$ rpki-client -vvf rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft File: O4dpDvQFVnODtvcv3TARYM6CHys.mft (raw, json) Hash identifier: hfZCctGjKxGUDsE2R7TfSUkMkj8du61Re2aeb+RaWVY= Subject key identifier: BC:C3:F9:72:B9:5B:4A:0B:AD:A3:2A:8E:96:8B:52:03:27:43:C7:E2 Authority key identifier: 3B:87:69:0E:F4:05:56:73:83:B6:F7:2F:DD:30:11:60:CE:82:1F:2B Certificate issuer: /CN=A91F81AD/serialNumber=3B87690EF405567383B6F72FDD301160CE821F2B Certificate serial: 0246 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft Manifest number: 0240 Signing time: Sat 19 Jul 2025 02:17:41 +0000 Manifest this update: Sat 19 Jul 2025 02:17:40 +0000 Manifest next update: Sat 26 Jul 2025 02:17:40 +0000 Files and hashes: 1: O4dpDvQFVnODtvcv3TARYM6CHys.crl (hash: b8aTwxtOxYaB5A/tuTEg+e8ZuITdTg/7YcKGH9ONHFU=) 2: F9424C6C80FA11ED9B35954DC4F9AE02.roa (hash: GNMO+8voOxNBOb5ixsUP/MtpdlZbS27Vb7o1TavyMdI=) 3: F86A2F7680FA11ED9B35954DC4F9AE02.roa (hash: vq0srwLbA5KHVy52W5biflCYsAzYNYb+3xV7SnajFW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.crl rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 582 (0x246) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F81AD, serialNumber=3B87690EF405567383B6F72FDD301160CE821F2B Validity Not Before: Jul 19 02:17:40 2025 GMT Not After : Jul 26 02:17:40 2025 GMT Subject: CN=687b0044-2f21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d1:2f:c0:74:80:34:0b:ad:19:ef:e3:77:f3: 2a:d3:b8:02:db:2e:d6:5e:de:49:35:c0:78:ab:92: 8b:d3:0d:0c:0b:52:38:f3:ce:26:bf:34:53:5f:4e: 2a:7c:4e:a0:4a:a5:b4:3a:b6:06:5d:ce:20:c2:b0: be:79:66:0f:31:9d:bc:74:ac:25:8c:6d:76:f2:41: 6d:ff:48:16:a8:23:b3:4c:7c:36:49:68:5e:1d:45: 88:1a:f6:11:ee:41:f2:51:52:d1:40:eb:2e:09:fa: ea:7a:3e:0c:b6:25:e7:d1:64:d3:88:d7:b7:67:c9: dd:8b:eb:50:67:a5:a8:62:78:3b:d6:53:c0:ae:11: a6:8a:65:0b:2f:6c:90:59:2e:15:c3:36:23:2b:1f: 3e:f1:70:21:3c:4d:cd:70:2c:63:f9:58:3c:5e:fd: 51:9b:68:90:19:54:69:c9:fa:42:08:ad:43:31:86: be:83:71:5f:ba:ee:d9:59:a7:79:43:f7:3c:1e:53: 69:26:92:ad:29:63:e3:dd:b1:fd:bf:e6:63:8f:b7: b0:08:79:af:57:9e:b1:d2:c9:24:82:0e:16:cf:a6: f6:da:dc:93:52:af:e4:44:5c:28:17:5e:4a:bf:e8: d3:01:35:54:ad:ce:f5:ea:b1:d6:e0:7e:45:ee:c5: 62:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:C3:F9:72:B9:5B:4A:0B:AD:A3:2A:8E:96:8B:52:03:27:43:C7:E2 X509v3 Authority Key Identifier: keyid:3B:87:69:0E:F4:05:56:73:83:B6:F7:2F:DD:30:11:60:CE:82:1F:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:49:38:30:a0:7a:ca:da:71:f9:ee:e4:ab:fe:9e:75:ce:6f: 68:0a:80:cc:27:06:5d:b8:2a:6a:01:37:98:71:ad:ef:5c:4e: 43:44:83:99:fb:16:13:33:65:0f:dd:97:9c:ba:da:ae:40:43: 84:16:c3:4c:67:57:78:99:22:1e:99:44:7d:5f:6e:59:26:13: b9:0b:24:ae:2f:bd:b3:8d:90:a4:03:70:a5:70:3d:7d:79:a5: ad:ea:7e:43:21:e9:96:66:55:6d:02:b9:c0:85:4c:13:af:8b: 54:06:33:1d:1c:eb:65:e4:f7:35:95:f5:e0:d6:e1:1f:52:5a: 25:6a:19:9f:0c:96:4c:70:5c:bb:49:ec:7a:5f:ab:69:0d:d5: e4:9d:06:da:bd:56:f8:0c:6a:87:f6:70:9b:60:0a:09:51:05: cf:29:a3:ea:2f:5f:6a:06:cc:4a:aa:0e:b5:9b:7a:e1:be:bc: fa:5b:dc:a3:3e:1f:ce:e0:a1:0f:3f:8b:04:88:17:8e:b1:be: 00:b1:86:e0:5e:03:36:84:2b:23:5e:35:07:5f:d8:7d:66:2e: bd:4d:de:01:2b:c9:01:df:f7:cc:16:57:fb:3e:5f:4c:06:06: 7e:2d:f2:55:1d:23:66:1e:84:98:c6:7c:6e:29:2c:a2:52:4e: 73:8d:8f:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgxQUQxMTAvBgNVBAUTKDNCODc2OTBFRjQwNTU2NzM4M0I2RjcyRkREMzAxMTYw Q0U4MjFGMkIwHhcNMjUwNzE5MDIxNzQwWhcNMjUwNzI2MDIxNzQwWjAYMRYwFAYD VQQDEw02ODdiMDA0NC0yZjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvtEvwHSANAutGe/jd/Mq07gC2y7WXt5JNcB4q5KL0w0MC1I4884mvzRTX04q fE6gSqW0OrYGXc4gwrC+eWYPMZ28dKwljG128kFt/0gWqCOzTHw2SWheHUWIGvYR 7kHyUVLRQOsuCfrqej4MtiXn0WTTiNe3Z8ndi+tQZ6WoYng71lPArhGmimULL2yQ WS4VwzYjKx8+8XAhPE3NcCxj+Vg8Xv1Rm2iQGVRpyfpCCK1DMYa+g3Ffuu7ZWad5 Q/c8HlNpJpKtKWPj3bH9v+Zjj7ewCHmvV56x0skkgg4Wz6b22tyTUq/kRFwoF15K v+jTATVUrc716rHW4H5F7sViaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLzD+XK5 W0oLraMqjpaLUgMnQ8fiMB8GA1UdIwQYMBaAFDuHaQ70BVZzg7b3L90wEWDOgh8r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODFBRC80M0E1MTFBRTJD QkUxMUVEOTk4MjRCNENDNEY5QUUwMi9PNGRwRHZRRlZuT0R0dmN2M1RBUllNNkNI eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL080ZHBEdlFGVm5PRHR2Y3YzVEFSWU02Q0h5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODFBRC80M0E1MTFBRTJDQkUxMUVEOTk4MjRCNENDNEY5QUUwMi9PNGRwRHZRRlZu T0R0dmN2M1RBUllNNkNIeXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/STgwoHrK2nH57uSr/p51zm9oCoDMJwZduCpqATeYca3vXE5DRIOZ +xYTM2UP3ZecutquQEOEFsNMZ1d4mSIemUR9X25ZJhO5CySuL72zjZCkA3ClcD19 eaWt6n5DIemWZlVtArnAhUwTr4tUBjMdHOtl5Pc1lfXg1uEfUlolahmfDJZMcFy7 Sex6X6tpDdXknQbavVb4DGqH9nCbYAoJUQXPKaPqL19qBsxKqg61m3rhvrz6W9yj Ph/O4KEPP4sEiBeOsb4AsYbgXgM2hCsjXjUHX9h9Zi69Td4BK8kB3/fMFlf7Pl9M BgZ+LfJVHSNmHoSYxnxuKSyiUk5zjY+S -----END CERTIFICATE-----Generated at Mon Jul 21 03:05:31 2025 by rpki-client