:a9:83:9c:90:4c:09:37:73:f2:63:cb:a5: a3:e8:9b:5e:b2:c4:78:8b:5b:a6:a1:1c:ce:4f:1e: 7e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:4A:AE:2E:7D:C3:73:E8:AD:16:D2:B1:94:B2:E4:AB:AF:F5:CC:56 X509v3 Authority Key Identifier: keyid:70:E6:8C:E8:5A:03:8D:9E:30:70:43:83:7C:A6:E6:B1:A6:60:96:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6ADE/28739D3A41DF11ECA3DC2F85C4F9AE02/cOaM6FoDjZ4wcEODfKbmsaZglu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOaM6FoDjZ4wcEODfKbmsaZglu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6ADE/28739D3A41DF11ECA3DC2F85C4F9AE02/cOaM6FoDjZ4wcEODfKbmsaZglu4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:ab:25:da:45:b6:88:c0:5b:c6:65:5b:d5:35:a6:93:c2:89: 24:9d:eb:38:87:7d:6f:35:9f:b1:64:c6:97:05:a2:cd:3f:05: d3:b8:3d:a4:1d:32:9a:8e:79:47:93:65:31:27:d2:a7:91:74: c2:57:a0:30:79:e1:3f:5e:17:ab:db:09:0c:11:5e:00:92:a9: 81:bf:b3:9a:05:0d:84:7c:66:a0:fc:29:16:a3:24:7b:05:6f: 6f:35:3d:ae:1a:0a:b9:82:3c:70:e4:e8:62:a1:d2:c6:18:aa: 18:eb:34:34:a5:11:72:93:f0:51:a6:2d:2b:40:63:6d:34:34: d8:ab:ba:9c:46:59:02:77:98:33:37:77:0e:04:83:ad:09:ee: 6c:4b:11:f7:05:8a:07:aa:6e:3d:21:ef:70:15:7e:a3:4c:9f: a5:65:06:31:51:9d:50:4c:5b:aa:2d:3d:d8:8f:c2:60:71:e2: 28:13:23:3e:c9:ca:3f:f7:29:89:49:f2:6d:9e:58:ff:8c:0c: 01:e6:7e:a2:b4:b6:d2:e3:ab:4c:21:6d:da:47:d8:0f:d4:28: e2:a1:3b:5d:e9:21:62:a1:ff:e8:16:ce:bd:0b:a3:f8:e1:cb: 98:5c:bb:dc:19:8e:0e:d4:e7:19:3e:1d:ba:a6:f9:bc:ab:f8: d1:be:87:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZBREUxMTAvBgNVBAUTKDcwRTY4Q0U4NUEwMzhEOUUzMDcwNDM4MzdDQTZFNkIx QTY2MDk2RUUwHhcNMjUwNzIxMDAxMjE4WhcNMjUwNzI4MDAxMjE4WjAYMRYwFAYD VQQDEw02ODdkODVlMi01MGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAocx/50F7GcaNhNlQfkdJS5A4QxXtv0qKchW3wPBR3m//MzckIMfbC7AqIuwU KBMYqpjKIMCv8rorG9LoZlCAoBn8Ts6oR2lLNxPInF9KwyR84+0woXeJbzdn2W4O 5yzBj/1xHzTHnl/+shDn5tEw4hFoUpKYCNjtb05mMOFC0s2hs40KEMAb5liwngAY 6/5RjkA/7pzXoHI52WTlvTtrZWWfbWU3bcAfpQEuXgb/Af/f4An8JvmqWX0vaFxF W7Pzsf4vJB0cFUPz/X94v+MyYxfmWhcnRsNkUJR/Jn0MYv/6Tcepg5yQTAk3c/Jj y6Wj6JtessR4i1umoRzOTx5+0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHRKri59 w3PorRbSsZSy5Kuv9cxWMB8GA1UdIwQYMBaAFHDmjOhaA42eMHBDg3ym5rGmYJbu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkFERS8yODczOUQzQTQx REYxMUVDQTNEQzJGODVDNEY5QUUwMi9jT2FNNkZvRGpaNHdjRU9EZktibXNhWmds dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NPYU02Rm9Ealo0d2NFT0RmS2Jtc2FaZ2x1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkFERS8yODczOUQzQTQxREYxMUVDQTNEQzJGODVDNEY5QUUwMi9jT2FNNkZvRGpa NHdjRU9EZktibXNhWmdsdTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIqyXaRbaIwFvGZVvVNaaTwokknes4h31vNZ+xZMaXBaLNPwXTuD2k HTKajnlHk2UxJ9KnkXTCV6AweeE/Xher2wkMEV4AkqmBv7OaBQ2EfGag/CkWoyR7 BW9vNT2uGgq5gjxw5OhiodLGGKoY6zQ0pRFyk/BRpi0rQGNtNDTYq7qcRlkCd5gz N3cOBIOtCe5sSxH3BYoHqm49Ie9wFX6jTJ+lZQYxUZ1QTFuqLT3Yj8JgceIoEyM+ yco/9ymJSfJtnlj/jAwB5n6itLbS46tMIW3aR9gP1CjioTtd6SFiof/oFs69C6P4 4cuYXLvcGY4O1OcZPh26pvm8q/jRvoex -----END CERTIFICATE-----Generated at Mon Jul 21 05:42:48 2025 by rpki-client