$ rpki-client -vvf rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft File: 5OTCQkd4XDQv81kH9-EcSrs5i4M.mft (raw, json) Hash identifier: dDopiYQ49Z1Tb6O0+CxXwj27pOkfQUz+hQK+iDbDoUY= Subject key identifier: E0:D5:E6:BA:88:D8:D8:C9:44:53:BC:08:76:33:DE:52:DF:47:08:B5 Authority key identifier: E4:E4:C2:42:47:78:5C:34:2F:F3:59:07:F7:E1:1C:4A:BB:39:8B:83 Certificate issuer: /CN=A91E85F1/serialNumber=E4E4C24247785C342FF35907F7E11C4ABB398B83 Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5OTCQkd4XDQv81kH9-EcSrs5i4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft Manifest number: 3C Signing time: Sat 19 Jul 2025 07:50:07 +0000 Manifest this update: Sat 19 Jul 2025 07:50:07 +0000 Manifest next update: Sat 26 Jul 2025 07:50:07 +0000 Files and hashes: 1: 5OTCQkd4XDQv81kH9-EcSrs5i4M.crl (hash: KW77Y/3Mu0dBY2+8KkNjadUADl5wfT13yfVCovUFDw4=) 2: 212E0B520DFE11F0B266963AC4F9AE02.roa (hash: 44vHU0H/9/bs4kOPReZOgC2D0Y7H1F8Nu3vr76cFkxs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.crl rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5OTCQkd4XDQv81kH9-EcSrs5i4M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:50:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E85F1, serialNumber=E4E4C24247785C342FF35907F7E11C4ABB398B83 Validity Not Before: Jul 19 07:50:07 2025 GMT Not After : Jul 26 07:50:07 2025 GMT Subject: CN=687b4e2f-8e6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:de:2f:6d:e2:ce:4d:89:08:4a:db:38:a6:85: a3:eb:47:70:f5:f6:0f:3c:c9:54:fc:45:4b:ed:3e: ac:70:41:94:21:20:03:ae:cb:78:8d:c6:b6:8f:ae: f0:09:fb:bb:e2:85:7b:60:b4:42:b8:f5:88:c4:e6: e2:0c:77:79:f2:dd:7f:26:5f:e3:c3:75:01:81:4a: ee:90:9e:07:30:c5:66:ed:46:a2:f9:3e:d0:d4:7c: cd:5b:a4:77:97:08:fb:ce:b8:0a:43:bb:47:8a:95: a6:40:cd:49:09:66:8c:ba:ff:93:8e:e7:43:a3:72: 11:43:cc:f2:29:34:70:9b:d6:f5:05:c2:0a:ec:01: d5:d1:12:8a:d2:69:2c:70:03:49:f7:40:08:24:37: 1a:fb:81:5f:c0:e1:d7:cc:a0:c7:88:98:87:8d:18: 51:51:82:17:6c:ea:8b:60:42:be:b7:38:ac:b8:3a: 81:16:07:a7:4c:60:0d:a5:cc:6d:0f:b9:a7:d5:f1: be:3b:5f:a3:ed:3c:ea:64:d6:2b:87:30:44:99:de: 1d:67:71:fd:7d:7c:9c:ad:0c:21:e1:2a:5a:1d:b8: 35:d5:a3:a3:b3:29:0a:8f:1a:db:be:76:7a:bc:84: a1:b7:11:2b:1d:1f:71:73:b0:48:1c:2c:24:d8:25: 45:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:D5:E6:BA:88:D8:D8:C9:44:53:BC:08:76:33:DE:52:DF:47:08:B5 X509v3 Authority Key Identifier: keyid:E4:E4:C2:42:47:78:5C:34:2F:F3:59:07:F7:E1:1C:4A:BB:39:8B:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5OTCQkd4XDQv81kH9-EcSrs5i4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:49:dd:a5:61:a3:c3:a5:97:67:45:49:1e:0e:56:d3:c0:80: 31:70:2a:11:19:52:e3:9f:3c:9c:98:87:e3:2c:b0:a3:8f:15: de:a6:b8:04:e1:f3:a0:e2:9f:cb:f4:de:eb:1b:83:bd:22:0f: 57:10:c3:7b:62:29:e1:f3:4f:5b:e0:69:20:a8:3e:c0:bd:6e: 63:3e:87:f4:9e:69:62:72:82:ab:dd:f5:33:e4:9d:4c:8e:86: 16:93:c4:0f:34:8c:b2:62:2f:12:95:cf:af:ec:d9:d0:a3:40: 8c:f6:ce:18:de:50:14:b7:f6:f6:28:7c:db:c1:d4:91:97:e8: 97:09:b0:69:2b:78:94:1f:5f:40:ef:ff:85:9d:d2:97:43:f8: f4:ea:28:ad:11:d4:88:16:6d:50:2a:56:e8:6e:b8:4b:a1:27: 29:07:21:df:69:c0:82:ee:fd:76:af:11:5d:8a:e3:dc:72:18: 6c:7c:40:28:32:8c:a4:4e:79:94:84:bf:dc:68:63:62:ce:0c: 9f:3d:c9:b0:85:46:f4:ed:94:97:6a:a1:50:30:30:91:41:49: 6d:b1:72:d5:4a:75:9d:89:c1:d4:58:7b:7e:7f:d2:05:cc:d5: 8f:51:41:18:5f:41:6f:8c:89:7a:60:16:00:a0:12:02:15:65: ef:26:98:db -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF ODVGMTExMC8GA1UEBRMoRTRFNEMyNDI0Nzc4NUMzNDJGRjM1OTA3RjdFMTFDNEFC QjM5OEI4MzAeFw0yNTA3MTkwNzUwMDdaFw0yNTA3MjYwNzUwMDdaMBgxFjAUBgNV BAMTDTY4N2I0ZTJmLThlNmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZ3i9t4s5NiQhK2zimhaPrR3D19g88yVT8RUvtPqxwQZQhIAOuy3iNxraPrvAJ +7vihXtgtEK49YjE5uIMd3ny3X8mX+PDdQGBSu6QngcwxWbtRqL5PtDUfM1bpHeX CPvOuApDu0eKlaZAzUkJZoy6/5OO50OjchFDzPIpNHCb1vUFwgrsAdXREorSaSxw A0n3QAgkNxr7gV/A4dfMoMeImIeNGFFRghds6otgQr63OKy4OoEWB6dMYA2lzG0P uafV8b47X6PtPOpk1iuHMESZ3h1ncf19fJytDCHhKloduDXVo6OzKQqPGtu+dnq8 hKG3ESsdH3FzsEgcLCTYJUXHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4NXmuojY 2MlEU7wIdjPeUt9HCLUwHwYDVR0jBBgwFoAU5OTCQkd4XDQv81kH9+EcSrs5i4Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4NUYxLzYyMjA2MzNDMERG QzExRjBBMUQ5ODA1M0M0RjlBRTAyLzVPVENRa2Q0WERRdjgxa0g5LUVjU3JzNWk0 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNU9UQ1FrZDRYRFF2ODFrSDktRWNTcnM1aTRNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4 NUYxLzYyMjA2MzNDMERGQzExRjBBMUQ5ODA1M0M0RjlBRTAyLzVPVENRa2Q0WERR djgxa0g5LUVjU3JzNWk0TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKtJ3aVho8Oll2dFSR4OVtPAgDFwKhEZUuOfPJyYh+MssKOPFd6muATh 86Din8v03usbg70iD1cQw3tiKeHzT1vgaSCoPsC9bmM+h/SeaWJygqvd9TPknUyO hhaTxA80jLJiLxKVz6/s2dCjQIz2zhjeUBS39vYofNvB1JGX6JcJsGkreJQfX0Dv /4Wd0pdD+PTqKK0R1IgWbVAqVuhuuEuhJykHId9pwILu/XavEV2K49xyGGx8QCgy jKROeZSEv9xoY2LODJ89ybCFRvTtlJdqoVAwMJFBSW2xctVKdZ2JwdRYe35/0gXM 1Y9RQRhfQW+MiXpgFgCgEgIVZe8mmNs= -----END CERTIFICATE-----Generated at Sun Jul 20 22:52:39 2025 by rpki-client