$ rpki-client -vvf rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.mft File: oo2gvpAdmDpDPYM1idFnv0hvZPw.mft (raw, json) Hash identifier: BnqoS+w4tdzxDSagH1SvJ53EUYvN6ScSwHIj3MKhAl8= Subject key identifier: 04:ED:A4:1E:3E:A0:F7:87:DA:38:03:5A:25:6E:4C:C9:06:C3:20:9A Authority key identifier: A2:8D:A0:BE:90:1D:98:3A:43:3D:83:35:89:D1:67:BF:48:6F:64:FC Certificate issuer: /CN=A912720E/serialNumber=A28DA0BE901D983A433D833589D167BF486F64FC Certificate serial: 0194 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oo2gvpAdmDpDPYM1idFnv0hvZPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.mft Manifest number: 0191 Signing time: Tue 05 Aug 2025 03:53:03 +0000 Manifest this update: Tue 05 Aug 2025 03:53:02 +0000 Manifest next update: Tue 12 Aug 2025 03:53:02 +0000 Files and hashes: 1: oo2gvpAdmDpDPYM1idFnv0hvZPw.crl (hash: GAHDnoRu1tur9ndkrK2418+DXBoJxZSax+loswqNRfg=) 2: DB27568209DA11EEBA18A082C4F9AE02.roa (hash: e38NftZeclZtbzcVCk509TYbTR+zv3+tyooBUtjix+c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.crl rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oo2gvpAdmDpDPYM1idFnv0hvZPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 03:53:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 404 (0x194) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912720E, serialNumber=A28DA0BE901D983A433D833589D167BF486F64FC Validity Not Before: Aug 5 03:53:02 2025 GMT Not After : Aug 12 03:53:02 2025 GMT Subject: CN=6891801f-2498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:55:2a:66:17:5e:74:fd:08:64:09:30:8a:8b: 66:fb:1a:f5:32:e6:34:02:c0:8e:23:09:40:2c:e9: 94:8f:76:61:04:6e:1e:d3:1b:67:bf:0d:36:84:99: 76:e2:10:7a:b4:53:35:34:ad:77:10:9b:8e:1e:8e: 0c:b5:7f:72:d8:4f:93:ea:11:09:32:88:36:bb:66: ae:4b:45:e6:a9:7d:07:a8:88:ac:ab:db:ef:ea:83: aa:29:af:35:db:41:3a:2d:a6:f2:66:0d:65:75:74: 83:4e:22:9d:3c:43:37:f8:ba:e7:cd:c9:4e:84:42: 3e:45:2b:c9:85:e5:1c:15:5c:1c:8e:fa:bd:0c:1b: da:9d:30:35:d1:a5:8c:cd:68:94:91:a2:f3:c0:3d: ea:52:a6:d9:a8:01:78:44:24:28:0c:14:38:cb:e4: 9e:43:18:ed:b6:37:e1:11:d6:3e:c8:22:c7:11:1e: e5:1f:ed:bb:a4:95:cf:ff:b1:77:0b:5d:a4:cf:d9: 30:6a:df:30:b0:62:81:ee:0d:9c:6b:8a:ea:a1:bb: 41:82:27:d7:2a:bb:a9:72:64:1e:9d:31:5a:a7:cf: 6e:2d:00:a7:54:99:b1:12:cc:d1:b3:8b:b0:37:bb: de:64:d3:dc:71:18:47:9d:b2:b5:72:01:f4:a3:5f: da:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:ED:A4:1E:3E:A0:F7:87:DA:38:03:5A:25:6E:4C:C9:06:C3:20:9A X509v3 Authority Key Identifier: keyid:A2:8D:A0:BE:90:1D:98:3A:43:3D:83:35:89:D1:67:BF:48:6F:64:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oo2gvpAdmDpDPYM1idFnv0hvZPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:a1:04:5b:f6:bb:15:af:3c:96:bf:e1:a1:c8:80:96:4c:4f: f5:d5:a1:1e:11:83:13:80:df:31:d1:03:35:b1:91:d4:af:6a: 8e:6d:8c:a6:46:42:22:22:be:24:61:05:d3:ea:96:7b:d7:6d: dc:69:c2:64:49:f6:43:02:87:9e:a4:2d:0c:51:64:92:bf:b9: 6e:7e:8f:8a:e4:1d:ca:02:e7:8f:53:1b:72:32:ce:f5:a8:1e: 6a:4d:02:b0:ba:ff:4c:18:93:35:5e:05:d3:15:69:8b:56:02: 16:7f:4a:46:0f:60:4e:53:aa:a0:00:34:73:b6:f5:01:d7:e2: 3c:74:fc:ac:41:ae:26:23:c8:9f:85:a1:5e:68:95:8c:10:dc: e2:2a:fa:4f:b1:92:6d:ff:74:15:02:e1:61:ea:74:47:4e:47: 89:99:98:8f:bb:d9:05:ee:70:cd:d4:85:06:59:58:ff:1e:66: 4d:9e:7f:6f:fb:2d:a4:d0:fd:5e:6c:81:b8:f2:72:6f:b7:7d: 3f:81:4c:c2:52:cf:6c:8c:a0:cb:da:df:c7:e1:f2:90:a6:92: 96:f8:1f:45:0f:15:65:a1:6c:c7:b4:d0:a2:39:be:a9:31:16: a7:eb:4a:ca:84:9d:ef:c2:ee:68:cf:9e:d9:53:08:b1:2c:25: 76:08:92:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjcyMEUxMTAvBgNVBAUTKEEyOERBMEJFOTAxRDk4M0E0MzNEODMzNTg5RDE2N0JG NDg2RjY0RkMwHhcNMjUwODA1MDM1MzAyWhcNMjUwODEyMDM1MzAyWjAYMRYwFAYD VQQDEw02ODkxODAxZi0yNDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4FUqZhdedP0IZAkwiotm+xr1MuY0AsCOIwlALOmUj3ZhBG4e0xtnvw02hJl2 4hB6tFM1NK13EJuOHo4MtX9y2E+T6hEJMog2u2auS0XmqX0HqIisq9vv6oOqKa81 20E6LabyZg1ldXSDTiKdPEM3+LrnzclOhEI+RSvJheUcFVwcjvq9DBvanTA10aWM zWiUkaLzwD3qUqbZqAF4RCQoDBQ4y+SeQxjttjfhEdY+yCLHER7lH+27pJXP/7F3 C12kz9kwat8wsGKB7g2ca4rqobtBgifXKrupcmQenTFap89uLQCnVJmxEszRs4uw N7veZNPccRhHnbK1cgH0o1/aOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFATtpB4+ oPeH2jgDWiVuTMkGwyCaMB8GA1UdIwQYMBaAFKKNoL6QHZg6Qz2DNYnRZ79Ib2T8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzIwRS81RTUxRDQ1QzA5 RDUxMUVFQTM4QTc0ODBDNEY5QUUwMi9vbzJndnBBZG1EcERQWU0xaWRGbnYwaHZa UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29vMmd2cEFkbURwRFBZTTFpZEZudjBodlpQdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzIwRS81RTUxRDQ1QzA5RDUxMUVFQTM4QTc0ODBDNEY5QUUwMi9vbzJndnBBZG1E cERQWU0xaWRGbnYwaHZaUHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+oQRb9rsVrzyWv+GhyICWTE/11aEeEYMTgN8x0QM1sZHUr2qObYym RkIiIr4kYQXT6pZ7123cacJkSfZDAoeepC0MUWSSv7lufo+K5B3KAuePUxtyMs71 qB5qTQKwuv9MGJM1XgXTFWmLVgIWf0pGD2BOU6qgADRztvUB1+I8dPysQa4mI8if haFeaJWMENziKvpPsZJt/3QVAuFh6nRHTkeJmZiPu9kF7nDN1IUGWVj/HmZNnn9v +y2k0P1ebIG48nJvt30/gUzCUs9sjKDL2t/H4fKQppKW+B9FDxVloWzHtNCiOb6p MRan60rKhJ3vwu5oz57ZUwixLCV2CJL/ -----END CERTIFICATE-----Generated at Wed Aug 6 16:06:16 2025 by rpki-client