$ rpki-client -vvf rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.mft File: oLpGLyn4JaQCCWoyzXT3ooy8_uE.mft (raw, json) Hash identifier: rd4SS7Oo/cltJDDmP0hr+HTKpjbT/YjB5Ctdxhokc6c= Subject key identifier: 5F:C2:73:52:63:5C:12:B1:E4:52:08:F6:38:FD:81:29:6A:CD:1B:B4 Authority key identifier: A0:BA:46:2F:29:F8:25:A4:02:09:6A:32:CD:74:F7:A2:8C:BC:FE:E1 Certificate issuer: /CN=A91E43F6/serialNumber=A0BA462F29F825A402096A32CD74F7A28CBCFEE1 Certificate serial: 05FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oLpGLyn4JaQCCWoyzXT3ooy8_uE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.mft Manifest number: 05F6 Signing time: Mon 04 Aug 2025 23:19:22 +0000 Manifest this update: Mon 04 Aug 2025 23:19:22 +0000 Manifest next update: Mon 11 Aug 2025 23:19:22 +0000 Files and hashes: 1: oLpGLyn4JaQCCWoyzXT3ooy8_uE.crl (hash: z8ne3WBhh5ZvgW6n5sbQNu6okwi/ZRw/F/0ZRmrxtX8=) 2: 27560994BA0611EB8B424C22C4F9AE02.roa (hash: pqRxueuRQ9Xk1G5bNOlc+yk8F/47WS7KRa617CuzluU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.crl rsync://rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oLpGLyn4JaQCCWoyzXT3ooy8_uE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 23:19:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1531 (0x5fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E43F6, serialNumber=A0BA462F29F825A402096A32CD74F7A28CBCFEE1 Validity Not Before: Aug 4 23:19:22 2025 GMT Not After : Aug 11 23:19:22 2025 GMT Subject: CN=68913ffa-3406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:90:64:b9:6c:29:bf:af:98:f0:d3:98:ad:01: 03:81:71:c3:06:5a:a1:a4:d8:77:1a:b8:c2:77:39: 99:cc:bf:7a:99:ff:64:60:57:f9:22:12:87:bd:8e: ba:aa:1f:47:44:a5:27:70:f0:46:f3:7b:89:35:21: 31:41:12:7b:9c:5b:61:62:38:f0:94:65:1a:52:f7: 75:ed:74:84:28:90:1d:d5:d6:9b:f9:25:c4:c7:29: 00:c0:99:18:d8:85:99:b5:fb:f1:08:40:a5:06:4f: 22:ea:fb:60:d4:33:bf:0f:cd:17:a6:28:01:e2:9d: 4b:eb:ec:f7:a1:68:b3:0c:6c:bc:0f:07:29:09:ed: 89:9d:0a:07:e6:bb:65:64:e6:80:2c:4f:9f:21:f8: 74:a6:d2:33:11:12:97:74:47:7f:f0:de:92:2c:7a: 82:8f:9b:ad:08:e1:3c:06:e1:68:2e:38:22:6d:16: 0a:16:d7:2f:fe:f6:f4:57:dc:d2:f5:66:41:1a:55: c1:33:10:de:9a:85:c0:65:6f:bc:0c:e1:af:db:84: 88:dc:60:94:0f:4e:1c:12:c9:6a:f4:34:a7:a9:76: 7b:9c:f9:6c:83:b6:58:cd:c2:f6:ce:0c:53:fd:17: 76:f6:25:52:44:b9:e4:23:f1:cc:2a:cc:4b:ab:85: 68:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:C2:73:52:63:5C:12:B1:E4:52:08:F6:38:FD:81:29:6A:CD:1B:B4 X509v3 Authority Key Identifier: keyid:A0:BA:46:2F:29:F8:25:A4:02:09:6A:32:CD:74:F7:A2:8C:BC:FE:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oLpGLyn4JaQCCWoyzXT3ooy8_uE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:87:f6:53:52:ac:f4:3b:fa:40:b7:b9:16:63:3c:73:eb:ca: b6:61:cb:5e:21:51:4b:39:82:7e:42:12:da:a6:56:8c:78:46: 00:2d:99:20:31:5e:75:b3:27:2b:b1:4c:d6:3e:d8:bc:a9:98: 4b:0a:df:18:24:31:49:74:95:51:bd:ea:1c:ef:31:a8:cd:13: cc:b2:34:22:7f:5b:ec:cd:48:c7:40:1b:3f:8a:e7:3e:2d:61: 85:13:51:5e:38:a0:15:a7:6f:4b:01:22:bf:f0:68:47:ad:ef: a4:f4:ec:65:08:b2:f0:35:93:a2:79:a7:d2:bc:4c:1e:21:7b: c3:cb:fc:e0:a8:73:01:0b:a8:c4:01:cd:59:31:48:2e:0f:8f: 42:c9:bb:6c:c5:9b:7e:c3:d0:bd:b4:30:22:f5:d0:b1:61:96: 4a:34:d0:aa:b3:f7:fb:cd:ee:d8:28:dc:04:35:3a:82:1d:bc: b4:1e:c2:27:9c:93:d5:8d:39:13:1e:70:9c:bf:43:82:41:fa: 15:1e:68:dd:37:b0:f1:c2:4d:9b:9f:df:f4:2e:b8:46:0b:15: dd:9d:c7:2d:aa:29:13:cf:cb:59:5a:8d:4c:82:9a:46:3d:aa: 90:17:03:01:62:1b:28:ee:68:69:71:87:dc:e4:a5:4b:9f:4c: 98:b7:b7:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQzRjYxMTAvBgNVBAUTKEEwQkE0NjJGMjlGODI1QTQwMjA5NkEzMkNENzRGN0Ey OENCQ0ZFRTEwHhcNMjUwODA0MjMxOTIyWhcNMjUwODExMjMxOTIyWjAYMRYwFAYD VQQDEw02ODkxM2ZmYS0zNDA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzZBkuWwpv6+Y8NOYrQEDgXHDBlqhpNh3GrjCdzmZzL96mf9kYFf5IhKHvY66 qh9HRKUncPBG83uJNSExQRJ7nFthYjjwlGUaUvd17XSEKJAd1dab+SXExykAwJkY 2IWZtfvxCEClBk8i6vtg1DO/D80XpigB4p1L6+z3oWizDGy8DwcpCe2JnQoH5rtl ZOaALE+fIfh0ptIzERKXdEd/8N6SLHqCj5utCOE8BuFoLjgibRYKFtcv/vb0V9zS 9WZBGlXBMxDemoXAZW+8DOGv24SI3GCUD04cEslq9DSnqXZ7nPlsg7ZYzcL2zgxT /Rd29iVSRLnkI/HMKsxLq4VoLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF/Cc1Jj XBKx5FII9jj9gSlqzRu0MB8GA1UdIwQYMBaAFKC6Ri8p+CWkAglqMs1096KMvP7h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDNGNi8yRDJGMjE4NkJB MDQxMUVCOTdGNUI0MUZDNEY5QUUwMi9vTHBHTHluNEphUUNDV295elhUM29veThf dUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29McEdMeW40SmFRQ0NXb3l6WFQzb295OF91RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDNGNi8yRDJGMjE4NkJBMDQxMUVCOTdGNUI0MUZDNEY5QUUwMi9vTHBHTHluNEph UUNDV295elhUM29veThfdUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASh/ZTUqz0O/pAt7kWYzxz68q2YcteIVFLOYJ+QhLaplaMeEYALZkg MV51sycrsUzWPti8qZhLCt8YJDFJdJVRveoc7zGozRPMsjQif1vszUjHQBs/iuc+ LWGFE1FeOKAVp29LASK/8GhHre+k9OxlCLLwNZOieafSvEweIXvDy/zgqHMBC6jE Ac1ZMUguD49CybtsxZt+w9C9tDAi9dCxYZZKNNCqs/f7ze7YKNwENTqCHby0HsIn nJPVjTkTHnCcv0OCQfoVHmjdN7Dxwk2bn9/0LrhGCxXdncctqikTz8tZWo1MgppG PaqQFwMBYhso7mhpcYfc5KVLn0yYt7d7 -----END CERTIFICATE-----Generated at Wed Aug 6 07:51:50 2025 by rpki-client