$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft File: oYXAxXSCnF_NcURUSeU0za70E5Y.mft (raw, json) Hash identifier: zVu9M0E31oWcLpzAIyuWe8M2vZ04pjyXxlyrSBDGjXc= Subject key identifier: 64:8F:AF:CD:42:03:DD:43:3B:59:79:1E:1A:B3:8A:48:A2:F6:5E:72 Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96 Certificate issuer: /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396 Certificate serial: 0304 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft Manifest number: 02D2 Signing time: Sat 31 May 2025 01:43:15 +0000 Manifest this update: Sat 31 May 2025 01:43:14 +0000 Manifest next update: Sat 07 Jun 2025 01:43:14 +0000 Files and hashes: 1: oYXAxXSCnF_NcURUSeU0za70E5Y.crl (hash: KTzstEJ/vLx1tHs5numjUK9JBZ/dJ+3zS6yNzwHUZrQ=) 2: B5D1A1164E3111EFB475160AC4F9AE02.roa (hash: F7ZAiYqiaqgCjshmhAH40pkpaSlek68K5yOIUFIlCqE=) 3: AF5AD402224711F0B0CDB07DC4F9AE02.roa (hash: IgOdg/yQ/ge2znbNbvVPbXbPhfofMGTYoa84g2RotAU=) 4: 1C8BEF04E24511EF96354978C4F9AE02.roa (hash: EGZ/fvHina2YX+dj5xEN7cSS8R0XcNDfXd/tDVK1qcE=) 5: 1E1EB7789D8C11EF9B16D921C4F9AE02.roa (hash: TCFvbSrzX3ld7ReLyyVPKT1K5SyyyvX3oexEUzvLigY=) 6: A3571FDE47EC11EFB51C3666C4F9AE02.roa (hash: 2cEppnqVz6EA8cjixAQPIWKPT1GtTfD8PJaZqxpWTLE=) 7: B111111288B411EF80480527C4F9AE02.roa (hash: CjPKYAuDT4eI5JPa/G5V81ZBwDnMXPobI3BPswZB4kQ=) 8: 811803C270C111EF8A30EB51C4F9AE02.roa (hash: 89cYcTv3FMM/3M08ZzwOVhAvZtTfzr28mJIgkmfMCvo=) 9: B137DB2670EF11EFBEF21935C4F9AE02.roa (hash: gVhoaUxSYFZFX3pfYYhl9cQHoz5s0K+bPZd1cYQ52Y8=) 10: CD90ED68057211F0B6E2301BC4F9AE02.roa (hash: VUKsMbXUZ/VFyFAP8kRF14O9sqE9uokELiAUUcFuG5M=) 11: D4E4D8FCA7C311EFB1AAAD55C4F9AE02.roa (hash: Xf5Ju4zh/ec55xkKs2QH4FHNMxaxZH8+1mgQURFonS4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:43:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 772 (0x304) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4E32, serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396 Validity Not Before: May 31 01:43:14 2025 GMT Not After : Jun 7 01:43:14 2025 GMT Subject: CN=683a5eb2-4927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d6:08:54:f3:3c:35:d0:97:60:de:da:a7:04: 8f:ae:76:45:a2:49:05:e9:7c:37:d6:d8:b5:c4:20: 66:5c:31:f8:de:56:ae:78:1f:08:85:db:77:61:da: 45:83:58:c3:61:bd:3e:14:f4:47:b6:d0:ae:6c:27: 71:04:44:e5:a8:b8:ea:65:7d:d5:c6:9e:11:00:2e: 3e:5e:bc:31:7c:6a:76:a2:11:63:ce:18:1f:fe:71: f7:bc:f9:f9:1e:d7:33:81:0c:90:d3:35:dd:d3:8e: 38:a5:ef:90:42:35:a5:b2:ba:59:69:19:03:22:cb: 15:02:27:a9:27:dd:a6:fb:67:52:1d:86:44:24:b2: 82:e1:b6:35:91:09:87:27:c6:ae:d9:46:67:a8:6e: 4f:9a:e3:c4:3e:ac:2e:8e:77:77:d2:d5:ff:ec:66: 3e:92:f2:47:7e:5c:aa:b5:fd:40:a9:97:72:16:db: 60:01:aa:90:70:10:98:ec:2f:33:db:19:93:e3:ca: ec:26:6b:fc:ae:38:dc:8a:f9:17:93:0b:59:d6:40: 04:a1:2f:e4:c4:16:ea:a9:ed:ab:27:11:e9:e5:09: d9:8f:7d:9f:d9:40:c6:0c:6d:28:77:5c:aa:03:bf: 45:c6:ff:dc:b4:9c:f3:b1:4f:ce:22:37:c2:21:a6: 98:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:8F:AF:CD:42:03:DD:43:3B:59:79:1E:1A:B3:8A:48:A2:F6:5E:72 X509v3 Authority Key Identifier: keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:c4:11:b7:7e:9e:ad:86:24:4f:f9:3a:b8:ac:bc:ff:b5:ba: 4f:fc:19:22:ec:ca:17:50:fc:43:bd:f3:7c:db:05:46:1e:83: 04:f7:75:da:91:13:f1:6b:b5:9a:4a:59:c1:0e:7b:58:8f:99: 4d:67:bd:89:db:09:7a:04:94:cd:45:f4:35:58:4f:26:f2:43: 89:d6:07:39:5b:e8:25:c3:bd:f8:52:48:49:f4:7e:3c:aa:f2: a1:8f:07:41:df:c4:04:98:04:65:c2:a0:cf:fd:7e:93:2f:23: 65:af:8d:19:d0:cf:fb:d2:b2:1c:32:88:78:8e:4c:32:79:05: 66:78:8e:7e:84:66:3e:22:d1:93:4e:7b:17:fa:26:3d:81:31: 08:04:4c:e1:8d:ac:4c:39:5c:00:1e:dd:f1:04:a6:ae:9e:28: 37:5a:94:0d:58:13:24:22:da:17:f6:12:9f:73:bb:e5:1d:c8: 9b:c8:69:d6:f6:1a:fc:06:fa:dd:d9:de:6b:ef:44:cd:e6:c0: fe:53:ca:98:55:5d:3a:e2:e8:7d:4f:ec:d5:16:1a:7e:fe:47: f1:c7:7b:db:50:2b:02:81:fa:54:af:09:86:4e:4e:fe:c0:65: 38:41:13:40:ee:13:4a:0d:ce:89:e5:64:ca:16:89:d1:25:fa: fd:64:08:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFMzIxMTAvBgNVBAUTKEExODVDMEM1NzQ4MjlDNUZDRDcxNDQ1NDQ5RTUzNENE QUVGNDEzOTYwHhcNMjUwNTMxMDE0MzE0WhcNMjUwNjA3MDE0MzE0WjAYMRYwFAYD VQQDEw02ODNhNWViMi00OTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNYIVPM8NdCXYN7apwSPrnZFokkF6Xw31ti1xCBmXDH43laueB8Ihdt3YdpF g1jDYb0+FPRHttCubCdxBETlqLjqZX3Vxp4RAC4+XrwxfGp2ohFjzhgf/nH3vPn5 HtczgQyQ0zXd0444pe+QQjWlsrpZaRkDIssVAiepJ92m+2dSHYZEJLKC4bY1kQmH J8au2UZnqG5PmuPEPqwujnd30tX/7GY+kvJHflyqtf1AqZdyFttgAaqQcBCY7C8z 2xmT48rsJmv8rjjcivkXkwtZ1kAEoS/kxBbqqe2rJxHp5QnZj32f2UDGDG0od1yq A79Fxv/ctJzzsU/OIjfCIaaYpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGSPr81C A91DO1l5Hhqzikii9l5yMB8GA1UdIwQYMBaAFKGFwMV0gpxfzXFEVEnlNM2u9BOW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEUzMi83MjA5NTlGQzAx QzAxMUVEQkQ3QzZGNThDNEY5QUUwMi9vWVhBeFhTQ25GX05jVVJVU2VVMHphNzBF NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29ZWEF4WFNDbkZfTmNVUlVTZVUwemE3MEU1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEUzMi83MjA5NTlGQzAxQzAxMUVEQkQ3QzZGNThDNEY5QUUwMi9vWVhBeFhTQ25G X05jVVJVU2VVMHphNzBFNVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtxBG3fp6thiRP+Tq4rLz/tbpP/Bki7MoXUPxDvfN82wVGHoME93Xa kRPxa7WaSlnBDntYj5lNZ72J2wl6BJTNRfQ1WE8m8kOJ1gc5W+glw734UkhJ9H48 qvKhjwdB38QEmARlwqDP/X6TLyNlr40Z0M/70rIcMoh4jkwyeQVmeI5+hGY+ItGT TnsX+iY9gTEIBEzhjaxMOVwAHt3xBKaunig3WpQNWBMkItoX9hKfc7vlHcibyGnW 9hr8Bvrd2d5r70TN5sD+U8qYVV064uh9T+zVFhp+/kfxx3vbUCsCgfpUrwmGTk7+ wGU4QRNA7hNKDc6J5WTKFonRJfr9ZAid -----END CERTIFICATE-----Generated at Sat May 31 17:36:07 2025 by rpki-client