$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.mft File: oiiPiWTWFpqHlfL07wXg1ebhOwk.mft (raw, json) Hash identifier: 1hbKf1r6IimXvKXLF6x52dL9RM68XHYEp0A3Oqy1Mas= Subject key identifier: 5C:75:A2:FA:B3:7B:99:CE:DF:2A:63:00:B1:0F:4B:95:C3:A5:44:E6 Authority key identifier: A2:28:8F:89:64:D6:16:9A:87:95:F2:F4:EF:05:E0:D5:E6:E1:3B:09 Certificate issuer: /CN=A91FB68C/serialNumber=A2288F8964D6169A8795F2F4EF05E0D5E6E13B09 Certificate serial: 66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiiPiWTWFpqHlfL07wXg1ebhOwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.mft Manifest number: 5D Signing time: Sat 19 Jul 2025 07:31:49 +0000 Manifest this update: Sat 19 Jul 2025 07:31:48 +0000 Manifest next update: Sat 26 Jul 2025 07:31:48 +0000 Files and hashes: 1: oiiPiWTWFpqHlfL07wXg1ebhOwk.crl (hash: hzZXvNHNa5xE6WC/2K3EA1LD9t4yWag6QTo1juGcTq8=) 2: 7F9864BC278511F08A309E80C4F9AE02.roa (hash: Qmy+i9C5Rc4mKmMkW3mFXP5ni+MgnYfnd/vlrjppwOw=) 3: 965254F8278811F09217002CC4F9AE02.roa (hash: 43x78k+dzhsv7ZCDVrgKApUESFB1ajmPRMXQlcEBmxQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.crl rsync://rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiiPiWTWFpqHlfL07wXg1ebhOwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:31:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 102 (0x66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB68C, serialNumber=A2288F8964D6169A8795F2F4EF05E0D5E6E13B09 Validity Not Before: Jul 19 07:31:48 2025 GMT Not After : Jul 26 07:31:48 2025 GMT Subject: CN=687b49e5-ec3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2c:9c:55:77:12:00:ba:d8:a7:f5:5a:4e:8c: 49:5b:75:2f:33:3e:cd:9c:9d:53:25:d2:17:8a:5c: 29:3a:c8:43:99:eb:52:1e:cd:30:45:e2:e1:96:a8: 17:cd:32:9c:bd:d5:b7:c7:08:2d:86:41:cd:42:51: 6d:ee:26:56:87:ba:d9:1c:55:5d:a0:8c:4d:01:8c: 31:54:4e:0c:6c:f6:09:e3:57:0f:63:a9:91:01:ca: 95:03:39:0b:01:d7:34:f0:92:a2:68:7f:45:dd:e3: 54:d4:ba:3e:c1:62:75:74:70:5d:11:74:d5:2c:26: a2:8b:57:98:85:e6:31:74:42:34:2c:d1:1d:65:fd: 5b:b1:2c:cf:cb:86:51:5c:ef:2d:95:cd:b9:2b:b8: 0a:c5:6f:15:b8:37:2a:55:05:79:49:10:7c:f1:c2: 9f:c1:2a:b1:76:18:50:ad:10:af:0c:2a:a1:6c:44: 51:bc:55:6e:a5:1f:d1:4e:3b:ac:5f:1c:b8:c9:7c: 03:e0:3c:17:11:1f:8c:ff:af:4a:36:c2:02:3e:c1: f3:97:9a:65:e7:2a:08:20:3f:92:78:9d:eb:57:5b: 49:ae:a0:78:cb:7e:f7:a6:6c:14:37:70:ce:c1:17: 95:a5:8a:41:a7:fd:a0:ad:7a:ec:a9:35:f2:bd:d1: 74:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:75:A2:FA:B3:7B:99:CE:DF:2A:63:00:B1:0F:4B:95:C3:A5:44:E6 X509v3 Authority Key Identifier: keyid:A2:28:8F:89:64:D6:16:9A:87:95:F2:F4:EF:05:E0:D5:E6:E1:3B:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiiPiWTWFpqHlfL07wXg1ebhOwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:11:e7:12:0e:dd:39:bf:a2:ae:3c:1c:83:cd:90:a2:a7:53: 7d:e6:86:0d:56:f0:84:59:f3:bc:59:7c:ee:66:ff:fe:db:e2: 3c:5d:63:cf:35:de:d5:f9:64:35:df:aa:c9:ea:a0:e0:59:53: b7:a5:a4:23:86:8c:88:4e:93:01:13:a4:fe:d8:54:bf:11:1f: 89:b9:eb:53:b0:cd:7d:3a:99:f2:3f:70:72:02:77:ac:96:51: f8:54:aa:20:ef:8b:29:1e:77:cd:86:f7:7f:8b:1b:d3:b9:32: 81:3e:76:80:23:82:80:06:4a:39:45:7d:f3:47:92:37:e2:70: c2:2d:f1:fd:3c:76:52:59:9d:68:16:74:c1:2b:eb:d4:de:3a: 64:40:d2:48:c9:21:70:f1:0e:45:bc:68:aa:b0:72:1a:e5:7c: 3f:66:ac:47:2c:3c:da:05:b0:c1:37:54:4e:6a:d6:11:13:ce: bb:c8:fc:b8:ef:61:e0:d8:ea:ac:14:cd:64:cb:db:cb:10:f6: 4b:b9:9c:8d:ad:bd:ec:cd:75:fc:1e:d9:4b:08:2c:3a:3b:25: e7:a8:cf:86:71:c0:94:e1:9a:66:2a:de:ac:26:4a:42:28:f9: ad:81:f2:07:50:49:0b:2f:4c:6e:d3:34:84:27:1a:6e:15:78: 14:36:03:e5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QjY4QzExMC8GA1UEBRMoQTIyODhGODk2NEQ2MTY5QTg3OTVGMkY0RUYwNUUwRDVF NkUxM0IwOTAeFw0yNTA3MTkwNzMxNDhaFw0yNTA3MjYwNzMxNDhaMBgxFjAUBgNV BAMTDTY4N2I0OWU1LWVjM2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDdLJxVdxIAutin9VpOjElbdS8zPs2cnVMl0heKXCk6yEOZ61IezTBF4uGWqBfN Mpy91bfHCC2GQc1CUW3uJlaHutkcVV2gjE0BjDFUTgxs9gnjVw9jqZEBypUDOQsB 1zTwkqJof0Xd41TUuj7BYnV0cF0RdNUsJqKLV5iF5jF0QjQs0R1l/VuxLM/LhlFc 7y2VzbkruArFbxW4NypVBXlJEHzxwp/BKrF2GFCtEK8MKqFsRFG8VW6lH9FOO6xf HLjJfAPgPBcRH4z/r0o2wgI+wfOXmmXnKgggP5J4netXW0muoHjLfvembBQ3cM7B F5WlikGn/aCteuypNfK90XR3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXHWi+rN7 mc7fKmMAsQ9LlcOlROYwHwYDVR0jBBgwFoAUoiiPiWTWFpqHlfL07wXg1ebhOwkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCNjhDLzE3RDEwM0E4RUFC MjExRUY4NDZGMTMzN0M0RjlBRTAyL29paVBpV1RXRnBxSGxmTDA3d1hnMWViaE93 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb2lpUGlXVFdGcHFIbGZMMDd3WGcxZWJoT3drLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC NjhDLzE3RDEwM0E4RUFCMjExRUY4NDZGMTMzN0M0RjlBRTAyL29paVBpV1RXRnBx SGxmTDA3d1hnMWViaE93ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIcR5xIO3Tm/oq48HIPNkKKnU33mhg1W8IRZ87xZfO5m//7b4jxdY881 3tX5ZDXfqsnqoOBZU7elpCOGjIhOkwETpP7YVL8RH4m561OwzX06mfI/cHICd6yW UfhUqiDviyked82G93+LG9O5MoE+doAjgoAGSjlFffNHkjficMIt8f08dlJZnWgW dMEr69TeOmRA0kjJIXDxDkW8aKqwchrlfD9mrEcsPNoFsME3VE5q1hETzrvI/Ljv YeDY6qwUzWTL28sQ9ku5nI2tvezNdfwe2UsILDo7Jeeoz4ZxwJThmmYq3qwmSkIo +a2B8gdQSQsvTG7TNIQnGm4VeBQ2A+U= -----END CERTIFICATE-----Generated at Sun Jul 20 16:23:40 2025 by rpki-client