$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft File: Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft (raw, json) Hash identifier: M2LVg91J67GD7Q74duf1ja0vs3WrCshiQ557iz702b8= Subject key identifier: 43:BE:E4:4E:07:5A:75:A7:E6:61:A2:94:0A:38:FD:F0:48:24:CF:D2 Authority key identifier: 3A:AF:FB:B7:EA:4A:60:D7:7B:B4:42:84:AC:BF:25:C3:98:BA:9A:6D Certificate issuer: /CN=A91F8E3D/serialNumber=3AAFFBB7EA4A60D77BB44284ACBF25C398BA9A6D Certificate serial: 0496 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq_7t-pKYNd7tEKErL8lw5i6mm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft Manifest number: 0483 Signing time: Mon 11 Aug 2025 00:17:51 +0000 Manifest this update: Mon 11 Aug 2025 00:17:50 +0000 Manifest next update: Mon 18 Aug 2025 00:17:50 +0000 Files and hashes: 1: Oq_7t-pKYNd7tEKErL8lw5i6mm0.crl (hash: l90xtQYK1ejIPpLLhW8NKW7jr8bePzDFLTwnzCIBIq0=) 2: FF9D89B6AB4C11ECB0C94F67C4F9AE02.roa (hash: p5RWbmc3OrbusuGd87uXwNNKECyHXGRqb7DFbO3Zzjc=) 3: 451AF9F2E3DC11ECB9410B43C4F9AE02.roa (hash: PvyXkvk9rsG65qDLSBUO/zxV1I1w1ViEmt67rzLWH3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.crl rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq_7t-pKYNd7tEKErL8lw5i6mm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1174 (0x496) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8E3D, serialNumber=3AAFFBB7EA4A60D77BB44284ACBF25C398BA9A6D Validity Not Before: Aug 11 00:17:50 2025 GMT Not After : Aug 18 00:17:50 2025 GMT Subject: CN=689936af-8e7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f6:66:09:cc:2d:0e:a1:50:cb:c6:18:7b:78: d6:76:50:21:75:b9:01:9d:d2:bf:37:2f:b0:9d:48: 01:d1:96:cc:19:0b:fb:14:60:89:2e:ad:e9:16:6a: e8:42:ac:0c:99:d1:ca:a5:2f:1c:36:62:fd:86:a1: dd:9b:d8:b9:2e:cb:f1:2c:d7:5a:78:8b:c1:ba:53: 62:f4:ed:db:e7:5d:cb:b7:66:4c:d3:4e:39:9d:01: 49:8d:df:df:68:08:0f:d0:8c:5b:e8:3f:33:86:ee: de:ff:74:71:03:6a:ea:74:3a:6c:f1:e3:f3:c9:c8: d1:48:77:94:39:c4:40:7d:13:0e:43:03:6e:b5:7b: ef:38:82:74:74:ea:47:e3:07:3c:29:2e:a6:44:d3: 5c:d9:19:f8:1c:ff:a3:55:7e:0e:ba:a7:53:8c:55: ba:a1:8f:e0:01:e9:de:70:03:ef:f0:3c:4c:22:7c: 7d:dd:62:dc:48:5e:a7:76:95:e3:9c:41:34:96:86: 8b:fa:6b:72:7f:9a:0f:d4:64:53:e2:f8:ba:82:8e: bc:a3:21:03:53:2f:48:d4:a7:c3:e7:33:aa:bf:c7: 9d:7b:d9:72:a5:44:2a:8c:1d:4a:9f:6c:2a:12:2a: c1:76:14:08:64:9c:9a:2f:1f:45:32:5e:53:e0:f1: 56:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:BE:E4:4E:07:5A:75:A7:E6:61:A2:94:0A:38:FD:F0:48:24:CF:D2 X509v3 Authority Key Identifier: keyid:3A:AF:FB:B7:EA:4A:60:D7:7B:B4:42:84:AC:BF:25:C3:98:BA:9A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq_7t-pKYNd7tEKErL8lw5i6mm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:7e:13:20:6b:32:5d:be:e7:5d:ca:94:13:ff:f6:5b:eb:e7: 3d:4a:c6:cd:57:b6:02:83:f9:3c:c7:4f:60:11:bf:1c:70:d0: 7f:32:08:13:2a:a0:ca:64:4d:41:ff:56:64:f3:7f:0a:98:11: bb:73:82:86:f4:20:01:6e:7a:71:83:df:b3:ea:80:2c:ec:7d: 29:0f:34:3c:6c:c1:37:a8:5d:49:b7:ce:93:d0:6e:f2:dc:63: 96:55:98:94:31:78:8a:a0:db:c6:b9:26:e5:2f:5c:75:8e:2b: 76:bb:e9:91:96:4c:90:8d:d7:02:fe:cd:0d:9b:0e:95:49:b2: a7:da:f2:19:95:6b:d0:9e:fd:87:b9:2e:43:8f:be:54:75:11: 9f:cc:af:03:12:6a:f8:94:25:90:e3:3f:f1:0b:d6:0e:03:c2: fc:53:d9:4d:26:17:93:18:4c:72:81:ba:7e:b9:a0:39:ad:1f: 7e:5a:38:e2:42:7e:06:7b:7c:01:b0:32:f2:96:e5:72:b7:f4: be:ce:95:2e:6f:df:b8:23:57:51:f9:c7:33:bc:9d:68:5d:ef: f1:e4:d3:d9:51:0a:70:48:ba:b4:a1:10:5e:99:ef:4f:e5:7d: 8f:8e:cb:28:f9:ea:85:5c:22:bf:b6:f1:4c:62:e0:2d:e0:37: f7:7f:44:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhFM0QxMTAvBgNVBAUTKDNBQUZGQkI3RUE0QTYwRDc3QkI0NDI4NEFDQkYyNUMz OThCQTlBNkQwHhcNMjUwODExMDAxNzUwWhcNMjUwODE4MDAxNzUwWjAYMRYwFAYD VQQDEw02ODk5MzZhZi04ZTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtvZmCcwtDqFQy8YYe3jWdlAhdbkBndK/Ny+wnUgB0ZbMGQv7FGCJLq3pFmro QqwMmdHKpS8cNmL9hqHdm9i5LsvxLNdaeIvBulNi9O3b513Lt2ZM0045nQFJjd/f aAgP0Ixb6D8zhu7e/3RxA2rqdDps8ePzycjRSHeUOcRAfRMOQwNutXvvOIJ0dOpH 4wc8KS6mRNNc2Rn4HP+jVX4OuqdTjFW6oY/gAenecAPv8DxMInx93WLcSF6ndpXj nEE0loaL+mtyf5oP1GRT4vi6go68oyEDUy9I1KfD5zOqv8ede9lypUQqjB1Kn2wq EirBdhQIZJyaLx9FMl5T4PFWXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEO+5E4H WnWn5mGilAo4/fBIJM/SMB8GA1UdIwQYMBaAFDqv+7fqSmDXe7RChKy/JcOYuppt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEUzRC8wQUI0Mzg2QTU4 NEUxMUVDOUZDRjE3NzlDNEY5QUUwMi9PcV83dC1wS1lOZDd0RUtFckw4bHc1aTZt bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09xXzd0LXBLWU5kN3RFS0VyTDhsdzVpNm1tMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEUzRC8wQUI0Mzg2QTU4NEUxMUVDOUZDRjE3NzlDNEY5QUUwMi9PcV83dC1wS1lO ZDd0RUtFckw4bHc1aTZtbTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnfhMgazJdvuddypQT//Zb6+c9SsbNV7YCg/k8x09gEb8ccNB/MggT KqDKZE1B/1Zk838KmBG7c4KG9CABbnpxg9+z6oAs7H0pDzQ8bME3qF1Jt86T0G7y 3GOWVZiUMXiKoNvGuSblL1x1jit2u+mRlkyQjdcC/s0Nmw6VSbKn2vIZlWvQnv2H uS5Dj75UdRGfzK8DEmr4lCWQ4z/xC9YOA8L8U9lNJheTGExygbp+uaA5rR9+Wjji Qn4Ge3wBsDLyluVyt/S+zpUub9+4I1dR+cczvJ1oXe/x5NPZUQpwSLq0oRBeme9P 5X2Pjsso+eqFXCK/tvFMYuAt4Df3f0Q4 -----END CERTIFICATE-----Generated at Mon Aug 11 02:07:45 2025 by rpki-client