$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.mft File: oKxCfpV7N00CZ_p2SN0_-FcC2rE.mft (raw, json) Hash identifier: 9/AIsg568qDg66dmm9n4+Sd9R5Nud85Q6OJS+TvVX6c= Subject key identifier: 11:B2:44:4D:DE:0D:01:41:76:B9:91:56:8E:36:C6:F5:28:BE:F0:A6 Authority key identifier: A0:AC:42:7E:95:7B:37:4D:02:67:FA:76:48:DD:3F:F8:57:02:DA:B1 Certificate issuer: /CN=A91FA024/serialNumber=A0AC427E957B374D0267FA7648DD3FF85702DAB1 Certificate serial: 07FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKxCfpV7N00CZ_p2SN0_-FcC2rE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.mft Manifest number: 07F2 Signing time: Tue 22 Jul 2025 21:13:14 +0000 Manifest this update: Tue 22 Jul 2025 21:13:13 +0000 Manifest next update: Tue 29 Jul 2025 21:13:13 +0000 Files and hashes: 1: oKxCfpV7N00CZ_p2SN0_-FcC2rE.crl (hash: uMlsOLDVsb38AwqZvJp/DoNwUJify+avt97wcmFlG28=) 2: FE1FDB12BCD011EC8283681EC4F9AE02.roa (hash: 2wuY0yDKdmJN9ZQKTlSwz2efwa28k+u+9dd3owV3hlg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.crl rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKxCfpV7N00CZ_p2SN0_-FcC2rE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 21:13:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2042 (0x7fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA024, serialNumber=A0AC427E957B374D0267FA7648DD3FF85702DAB1 Validity Not Before: Jul 22 21:13:13 2025 GMT Not After : Jul 29 21:13:13 2025 GMT Subject: CN=687ffee9-5617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7d:0a:12:7e:5c:86:24:cf:98:54:0c:82:1e: 42:a1:17:ff:26:79:0b:0e:de:e8:0b:60:e2:75:7b: 8c:07:e6:1a:f4:06:f2:b8:c2:5a:2c:19:50:4c:6b: 32:df:61:b8:d1:bf:38:62:10:e6:3a:8d:1c:3b:51: 80:23:76:f4:ab:6b:ca:8c:94:78:04:a7:91:54:37: 24:2e:be:86:c5:ab:02:4b:3d:eb:46:16:95:fa:f6: dd:54:3b:1f:43:bd:2f:1e:77:17:78:3d:15:bd:fe: 11:22:ed:e2:45:1f:c6:66:8e:db:b1:51:b7:62:e2: 4a:9f:46:50:43:3e:94:39:b1:2e:09:8a:21:1d:f6: 66:19:95:a3:64:93:4d:bb:30:2e:64:01:8d:a0:b5: 31:46:87:24:20:7e:03:de:75:f5:8d:cd:32:3b:03: 6f:bf:96:d9:c6:3e:bc:52:cb:71:37:ca:15:bb:6a: ed:67:ae:8e:37:2c:2b:e3:15:51:e4:3d:18:4e:ca: 26:81:18:81:58:74:ca:f8:88:e7:b4:78:d9:0a:eb: ce:0a:fa:20:4c:39:7b:9b:4b:8c:e4:a6:cf:4e:59: 7a:09:84:49:88:50:32:53:7e:40:2b:bd:c6:b1:23: 97:90:e7:13:b6:a6:fe:97:f7:27:2a:9f:57:c8:35: 74:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:B2:44:4D:DE:0D:01:41:76:B9:91:56:8E:36:C6:F5:28:BE:F0:A6 X509v3 Authority Key Identifier: keyid:A0:AC:42:7E:95:7B:37:4D:02:67:FA:76:48:DD:3F:F8:57:02:DA:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKxCfpV7N00CZ_p2SN0_-FcC2rE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:14:08:3a:ac:03:3a:a0:c0:a0:bf:38:13:ff:6c:35:47:f5: 47:1e:55:ca:c8:df:f4:70:c7:96:8c:8f:e8:3d:2f:33:4e:b7: 81:1c:eb:e9:3e:48:5e:6c:22:7c:97:11:bb:16:ed:0a:19:0a: 01:87:10:b5:72:87:37:20:6f:e5:5a:9d:67:c4:c9:f4:9a:d8: 6b:16:4e:26:bc:e1:97:31:77:6b:da:9b:68:a7:45:7a:d6:d6: 35:6f:4d:83:5f:b0:6a:a1:6c:b8:69:86:f7:a7:6e:ad:74:88: 7b:26:ec:4f:43:ee:9c:b8:f2:dc:a4:4f:4d:e4:4a:7e:91:92: d2:51:58:45:25:80:4e:7c:e8:5f:d8:9a:a5:f1:2c:12:ca:ba: 62:08:64:32:2e:87:0b:e6:45:04:b2:0c:c2:b6:54:2b:c1:7f: 73:67:75:e4:5b:5e:d0:8e:0f:72:59:2c:11:9b:da:97:85:97: 36:48:9b:ce:34:df:0a:51:23:73:a5:03:ac:1a:c5:ab:d5:01: d2:31:b2:fd:3f:82:86:60:62:b6:2e:71:3f:b5:98:dc:78:7e: bd:51:52:38:a9:b4:69:66:f4:21:b4:cb:dc:77:20:0b:86:fb: 56:c8:db:4f:e7:6f:9c:56:33:c8:6e:fb:72:29:ec:85:bc:ce: 5e:c8:5b:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkEwMjQxMTAvBgNVBAUTKEEwQUM0MjdFOTU3QjM3NEQwMjY3RkE3NjQ4REQzRkY4 NTcwMkRBQjEwHhcNMjUwNzIyMjExMzEzWhcNMjUwNzI5MjExMzEzWjAYMRYwFAYD VQQDEw02ODdmZmVlOS01NjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz30KEn5chiTPmFQMgh5CoRf/JnkLDt7oC2DidXuMB+Ya9AbyuMJaLBlQTGsy 32G40b84YhDmOo0cO1GAI3b0q2vKjJR4BKeRVDckLr6GxasCSz3rRhaV+vbdVDsf Q70vHncXeD0Vvf4RIu3iRR/GZo7bsVG3YuJKn0ZQQz6UObEuCYohHfZmGZWjZJNN uzAuZAGNoLUxRockIH4D3nX1jc0yOwNvv5bZxj68UstxN8oVu2rtZ66ONywr4xVR 5D0YTsomgRiBWHTK+IjntHjZCuvOCvogTDl7m0uM5KbPTll6CYRJiFAyU35AK73G sSOXkOcTtqb+l/cnKp9XyDV0+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBGyRE3e DQFBdrmRVo42xvUovvCmMB8GA1UdIwQYMBaAFKCsQn6VezdNAmf6dkjdP/hXAtqx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTAyNC9EMzNBNDc5NEYx ODgxMUVBOUU4MEY3MUVDNEY5QUUwMi9vS3hDZnBWN04wMENaX3AyU04wXy1GY0My ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29LeENmcFY3TjAwQ1pfcDJTTjBfLUZjQzJyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTAyNC9EMzNBNDc5NEYxODgxMUVBOUU4MEY3MUVDNEY5QUUwMi9vS3hDZnBWN04w MENaX3AyU04wXy1GY0MyckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfFAg6rAM6oMCgvzgT/2w1R/VHHlXKyN/0cMeWjI/oPS8zTreBHOvp PkhebCJ8lxG7Fu0KGQoBhxC1coc3IG/lWp1nxMn0mthrFk4mvOGXMXdr2ptop0V6 1tY1b02DX7BqoWy4aYb3p26tdIh7JuxPQ+6cuPLcpE9N5Ep+kZLSUVhFJYBOfOhf 2Jql8SwSyrpiCGQyLocL5kUEsgzCtlQrwX9zZ3XkW17Qjg9yWSwRm9qXhZc2SJvO NN8KUSNzpQOsGsWr1QHSMbL9P4KGYGK2LnE/tZjceH69UVI4qbRpZvQhtMvcdyAL hvtWyNtP52+cVjPIbvtyKeyFvM5eyFsV -----END CERTIFICATE-----Generated at Wed Jul 23 09:07:08 2025 by rpki-client