$ rpki-client -vvf rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft File: U-OPHbJadp7S9ONa2_fqxILGEaU.mft (raw, json) Hash identifier: 18Sorb3oe3cABNkMZ6nZQ4OEcOxweGLJavJchpb1Lg8= Subject key identifier: DF:A8:60:40:36:F4:AC:FD:D5:2B:EC:65:59:7A:D5:8A:DC:EC:02:3F Authority key identifier: 53:E3:8F:1D:B2:5A:76:9E:D2:F4:E3:5A:DB:F7:EA:C4:82:C6:11:A5 Certificate issuer: /CN=A91449DF/serialNumber=53E38F1DB25A769ED2F4E35ADBF7EAC482C611A5 Certificate serial: 0809 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-OPHbJadp7S9ONa2_fqxILGEaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft Manifest number: 07FC Signing time: Sun 24 Aug 2025 21:03:23 +0000 Manifest this update: Sun 24 Aug 2025 21:03:22 +0000 Manifest next update: Sun 31 Aug 2025 21:03:22 +0000 Files and hashes: 1: U-OPHbJadp7S9ONa2_fqxILGEaU.crl (hash: inuzsU+EqZbDLF1FPoUd9YNaR+aH9RAC990Vj/aDEfc=) 2: E5ADB5CAF73A11EAB074A016C4F9AE02.roa (hash: dLHVUNtLIV41+zRNY3QMkvAZyxZkYsTbNoR5dSniJzY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.crl rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-OPHbJadp7S9ONa2_fqxILGEaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 19:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2057 (0x809) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91449DF, serialNumber=53E38F1DB25A769ED2F4E35ADBF7EAC482C611A5 Validity Not Before: Aug 24 21:03:22 2025 GMT Not After : Aug 31 21:03:22 2025 GMT Subject: CN=68ab7e1a-6a1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:68:7c:5b:d8:42:33:5b:53:9f:c7:1e:95:c1: 62:37:23:11:58:19:64:a1:3d:ab:cc:2d:59:47:04: dd:61:89:37:ea:c4:bd:44:77:fb:5d:47:a8:30:88: f4:ca:bf:3d:64:a9:75:03:4f:78:90:de:38:e7:78: 61:0c:a0:2f:2f:31:8e:c1:cd:4f:bd:e7:26:8e:49: 3b:73:34:3c:32:68:4c:95:6a:41:7f:29:74:cb:ef: db:34:7f:cb:c5:42:bd:b8:7b:a5:a9:aa:1a:73:09: 59:f0:31:70:74:6f:53:65:c3:58:1c:44:c1:2f:98: 54:2c:d0:61:f5:2a:0c:19:8f:5c:df:1c:da:e4:c5: dd:31:c4:a7:71:ca:8f:d0:fe:6c:4c:90:1e:eb:e2: 0d:38:84:cb:41:a9:1a:cf:96:dd:b6:d1:2e:25:f3: 2e:99:c9:b3:00:79:6b:e2:cc:18:51:0c:7e:13:d3: 9c:8a:2d:17:83:e2:be:39:fc:34:13:46:3a:9e:d7: 8e:e3:e5:a6:12:fb:09:bc:25:41:51:0a:24:6a:0d: 7a:04:a3:17:bb:38:28:b6:b6:d4:59:86:27:d5:b0: 44:82:11:d6:45:64:e6:01:ff:1c:37:e8:26:2b:13: 5b:9e:da:fa:ae:60:74:da:85:9d:93:86:be:2a:7b: 13:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:A8:60:40:36:F4:AC:FD:D5:2B:EC:65:59:7A:D5:8A:DC:EC:02:3F X509v3 Authority Key Identifier: keyid:53:E3:8F:1D:B2:5A:76:9E:D2:F4:E3:5A:DB:F7:EA:C4:82:C6:11:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-OPHbJadp7S9ONa2_fqxILGEaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:6e:4b:e9:d5:23:af:ad:a7:5c:73:7b:87:11:19:bf:8b:36: 03:07:19:7f:6b:f0:44:ae:93:0f:d2:1d:3a:73:25:76:0c:5d: 61:22:d7:33:8a:d7:c9:8d:86:d6:91:bf:f9:c9:74:1d:8d:14: e2:50:48:98:8e:21:7d:ff:93:fa:74:b5:79:3f:10:e6:c0:9a: 1c:57:b1:e0:e1:80:b9:e9:99:df:42:62:d1:fc:dd:e0:dd:53: ed:d8:d5:f5:e0:89:eb:f0:62:63:66:8a:94:8d:cf:19:88:88: 7e:6e:95:7b:49:65:a5:2b:81:34:7a:79:c7:06:a9:58:c2:28: 7f:03:99:1d:42:86:de:bd:e1:bd:ae:13:71:cb:12:2c:af:83: 1c:cc:8c:51:fc:59:6f:e6:23:02:99:3e:3d:f1:e2:24:2b:32: d4:4b:93:25:ef:c8:17:f7:db:1b:e5:da:74:57:d3:e1:c4:64: f9:52:e3:c9:e3:a9:1d:5c:4f:2d:89:9f:8a:c7:49:5c:2a:1b: be:1d:d0:c9:35:4e:fe:e5:96:83:d4:07:40:45:a6:2a:17:15: ff:17:a5:cc:56:95:0e:ab:af:ae:c8:b8:d0:b9:ca:75:f8:b9: 83:5d:f9:9a:18:02:2e:5e:b2:7b:0a:b3:35:72:19:6a:a1:e5: 12:d4:83:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ5REYxMTAvBgNVBAUTKDUzRTM4RjFEQjI1QTc2OUVEMkY0RTM1QURCRjdFQUM0 ODJDNjExQTUwHhcNMjUwODI0MjEwMzIyWhcNMjUwODMxMjEwMzIyWjAYMRYwFAYD VQQDEw02OGFiN2UxYS02YTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr2h8W9hCM1tTn8celcFiNyMRWBlkoT2rzC1ZRwTdYYk36sS9RHf7XUeoMIj0 yr89ZKl1A094kN4453hhDKAvLzGOwc1Pvecmjkk7czQ8MmhMlWpBfyl0y+/bNH/L xUK9uHulqaoacwlZ8DFwdG9TZcNYHETBL5hULNBh9SoMGY9c3xza5MXdMcSnccqP 0P5sTJAe6+INOITLQakaz5bdttEuJfMumcmzAHlr4swYUQx+E9Ocii0Xg+K+Ofw0 E0Y6nteO4+WmEvsJvCVBUQokag16BKMXuzgotrbUWYYn1bBEghHWRWTmAf8cN+gm KxNbntr6rmB02oWdk4a+KnsTsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN+oYEA2 9Kz91SvsZVl61Yrc7AI/MB8GA1UdIwQYMBaAFFPjjx2yWnae0vTjWtv36sSCxhGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDlERi8wNEI3Q0Y3NEY3 M0ExMUVBODE1QTEzMTZDNEY5QUUwMi9VLU9QSGJKYWRwN1M5T05hMl9mcXhJTEdF YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UtT1BIYkphZHA3UzlPTmEyX2ZxeElMR0VhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDlERi8wNEI3Q0Y3NEY3M0ExMUVBODE1QTEzMTZDNEY5QUUwMi9VLU9QSGJKYWRw N1M5T05hMl9mcXhJTEdFYVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASbkvp1SOvradcc3uHERm/izYDBxl/a/BErpMP0h06cyV2DF1hItcz itfJjYbWkb/5yXQdjRTiUEiYjiF9/5P6dLV5PxDmwJocV7Hg4YC56ZnfQmLR/N3g 3VPt2NX14Inr8GJjZoqUjc8ZiIh+bpV7SWWlK4E0ennHBqlYwih/A5kdQobeveG9 rhNxyxIsr4MczIxR/Flv5iMCmT498eIkKzLUS5Ml78gX99sb5dp0V9PhxGT5UuPJ 46kdXE8tiZ+Kx0lcKhu+HdDJNU7+5ZaD1AdARaYqFxX/F6XMVpUOq6+uyLjQucp1 +LmDXfmaGAIuXrJ7CrM1chlqoeUS1IPL -----END CERTIFICATE-----Generated at Sun Aug 24 22:18:38 2025 by rpki-client