$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.mft File: oAM_SUNjDclOLd9fKmuI6GZGGuc.mft (raw, json) Hash identifier: zcG1Ge4zdreYuMyezA8ZGV+EdbLdC07r/9mTVQLy+N0= Subject key identifier: 41:78:12:10:D1:47:6C:8D:84:9B:95:7D:45:E5:8A:8D:97:EE:7B:4B Authority key identifier: A0:03:3F:49:43:63:0D:C9:4E:2D:DF:5F:2A:6B:88:E8:66:46:1A:E7 Certificate issuer: /CN=A91DC0F2/serialNumber=A0033F4943630DC94E2DDF5F2A6B88E866461AE7 Certificate serial: FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oAM_SUNjDclOLd9fKmuI6GZGGuc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.mft Manifest number: F6 Signing time: Tue 05 Aug 2025 05:43:43 +0000 Manifest this update: Tue 05 Aug 2025 05:43:42 +0000 Manifest next update: Tue 12 Aug 2025 05:43:42 +0000 Files and hashes: 1: oAM_SUNjDclOLd9fKmuI6GZGGuc.crl (hash: gZp8LbpTqdpHqg5VBdX6e24Gjacwy5Vm0t+CWLuTG4Y=) 2: EE647C1418A411EFBA690F60C4F9AE02.roa (hash: 1sKQhDe4XE+z/iEwFOdjuVVtLfzSNo7ytvziBnxPEOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.crl rsync://rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oAM_SUNjDclOLd9fKmuI6GZGGuc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 05:43:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC0F2, serialNumber=A0033F4943630DC94E2DDF5F2A6B88E866461AE7 Validity Not Before: Aug 5 05:43:42 2025 GMT Not After : Aug 12 05:43:42 2025 GMT Subject: CN=68919a0f-f6b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:8c:2c:ab:3d:0d:09:1c:c6:fd:ee:ce:d1:e2: 9a:13:1b:b6:c0:d7:ba:40:1e:6a:fb:18:23:db:53: e1:b8:61:09:c2:05:65:a6:e0:f8:30:d6:b2:fc:25: 28:7b:8e:3a:de:91:2a:25:fa:ee:c6:df:b7:fc:f1: d2:3c:6b:8f:c7:a8:7f:10:77:1c:eb:8a:f8:7e:0d: 0d:d1:dd:70:86:f2:bc:4b:f5:e0:dc:d1:03:c4:e6: 3d:0a:05:be:01:a7:2d:59:d5:c3:13:f0:5d:d0:cb: aa:88:74:08:0d:d2:74:62:a5:97:a8:4c:d1:05:cb: 21:b2:a8:e5:f6:8d:66:d4:f4:e0:53:09:d0:56:a2: 0d:3a:ff:e4:84:3e:cd:22:ae:68:ed:e2:9b:e2:6c: fd:2e:26:fb:13:7d:b2:ab:f3:d3:d4:33:d5:ae:c6: 63:b9:94:65:6e:11:ff:0a:a6:3e:12:ec:be:dd:49: 07:87:55:14:14:47:35:dc:58:04:cc:b2:c1:c7:4b: 43:f3:3d:02:ac:a2:9f:ef:83:85:25:12:87:76:b9: 8e:29:d3:50:ad:86:31:12:db:58:6c:5a:53:56:ea: 37:cf:27:bd:2d:2f:08:ca:b8:f0:c6:f3:94:dd:16: 55:5e:fe:a2:d0:8d:2b:11:e2:90:24:29:a3:7d:45: 9f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:78:12:10:D1:47:6C:8D:84:9B:95:7D:45:E5:8A:8D:97:EE:7B:4B X509v3 Authority Key Identifier: keyid:A0:03:3F:49:43:63:0D:C9:4E:2D:DF:5F:2A:6B:88:E8:66:46:1A:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oAM_SUNjDclOLd9fKmuI6GZGGuc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:c4:fd:ee:1f:72:a8:2b:96:37:bb:18:84:81:f5:be:f1:0c: 44:3b:18:55:57:75:4a:93:ea:0c:8b:71:9d:13:1c:c2:9d:9c: ee:7e:b3:84:b8:e2:4b:42:02:15:2c:d4:97:2f:87:88:e8:17: dc:9e:bc:fd:5b:71:fa:c8:bd:0a:4c:cc:93:4a:af:cb:d6:8c: da:fe:4e:94:e3:5a:fa:5c:3b:5e:41:cf:44:6f:ac:e3:8c:87: bb:1c:d6:b4:0f:24:ee:a7:83:ba:19:ea:17:a3:48:4c:1f:9e: 9d:95:f3:17:3e:4a:44:fc:a0:8d:05:6b:ce:e7:8d:44:22:f4: f5:df:fe:33:e6:43:85:4c:f7:0f:e9:52:6b:0e:5c:2b:40:18: d3:1c:3f:1e:36:1d:ea:4a:28:ec:13:32:1f:e6:aa:78:15:87: 3b:a2:a8:6a:9b:d7:16:d6:fb:ac:f6:39:60:7e:97:9a:0c:be: 8f:2b:1a:f6:9d:ce:80:19:a5:c6:86:5d:0c:1f:78:a6:70:07: ea:d1:f7:2a:84:98:f5:e3:d6:33:4a:77:6d:8a:fb:b7:58:ab: 23:fd:b8:2b:37:ad:c1:a8:72:6e:b7:79:1b:ce:de:62:11:b3: 84:8a:80:1b:59:d3:f4:9e:a4:d5:93:db:cd:bb:ba:85:99:57: 57:16:9c:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwRjIxMTAvBgNVBAUTKEEwMDMzRjQ5NDM2MzBEQzk0RTJEREY1RjJBNkI4OEU4 NjY0NjFBRTcwHhcNMjUwODA1MDU0MzQyWhcNMjUwODEyMDU0MzQyWjAYMRYwFAYD VQQDEw02ODkxOWEwZi1mNmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA54wsqz0NCRzG/e7O0eKaExu2wNe6QB5q+xgj21PhuGEJwgVlpuD4MNay/CUo e4463pEqJfruxt+3/PHSPGuPx6h/EHcc64r4fg0N0d1whvK8S/Xg3NEDxOY9CgW+ AactWdXDE/Bd0MuqiHQIDdJ0YqWXqEzRBcshsqjl9o1m1PTgUwnQVqINOv/khD7N Iq5o7eKb4mz9Lib7E32yq/PT1DPVrsZjuZRlbhH/CqY+Euy+3UkHh1UUFEc13FgE zLLBx0tD8z0CrKKf74OFJRKHdrmOKdNQrYYxEttYbFpTVuo3zye9LS8IyrjwxvOU 3RZVXv6i0I0rEeKQJCmjfUWf4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEF4EhDR R2yNhJuVfUXlio2X7ntLMB8GA1UdIwQYMBaAFKADP0lDYw3JTi3fXypriOhmRhrn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzBGMi83RjMzRUUyNEZE N0UxMUVFQTFCMzUzNUNDNEY5QUUwMi9vQU1fU1VOakRjbE9MZDlmS211STZHWkdH dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29BTV9TVU5qRGNsT0xkOWZLbXVJNkdaR0d1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzBGMi83RjMzRUUyNEZEN0UxMUVFQTFCMzUzNUNDNEY5QUUwMi9vQU1fU1VOakRj bE9MZDlmS211STZHWkdHdWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzxP3uH3KoK5Y3uxiEgfW+8QxEOxhVV3VKk+oMi3GdExzCnZzufrOE uOJLQgIVLNSXL4eI6Bfcnrz9W3H6yL0KTMyTSq/L1oza/k6U41r6XDteQc9Eb6zj jIe7HNa0DyTup4O6GeoXo0hMH56dlfMXPkpE/KCNBWvO541EIvT13/4z5kOFTPcP 6VJrDlwrQBjTHD8eNh3qSijsEzIf5qp4FYc7oqhqm9cW1vus9jlgfpeaDL6PKxr2 nc6AGaXGhl0MH3imcAfq0fcqhJj149YzSndtivu3WKsj/bgrN63BqHJut3kbzt5i EbOEioAbWdP0nqTVk9vNu7qFmVdXFpy/ -----END CERTIFICATE-----Generated at Wed Aug 6 10:57:22 2025 by rpki-client