$ rpki-client -vvf rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft File: O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft (raw, json) Hash identifier: 7vk2lWg7ZCZjWxDIE3NHCJXHwVBYehu5anDY8q9jVlI= Subject key identifier: EE:D3:CB:85:76:05:2A:70:59:91:D9:50:C7:98:7A:DA:A4:EA:9E:35 Authority key identifier: 3B:62:40:7E:2E:54:F4:2F:80:90:E2:C0:D8:6F:D2:C3:A6:13:30:B3 Certificate issuer: /CN=A91579E2/serialNumber=3B62407E2E54F42F8090E2C0D86FD2C3A61330B3 Certificate serial: 01A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft Manifest number: 0199 Signing time: Wed 23 Jul 2025 03:35:49 +0000 Manifest this update: Wed 23 Jul 2025 03:35:49 +0000 Manifest next update: Wed 30 Jul 2025 03:35:49 +0000 Files and hashes: 1: O2JAfi5U9C-AkOLA2G_Sw6YTMLM.crl (hash: 6Q7HGlCHRs8qripoTVi8t6rHtbKmjKgj4AISM45VS6Y=) 2: 62923A1EF2B711EDAA29717AC4F9AE02.roa (hash: oxGjZ2qP5KAlzJWT8zUJKcB63LEiuvqe3on36ROaH3g=) 3: 631D6D82F2B711EDAA29717AC4F9AE02.roa (hash: Ugoz9OgYhjx5n/wKBryzHZ0lteBuyiXAGZkUzpN/sg4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.crl rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 03:35:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 416 (0x1a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91579E2, serialNumber=3B62407E2E54F42F8090E2C0D86FD2C3A61330B3 Validity Not Before: Jul 23 03:35:49 2025 GMT Not After : Jul 30 03:35:49 2025 GMT Subject: CN=68805895-aa10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:85:b2:bc:7f:1e:d1:bc:4d:2f:29:d3:ed:95: 73:5e:99:fc:d1:47:80:57:a2:42:5b:a2:61:6f:58: 00:c7:27:6c:9c:b2:a5:4e:bc:66:78:19:2f:83:36: c3:d7:b7:1e:ed:b2:f1:04:48:0b:36:b3:e5:06:cd: 39:0b:42:77:0d:78:c6:7c:05:d2:31:6d:36:f0:40: 9c:f9:73:fb:9e:3c:55:0d:62:25:21:7e:55:af:a9: 67:39:f1:72:69:48:1b:e0:da:73:7f:a4:b9:5d:98: 0a:1f:6b:8e:ce:61:dd:5c:17:4f:82:60:00:75:07: f7:6d:56:ef:52:e1:92:df:e5:9a:84:48:78:e4:53: 54:13:16:e0:ba:96:3e:a8:5c:a1:40:42:0e:44:27: 14:ed:2d:62:36:16:85:ba:10:e4:09:0a:2a:94:eb: 4b:22:8d:7d:32:6c:2a:ef:bc:c4:40:6d:a1:2c:bf: 84:bf:aa:c9:24:80:e9:b1:1c:df:4b:ab:00:70:64: 46:63:3d:c3:b7:1f:aa:1d:ad:aa:9a:b0:0e:ad:26: 60:df:f4:6a:70:8c:e6:55:4e:ed:68:85:80:5d:68: 05:32:d7:23:85:ac:17:ef:8b:4e:de:5a:96:fe:e8: b7:48:ae:94:28:2b:c7:c2:18:ee:4f:fe:42:9d:c5: c1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:D3:CB:85:76:05:2A:70:59:91:D9:50:C7:98:7A:DA:A4:EA:9E:35 X509v3 Authority Key Identifier: keyid:3B:62:40:7E:2E:54:F4:2F:80:90:E2:C0:D8:6F:D2:C3:A6:13:30:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:a9:99:75:e1:7f:7a:93:1f:01:f9:f3:fe:4e:a5:fd:8e:ed: fd:0a:b3:e2:3a:81:19:7a:89:2b:98:83:50:cc:c7:a4:dc:f8: 49:d5:d9:a0:ba:1f:05:6b:a4:0f:ab:da:c2:d7:92:7e:46:03: 5c:a2:ac:2c:c6:9a:71:3d:40:63:d6:fb:a5:5b:ac:8a:86:a0: f1:4e:37:7a:03:a3:d7:48:14:dc:41:fc:75:f5:12:f1:85:fc: 2e:5b:5f:57:7f:bb:35:9c:3e:5c:ea:8e:f4:3b:99:aa:c4:b6: a3:16:0e:89:fc:6a:d0:7e:e0:b4:09:7e:c3:47:9e:d0:f5:e7: 62:8d:a3:52:fa:ec:84:c7:20:aa:3b:1d:33:69:62:d7:6b:9c: 32:92:28:9d:c5:1e:c6:51:a3:2e:21:1b:27:ca:04:3e:38:a0: 5d:35:5e:b2:28:d4:76:d2:c9:d7:80:9f:96:0b:38:f7:cf:15: eb:41:b0:64:70:41:cf:13:d1:1d:12:86:c9:21:ee:e0:f4:ec: 9b:05:77:7e:69:82:ab:f0:a5:5f:8d:83:86:ee:ae:3a:a5:f7: 7c:28:cd:43:1e:24:3f:c6:c6:d3:08:01:8e:b6:a9:e2:23:f0: ac:d6:f5:39:86:be:26:ac:d4:2a:50:30:64:58:e2:e8:94:86: ff:cc:01:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc5RTIxMTAvBgNVBAUTKDNCNjI0MDdFMkU1NEY0MkY4MDkwRTJDMEQ4NkZEMkMz QTYxMzMwQjMwHhcNMjUwNzIzMDMzNTQ5WhcNMjUwNzMwMDMzNTQ5WjAYMRYwFAYD VQQDEw02ODgwNTg5NS1hYTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtoWyvH8e0bxNLynT7ZVzXpn80UeAV6JCW6Jhb1gAxydsnLKlTrxmeBkvgzbD 17ce7bLxBEgLNrPlBs05C0J3DXjGfAXSMW028ECc+XP7njxVDWIlIX5Vr6lnOfFy aUgb4Npzf6S5XZgKH2uOzmHdXBdPgmAAdQf3bVbvUuGS3+WahEh45FNUExbgupY+ qFyhQEIORCcU7S1iNhaFuhDkCQoqlOtLIo19Mmwq77zEQG2hLL+Ev6rJJIDpsRzf S6sAcGRGYz3Dtx+qHa2qmrAOrSZg3/RqcIzmVU7taIWAXWgFMtcjhawX74tO3lqW /ui3SK6UKCvHwhjuT/5CncXBfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO7Ty4V2 BSpwWZHZUMeYetqk6p41MB8GA1UdIwQYMBaAFDtiQH4uVPQvgJDiwNhv0sOmEzCz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzlFMi83M0FGMkY3QUYy QjAxMUVEQTQyQjQ0NzBDNEY5QUUwMi9PMkpBZmk1VTlDLUFrT0xBMkdfU3c2WVRN TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL08ySkFmaTVVOUMtQWtPTEEyR19TdzZZVE1MTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzlFMi83M0FGMkY3QUYyQjAxMUVEQTQyQjQ0NzBDNEY5QUUwMi9PMkpBZmk1VTlD LUFrT0xBMkdfU3c2WVRNTE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVqZl14X96kx8B+fP+TqX9ju39CrPiOoEZeokrmINQzMek3PhJ1dmg uh8Fa6QPq9rC15J+RgNcoqwsxppxPUBj1vulW6yKhqDxTjd6A6PXSBTcQfx19RLx hfwuW19Xf7s1nD5c6o70O5mqxLajFg6J/GrQfuC0CX7DR57Q9edijaNS+uyExyCq Ox0zaWLXa5wykiidxR7GUaMuIRsnygQ+OKBdNV6yKNR20snXgJ+WCzj3zxXrQbBk cEHPE9EdEobJIe7g9OybBXd+aYKr8KVfjYOG7q46pfd8KM1DHiQ/xsbTCAGOtqni I/Cs1vU5hr4mrNQqUDBkWOLolIb/zAGL -----END CERTIFICATE-----Generated at Wed Jul 23 12:27:16 2025 by rpki-client