$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft File: cOo3wZMr00-ztIWaNIMaEOYR0PY.mft (raw, json) Hash identifier: Zy8eaI7LlRlr6tOy5PTRhAMrdxZzOEilPbbkFBBvgm4= Subject key identifier: 1A:08:E5:F3:82:7B:5B:12:2C:30:B0:D4:CF:6F:59:A7:2A:19:DC:67 Authority key identifier: 70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6 Certificate issuer: /CN=A91BA1BF/serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6 Certificate serial: 0148 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft Manifest number: 0144 Signing time: Sat 19 Jul 2025 04:31:01 +0000 Manifest this update: Sat 19 Jul 2025 04:31:01 +0000 Manifest next update: Sat 26 Jul 2025 04:31:01 +0000 Files and hashes: 1: cOo3wZMr00-ztIWaNIMaEOYR0PY.crl (hash: L13VEw/quYf1TFoiNfnJMyJSeTkgC0joeOqu7DTCBCs=) 2: BC630BAE84FC11EE9887345FC4F9AE02.roa (hash: E3DVtUK4PKLNRTNWPdaED3S506iNVROikAhxbftKIaQ=) 3: 7C58D40872CD11EE81C60650C4F9AE02.roa (hash: hhVy8VlS8PQRYDzu0z2SFqVi4xOaWLt/VFPzg2LCqTM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 328 (0x148) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA1BF, serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6 Validity Not Before: Jul 19 04:31:01 2025 GMT Not After : Jul 26 04:31:01 2025 GMT Subject: CN=687b1f85-972c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bb:85:d8:79:20:72:d2:d8:62:64:31:94:fe: e5:fb:d7:d6:5e:51:b3:5a:cd:91:41:e2:ea:74:dd: 77:7a:39:2c:b8:7f:77:16:0d:93:6f:7c:a1:5a:9e: c0:4a:6d:9f:43:68:79:3b:5c:8c:04:96:f2:89:5a: f2:e9:7b:c0:1b:47:f7:dd:58:f7:b4:12:5f:5e:9e: c1:c5:14:87:69:ed:84:9b:2d:74:db:b2:a2:ba:5e: ba:8e:10:df:44:44:89:4f:28:92:d4:ef:e8:b7:9b: cb:0e:4b:cd:5f:49:9a:6f:03:d8:7d:ff:52:43:8a: 60:7c:dc:35:fd:dd:61:8d:08:4c:55:d4:16:56:a1: 77:d8:9f:85:69:67:74:8d:f1:1b:44:95:b1:3e:0c: a3:e8:b7:77:9e:df:65:3b:96:44:8f:c5:38:ec:36: 77:32:88:7c:49:e8:d8:5e:df:c6:e9:80:2f:13:f8: 04:be:92:8e:be:b9:a0:ed:19:07:e0:fa:78:a5:06: cd:4d:19:c2:e1:11:6b:90:e8:30:2a:8f:1b:1a:fc: 1b:dd:0e:e7:64:1d:e2:ad:06:31:4b:16:00:35:49: 0e:39:29:b7:ab:fd:0a:87:5f:ea:dc:27:5f:cc:57: 67:82:b0:75:df:cd:fb:6e:e6:18:a1:f9:56:bf:88: 00:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:08:E5:F3:82:7B:5B:12:2C:30:B0:D4:CF:6F:59:A7:2A:19:DC:67 X509v3 Authority Key Identifier: keyid:70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:24:5e:61:43:df:c5:31:aa:5c:01:49:d0:02:0a:c9:72:5b: 2f:10:10:7f:97:a0:44:89:6c:32:9e:24:ea:77:b1:8b:1b:ef: 25:64:67:16:2b:f8:d0:58:f5:57:f7:6c:ea:18:13:45:c6:ec: 98:98:4b:d2:1f:84:ce:a3:43:4d:0c:5a:4e:8e:9b:90:e7:5c: ed:16:f2:50:94:95:c4:10:88:92:1a:c0:bc:f8:d4:b9:ea:c1: 48:a4:d2:c7:a6:95:f2:55:73:38:8f:c9:e9:b6:9b:80:9a:c7: fe:56:1b:48:76:0b:bf:67:f4:70:7a:2d:f5:fa:91:4e:2b:10: f0:2f:b9:ea:bc:f8:64:ea:99:02:94:51:70:2c:55:d8:e2:aa: 5a:39:9a:f5:d5:78:0d:4a:ca:dc:9e:7f:ed:1a:aa:50:6e:16: ea:85:7f:fb:c7:1c:d7:c6:d4:71:79:33:e8:3a:40:a4:0c:8e: fb:92:b6:77:d9:08:68:d5:a4:a0:8f:5e:9e:9c:d8:7b:8c:78: 51:1c:5c:59:90:25:1c:96:ce:42:3d:62:59:7e:9f:5e:9b:2b: 1f:89:0d:d5:6b:fc:80:0a:ab:31:ad:0c:a4:56:a8:4c:25:f6: 7e:c6:7e:f6:f1:6f:dd:b5:b0:90:24:5b:35:04:61:d8:e4:4e: 33:a4:57:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkExQkYxMTAvBgNVBAUTKDcwRUEzN0MxOTMyQkQzNEZCM0I0ODU5QTM0ODMxQTEw RTYxMUQwRjYwHhcNMjUwNzE5MDQzMTAxWhcNMjUwNzI2MDQzMTAxWjAYMRYwFAYD VQQDEw02ODdiMWY4NS05NzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvruF2HkgctLYYmQxlP7l+9fWXlGzWs2RQeLqdN13ejksuH93Fg2Tb3yhWp7A Sm2fQ2h5O1yMBJbyiVry6XvAG0f33Vj3tBJfXp7BxRSHae2Emy1027Kiul66jhDf RESJTyiS1O/ot5vLDkvNX0mabwPYff9SQ4pgfNw1/d1hjQhMVdQWVqF32J+FaWd0 jfEbRJWxPgyj6Ld3nt9lO5ZEj8U47DZ3Moh8SejYXt/G6YAvE/gEvpKOvrmg7RkH 4Pp4pQbNTRnC4RFrkOgwKo8bGvwb3Q7nZB3irQYxSxYANUkOOSm3q/0Kh1/q3Cdf zFdngrB13837buYYoflWv4gA9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBoI5fOC e1sSLDCw1M9vWacqGdxnMB8GA1UdIwQYMBaAFHDqN8GTK9NPs7SFmjSDGhDmEdD2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTFCRi84NEUxMEE0Mjcy Q0MxMUVFQjc5NDVBNERDNEY5QUUwMi9jT28zd1pNcjAwLXp0SVdhTklNYUVPWVIw UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NPbzN3Wk1yMDAtenRJV2FOSU1hRU9ZUjBQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTFCRi84NEUxMEE0MjcyQ0MxMUVFQjc5NDVBNERDNEY5QUUwMi9jT28zd1pNcjAw LXp0SVdhTklNYUVPWVIwUFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARJF5hQ9/FMapcAUnQAgrJclsvEBB/l6BEiWwyniTqd7GLG+8lZGcW K/jQWPVX92zqGBNFxuyYmEvSH4TOo0NNDFpOjpuQ51ztFvJQlJXEEIiSGsC8+NS5 6sFIpNLHppXyVXM4j8nptpuAmsf+VhtIdgu/Z/Rwei31+pFOKxDwL7nqvPhk6pkC lFFwLFXY4qpaOZr11XgNSsrcnn/tGqpQbhbqhX/7xxzXxtRxeTPoOkCkDI77krZ3 2Qho1aSgj16enNh7jHhRHFxZkCUcls5CPWJZfp9emysfiQ3Va/yACqsxrQykVqhM JfZ+xn728W/dtbCQJFs1BGHY5E4zpFd9 -----END CERTIFICATE-----Generated at Sun Jul 20 19:02:03 2025 by rpki-client