$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.mft File: o7CyBZyzB2t17aMkt2UH08KVUoM.mft (raw, json) Hash identifier: G9d2FkN13UbbyTCCBVtg8VVSA0YEn9jMsDvNEVgnXAo= Subject key identifier: 7B:71:BD:2D:A8:45:05:2D:0B:20:B8:4A:9E:E2:14:DD:88:8C:73:EF Authority key identifier: A3:B0:B2:05:9C:B3:07:6B:75:ED:A3:24:B7:65:07:D3:C2:95:52:83 Certificate issuer: /CN=A91C2AAE/serialNumber=A3B0B2059CB3076B75EDA324B76507D3C2955283 Certificate serial: 0A2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7CyBZyzB2t17aMkt2UH08KVUoM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.mft Manifest number: 0A28 Signing time: Wed 18 Jun 2025 19:38:39 +0000 Manifest this update: Wed 18 Jun 2025 19:38:39 +0000 Manifest next update: Wed 25 Jun 2025 19:38:39 +0000 Files and hashes: 1: o7CyBZyzB2t17aMkt2UH08KVUoM.crl (hash: f5T31nw5ZZXUCld3mL11v2LHNRnHKjKXJ+H9PPezDSs=) 2: 11502BAC719111EAAC505266C4F9AE02.roa (hash: 88XJabgqaxcByEwqNaBfgRLdg8FbkNPUbRQuluXcClA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.crl rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7CyBZyzB2t17aMkt2UH08KVUoM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 19:38:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2607 (0xa2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2AAE, serialNumber=A3B0B2059CB3076B75EDA324B76507D3C2955283 Validity Not Before: Jun 18 19:38:39 2025 GMT Not After : Jun 25 19:38:39 2025 GMT Subject: CN=685315bf-d084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8f:ae:6e:ad:b5:ae:fb:ac:03:a3:01:a2:c2: ff:f1:ca:d9:c8:42:13:68:fb:96:c2:a7:9f:47:fc: 53:3c:0c:7c:e5:fc:25:e9:d0:24:3c:53:49:d9:a3: e3:94:e4:6c:48:fb:c2:9a:df:28:c6:58:db:23:92: 5f:27:6e:6a:1a:62:64:3f:c9:55:40:68:e3:42:7f: 71:94:dc:0d:76:bc:1d:63:93:e2:62:7d:b3:b0:ce: 4e:fa:d0:cd:b5:08:c2:a1:c2:d5:3f:af:77:d2:2c: 07:bc:58:2b:4e:cd:6d:2b:fd:b5:fb:ba:db:0f:25: c7:f0:1f:c4:a5:51:2d:d4:07:43:56:ab:41:d6:a6: 4b:f8:a1:9b:9a:b7:07:5d:93:4f:f1:5d:6e:d7:2e: 8d:39:11:0d:1c:46:5e:f3:19:48:7b:da:b6:64:0d: 76:ab:3b:d4:06:11:79:94:22:b9:1a:38:4b:a1:cc: aa:92:21:78:17:10:03:5f:a7:f7:19:78:9e:22:98: 10:8c:54:6e:c9:6e:8b:75:4b:a9:52:19:f0:91:21: d5:c9:18:91:84:13:cc:1e:24:26:64:de:5f:42:e1: 81:4f:32:6d:c2:ff:79:7a:a2:14:9f:0d:06:f9:a4: df:74:03:c5:33:0a:4c:5d:db:3b:30:cd:aa:50:ca: 61:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:71:BD:2D:A8:45:05:2D:0B:20:B8:4A:9E:E2:14:DD:88:8C:73:EF X509v3 Authority Key Identifier: keyid:A3:B0:B2:05:9C:B3:07:6B:75:ED:A3:24:B7:65:07:D3:C2:95:52:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7CyBZyzB2t17aMkt2UH08KVUoM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:ff:7a:f9:ca:92:6f:68:6a:00:ae:a7:61:01:6b:ed:8d:42: e5:12:a6:8e:90:f2:3a:8f:bc:c9:7d:e4:01:09:47:71:4c:b8: 93:9a:65:06:3a:e2:01:42:a6:d3:8b:e8:cc:f9:00:86:3c:61: e2:fc:88:f7:bd:dd:ea:46:33:f3:c7:b3:74:db:87:f5:cf:a5: b2:35:49:97:c9:59:3e:03:55:ff:c7:54:c0:9e:f9:f4:19:0a: a6:ae:06:1b:5e:95:13:56:4f:6c:ee:b6:87:0d:05:b2:55:ce: 82:b6:e9:69:c6:e4:ac:f1:d4:29:c6:52:f8:5c:0b:4c:45:5a: 66:54:65:10:da:c2:4c:e6:a3:e4:65:dd:63:39:d1:cf:e7:86: 5b:05:1d:8a:5f:0a:8c:41:23:a0:e2:4d:03:16:c3:9a:be:dd: 12:d5:fd:65:76:80:38:d9:cc:01:e1:70:68:f7:0b:29:39:23: 67:6f:79:2a:30:08:3a:19:61:0c:7a:0c:51:74:ed:40:62:ba: 8b:63:81:0d:29:ae:f8:dd:97:aa:6d:34:91:b3:23:e5:71:d1: 34:7d:5a:67:1d:87:df:50:44:75:ed:d1:b1:99:e7:47:25:e0: f3:11:81:91:0a:29:de:43:83:89:74:25:4c:3c:f9:c3:5e:ce: 9e:19:dd:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJBQUUxMTAvBgNVBAUTKEEzQjBCMjA1OUNCMzA3NkI3NUVEQTMyNEI3NjUwN0Qz QzI5NTUyODMwHhcNMjUwNjE4MTkzODM5WhcNMjUwNjI1MTkzODM5WjAYMRYwFAYD VQQDEw02ODUzMTViZi1kMDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsY+ubq21rvusA6MBosL/8crZyEITaPuWwqefR/xTPAx85fwl6dAkPFNJ2aPj lORsSPvCmt8oxljbI5JfJ25qGmJkP8lVQGjjQn9xlNwNdrwdY5PiYn2zsM5O+tDN tQjCocLVP6930iwHvFgrTs1tK/21+7rbDyXH8B/EpVEt1AdDVqtB1qZL+KGbmrcH XZNP8V1u1y6NORENHEZe8xlIe9q2ZA12qzvUBhF5lCK5GjhLocyqkiF4FxADX6f3 GXieIpgQjFRuyW6LdUupUhnwkSHVyRiRhBPMHiQmZN5fQuGBTzJtwv95eqIUnw0G +aTfdAPFMwpMXds7MM2qUMph/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHtxvS2o RQUtCyC4Sp7iFN2IjHPvMB8GA1UdIwQYMBaAFKOwsgWcswdrde2jJLdlB9PClVKD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkFBRS81NzUzN0Q1RTcw NDUxMUVBOEE5NDFEMUFDNEY5QUUwMi9vN0N5Qlp5ekIydDE3YU1rdDJVSDA4S1ZV b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL283Q3lCWnl6QjJ0MTdhTWt0MlVIMDhLVlVvTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkFBRS81NzUzN0Q1RTcwNDUxMUVBOEE5NDFEMUFDNEY5QUUwMi9vN0N5Qlp5ekIy dDE3YU1rdDJVSDA4S1ZVb00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCD/3r5ypJvaGoArqdhAWvtjULlEqaOkPI6j7zJfeQBCUdxTLiTmmUG OuIBQqbTi+jM+QCGPGHi/Ij3vd3qRjPzx7N024f1z6WyNUmXyVk+A1X/x1TAnvn0 GQqmrgYbXpUTVk9s7raHDQWyVc6CtulpxuSs8dQpxlL4XAtMRVpmVGUQ2sJM5qPk Zd1jOdHP54ZbBR2KXwqMQSOg4k0DFsOavt0S1f1ldoA42cwB4XBo9wspOSNnb3kq MAg6GWEMegxRdO1AYrqLY4ENKa743ZeqbTSRsyPlcdE0fVpnHYffUER17dGxmedH JeDzEYGRCineQ4OJdCVMPPnDXs6eGd0f -----END CERTIFICATE-----Generated at Fri Jun 20 00:22:06 2025 by rpki-client