$ rpki-client -vvf rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.mft File: OQo4N6umkSos8p5hDaSVVd8sb6U.mft (raw, json) Hash identifier: MeJxHnUMO2ToiOJsFtxcRyAfFZkC+Sjh4JubO6D8kcI= Subject key identifier: 77:FD:4A:BF:6A:0C:01:50:7F:78:76:7F:6E:0D:68:28:D4:53:A6:DD Authority key identifier: 39:0A:38:37:AB:A6:91:2A:2C:F2:9E:61:0D:A4:95:55:DF:2C:6F:A5 Certificate issuer: /CN=A91982B6/serialNumber=390A3837ABA6912A2CF29E610DA49555DF2C6FA5 Certificate serial: 6E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OQo4N6umkSos8p5hDaSVVd8sb6U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.mft Manifest number: 69 Signing time: Sun 20 Jul 2025 11:40:07 +0000 Manifest this update: Sun 20 Jul 2025 11:40:06 +0000 Manifest next update: Sun 27 Jul 2025 11:40:06 +0000 Files and hashes: 1: OQo4N6umkSos8p5hDaSVVd8sb6U.crl (hash: Sd6A6LlnEoyeFfsLdPDp/CGbn3Dv024RqrJ+zHGjcSo=) 2: 4513A9F2655E11F08DD08421C4F9AE02.roa (hash: z9rOS7OxV4xU/wU64+wmR8g5Z2gp4WF60da79pTof2A=) 3: 56B4DCD039AD11F0B50C1612C4F9AE02.roa (hash: vuKzESxfL6KPMKp9BJFrs+559Jkr7A+7rgOLiDzyq7A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.crl rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OQo4N6umkSos8p5hDaSVVd8sb6U.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 11:40:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110 (0x6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91982B6, serialNumber=390A3837ABA6912A2CF29E610DA49555DF2C6FA5 Validity Not Before: Jul 20 11:40:06 2025 GMT Not After : Jul 27 11:40:06 2025 GMT Subject: CN=687cd596-9864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:07:76:50:11:a5:8b:19:42:5d:19:0a:3b:31: 74:bc:1e:b2:d8:7c:5c:a0:bf:9a:ba:84:f8:62:bd: 8d:99:c1:8c:88:a6:79:23:ee:1f:e9:16:9c:d0:fb: 13:79:93:74:04:97:4e:94:0e:55:b0:6d:a8:b0:77: 52:9d:51:32:49:57:74:2b:89:76:89:ce:64:07:ed: 4c:16:cf:21:50:59:56:5a:d7:9b:a3:0f:9c:e1:4a: 9d:74:79:39:3e:21:43:fa:2f:4a:78:3c:72:00:5f: 4f:26:1c:ca:3a:b8:5f:b6:0e:56:da:a1:da:ff:36: e9:7d:49:cd:f8:14:5a:1c:23:39:f1:5e:25:54:37: 42:90:e0:91:bc:c4:15:79:6e:3d:78:cc:6c:7d:51: 11:5f:dd:48:e5:1d:98:55:21:32:b2:af:7c:05:fa: 41:46:63:4c:52:71:21:43:b7:26:25:e7:bf:7d:30: 2f:ec:e1:83:a1:63:f9:dd:bb:0b:60:81:6a:2e:ec: 6d:c0:c1:49:c3:f0:26:01:c4:8a:ae:d5:9a:ca:90: d2:eb:2d:ac:29:d0:79:21:1a:97:3d:c9:c1:4f:ac: eb:63:4f:63:cd:71:51:3b:90:ff:05:71:96:ab:71: 62:4c:d4:60:98:d7:c3:8b:19:25:7a:b5:be:d1:f3: 79:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:FD:4A:BF:6A:0C:01:50:7F:78:76:7F:6E:0D:68:28:D4:53:A6:DD X509v3 Authority Key Identifier: keyid:39:0A:38:37:AB:A6:91:2A:2C:F2:9E:61:0D:A4:95:55:DF:2C:6F:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OQo4N6umkSos8p5hDaSVVd8sb6U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:72:e8:ff:62:15:3b:62:08:45:a3:4e:06:5c:2d:a4:79:54: 01:cc:da:a0:70:95:69:e7:12:c6:03:50:98:ae:00:25:62:92: db:17:bf:95:21:b3:fe:f5:d0:51:65:df:e7:36:99:91:bf:31: c7:f2:0a:dd:ec:2c:96:a7:96:61:86:85:e2:94:03:05:32:73: 63:34:52:75:91:95:3d:2c:94:e3:93:ef:f9:75:82:c3:e1:72: 12:ec:4f:ac:f7:f9:04:3d:ef:d1:77:54:7e:2a:7e:a3:f8:b4: 71:08:b2:74:94:ea:83:cd:5f:d5:1e:2e:20:87:c7:e2:c6:f7: 49:9a:68:75:03:7f:a5:8c:53:9c:74:82:65:c2:8c:9b:14:d4: 23:3f:07:88:63:65:44:79:84:8a:2e:1e:dc:46:83:dd:02:11: 56:1f:ab:00:fa:cc:13:07:23:ec:e8:cf:9f:40:00:f2:8a:4d: ef:7d:fa:99:3d:76:9b:98:9c:4a:da:08:cb:7a:81:71:cd:9a: 73:fa:76:37:2f:9b:9b:ac:c1:5c:e6:44:32:9c:0c:e6:0e:0c: 7a:6c:a7:e7:da:ef:74:5c:e7:07:7b:1e:33:73:16:1d:c6:ce: 89:d5:9c:98:ad:1e:fa:b4:4f:64:ea:ef:94:6d:28:d6:36:1d: bd:ee:49:ec -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 ODJCNjExMC8GA1UEBRMoMzkwQTM4MzdBQkE2OTEyQTJDRjI5RTYxMERBNDk1NTVE RjJDNkZBNTAeFw0yNTA3MjAxMTQwMDZaFw0yNTA3MjcxMTQwMDZaMBgxFjAUBgNV BAMTDTY4N2NkNTk2LTk4NjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFB3ZQEaWLGUJdGQo7MXS8HrLYfFygv5q6hPhivY2ZwYyIpnkj7h/pFpzQ+xN5 k3QEl06UDlWwbaiwd1KdUTJJV3QriXaJzmQH7UwWzyFQWVZa15ujD5zhSp10eTk+ IUP6L0p4PHIAX08mHMo6uF+2Dlbaodr/Nul9Sc34FFocIznxXiVUN0KQ4JG8xBV5 bj14zGx9URFf3UjlHZhVITKyr3wF+kFGY0xScSFDtyYl5799MC/s4YOhY/nduwtg gWou7G3AwUnD8CYBxIqu1ZrKkNLrLawp0HkhGpc9ycFPrOtjT2PNcVE7kP8FcZar cWJM1GCY18OLGSV6tb7R83nvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUd/1Kv2oM AVB/eHZ/bg1oKNRTpt0wHwYDVR0jBBgwFoAUOQo4N6umkSos8p5hDaSVVd8sb6Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4MkI2L0RFN0UzMjFFQ0I1 OTExRUY4NjkxNUI2MUM0RjlBRTAyL09RbzRONnVta1NvczhwNWhEYVNWVmQ4c2I2 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvT1FvNE42dW1rU29zOHA1aERhU1ZWZDhzYjZVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4 MkI2L0RFN0UzMjFFQ0I1OTExRUY4NjkxNUI2MUM0RjlBRTAyL09RbzRONnVta1Nv czhwNWhEYVNWVmQ4c2I2VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJNy6P9iFTtiCEWjTgZcLaR5VAHM2qBwlWnnEsYDUJiuACViktsXv5Uh s/710FFl3+c2mZG/McfyCt3sLJanlmGGheKUAwUyc2M0UnWRlT0slOOT7/l1gsPh chLsT6z3+QQ979F3VH4qfqP4tHEIsnSU6oPNX9UeLiCHx+LG90maaHUDf6WMU5x0 gmXCjJsU1CM/B4hjZUR5hIouHtxGg90CEVYfqwD6zBMHI+zoz59AAPKKTe99+pk9 dpuYnEraCMt6gXHNmnP6djcvm5uswVzmRDKcDOYODHpsp+fa73Rc5wd7HjNzFh3G zonVnJitHvq0T2Tq75RtKNY2Hb3uSew= -----END CERTIFICATE-----Generated at Sun Jul 20 22:52:28 2025 by rpki-client