$ rpki-client -vvf rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft File: OoeHHjuuZe3i8xuxrVxZu3p0q90.mft (raw, json) Hash identifier: lR17tfMJ91zwDNDWqP03M/8vSJO7S6Ws9SENdQomXxQ= Subject key identifier: 70:55:1B:A9:92:B2:A7:FF:00:E4:31:D8:36:46:B0:CB:ED:83:36:5B Authority key identifier: 3A:87:87:1E:3B:AE:65:ED:E2:F3:1B:B1:AD:5C:59:BB:7A:74:AB:DD Certificate issuer: /CN=A91B87FC/serialNumber=3A87871E3BAE65EDE2F31BB1AD5C59BB7A74ABDD Certificate serial: B4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft Manifest number: AF Signing time: Fri 05 Sep 2025 06:34:55 +0000 Manifest this update: Fri 05 Sep 2025 06:34:54 +0000 Manifest next update: Fri 12 Sep 2025 06:34:54 +0000 Files and hashes: 1: OoeHHjuuZe3i8xuxrVxZu3p0q90.crl (hash: W7wh7n+9qnfRUiusyUAMvm1zYYyJitzYLdjwRb50vnU=) 2: 5E85AD042B1B11F0AE3E223BC4F9AE02.roa (hash: q2PsmBaPUlGvEput/dvI1P9mbtnk1siucrhRcpQcM5A=) 3: 64517A3886E311EFA2B33527C4F9AE02.roa (hash: jJmFWeK8DxzcyCmNzQTOimZpBnvjDB61t5aPUy56grE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.crl rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 06:34:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 180 (0xb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B87FC, serialNumber=3A87871E3BAE65EDE2F31BB1AD5C59BB7A74ABDD Validity Not Before: Sep 5 06:34:54 2025 GMT Not After : Sep 12 06:34:54 2025 GMT Subject: CN=68ba848e-3953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:77:59:8f:aa:19:81:c2:e1:45:6e:ae:12:8f: 49:4b:22:5e:8e:64:12:86:87:9b:42:e7:26:66:05: 0f:5d:e6:b8:3d:29:13:1d:2f:3d:69:89:48:c4:d7: 0f:ec:33:14:ab:2b:63:6c:a9:60:0f:95:a0:5d:11: ea:40:c7:b2:ae:18:3f:dc:6d:27:9d:be:9a:3f:84: eb:c6:c5:81:6c:9e:3b:94:b1:eb:b1:f9:4c:5c:fc: 6c:62:9b:d3:ec:f4:4a:e0:99:b6:66:a9:1c:5e:df: 03:45:3b:12:79:6d:2e:8e:e2:47:72:59:3b:fd:b9: bb:cc:e8:61:5e:ec:b2:81:7e:1a:56:6a:4e:1a:fa: 71:b3:6e:e2:84:d3:a5:e7:9c:51:a6:48:b5:16:0d: 3d:3f:9b:f4:f3:05:71:07:be:c0:1f:2d:77:3e:2d: 7b:26:ec:61:3d:e6:e3:ca:a4:3b:4f:e4:f7:16:87: f9:11:56:84:b6:f8:7b:a5:da:57:d9:df:0f:a6:ed: 53:91:2d:22:12:af:47:b3:89:b3:18:8a:3a:76:80: ac:fa:a8:5a:1e:a6:42:7f:69:11:03:d2:ee:70:ef: b0:55:4e:48:37:e3:53:12:1a:e2:76:66:7e:6a:e9: 1d:58:1e:5a:e8:e2:1b:0b:91:ed:1a:a6:1c:cd:04: 0c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:55:1B:A9:92:B2:A7:FF:00:E4:31:D8:36:46:B0:CB:ED:83:36:5B X509v3 Authority Key Identifier: keyid:3A:87:87:1E:3B:AE:65:ED:E2:F3:1B:B1:AD:5C:59:BB:7A:74:AB:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:4c:29:cc:01:eb:eb:a3:50:97:32:2a:f0:6e:01:3a:9f:3d: c4:8d:ba:4a:26:7a:d0:24:f0:ec:82:44:55:d9:07:7c:e2:6c: 54:3f:c3:47:86:41:00:e7:0a:61:61:2c:86:8b:74:da:75:cd: 9d:3e:42:a1:9b:88:69:1a:d1:c0:c5:5c:77:79:d2:24:b8:a4: 19:8d:fc:4d:de:35:74:2a:6b:64:31:8d:9d:a6:af:d2:e5:39: e5:73:6f:29:d6:67:f5:07:69:b6:aa:33:ed:66:93:01:8b:f9: 4c:35:fa:c7:80:40:9e:23:aa:b2:10:50:ee:e8:b8:be:d0:ea: d4:19:b1:0d:75:b1:77:89:75:4d:32:bf:87:48:c8:26:9b:fc: 4a:3f:72:72:2b:df:78:de:53:23:7c:b2:65:bb:1d:5d:50:56: 87:de:e4:23:eb:7b:cf:85:09:60:f3:be:cf:d5:c1:5c:27:68: ea:ec:fb:a7:f4:60:49:16:4c:0c:53:0b:85:b5:d5:37:a5:b5: 25:cc:13:93:7b:3c:85:07:96:46:1c:d0:70:cf:4d:bb:fa:ec: ce:01:8f:e1:ed:8a:d9:97:00:30:7e:f6:84:14:c6:63:a3:44: 96:e9:c7:24:dc:39:32:a0:bf:28:c9:b8:c6:0c:f0:2f:4f:af: c9:bf:3a:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg3RkMxMTAvBgNVBAUTKDNBODc4NzFFM0JBRTY1RURFMkYzMUJCMUFENUM1OUJC N0E3NEFCREQwHhcNMjUwOTA1MDYzNDU0WhcNMjUwOTEyMDYzNDU0WjAYMRYwFAYD VQQDEw02OGJhODQ4ZS0zOTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtHdZj6oZgcLhRW6uEo9JSyJejmQShoebQucmZgUPXea4PSkTHS89aYlIxNcP 7DMUqytjbKlgD5WgXRHqQMeyrhg/3G0nnb6aP4TrxsWBbJ47lLHrsflMXPxsYpvT 7PRK4Jm2ZqkcXt8DRTsSeW0ujuJHclk7/bm7zOhhXuyygX4aVmpOGvpxs27ihNOl 55xRpki1Fg09P5v08wVxB77AHy13Pi17JuxhPebjyqQ7T+T3Fof5EVaEtvh7pdpX 2d8Ppu1TkS0iEq9Hs4mzGIo6doCs+qhaHqZCf2kRA9LucO+wVU5IN+NTEhridmZ+ aukdWB5a6OIbC5HtGqYczQQMZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHBVG6mS sqf/AOQx2DZGsMvtgzZbMB8GA1UdIwQYMBaAFDqHhx47rmXt4vMbsa1cWbt6dKvd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODdGQy8zOTc4RTMxNjg2 RTExMUVGOEY3NzNGODJDNEY5QUUwMi9Pb2VISGp1dVplM2k4eHV4clZ4WnUzcDBx OTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09vZUhIanV1WmUzaTh4dXhyVnhadTNwMHE5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODdGQy8zOTc4RTMxNjg2RTExMUVGOEY3NzNGODJDNEY5QUUwMi9Pb2VISGp1dVpl M2k4eHV4clZ4WnUzcDBxOTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDSTCnMAevro1CXMirwbgE6nz3EjbpKJnrQJPDsgkRV2Qd84mxUP8NH hkEA5wphYSyGi3Tadc2dPkKhm4hpGtHAxVx3edIkuKQZjfxN3jV0KmtkMY2dpq/S 5Tnlc28p1mf1B2m2qjPtZpMBi/lMNfrHgECeI6qyEFDu6Li+0OrUGbENdbF3iXVN Mr+HSMgmm/xKP3JyK9943lMjfLJlux1dUFaH3uQj63vPhQlg877P1cFcJ2jq7Pun 9GBJFkwMUwuFtdU3pbUlzBOTezyFB5ZGHNBwz027+uzOAY/h7YrZlwAwfvaEFMZj o0SW6cck3DkyoL8oybjGDPAvT6/Jvzod -----END CERTIFICATE-----Generated at Sat Sep 6 21:09:06 2025 by rpki-client