$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.mft File: ooradhG9_Q-tuB2KgDoRCZAPd4A.mft (raw, json) Hash identifier: kFteHRyo/OPP8rq7vdBjUgQGHrIlO4RsI4HCbTRM5o4= Subject key identifier: 32:9E:E1:08:86:39:ED:1F:86:92:E1:8F:DD:B3:2D:B5:7D:62:B7:F3 Authority key identifier: A2:8A:DA:76:11:BD:FD:0F:AD:B8:1D:8A:80:3A:11:09:90:0F:77:80 Certificate issuer: /CN=A91FBFC9/serialNumber=A28ADA7611BDFD0FADB81D8A803A1109900F7780 Certificate serial: 0826 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ooradhG9_Q-tuB2KgDoRCZAPd4A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.mft Manifest number: 081A Signing time: Sun 20 Jul 2025 20:57:47 +0000 Manifest this update: Sun 20 Jul 2025 20:57:47 +0000 Manifest next update: Sun 27 Jul 2025 20:57:47 +0000 Files and hashes: 1: ooradhG9_Q-tuB2KgDoRCZAPd4A.crl (hash: SqGapQZglqM+5nTMAalUge2qhK/z4d/MDEywtsTnexQ=) 2: 76A59020E12911EAB8642E19C4F9AE02.roa (hash: 7SJtSkXKrhgxiJ/u+ScdWT/CZ8bW5ltRvm0xbyH8/2Q=) 3: B019C596499E11EBA61D7146C4F9AE02.roa (hash: 9WsPzCvsd/JuejjAiVSpINcZRZVtqlKA7kdOF+8fdUE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.crl rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ooradhG9_Q-tuB2KgDoRCZAPd4A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 20:57:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2086 (0x826) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBFC9, serialNumber=A28ADA7611BDFD0FADB81D8A803A1109900F7780 Validity Not Before: Jul 20 20:57:47 2025 GMT Not After : Jul 27 20:57:47 2025 GMT Subject: CN=687d584b-2545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d6:85:a8:ff:cb:85:67:38:dd:9c:b3:46:33: d5:21:a2:6f:19:ce:9b:f2:36:14:60:1f:16:44:db: ec:a0:1b:6b:e2:3c:b8:f4:53:29:a4:b7:c0:11:21: da:78:ef:b4:e6:0d:72:d2:42:87:ba:2f:e0:5c:93: bd:70:a0:80:2d:0e:59:bf:0e:16:a0:9f:f5:70:ce: 8a:64:eb:3c:c0:f0:f1:5b:24:4e:13:12:23:3a:44: 57:11:6b:e7:3f:bc:a4:45:65:95:43:7f:75:b1:04: c1:a2:5b:1a:fc:a5:d4:3d:18:c7:cf:8c:d7:e3:b8: 3e:eb:ab:3c:70:e7:18:35:31:2b:ff:66:75:58:e8: af:dd:78:92:5b:d5:c8:dc:a1:ba:d2:66:0a:c6:aa: aa:51:e8:a7:36:a0:10:00:5c:4b:47:61:7d:dc:7b: 22:aa:a8:79:90:3e:ee:bc:55:ef:56:04:24:f6:ab: b0:de:d8:73:e1:7b:e0:b5:c8:15:88:fd:77:61:5b: e7:b0:01:80:f4:a5:86:ea:c2:38:24:ac:e4:ec:eb: c9:a7:c1:9e:83:7b:bb:df:90:ad:57:44:b2:93:78: a4:25:4c:11:40:5b:7e:61:ac:6b:24:7b:6c:24:c0: 94:a2:d6:6d:6a:18:29:2f:71:3e:85:89:e7:6d:61: 90:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:9E:E1:08:86:39:ED:1F:86:92:E1:8F:DD:B3:2D:B5:7D:62:B7:F3 X509v3 Authority Key Identifier: keyid:A2:8A:DA:76:11:BD:FD:0F:AD:B8:1D:8A:80:3A:11:09:90:0F:77:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ooradhG9_Q-tuB2KgDoRCZAPd4A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:f7:92:5c:1a:eb:91:8f:37:fa:b0:24:bf:c6:e4:74:c1:22: 62:88:19:c3:58:c3:6b:04:7b:f2:ed:a2:57:2c:98:69:20:c0: fb:2f:38:62:aa:b3:27:fc:08:dc:1b:95:b6:09:34:b7:de:fb: ac:7e:03:68:c0:c0:b2:d1:72:a1:c0:0e:cf:da:8d:b9:01:b7: 5f:3f:90:be:ee:3d:7e:0a:c4:9d:16:39:b9:e0:63:4f:fe:9b: a6:f6:bb:12:64:f2:54:0a:54:84:66:eb:09:a1:e8:37:f7:2a: 22:cd:a7:ac:e6:cd:33:62:3b:e0:c4:4d:b1:5c:99:60:6c:25: 9a:13:15:99:f4:24:86:a5:84:75:07:fd:b9:aa:84:c0:50:c5: f3:97:5c:31:79:07:07:c1:de:da:ab:28:23:3c:87:cd:2a:4b: 56:8e:97:82:ce:42:02:ec:51:c6:29:3f:3b:80:9c:1c:f2:c7: 9d:1d:e9:49:51:81:98:b6:b2:ca:09:51:fa:4e:16:cd:f4:e3: 00:cc:7d:bf:bf:b3:65:14:f9:be:96:de:87:9c:49:59:08:53: 34:5f:ea:94:5f:84:0b:f9:e6:b1:44:68:b2:04:6c:8a:11:a8: 7a:5e:8f:47:3f:cb:49:7b:38:a6:4d:ea:a3:b2:70:12:1b:55: c8:c9:14:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJGQzkxMTAvBgNVBAUTKEEyOEFEQTc2MTFCREZEMEZBREI4MUQ4QTgwM0ExMTA5 OTAwRjc3ODAwHhcNMjUwNzIwMjA1NzQ3WhcNMjUwNzI3MjA1NzQ3WjAYMRYwFAYD VQQDEw02ODdkNTg0Yi0yNTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAltaFqP/LhWc43ZyzRjPVIaJvGc6b8jYUYB8WRNvsoBtr4jy49FMppLfAESHa eO+05g1y0kKHui/gXJO9cKCALQ5Zvw4WoJ/1cM6KZOs8wPDxWyROExIjOkRXEWvn P7ykRWWVQ391sQTBolsa/KXUPRjHz4zX47g+66s8cOcYNTEr/2Z1WOiv3XiSW9XI 3KG60mYKxqqqUeinNqAQAFxLR2F93Hsiqqh5kD7uvFXvVgQk9quw3thz4XvgtcgV iP13YVvnsAGA9KWG6sI4JKzk7OvJp8Geg3u735CtV0Syk3ikJUwRQFt+YaxrJHts JMCUotZtahgpL3E+hYnnbWGQsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDKe4QiG Oe0fhpLhj92zLbV9YrfzMB8GA1UdIwQYMBaAFKKK2nYRvf0PrbgdioA6EQmQD3eA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkZDOS9CMzdGNjUyMkUx MjcxMUVBOEVBQTIxMTZDNEY5QUUwMi9vb3JhZGhHOV9RLXR1QjJLZ0RvUkNaQVBk NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29vcmFkaEc5X1EtdHVCMktnRG9SQ1pBUGQ0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkZDOS9CMzdGNjUyMkUxMjcxMUVBOEVBQTIxMTZDNEY5QUUwMi9vb3JhZGhHOV9R LXR1QjJLZ0RvUkNaQVBkNEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBb95JcGuuRjzf6sCS/xuR0wSJiiBnDWMNrBHvy7aJXLJhpIMD7Lzhi qrMn/AjcG5W2CTS33vusfgNowMCy0XKhwA7P2o25AbdfP5C+7j1+CsSdFjm54GNP /pum9rsSZPJUClSEZusJoeg39yoizaes5s0zYjvgxE2xXJlgbCWaExWZ9CSGpYR1 B/25qoTAUMXzl1wxeQcHwd7aqygjPIfNKktWjpeCzkIC7FHGKT87gJwc8sedHelJ UYGYtrLKCVH6ThbN9OMAzH2/v7NlFPm+lt6HnElZCFM0X+qUX4QL+eaxRGiyBGyK Eah6Xo9HP8tJezimTeqjsnASG1XIyRSn -----END CERTIFICATE-----Generated at Mon Jul 21 06:55:13 2025 by rpki-client