$ rpki-client -vvf rpki.apnic.net/member_repository/A91187C1/2631C8B4570A11F0B538CF65C4F9AE02/orn_7UcMW3HFLztks7btpBm-E7M.mft File: orn_7UcMW3HFLztks7btpBm-E7M.mft (raw, json) Hash identifier: uOrzU5SfzFWHx90li6PL2n+YCaSx+OJMLQiXvA36ozE= Subject key identifier: 80:91:43:D7:E7:88:D0:B1:88:91:E4:D9:2C:08:E3:01:9E:E4:68:B8 Authority key identifier: A2:B9:FF:ED:47:0C:5B:71:C5:2F:3B:64:B3:B6:ED:A4:19:BE:13:B3 Certificate issuer: /CN=A91187C1/serialNumber=A2B9FFED470C5B71C52F3B64B3B6EDA419BE13B3 Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/orn_7UcMW3HFLztks7btpBm-E7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91187C1/2631C8B4570A11F0B538CF65C4F9AE02/orn_7UcMW3HFLztks7btpBm-E7M.mft Manifest number: 19 Signing time: Mon 11 Aug 2025 08:15:08 +0000 Manifest this update: Mon 11 Aug 2025 08:15:07 +0000 Manifest next update: Mon 18 Aug 2025 08:15:07 +0000 Files and hashes: 1: orn_7UcMW3HFLztks7btpBm-E7M.crl (hash: qhFMAXOcHqwkQusyhQ81SKN9rNf/QXtNiOMbQQcfWjw=) 2: C265A63A571211F092B99F2AC4F9AE02.roa (hash: mdIvnywtfDJvKSbbhgc4qSg7/SJGPr319lK/wnjqr9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91187C1/2631C8B4570A11F0B538CF65C4F9AE02/orn_7UcMW3HFLztks7btpBm-E7M.crl rsync://rpki.apnic.net/member_repository/A91187C1/2631C8B4570A11F0B538CF65C4F9AE02/orn_7UcMW3HFLztks7btpBm-E7M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/orn_7UcMW3HFLztks7btpBm-E7M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 08:15:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91187C1, serialNumber=A2B9FFED470C5B71C52F3B64B3B6EDA419BE13B3 Validity Not Before: Aug 11 08:15:07 2025 GMT Not After : Aug 18 08:15:07 2025 GMT Subject: CN=6899a68c-938d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:72:2d:90:87:b8:d6:ab:6b:34:f5:75:cb:94: f2:6f:65:ae:8c:e2:57:14:90:48:01:33:5a:83:9d: 4a:6e:00:d3:a4:7a:af:0c:0e:69:11:92:35:65:1d: d1:14:a9:0e:be:3d:b3:b0:68:5c:34:89:60:64:06: 06:84:97:f5:d5:5d:7f:c5:f2:67:96:0a:01:be:fd: 8d:b1:35:d4:5f:e3:41:4d:4c:5b:12:26:bb:08:c7: 0f:fb:00:04:e6:1d:4b:4e:60:bc:92:ba:0b:0b:6b: 32:72:c7:bc:ed:dd:c0:60:55:a5:b1:cb:e4:ac:9c: 49:65:05:9b:51:fb:8f:33:56:54:d6:71:08:2f:fd: 51:fe:57:22:38:91:98:70:d7:4f:ea:1b:6a:ce:83: bd:5a:bb:19:17:b5:d3:84:af:9d:3c:ae:ab:20:cd: 43:43:bc:98:83:3e:0b:d1:6d:6c:b7:96:d2:df:53: 71:92:94:ab:05:c1:bb:ec:40:32:31:ff:92:31:69: a4:8e:ae:82:d7:9f:a5:d3:39:57:28:65:49:f5:fc: 21:13:1d:4a:25:3e:23:8d:e7:d9:1b:2b:e9:ec:af: 43:3e:82:2b:9b:7a:ca:c9:7c:b5:0e:9f:25:c8:29: ba:fa:20:0c:19:1a:0c:fe:b7:54:c5:a3:86:51:4f: 07:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:91:43:D7:E7:88:D0:B1:88:91:E4:D9:2C:08:E3:01:9E:E4:68:B8 X509v3 Authority Key Identifier: keyid:A2:B9:FF:ED:47:0C:5B:71:C5:2F:3B:64:B3:B6:ED:A4:19:BE:13:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91187C1/2631C8B4570A11F0B538CF65C4F9AE02/orn_7UcMW3HFLztks7btpBm-E7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/orn_7UcMW3HFLztks7btpBm-E7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91187C1/2631C8B4570A11F0B538CF65C4F9AE02/orn_7UcMW3HFLztks7btpBm-E7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:70:ac:50:0d:7c:ac:21:b4:6d:75:26:73:6c:4a:ca:15:1f: 9b:61:1d:b8:85:21:8e:f5:f0:51:6e:c7:6c:ea:d8:b9:00:3f: 5c:ce:04:3c:5c:d2:f6:75:af:e5:27:8c:85:22:b9:cd:50:69: c6:8d:90:21:48:08:2a:ed:a2:35:b0:2b:f7:ee:32:c0:eb:4b: b7:30:90:5c:71:06:d1:cd:2b:a7:fa:2f:d6:d1:f4:65:b4:81: 56:42:ef:6a:ff:0a:10:f1:78:c5:c0:cf:48:0f:f0:51:b9:b8: 4b:b8:1f:01:19:bb:bb:d1:60:b6:f5:c5:19:d7:18:48:3b:c5: 7d:bc:81:7d:d9:be:83:67:78:32:39:73:59:c8:e8:05:2a:1a: 05:95:5d:e2:63:ac:96:58:3d:81:0f:d8:c4:24:3f:d6:69:4a: bb:97:46:97:2b:9a:47:e9:46:cd:74:ec:6a:28:2a:50:27:78: 5c:06:37:8d:e1:3c:62:a6:ed:c7:7d:b8:31:22:33:8e:b0:ed: 88:1e:02:a4:43:63:e7:bb:03:5a:bb:2d:c3:46:c4:62:37:9e: ba:d6:a8:a9:b1:17:8f:9a:48:8d:5e:d5:21:be:a5:bb:97:09: dd:1b:21:fb:12:1a:23:95:86:17:85:c1:0a:6c:45:04:93:57: 9c:26:61:e9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx ODdDMTExMC8GA1UEBRMoQTJCOUZGRUQ0NzBDNUI3MUM1MkYzQjY0QjNCNkVEQTQx OUJFMTNCMzAeFw0yNTA4MTEwODE1MDdaFw0yNTA4MTgwODE1MDdaMBgxFjAUBgNV BAMTDTY4OTlhNjhjLTkzOGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKci2Qh7jWq2s09XXLlPJvZa6M4lcUkEgBM1qDnUpuANOkeq8MDmkRkjVlHdEU qQ6+PbOwaFw0iWBkBgaEl/XVXX/F8meWCgG+/Y2xNdRf40FNTFsSJrsIxw/7AATm HUtOYLySugsLazJyx7zt3cBgVaWxy+SsnEllBZtR+48zVlTWcQgv/VH+VyI4kZhw 10/qG2rOg71auxkXtdOEr508rqsgzUNDvJiDPgvRbWy3ltLfU3GSlKsFwbvsQDIx /5IxaaSOroLXn6XTOVcoZUn1/CETHUolPiON59kbK+nsr0M+giubesrJfLUOnyXI Kbr6IAwZGgz+t1TFo4ZRTwcJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgJFD1+eI 0LGIkeTZLAjjAZ7kaLgwHwYDVR0jBBgwFoAUorn/7UcMW3HFLztks7btpBm+E7Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE4N0MxLzI2MzFDOEI0NTcw QTExRjBCNTM4Q0Y2NUM0RjlBRTAyL29ybl83VWNNVzNIRkx6dGtzN2J0cEJtLUU3 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvb3JuXzdVY01XM0hGTHp0a3M3YnRwQm0tRTdNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE4 N0MxLzI2MzFDOEI0NTcwQTExRjBCNTM4Q0Y2NUM0RjlBRTAyL29ybl83VWNNVzNI Rkx6dGtzN2J0cEJtLUU3TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMxwrFANfKwhtG11JnNsSsoVH5thHbiFIY718FFux2zq2LkAP1zOBDxc 0vZ1r+UnjIUiuc1QacaNkCFICCrtojWwK/fuMsDrS7cwkFxxBtHNK6f6L9bR9GW0 gVZC72r/ChDxeMXAz0gP8FG5uEu4HwEZu7vRYLb1xRnXGEg7xX28gX3ZvoNneDI5 c1nI6AUqGgWVXeJjrJZYPYEP2MQkP9ZpSruXRpcrmkfpRs107GooKlAneFwGN43h PGKm7cd9uDEiM46w7YgeAqRDY+e7A1q7LcNGxGI3nrrWqKmxF4+aSI1e1SG+pbuX Cd0bIfsSGiOVhheFwQpsRQSTV5wmYek= -----END CERTIFICATE-----Generated at Wed Aug 13 07:43:33 2025 by rpki-client