$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft File: oYXAxXSCnF_NcURUSeU0za70E5Y.mft (raw, json) Hash identifier: VsA8cEUu/qKGcmk9loVAsvheoTOqbssGffxSc/mS8bM= Subject key identifier: FD:53:17:DA:D3:E4:5D:8E:D4:1B:3C:20:52:2D:07:84:1F:56:6F:DF Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96 Certificate issuer: /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396 Certificate serial: 0317 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft Manifest number: 02E0 Signing time: Sun 15 Jun 2025 01:12:34 +0000 Manifest this update: Sun 15 Jun 2025 01:12:33 +0000 Manifest next update: Sun 22 Jun 2025 01:12:33 +0000 Files and hashes: 1: oYXAxXSCnF_NcURUSeU0za70E5Y.crl (hash: x41PNxiZiOUrglHrMYbBhYoXtUQRAFsH0pcfTIbbUQY=) 2: 83F4528044EC11F0BA9B197EC4F9AE02.roa (hash: h60+QAFk5z5JVEzVM72x2zEJ/MT6kBQcmmPAMpi/dz8=) 3: 84C2EDA244EC11F0BA9B197EC4F9AE02.roa (hash: fB+DTatBA4Q8/LwVjOHrY6iTM39J2BLXp8RFZMl1nHw=) 4: AF5AD402224711F0B0CDB07DC4F9AE02.roa (hash: IgOdg/yQ/ge2znbNbvVPbXbPhfofMGTYoa84g2RotAU=) 5: 2D153A4648B711F0B6D4592EC4F9AE02.roa (hash: VSUYP4XH4W6UbM3Jx/voaBKaxnmkjCV3eOna45KZu3o=) 6: 1C8BEF04E24511EF96354978C4F9AE02.roa (hash: EGZ/fvHina2YX+dj5xEN7cSS8R0XcNDfXd/tDVK1qcE=) 7: 97F3D14844EC11F09F53687EC4F9AE02.roa (hash: MvoELB7h/6HO6eU346ZVVf0K4dU0Em3XRNFS943H7mE=) 8: A3571FDE47EC11EFB51C3666C4F9AE02.roa (hash: 2cEppnqVz6EA8cjixAQPIWKPT1GtTfD8PJaZqxpWTLE=) 9: B111111288B411EF80480527C4F9AE02.roa (hash: CjPKYAuDT4eI5JPa/G5V81ZBwDnMXPobI3BPswZB4kQ=) 10: B137DB2670EF11EFBEF21935C4F9AE02.roa (hash: gVhoaUxSYFZFX3pfYYhl9cQHoz5s0K+bPZd1cYQ52Y8=) 11: D4E4D8FCA7C311EFB1AAAD55C4F9AE02.roa (hash: Xf5Ju4zh/ec55xkKs2QH4FHNMxaxZH8+1mgQURFonS4=) 12: CD90ED68057211F0B6E2301BC4F9AE02.roa (hash: VUKsMbXUZ/VFyFAP8kRF14O9sqE9uokELiAUUcFuG5M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:12:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 791 (0x317) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4E32, serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396 Validity Not Before: Jun 15 01:12:33 2025 GMT Not After : Jun 22 01:12:33 2025 GMT Subject: CN=684e1e01-3d09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0a:14:93:03:79:46:8e:4b:e8:7a:ea:e1:77: d8:05:67:9c:76:79:0b:39:1a:b8:73:f4:64:59:4a: ce:c8:96:f1:30:44:52:a6:12:0d:45:d1:18:43:79: ae:79:39:72:a1:ce:2e:04:5d:b7:60:53:dd:bc:37: f0:50:aa:2b:a6:9f:2b:fa:dc:37:88:96:c6:d5:71: 9d:99:3b:3f:65:0b:9f:71:f6:bf:d4:68:be:c9:ac: 99:e6:8c:ad:d2:00:4c:66:6c:3a:74:dd:36:b5:8a: ac:08:e9:75:6f:c3:d8:6c:29:35:7b:55:90:a3:2a: 11:be:c3:34:ce:43:5e:59:4f:26:28:46:b1:d4:77: d1:10:f6:87:cb:2a:87:85:b1:10:01:d3:80:2f:42: be:fa:fa:a5:48:29:e3:99:79:ec:05:3c:4f:07:3c: dc:6f:df:39:d7:24:ca:6b:d3:9d:78:c5:cd:a9:43: ae:16:d8:34:2e:0e:55:69:52:11:86:c4:02:59:0a: f2:7d:4b:cf:66:56:43:92:35:d0:da:26:13:c8:24: 2c:19:e4:b9:58:76:5a:68:f5:4f:3c:87:64:15:5d: 82:b0:d7:2f:cc:ab:83:43:da:41:b4:1b:1a:4a:70: 8b:13:7d:3d:07:53:25:23:27:eb:f8:5e:e8:ab:46: 9a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:53:17:DA:D3:E4:5D:8E:D4:1B:3C:20:52:2D:07:84:1F:56:6F:DF X509v3 Authority Key Identifier: keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:57:9c:1b:1b:df:a3:d4:6a:59:4b:24:e4:b3:25:a5:c1:2b: 69:ae:9f:57:fe:f8:39:9d:b8:3b:46:7e:dd:1e:24:c6:52:ad: 33:32:59:ad:e2:95:97:a6:2a:c5:a6:6a:93:9e:1c:9b:ea:73: 7b:7b:27:a9:7f:f2:0a:04:ab:0c:78:7d:7a:56:46:15:0e:26: e7:c7:94:22:e3:ec:8b:d5:d2:e3:9b:72:ca:64:2b:5a:1b:7c: 3f:07:57:09:c6:d0:92:3b:83:59:e0:de:2f:f0:6e:94:39:fb: 42:9b:3f:f3:07:4d:bf:08:dc:7a:ea:54:5c:5d:e5:08:cb:43: c3:51:7a:ab:a8:86:f8:11:96:5f:bf:b1:5c:c5:71:11:42:28: ef:89:2a:54:80:19:e5:83:34:25:da:2a:f8:68:7c:93:78:bb: 53:7a:32:2f:87:97:b4:3a:cb:ea:03:50:56:d6:f5:6e:a2:7d: 41:e7:3f:59:af:71:61:80:1b:62:dc:76:f9:3f:7b:57:be:fe: 39:fe:c7:e2:17:c2:06:87:95:80:91:31:1f:73:b5:4b:b5:1b: cd:7d:29:fa:59:a5:b1:58:cb:39:a7:78:fc:e3:0f:c7:d3:25: 09:b0:bb:56:35:0e:3a:ab:40:20:e7:45:25:ad:02:92:52:ff: 9f:f8:72:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFMzIxMTAvBgNVBAUTKEExODVDMEM1NzQ4MjlDNUZDRDcxNDQ1NDQ5RTUzNENE QUVGNDEzOTYwHhcNMjUwNjE1MDExMjMzWhcNMjUwNjIyMDExMjMzWjAYMRYwFAYD VQQDEw02ODRlMWUwMS0zZDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1woUkwN5Ro5L6Hrq4XfYBWecdnkLORq4c/RkWUrOyJbxMERSphINRdEYQ3mu eTlyoc4uBF23YFPdvDfwUKorpp8r+tw3iJbG1XGdmTs/ZQufcfa/1Gi+yayZ5oyt 0gBMZmw6dN02tYqsCOl1b8PYbCk1e1WQoyoRvsM0zkNeWU8mKEax1HfREPaHyyqH hbEQAdOAL0K++vqlSCnjmXnsBTxPBzzcb9851yTKa9OdeMXNqUOuFtg0Lg5VaVIR hsQCWQryfUvPZlZDkjXQ2iYTyCQsGeS5WHZaaPVPPIdkFV2CsNcvzKuDQ9pBtBsa SnCLE309B1MlIyfr+F7oq0aaEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP1TF9rT 5F2O1Bs8IFItB4QfVm/fMB8GA1UdIwQYMBaAFKGFwMV0gpxfzXFEVEnlNM2u9BOW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEUzMi83MjA5NTlGQzAx QzAxMUVEQkQ3QzZGNThDNEY5QUUwMi9vWVhBeFhTQ25GX05jVVJVU2VVMHphNzBF NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29ZWEF4WFNDbkZfTmNVUlVTZVUwemE3MEU1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEUzMi83MjA5NTlGQzAxQzAxMUVEQkQ3QzZGNThDNEY5QUUwMi9vWVhBeFhTQ25G X05jVVJVU2VVMHphNzBFNVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUV5wbG9+j1GpZSyTksyWlwStprp9X/vg5nbg7Rn7dHiTGUq0zMlmt 4pWXpirFpmqTnhyb6nN7eyepf/IKBKsMeH16VkYVDibnx5Qi4+yL1dLjm3LKZCta G3w/B1cJxtCSO4NZ4N4v8G6UOftCmz/zB02/CNx66lRcXeUIy0PDUXqrqIb4EZZf v7FcxXERQijviSpUgBnlgzQl2ir4aHyTeLtTejIvh5e0OsvqA1BW1vVuon1B5z9Z r3FhgBti3Hb5P3tXvv45/sfiF8IGh5WAkTEfc7VLtRvNfSn6WaWxWMs5p3j84w/H 0yUJsLtWNQ46q0Ag50UlrQKSUv+f+HLD -----END CERTIFICATE-----Generated at Sun Jun 15 10:17:11 2025 by rpki-client