$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft File: oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft (raw, json) Hash identifier: b9CZxzyO4y598XMTM2rGZT6pOA7JSv3LZNc7ymX/Uyg= Subject key identifier: 10:4B:88:FB:2A:12:42:5C:52:D2:9A:42:BD:3C:46:7A:22:73:06:60 Authority key identifier: A0:5E:C2:66:B3:C0:BF:D6:CE:B5:17:10:0B:E0:5C:50:5B:94:36:24 Certificate issuer: /CN=A91E6A01/serialNumber=A05EC266B3C0BFD6CEB517100BE05C505B943624 Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft Manifest number: 04 Signing time: Sat 05 Jul 2025 08:32:44 +0000 Manifest this update: Sat 05 Jul 2025 08:32:44 +0000 Manifest next update: Sat 12 Jul 2025 08:32:44 +0000 Files and hashes: 1: oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl (hash: MG6S8IgD74l+VANuqHc9wYk8zlbEDCh+Fk4OZWw/ack=) 2: 4AE4966657C611F0BC203947C4F9AE02.roa (hash: SBqiu2QPlMlGlHJ4E0tgUueMfkriyMtNkliEFwelYKw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Jul 2025 08:32:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6A01, serialNumber=A05EC266B3C0BFD6CEB517100BE05C505B943624 Validity Not Before: Jul 5 08:32:44 2025 GMT Not After : Jul 12 08:32:44 2025 GMT Subject: CN=6868e32c-08cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f2:e9:e1:1c:15:07:76:3d:d6:f7:27:89:98: ab:b8:02:b5:9b:f1:f0:33:35:ad:f4:0e:ac:b1:ed: 76:39:9f:7a:49:54:21:dd:69:f1:b7:6f:fc:06:56: 29:0d:a5:06:f2:65:d8:a0:e5:9d:45:e2:d2:5f:4a: 61:2d:65:03:5e:dd:77:82:65:9a:68:e8:63:9d:53: 17:ce:d5:5c:4a:6c:fc:a3:9a:42:56:04:b7:03:6c: 72:90:21:f1:fe:19:62:27:f1:e7:0b:82:34:d6:c3: fe:bd:28:30:93:5c:66:42:cf:07:20:bc:f3:36:3d: 44:44:2c:72:8e:e0:98:a9:41:2d:f5:36:8a:11:7e: a8:4a:8f:88:ee:89:21:16:92:0d:33:47:ac:1e:9d: 5d:bf:fb:87:99:0c:22:c7:c9:2d:46:88:bb:ec:b9: 93:61:5b:a5:50:83:6c:7f:b7:ac:12:18:0e:f9:c3: 84:df:68:76:3e:db:9d:9f:d5:25:b6:80:d2:53:01: 6f:ea:a7:70:8b:34:4b:7b:31:87:07:53:66:b6:9e: d6:f9:b0:7c:8d:90:75:29:f1:ed:6e:c0:0e:b5:8f: e0:df:4e:26:82:bb:19:50:f1:69:0c:cf:d2:3a:5c: 6b:19:95:43:63:3d:cc:e6:00:6a:35:75:33:75:dd: 66:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:4B:88:FB:2A:12:42:5C:52:D2:9A:42:BD:3C:46:7A:22:73:06:60 X509v3 Authority Key Identifier: keyid:A0:5E:C2:66:B3:C0:BF:D6:CE:B5:17:10:0B:E0:5C:50:5B:94:36:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:6a:52:a1:4e:23:3c:8d:a8:1f:bb:55:63:75:c5:92:29:cf: 33:7f:ed:f4:73:d5:9f:e9:c9:55:bf:c8:03:6d:d9:6e:c0:8a: 05:bf:74:ac:c2:d0:29:99:d3:19:f8:6b:e5:9e:30:88:78:53: 44:a9:15:29:d7:8b:ba:05:3b:3f:dd:6a:32:99:86:71:d6:cd: e7:37:7a:75:18:da:b8:51:93:dc:a2:d6:53:cc:12:3f:03:8c: 88:ac:f0:8d:d2:02:1b:5f:ae:c1:d9:ab:de:31:55:6c:e3:25: 0b:1c:f8:5d:fd:78:b1:4b:7f:77:35:2d:ad:94:f1:92:c8:40: 39:6b:6e:fb:f4:e4:47:bf:a8:13:f5:a4:c5:27:a1:41:50:fc: cc:0a:b5:ca:d8:ea:3d:50:bb:bd:0d:a7:5b:21:a2:e4:84:5f: 52:27:ca:6c:2f:3d:07:e3:cc:4a:ed:7e:ee:1b:33:1e:72:d5: 47:b3:5d:e8:46:13:36:c9:d3:77:62:48:70:7b:a2:16:22:b8: 71:88:0f:f9:c8:7f:b1:b0:64:98:59:44:6e:d0:1e:52:2a:a8: 8f:8b:79:a0:da:c6:c6:95:e3:58:1d:d1:31:05:fb:62:4b:98: af:ec:fb:80:7a:cc:f6:f9:e1:46:0c:90:6f:a7:e5:c2:59:97: 72:a8:88:22 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NkEwMTExMC8GA1UEBRMoQTA1RUMyNjZCM0MwQkZENkNFQjUxNzEwMEJFMDVDNTA1 Qjk0MzYyNDAeFw0yNTA3MDUwODMyNDRaFw0yNTA3MTIwODMyNDRaMBgxFjAUBgNV BAMTDTY4NjhlMzJjLTA4Y2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDB8unhHBUHdj3W9yeJmKu4ArWb8fAzNa30Dqyx7XY5n3pJVCHdafG3b/wGVikN pQbyZdig5Z1F4tJfSmEtZQNe3XeCZZpo6GOdUxfO1VxKbPyjmkJWBLcDbHKQIfH+ GWIn8ecLgjTWw/69KDCTXGZCzwcgvPM2PURELHKO4JipQS31NooRfqhKj4juiSEW kg0zR6wenV2/+4eZDCLHyS1GiLvsuZNhW6VQg2x/t6wSGA75w4TfaHY+252f1SW2 gNJTAW/qp3CLNEt7MYcHU2a2ntb5sHyNkHUp8e1uwA61j+DfTiaCuxlQ8WkMz9I6 XGsZlUNjPczmAGo1dTN13WaZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEEuI+yoS QlxS0ppCvTxGeiJzBmAwHwYDVR0jBBgwFoAUoF7CZrPAv9bOtRcQC+BcUFuUNiQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2QTAxL0Y2NEQzQjI0NTdB OTExRjA4RUU0MjYwOUM0RjlBRTAyL29GN0NaclBBdjliT3RSY1FDLUJjVUZ1VU5p US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb0Y3Q1pyUEF2OWJPdFJjUUMtQmNVRnVVTmlRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2 QTAxL0Y2NEQzQjI0NTdBOTExRjA4RUU0MjYwOUM0RjlBRTAyL29GN0NaclBBdjli T3RSY1FDLUJjVUZ1VU5pUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEBqUqFOIzyNqB+7VWN1xZIpzzN/7fRz1Z/pyVW/yANt2W7AigW/dKzC 0CmZ0xn4a+WeMIh4U0SpFSnXi7oFOz/dajKZhnHWzec3enUY2rhRk9yi1lPMEj8D jIis8I3SAhtfrsHZq94xVWzjJQsc+F39eLFLf3c1La2U8ZLIQDlrbvv05Ee/qBP1 pMUnoUFQ/MwKtcrY6j1Qu70Np1shouSEX1InymwvPQfjzErtfu4bMx5y1UezXehG EzbJ03diSHB7ohYiuHGID/nIf7GwZJhZRG7QHlIqqI+LeaDaxsaV41gd0TEF+2JL mK/s+4B6zPb54UYMkG+n5cJZl3KoiCI= -----END CERTIFICATE-----Generated at Mon Jul 7 09:42:58 2025 by rpki-client