$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft File: A-8OOQoxXl88RhsKcrIYvuIj4A4.mft (raw, json) Hash identifier: pASEWhzlgb+/k0e79E/zVkTGgQLSl8w84DF9f4CWXSo= Subject key identifier: 08:DA:35:0E:B2:6B:05:32:31:47:C6:7C:A0:46:63:BE:F9:B3:87:B7 Authority key identifier: 03:EF:0E:39:0A:31:5E:5F:3C:46:1B:0A:72:B2:18:BE:E2:23:E0:0E Certificate issuer: /CN=A91A0FC0/serialNumber=03EF0E390A315E5F3C461B0A72B218BEE223E00E Certificate serial: E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A-8OOQoxXl88RhsKcrIYvuIj4A4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft Manifest number: 04A5 Signing time: Mon 21 Jul 2025 00:53:40 +0000 Manifest this update: Mon 21 Jul 2025 00:53:39 +0000 Manifest next update: Mon 28 Jul 2025 00:53:39 +0000 Files and hashes: 1: A-8OOQoxXl88RhsKcrIYvuIj4A4.crl (hash: U8Pw4b6IcB1lEb6rqJgdmHGuQj9YGuZLJvlHu/jpzMg=) 2: 9190CF9E2E7811EFB7206224C4F9AE02.roa (hash: h88YKkcazjRoHLRQFSfgpu+Eo1A4vft9VL2aQVc7RoU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.crl rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A-8OOQoxXl88RhsKcrIYvuIj4A4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 00:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0FC0, serialNumber=03EF0E390A315E5F3C461B0A72B218BEE223E00E Validity Not Before: Jul 21 00:53:39 2025 GMT Not After : Jul 28 00:53:39 2025 GMT Subject: CN=687d8f94-dec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a2:5f:1a:2a:15:38:50:67:f6:63:05:ff:a6: a6:82:16:d4:ac:77:b0:ea:4c:78:7e:aa:97:20:69: 39:40:c5:38:39:78:cf:26:9a:5f:8f:61:1e:fe:01: 65:ae:a6:cf:bd:b3:5a:8b:9b:40:d2:1e:89:b5:7d: ce:86:81:dc:ee:48:71:e4:11:b2:81:72:9c:54:4a: 93:1b:4d:06:c3:d6:ee:52:eb:d5:ff:2e:d6:b1:0b: fb:72:f5:30:5e:5a:e3:1e:e1:02:4a:48:8a:bd:a1: d9:1b:53:ea:1b:73:73:29:68:61:d8:cf:7f:a7:a0: da:5b:10:7e:c7:d0:d6:c7:82:03:23:3a:f2:bd:a8: 64:be:85:5b:8f:00:19:07:e3:74:78:c2:28:4b:5a: 62:96:ac:f0:f5:1a:54:df:d0:05:7f:08:a8:a0:5e: 42:eb:6f:81:2c:09:9b:1f:7b:de:d7:4b:8d:6f:65: 5e:aa:10:51:16:b8:74:4e:ca:26:a1:df:43:d3:9a: 61:ad:c3:52:ca:89:be:02:bc:d6:c5:bb:c3:87:79: 7b:b9:11:fb:c7:64:83:69:fd:48:1e:2d:b0:e9:25: 09:66:f1:51:ce:d4:b7:06:09:8e:56:77:5d:8b:d7: 47:1c:5c:02:33:5d:56:bf:8e:99:c5:4b:e6:3e:73: f7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:DA:35:0E:B2:6B:05:32:31:47:C6:7C:A0:46:63:BE:F9:B3:87:B7 X509v3 Authority Key Identifier: keyid:03:EF:0E:39:0A:31:5E:5F:3C:46:1B:0A:72:B2:18:BE:E2:23:E0:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A-8OOQoxXl88RhsKcrIYvuIj4A4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:71:d3:b0:b1:f4:22:a7:80:d2:8a:b3:a8:b1:e5:4b:ba:eb: 97:3c:23:9a:c8:82:3b:f7:8e:cc:12:e1:6b:bf:7d:d0:3d:6e: 1b:08:f3:cf:de:71:6f:d2:24:1b:20:85:5b:9a:e1:f3:75:82: 71:58:60:d1:40:b7:a0:14:43:a9:a0:d0:ed:90:6f:a9:37:aa: 9e:fc:ad:16:95:c8:37:8a:89:55:ca:73:b7:a1:56:bb:b6:9b: 5a:15:44:7c:10:3e:8e:aa:c5:af:ed:56:e0:da:0f:40:b9:70: 3b:f5:2c:5c:e1:4f:67:b3:f7:b6:87:c4:2e:ca:6d:e1:69:bd: c1:55:5a:b2:b9:f3:e4:f0:90:24:c5:c2:0a:81:62:69:0a:f6: e8:b3:f9:65:9a:e2:20:79:f1:c9:54:07:9e:32:37:0f:5c:33: d4:de:39:b0:83:23:50:1c:39:df:6a:eb:91:ee:15:34:ad:2d: 54:c8:e9:28:30:be:a6:7e:9d:71:bd:94:18:98:13:17:23:ac: ef:3c:98:8c:b5:46:9f:16:7f:93:ba:7d:75:a1:ea:98:bb:85: 18:26:4e:be:c2:a8:2a:61:81:e1:35:a4:ee:a3:09:5d:3d:4f: 59:9f:8b:5c:04:d6:b6:66:31:0e:8f:35:82:94:a7:ab:ee:0f: 89:63:d6:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBGQzAxMTAvBgNVBAUTKDAzRUYwRTM5MEEzMTVFNUYzQzQ2MUIwQTcyQjIxOEJF RTIyM0UwMEUwHhcNMjUwNzIxMDA1MzM5WhcNMjUwNzI4MDA1MzM5WjAYMRYwFAYD VQQDEw02ODdkOGY5NC1kZWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv6JfGioVOFBn9mMF/6amghbUrHew6kx4fqqXIGk5QMU4OXjPJppfj2Ee/gFl rqbPvbNai5tA0h6JtX3OhoHc7khx5BGygXKcVEqTG00Gw9buUuvV/y7WsQv7cvUw XlrjHuECSkiKvaHZG1PqG3NzKWhh2M9/p6DaWxB+x9DWx4IDIzryvahkvoVbjwAZ B+N0eMIoS1pilqzw9RpU39AFfwiooF5C62+BLAmbH3ve10uNb2VeqhBRFrh0Tsom od9D05phrcNSyom+ArzWxbvDh3l7uRH7x2SDaf1IHi2w6SUJZvFRztS3BgmOVndd i9dHHFwCM11Wv46ZxUvmPnP3NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAjaNQ6y awUyMUfGfKBGY775s4e3MB8GA1UdIwQYMBaAFAPvDjkKMV5fPEYbCnKyGL7iI+AO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEZDMC9DREUwOTg3Njk1 NzgxMUVDQTMyQ0NGNTVDNEY5QUUwMi9BLThPT1FveFhsODhSaHNLY3JJWXZ1SWo0 QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EtOE9PUW94WGw4OFJoc0tjcklZdnVJajRBNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEZDMC9DREUwOTg3Njk1NzgxMUVDQTMyQ0NGNTVDNEY5QUUwMi9BLThPT1FveFhs ODhSaHNLY3JJWXZ1SWo0QTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBicdOwsfQip4DSirOoseVLuuuXPCOayII7947MEuFrv33QPW4bCPPP 3nFv0iQbIIVbmuHzdYJxWGDRQLegFEOpoNDtkG+pN6qe/K0Wlcg3iolVynO3oVa7 tptaFUR8ED6OqsWv7Vbg2g9AuXA79Sxc4U9ns/e2h8Quym3hab3BVVqyufPk8JAk xcIKgWJpCvbos/llmuIgefHJVAeeMjcPXDPU3jmwgyNQHDnfauuR7hU0rS1UyOko ML6mfp1xvZQYmBMXI6zvPJiMtUafFn+Tun11oeqYu4UYJk6+wqgqYYHhNaTuowld PU9Zn4tcBNa2ZjEOjzWClKer7g+JY9ae -----END CERTIFICATE-----Generated at Mon Jul 21 05:51:44 2025 by rpki-client