$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft File: cOo3wZMr00-ztIWaNIMaEOYR0PY.mft (raw, json) Hash identifier: Al6olDhTjVm1sd8RHrFemRQWdEPE5TuAI+i9kbghiTQ= Subject key identifier: 43:EE:A6:5A:A6:08:6F:55:9B:E8:D5:CF:CB:38:1B:67:76:C9:94:36 Authority key identifier: 70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6 Certificate issuer: /CN=A91BA1BF/serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6 Certificate serial: 0161 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft Manifest number: 015D Signing time: Fri 05 Sep 2025 04:23:52 +0000 Manifest this update: Fri 05 Sep 2025 04:23:52 +0000 Manifest next update: Fri 12 Sep 2025 04:23:52 +0000 Files and hashes: 1: cOo3wZMr00-ztIWaNIMaEOYR0PY.crl (hash: o2bRYmc3h+4D8D+Gpx6yDg4vR5KPFM/D/MqzS7pagqs=) 2: BC630BAE84FC11EE9887345FC4F9AE02.roa (hash: E3DVtUK4PKLNRTNWPdaED3S506iNVROikAhxbftKIaQ=) 3: 7C58D40872CD11EE81C60650C4F9AE02.roa (hash: hhVy8VlS8PQRYDzu0z2SFqVi4xOaWLt/VFPzg2LCqTM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 04:23:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA1BF, serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6 Validity Not Before: Sep 5 04:23:52 2025 GMT Not After : Sep 12 04:23:52 2025 GMT Subject: CN=68ba65d8-5857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:24:5e:1e:f4:bb:e5:11:1d:7a:37:10:88:5e: ae:4b:74:6d:28:c6:3e:39:b9:dd:c1:90:bb:c4:d5: d3:91:bf:f4:99:17:40:45:d9:e0:e8:cd:9e:01:bf: 2a:18:ff:6a:8f:ba:28:2b:f6:60:ef:55:26:f5:e3: 52:42:d4:0d:0f:05:1a:c9:f8:7f:9a:f4:c5:18:b8: 83:38:56:ee:0c:e2:34:29:c7:7c:10:01:33:e5:a5: 9e:b9:a3:85:46:16:f4:06:c7:30:79:a8:81:32:50: f4:02:8c:8b:1c:a3:d5:ac:8c:93:09:74:b8:ae:ae: 60:77:33:d0:81:6f:57:0c:35:04:36:a1:c6:8f:46: 9e:fa:81:f7:96:af:1b:82:d1:0e:19:cb:70:cf:e2: 53:c1:8d:66:6d:c7:0f:88:b8:84:2d:c8:2f:b7:ab: 07:e3:bd:34:60:7c:81:e8:92:bc:67:5d:63:4d:d0: e5:6d:a1:60:24:7c:53:a8:e4:f2:3d:09:0d:6d:1f: 60:fd:cb:e3:12:21:ae:78:fb:0f:a9:41:0c:11:df: 37:b8:61:3f:1f:2f:01:d2:f4:41:d5:8f:e3:c6:bd: 6b:eb:90:b6:b4:a0:58:3e:77:14:c7:4e:98:a4:97: 05:e4:bc:ad:84:ae:77:75:f4:05:62:87:a2:3d:06: f9:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:EE:A6:5A:A6:08:6F:55:9B:E8:D5:CF:CB:38:1B:67:76:C9:94:36 X509v3 Authority Key Identifier: keyid:70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:f1:92:09:91:46:3f:e4:0d:39:14:03:c8:23:2f:a7:6c:0d: 25:be:6f:53:b0:d4:2f:f7:17:92:e8:7f:5f:f0:f3:f1:98:6f: 6e:c0:dd:44:0b:b0:76:dd:c1:ee:44:1f:2e:2e:33:7a:40:b2: e8:13:6a:40:d8:99:82:79:1a:39:b6:1b:5c:42:e8:26:ff:33: ba:7e:84:c1:54:9e:ea:8d:be:54:86:3e:71:61:6c:ec:fe:76: 0f:ef:3e:e4:0c:6e:59:74:cb:53:4f:da:80:1c:90:e4:5a:aa: a1:27:b8:a3:03:60:33:9b:e5:37:97:74:10:ae:24:7b:7c:8f: a8:42:53:6f:d4:1c:f5:66:95:1f:b2:a9:95:1c:70:30:bb:be: 3d:ab:c3:7d:fe:05:da:32:b3:6a:69:21:98:a6:9f:5f:3c:30: 8e:a5:93:03:ae:08:c9:2a:6e:80:fa:85:b2:f8:61:26:d3:7c: ed:07:07:0c:6a:fd:5d:ec:06:bf:cd:89:e4:f5:51:08:4f:6f: c1:1e:33:78:a0:c4:67:23:c3:17:5f:e1:5b:83:0b:c2:cd:88: ec:8d:14:57:74:d7:e3:1a:c5:0e:07:fa:4d:de:10:90:5a:bb: e0:6e:96:44:b4:54:31:39:1b:b8:ff:69:43:a3:aa:e7:92:1d: a5:eb:04:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkExQkYxMTAvBgNVBAUTKDcwRUEzN0MxOTMyQkQzNEZCM0I0ODU5QTM0ODMxQTEw RTYxMUQwRjYwHhcNMjUwOTA1MDQyMzUyWhcNMjUwOTEyMDQyMzUyWjAYMRYwFAYD VQQDEw02OGJhNjVkOC01ODU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxCReHvS75REdejcQiF6uS3RtKMY+ObndwZC7xNXTkb/0mRdARdng6M2eAb8q GP9qj7ooK/Zg71Um9eNSQtQNDwUayfh/mvTFGLiDOFbuDOI0Kcd8EAEz5aWeuaOF Rhb0BscweaiBMlD0AoyLHKPVrIyTCXS4rq5gdzPQgW9XDDUENqHGj0ae+oH3lq8b gtEOGctwz+JTwY1mbccPiLiELcgvt6sH4700YHyB6JK8Z11jTdDlbaFgJHxTqOTy PQkNbR9g/cvjEiGuePsPqUEMEd83uGE/Hy8B0vRB1Y/jxr1r65C2tKBYPncUx06Y pJcF5LythK53dfQFYoeiPQb5awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEPuplqm CG9Vm+jVz8s4G2d2yZQ2MB8GA1UdIwQYMBaAFHDqN8GTK9NPs7SFmjSDGhDmEdD2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTFCRi84NEUxMEE0Mjcy Q0MxMUVFQjc5NDVBNERDNEY5QUUwMi9jT28zd1pNcjAwLXp0SVdhTklNYUVPWVIw UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NPbzN3Wk1yMDAtenRJV2FOSU1hRU9ZUjBQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTFCRi84NEUxMEE0MjcyQ0MxMUVFQjc5NDVBNERDNEY5QUUwMi9jT28zd1pNcjAw LXp0SVdhTklNYUVPWVIwUFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAp8ZIJkUY/5A05FAPIIy+nbA0lvm9TsNQv9xeS6H9f8PPxmG9uwN1E C7B23cHuRB8uLjN6QLLoE2pA2JmCeRo5thtcQugm/zO6foTBVJ7qjb5Uhj5xYWzs /nYP7z7kDG5ZdMtTT9qAHJDkWqqhJ7ijA2Azm+U3l3QQriR7fI+oQlNv1Bz1ZpUf sqmVHHAwu749q8N9/gXaMrNqaSGYpp9fPDCOpZMDrgjJKm6A+oWy+GEm03ztBwcM av1d7Aa/zYnk9VEIT2/BHjN4oMRnI8MXX+FbgwvCzYjsjRRXdNfjGsUOB/pN3hCQ WrvgbpZEtFQxORu4/2lDo6rnkh2l6wRa -----END CERTIFICATE-----Generated at Sat Sep 6 06:01:51 2025 by rpki-client