$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft File: OdCbSlNggIIFqdaRRxnguYnPVgs.mft (raw, json) Hash identifier: 63dEQP35nV8n+CI6ag/a28Yqdi9ZmoQmMWMKHrb9IzM= Subject key identifier: 92:F6:33:B0:77:FA:31:1E:E4:C4:FB:11:40:B8:AF:70:4C:87:3C:6A Authority key identifier: 39:D0:9B:4A:53:60:80:82:05:A9:D6:91:47:19:E0:B9:89:CF:56:0B Certificate issuer: /CN=A91FDCF0/serialNumber=39D09B4A5360808205A9D6914719E0B989CF560B Certificate serial: 17B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdCbSlNggIIFqdaRRxnguYnPVgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft Manifest number: 17AC Signing time: Mon 04 Aug 2025 16:44:20 +0000 Manifest this update: Mon 04 Aug 2025 16:44:19 +0000 Manifest next update: Mon 11 Aug 2025 16:44:19 +0000 Files and hashes: 1: OdCbSlNggIIFqdaRRxnguYnPVgs.crl (hash: uaRV5DKf/4L+64gjbPEgDs1PzmbjDUk0jyY1irYMXaI=) 2: D8D34E92100411EE9849087AC4F9AE02.roa (hash: NYe/OwRHgWBG4n1tEVTichlRmY2tFDrc7PdcIFXXIB4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.crl rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdCbSlNggIIFqdaRRxnguYnPVgs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 16:44:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6069 (0x17b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDCF0, serialNumber=39D09B4A5360808205A9D6914719E0B989CF560B Validity Not Before: Aug 4 16:44:19 2025 GMT Not After : Aug 11 16:44:19 2025 GMT Subject: CN=6890e363-7045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:c2:86:eb:06:3b:10:cb:f2:b2:f7:ff:eb:e4: 02:aa:f4:d9:b5:8a:3b:f1:29:13:3e:17:f8:08:91: a3:df:6b:23:74:db:77:b5:60:81:11:b3:dd:c2:bb: 9e:09:eb:ba:71:2c:8b:34:05:36:b4:61:f0:4d:20: 4c:e3:cb:f7:96:5b:80:81:d5:4e:a0:b6:43:6f:8d: 1b:61:67:4b:ca:33:71:4d:e2:e3:46:5d:53:f1:d7: a2:cc:56:69:84:db:40:d8:86:e2:f1:69:24:bc:48: be:70:c0:07:7f:c3:5c:ce:eb:fb:56:1c:03:87:63: ff:f5:fe:f3:cd:40:b6:1c:41:50:ed:2f:b0:3a:85: 1e:ef:10:6d:34:4a:53:4a:a3:69:dd:24:1c:af:f1: b0:cd:87:43:b5:60:fa:b6:b9:fd:59:cf:16:b3:5f: f0:4e:d1:ed:b6:52:73:e4:f9:8e:59:96:c4:e3:e1: e3:9f:80:57:80:33:43:38:54:11:34:b9:2c:7f:95: be:ee:6a:4a:68:55:9c:ee:08:3c:0c:ed:e6:e0:be: 06:9c:bf:68:24:23:08:2e:99:27:21:5c:f2:45:3f: a2:cf:3a:34:bb:97:28:64:3d:bc:eb:f0:de:74:d3: 0a:d4:ef:e7:e3:e4:87:60:ef:bf:36:09:6c:4c:0d: d3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:F6:33:B0:77:FA:31:1E:E4:C4:FB:11:40:B8:AF:70:4C:87:3C:6A X509v3 Authority Key Identifier: keyid:39:D0:9B:4A:53:60:80:82:05:A9:D6:91:47:19:E0:B9:89:CF:56:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdCbSlNggIIFqdaRRxnguYnPVgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:84:ad:c2:28:d9:74:4c:86:63:1f:00:ef:71:ad:86:5d:b4: fd:2b:93:3f:a6:b7:3c:98:f0:e0:26:8b:df:68:89:38:de:2f: 4f:86:e1:cd:20:f7:d6:42:9a:0a:21:2e:e4:3d:88:69:08:f9: af:53:4e:50:cd:58:e5:55:c7:c7:3b:f0:02:df:23:7f:f3:75: 3e:21:f2:e6:58:df:11:87:cf:9f:9f:e5:1d:00:4c:45:2c:a6: 4f:1a:0f:c6:5d:42:2e:d0:6e:5d:b2:e6:f9:eb:14:a5:48:42: f8:1f:3c:c8:50:37:06:72:14:e2:46:b9:d6:29:ce:8a:58:9c: 87:f7:62:37:c7:b5:47:e5:7e:f5:b1:a9:be:34:1b:ee:0b:15: f2:20:e9:d1:c1:3a:1d:67:dc:a6:ce:86:69:38:ce:a5:e2:75: da:33:f0:24:a9:55:d8:53:08:7d:f0:0e:3d:c9:f3:0e:90:d1: 3f:a6:58:d9:8a:9e:2f:a1:4b:f4:7f:ee:1a:fe:37:2f:5d:0a: de:6c:82:06:45:2e:f9:99:74:33:cd:1d:52:a7:2a:78:24:06: 0d:09:b3:95:20:e3:1b:4b:4d:ac:bd:e9:83:3c:9c:11:a4:08: aa:71:ea:d7:ed:00:41:be:f6:d8:80:95:e3:5d:d2:2e:49:37: 70:db:58:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF7UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRDRjAxMTAvBgNVBAUTKDM5RDA5QjRBNTM2MDgwODIwNUE5RDY5MTQ3MTlFMEI5 ODlDRjU2MEIwHhcNMjUwODA0MTY0NDE5WhcNMjUwODExMTY0NDE5WjAYMRYwFAYD VQQDEw02ODkwZTM2My03MDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5cKG6wY7EMvysvf/6+QCqvTZtYo78SkTPhf4CJGj32sjdNt3tWCBEbPdwrue Ceu6cSyLNAU2tGHwTSBM48v3lluAgdVOoLZDb40bYWdLyjNxTeLjRl1T8deizFZp hNtA2Ibi8WkkvEi+cMAHf8Nczuv7VhwDh2P/9f7zzUC2HEFQ7S+wOoUe7xBtNEpT SqNp3SQcr/GwzYdDtWD6trn9Wc8Ws1/wTtHttlJz5PmOWZbE4+Hjn4BXgDNDOFQR NLksf5W+7mpKaFWc7gg8DO3m4L4GnL9oJCMILpknIVzyRT+izzo0u5coZD286/De dNMK1O/n4+SHYO+/NglsTA3TNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJL2M7B3 +jEe5MT7EUC4r3BMhzxqMB8GA1UdIwQYMBaAFDnQm0pTYICCBanWkUcZ4LmJz1YL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRENGMC8zMTI3QjAxOENF QUUxMUU3ODk3ODQ4MjVDNEY5QUUwMi9PZENiU2xOZ2dJSUZxZGFSUnhuZ3VZblBW Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09kQ2JTbE5nZ0lJRnFkYVJSeG5ndVluUFZncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RENGMC8zMTI3QjAxOENFQUUxMUU3ODk3ODQ4MjVDNEY5QUUwMi9PZENiU2xOZ2dJ SUZxZGFSUnhuZ3VZblBWZ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnhK3CKNl0TIZjHwDvca2GXbT9K5M/prc8mPDgJovfaIk43i9PhuHN IPfWQpoKIS7kPYhpCPmvU05QzVjlVcfHO/AC3yN/83U+IfLmWN8Rh8+fn+UdAExF LKZPGg/GXUIu0G5dsub56xSlSEL4HzzIUDcGchTiRrnWKc6KWJyH92I3x7VH5X71 sam+NBvuCxXyIOnRwTodZ9ymzoZpOM6l4nXaM/AkqVXYUwh98A49yfMOkNE/pljZ ip4voUv0f+4a/jcvXQrebIIGRS75mXQzzR1Spyp4JAYNCbOVIOMbS02svemDPJwR pAiqcerX7QBBvvbYgJXjXdIuSTdw21gF -----END CERTIFICATE-----Generated at Wed Aug 6 13:17:21 2025 by rpki-client