$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft File: oUUkHZgwrySnFWc1ElXsjn7VPv4.mft (raw, json) Hash identifier: ziZiNTCqGjbhw0GkmpyuV/rGSvzIB+YBMnOLGMju3/g= Subject key identifier: A8:48:3D:C8:19:9B:DE:92:45:10:F9:CE:67:33:33:F5:BB:29:CC:AA Authority key identifier: A1:45:24:1D:98:30:AF:24:A7:15:67:35:12:55:EC:8E:7E:D5:3E:FE Certificate issuer: /CN=A91AC5BC/serialNumber=A145241D9830AF24A71567351255EC8E7ED53EFE Certificate serial: 06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft Manifest number: 04 Signing time: Sat 05 Jul 2025 23:43:16 +0000 Manifest this update: Sat 05 Jul 2025 23:43:15 +0000 Manifest next update: Sat 12 Jul 2025 23:43:15 +0000 Files and hashes: 1: oUUkHZgwrySnFWc1ElXsjn7VPv4.crl (hash: iPsUOO2iqf0JTRkBAHrar1UZWW3B18eMaKziFCUK1ZQ=) 2: CA13AA3259F411F088DE4585C4F9AE02.roa (hash: sqfwCpzDKMYilQCPQK2oKMa05i/stBaHoGZSKtfH8BY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.crl rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Jul 2025 23:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC5BC, serialNumber=A145241D9830AF24A71567351255EC8E7ED53EFE Validity Not Before: Jul 5 23:43:15 2025 GMT Not After : Jul 12 23:43:15 2025 GMT Subject: CN=6869b894-1e5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:2c:9d:75:79:82:7f:fd:9d:bc:ef:e2:2c:a7: 18:3d:aa:93:4e:7d:0f:ef:e4:5c:97:26:71:35:a6: fd:29:e2:e9:34:2f:f3:0f:68:d0:44:eb:3c:54:24: e4:9a:9f:14:1b:2c:d1:52:12:7e:18:83:e2:e1:95: 31:9a:26:c0:19:90:b7:0c:db:ff:7d:a3:a6:a8:8e: a4:e0:4a:4f:3b:6a:57:ab:35:e3:6a:c4:fc:f3:f2: 47:74:7c:73:e7:22:76:dd:d8:be:ee:a1:3c:a9:f5: 81:a7:ef:ec:10:ba:e2:3c:aa:fb:9c:5c:2d:ff:73: ab:09:f7:9d:d3:37:7f:bf:94:6d:df:cc:11:d4:ef: 06:6c:c6:78:8f:7e:42:25:fc:4c:c6:83:a5:c7:f0: a1:16:ac:d0:a6:71:d3:9b:ed:28:4b:43:d0:5f:2d: ea:77:a0:f7:2c:05:ca:fd:b6:1f:da:c1:38:b9:bc: 77:66:24:d2:a3:23:fb:2f:fb:32:fa:df:28:bc:d3: c7:46:d9:f2:0a:41:5d:3f:99:f5:b5:bd:63:da:e4: b1:ed:cd:e8:40:3a:9b:ae:72:b5:74:7b:32:e6:d4: 37:fb:9f:6d:98:5b:6e:1c:e3:41:22:61:47:c8:d9: 20:7e:4e:68:35:9a:7d:eb:d3:d2:77:89:3f:4b:8e: 6d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:48:3D:C8:19:9B:DE:92:45:10:F9:CE:67:33:33:F5:BB:29:CC:AA X509v3 Authority Key Identifier: keyid:A1:45:24:1D:98:30:AF:24:A7:15:67:35:12:55:EC:8E:7E:D5:3E:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:cb:e5:ad:9f:3c:25:e3:53:30:73:c0:c5:7f:16:b0:e3:d6: ae:88:88:9a:49:33:d4:44:0a:07:fc:a4:5e:73:5f:05:df:32: 48:56:86:54:22:87:98:30:78:45:69:5f:9e:70:dc:18:90:25: a8:de:1c:dd:27:7e:ed:4c:be:58:e1:03:82:87:70:3e:ff:42: 56:85:43:51:de:4a:b5:5e:2e:17:e0:85:36:c8:12:3c:88:07: 1e:87:45:12:88:5d:43:60:68:7c:a6:e4:af:38:14:24:09:dd: af:51:62:a7:25:ed:cc:0d:78:f5:ae:0f:e0:1c:72:0b:53:c7: ee:96:90:ef:e2:a1:db:89:30:d8:ae:f5:b8:81:6b:50:3c:33: 1a:b0:0e:47:17:aa:c0:32:1e:c7:7b:f3:9a:be:30:19:42:85: c4:39:2c:6e:5e:89:85:e7:51:0d:c4:5c:94:30:2e:08:73:18: 84:d8:87:d5:59:cc:3f:0b:da:ec:e7:66:f2:d1:a5:07:b9:0f: 15:1e:45:19:fc:d1:6f:d5:f6:a3:c0:57:c6:0e:f0:fb:aa:b8: fb:88:77:f2:5f:8f:1f:a4:ff:7a:26:76:a1:61:48:0a:68:81: 39:a9:8b:67:e7:6d:ff:f7:f0:7c:a1:45:7b:a7:c6:cd:00:83: a6:b0:61:05 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QzVCQzExMC8GA1UEBRMoQTE0NTI0MUQ5ODMwQUYyNEE3MTU2NzM1MTI1NUVDOEU3 RUQ1M0VGRTAeFw0yNTA3MDUyMzQzMTVaFw0yNTA3MTIyMzQzMTVaMBgxFjAUBgNV BAMTDTY4NjliODk0LTFlNWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkLJ11eYJ//Z287+Ispxg9qpNOfQ/v5FyXJnE1pv0p4uk0L/MPaNBE6zxUJOSa nxQbLNFSEn4Yg+LhlTGaJsAZkLcM2/99o6aojqTgSk87alerNeNqxPzz8kd0fHPn Inbd2L7uoTyp9YGn7+wQuuI8qvucXC3/c6sJ953TN3+/lG3fzBHU7wZsxniPfkIl /EzGg6XH8KEWrNCmcdOb7ShLQ9BfLep3oPcsBcr9th/awTi5vHdmJNKjI/sv+zL6 3yi808dG2fIKQV0/mfW1vWPa5LHtzehAOpuucrV0ezLm1Df7n22YW24c40EiYUfI 2SB+Tmg1mn3r09J3iT9Ljm2xAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqEg9yBmb 3pJFEPnOZzMz9bspzKowHwYDVR0jBBgwFoAUoUUkHZgwrySnFWc1ElXsjn7VPv4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFDNUJDLzcxRTVEOEJFNTlG MjExRjBCNEZBRTk1RkM0RjlBRTAyL29VVWtIWmd3cnlTbkZXYzFFbFhzam43VlB2 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb1VVa0haZ3dyeVNuRldjMUVsWHNqbjdWUHY0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFD NUJDLzcxRTVEOEJFNTlGMjExRjBCNEZBRTk1RkM0RjlBRTAyL29VVWtIWmd3cnlT bkZXYzFFbFhzam43VlB2NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF3L5a2fPCXjUzBzwMV/FrDj1q6IiJpJM9RECgf8pF5zXwXfMkhWhlQi h5gweEVpX55w3BiQJajeHN0nfu1MvljhA4KHcD7/QlaFQ1HeSrVeLhfghTbIEjyI Bx6HRRKIXUNgaHym5K84FCQJ3a9RYqcl7cwNePWuD+AccgtTx+6WkO/ioduJMNiu 9biBa1A8MxqwDkcXqsAyHsd785q+MBlChcQ5LG5eiYXnUQ3EXJQwLghzGITYh9VZ zD8L2uznZvLRpQe5DxUeRRn80W/V9qPAV8YO8PuquPuId/Jfjx+k/3omdqFhSApo gTmpi2fnbf/38HyhRXunxs0Ag6awYQU= -----END CERTIFICATE-----Generated at Mon Jul 7 09:38:24 2025 by rpki-client