$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft File: oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft (raw, json) Hash identifier: ss8AT+TxED2YDsHE/gNV8DrNhIpwEEWwit9B2bbWoAw= Subject key identifier: 42:5C:E9:0D:E6:0C:19:FE:21:95:6F:45:85:19:EE:CB:F4:B4:61:7F Authority key identifier: A1:8C:D3:FE:82:AD:21:80:3C:1F:0B:13:2D:AD:83:D1:C3:54:93:4B Certificate issuer: /CN=A91F6D55/serialNumber=A18CD3FE82AD21803C1F0B132DAD83D1C354934B Certificate serial: 027D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYzT_oKtIYA8HwsTLa2D0cNUk0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft Manifest number: 0279 Signing time: Sat 19 Jul 2025 02:08:08 +0000 Manifest this update: Sat 19 Jul 2025 02:08:07 +0000 Manifest next update: Sat 26 Jul 2025 02:08:07 +0000 Files and hashes: 1: oYzT_oKtIYA8HwsTLa2D0cNUk0s.crl (hash: DJ6McdP+xOTM56BwMj93IuwnxdJ/PK/ndVg6RvDkZrU=) 2: 929D0EB616A611ED86A3EF0CC4F9AE02.roa (hash: 00Bb5TLyF/J2CWzHDjxZA81Dz6rMiVp4bUBC6ncoYxk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.crl rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYzT_oKtIYA8HwsTLa2D0cNUk0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:08:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 637 (0x27d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6D55, serialNumber=A18CD3FE82AD21803C1F0B132DAD83D1C354934B Validity Not Before: Jul 19 02:08:07 2025 GMT Not After : Jul 26 02:08:07 2025 GMT Subject: CN=687afe08-48d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e8:d9:db:4e:53:13:b4:e2:8a:cc:ca:5c:ad: 40:f9:95:bb:c9:ce:5b:88:34:8a:e7:f5:b4:5b:81: f7:e1:56:fe:ac:88:a2:fe:f0:88:a1:e7:a2:7f:f5: f3:a3:08:a3:c1:5a:09:3d:2d:da:75:27:91:15:ca: f3:21:e2:01:21:de:a0:f3:a1:e6:7b:58:04:67:cb: c3:98:5f:89:1f:51:0c:32:29:99:dd:60:cb:91:5d: 18:c9:28:53:37:02:99:94:aa:45:7a:b8:e3:1b:1e: 05:e2:0b:44:85:2a:23:7c:9b:3a:a5:47:79:12:0e: 64:74:d4:9f:a6:0d:72:f1:a4:25:31:f6:43:4b:c1: 31:a9:78:54:b1:e7:9f:72:6f:aa:0c:be:50:7f:71: 3b:e5:4f:e8:44:40:1a:f1:45:7a:91:3c:4c:f5:7e: 5c:1b:0e:b9:56:48:7a:ea:4e:45:54:29:d3:79:bb: 41:2a:5b:8f:f3:c7:a3:3f:e9:1e:db:58:16:36:96: 65:df:11:04:40:16:3a:7c:ac:59:32:b2:0c:e7:db: f5:c5:f0:3c:e3:7c:2a:a2:3f:5c:6f:2b:b2:ca:e0: 8b:10:82:07:0d:0f:0d:4b:ab:d9:74:00:d5:d8:4b: 8d:e6:be:0d:8b:19:2d:62:84:60:34:9b:45:06:e4: bf:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:5C:E9:0D:E6:0C:19:FE:21:95:6F:45:85:19:EE:CB:F4:B4:61:7F X509v3 Authority Key Identifier: keyid:A1:8C:D3:FE:82:AD:21:80:3C:1F:0B:13:2D:AD:83:D1:C3:54:93:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYzT_oKtIYA8HwsTLa2D0cNUk0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:a4:1b:43:50:f4:2d:8c:fc:23:62:49:b3:3c:c0:c1:fa:14: d7:72:13:e5:61:c4:73:c6:8e:e0:91:48:86:67:d0:e1:72:39: 3d:82:4e:35:0b:57:d3:e6:3e:6c:aa:a9:bc:ee:fa:e2:a5:8a: 5c:7f:7e:3f:69:9e:63:05:43:75:85:7a:b3:cc:48:a3:28:dd: da:75:98:b4:f8:3b:e6:5a:c7:45:d6:fa:41:fe:9d:9d:bf:91: d5:d2:6a:a3:a1:73:a7:bf:12:ed:4b:bd:46:5f:a1:d5:f8:7a: 23:0e:c2:70:01:31:29:06:f9:fb:d4:84:10:99:9e:78:87:d2: f6:bf:1f:b5:50:50:5b:ff:01:cd:90:6f:87:45:01:26:68:9b: 6b:54:85:b0:96:89:e2:b3:50:5b:38:49:4b:79:03:eb:38:59: b1:06:61:94:f8:ad:34:b0:fa:e2:8e:1b:68:11:41:4d:26:75: fc:80:cc:da:93:46:fb:1c:77:3e:20:b9:86:be:50:66:b9:97: 20:86:1f:f5:6e:59:4d:3d:40:6f:8d:c3:0a:df:bf:c8:7f:6b: 43:7e:eb:02:4a:29:b3:87:68:a5:02:c1:e1:19:0f:74:1f:e1: a2:6d:26:e4:d5:74:b2:4c:f7:52:ec:3e:a6:d3:49:cb:cf:d4: ab:f5:48:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAn0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZENTUxMTAvBgNVBAUTKEExOENEM0ZFODJBRDIxODAzQzFGMEIxMzJEQUQ4M0Qx QzM1NDkzNEIwHhcNMjUwNzE5MDIwODA3WhcNMjUwNzI2MDIwODA3WjAYMRYwFAYD VQQDEw02ODdhZmUwOC00OGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk+jZ205TE7TiiszKXK1A+ZW7yc5biDSK5/W0W4H34Vb+rIii/vCIoeeif/Xz owijwVoJPS3adSeRFcrzIeIBId6g86Hme1gEZ8vDmF+JH1EMMimZ3WDLkV0YyShT NwKZlKpFerjjGx4F4gtEhSojfJs6pUd5Eg5kdNSfpg1y8aQlMfZDS8ExqXhUseef cm+qDL5Qf3E75U/oREAa8UV6kTxM9X5cGw65Vkh66k5FVCnTebtBKluP88ejP+ke 21gWNpZl3xEEQBY6fKxZMrIM59v1xfA843wqoj9cbyuyyuCLEIIHDQ8NS6vZdADV 2EuN5r4NixktYoRgNJtFBuS/xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEJc6Q3m DBn+IZVvRYUZ7sv0tGF/MB8GA1UdIwQYMBaAFKGM0/6CrSGAPB8LEy2tg9HDVJNL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkQ1NS8yQkE3Mzk1RTE2 QTQxMUVEQTgzODExMEJDNEY5QUUwMi9vWXpUX29LdElZQThId3NUTGEyRDBjTlVr MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29ZelRfb0t0SVlBOEh3c1RMYTJEMGNOVWswcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkQ1NS8yQkE3Mzk1RTE2QTQxMUVEQTgzODExMEJDNEY5QUUwMi9vWXpUX29LdElZ QThId3NUTGEyRDBjTlVrMHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRpBtDUPQtjPwjYkmzPMDB+hTXchPlYcRzxo7gkUiGZ9Dhcjk9gk41 C1fT5j5sqqm87vripYpcf34/aZ5jBUN1hXqzzEijKN3adZi0+DvmWsdF1vpB/p2d v5HV0mqjoXOnvxLtS71GX6HV+HojDsJwATEpBvn71IQQmZ54h9L2vx+1UFBb/wHN kG+HRQEmaJtrVIWwlonis1BbOElLeQPrOFmxBmGU+K00sPrijhtoEUFNJnX8gMza k0b7HHc+ILmGvlBmuZcghh/1bllNPUBvjcMK37/If2tDfusCSimzh2ilAsHhGQ90 H+GibSbk1XSyTPdS7D6m00nLz9Sr9Ujo -----END CERTIFICATE-----Generated at Sun Jul 20 06:12:32 2025 by rpki-client