$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft File: bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft (raw, json) Hash identifier: wQGGlnMWMB+Rwl+5uP3j807v6PJfTNorMUDklI0L9Zo= Subject key identifier: 30:88:FE:E5:4C:07:36:E8:42:75:EF:96:9B:FF:EF:35:51:35:25:F2 Authority key identifier: 6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25 Certificate issuer: /CN=A91C2C8A/serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325 Certificate serial: 0100 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft Manifest number: F3 Signing time: Fri 05 Sep 2025 05:44:49 +0000 Manifest this update: Fri 05 Sep 2025 05:44:48 +0000 Manifest next update: Fri 12 Sep 2025 05:44:48 +0000 Files and hashes: 1: bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl (hash: blRm1hFFcuLtaCDaJzGs8LR5NdnN4jwONxz65Jfz8gg=) 2: AA97516E24CA11EFB59A9379C4F9AE02.roa (hash: vY7AsZ08Pw1TlHVY7hGbU3NQuV3eecatAeSNrTUiOFk=) 3: A1732A0E24CA11EF93486579C4F9AE02.roa (hash: c1fiRMTzx+sKc+PUXDGG2MhU2IceNjiS5ZTGcmsSFDc=) 4: 41A8950C272F11EF9D0A0C5CC4F9AE02.roa (hash: Zeo9E1pvK7pqXxcoNJpNgvy4k5rrUkurswNhSqNf24s=) 5: A074721624CA11EF93486579C4F9AE02.roa (hash: EAuwmClXGMo+6npZ19N/RRkMj4x/6MUGDRCOhMDeS9A=) 6: 0E49D1E024CC11EFB113A27BC4F9AE02.roa (hash: NR/+YgQkm7A4mmhSV+xz9O4OYp+ZS9oT3gP6zL7oedM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 05:44:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 256 (0x100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2C8A, serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325 Validity Not Before: Sep 5 05:44:48 2025 GMT Not After : Sep 12 05:44:48 2025 GMT Subject: CN=68ba78d0-e661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:7e:91:3f:6c:88:e8:7e:6b:55:90:d0:97:ee: 0e:a7:97:1c:35:79:f4:37:5b:ff:2e:14:e5:72:cb: 4e:96:d3:72:17:e5:f1:e2:5f:14:d6:c9:5c:08:e7: 93:e9:f7:d1:17:f9:89:1a:1d:48:5d:5e:dc:d2:8b: fd:95:60:4d:0f:62:1f:69:2a:74:a4:02:c8:99:61: d9:45:12:ed:d4:9d:1f:3a:81:70:a4:b8:2e:70:b3: e9:9d:02:f0:f5:11:a5:21:b8:c4:6f:9b:37:57:53: b2:a2:ad:06:ed:97:21:2a:72:17:c2:49:91:3e:3e: 93:a2:b5:b5:30:a3:14:1d:ec:c3:a4:5d:3d:fa:6e: 0c:f2:00:43:49:80:49:09:ba:48:76:ca:24:fc:69: 98:d4:7a:ce:1c:6f:9e:49:fd:eb:fa:5d:18:bd:b1: ad:2e:4f:a3:74:b2:d5:52:92:37:98:91:e4:72:16: aa:ba:da:01:59:50:68:73:8c:f5:13:c5:40:36:c3: 70:13:c0:e5:ed:a5:a6:6e:bf:95:be:47:71:d2:66: 9e:94:31:d5:58:63:97:cd:b2:ce:2e:f3:b3:ee:4b: 48:b6:15:88:9a:e9:93:f8:d8:0e:ac:74:55:c9:d4: 7a:1c:d1:7d:a1:d4:01:95:6d:ea:13:bb:f3:0e:2d: 51:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:88:FE:E5:4C:07:36:E8:42:75:EF:96:9B:FF:EF:35:51:35:25:F2 X509v3 Authority Key Identifier: keyid:6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:65:78:a9:09:5e:b7:a0:1b:5e:38:1b:78:98:34:fc:54:35: f7:49:5b:3a:43:fb:59:cd:16:ce:6c:1f:fa:4e:3d:6b:ca:b8: bb:ee:16:99:98:17:12:69:1f:7d:21:43:1c:1a:2e:4d:49:0e: b4:63:71:d5:e8:2d:f8:f9:d3:b8:2b:74:10:c0:79:2a:44:4e: 92:22:9f:12:21:e9:a6:1b:9b:28:b9:76:6e:bb:e6:0b:2f:d5: 30:10:bf:58:e9:9e:c4:ad:c8:4c:b6:74:24:2a:cb:5c:e1:f8: a0:77:36:f0:5c:a3:a8:5e:46:18:bd:bb:22:f0:9c:d5:71:f3: 7b:6b:c8:b5:80:da:5c:ae:1d:3d:5f:9a:77:7f:d2:5e:53:24: 79:b1:f0:28:da:3a:64:7f:95:cb:91:b5:70:5e:bc:39:85:90: d8:40:fd:3f:8e:67:5a:fd:8a:8c:1c:40:94:83:30:0a:0d:7a: 7b:09:2a:fa:de:cf:84:ce:48:54:10:35:0d:2d:be:46:13:42: a6:f6:2f:42:10:df:4b:d3:f1:43:cc:24:5b:cf:29:ac:1b:6f: e9:a4:ee:3c:d1:f2:87:eb:8e:12:f4:31:61:68:26:de:73:e0: c6:72:11:1b:57:48:a6:94:db:32:17:3d:06:21:a6:ca:69:65: 4f:14:ff:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJDOEExMTAvBgNVBAUTKDZDRTdCNTc1MEU2RTE3RDNEMzlFQjVCMDg3RkQzRkFE NTk1OUYzMjUwHhcNMjUwOTA1MDU0NDQ4WhcNMjUwOTEyMDU0NDQ4WjAYMRYwFAYD VQQDEw02OGJhNzhkMC1lNjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4n6RP2yI6H5rVZDQl+4Op5ccNXn0N1v/LhTlcstOltNyF+Xx4l8U1slcCOeT 6ffRF/mJGh1IXV7c0ov9lWBND2IfaSp0pALImWHZRRLt1J0fOoFwpLgucLPpnQLw 9RGlIbjEb5s3V1Oyoq0G7ZchKnIXwkmRPj6TorW1MKMUHezDpF09+m4M8gBDSYBJ CbpIdsok/GmY1HrOHG+eSf3r+l0YvbGtLk+jdLLVUpI3mJHkchaqutoBWVBoc4z1 E8VANsNwE8Dl7aWmbr+Vvkdx0maelDHVWGOXzbLOLvOz7ktIthWImumT+NgOrHRV ydR6HNF9odQBlW3qE7vzDi1R2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDCI/uVM BzboQnXvlpv/7zVRNSXyMB8GA1UdIwQYMBaAFGzntXUObhfT0561sIf9P61ZWfMl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkM4QS82MUVDNDkxNjI0 QzkxMUVGOUM4QzYyNTlDNEY5QUUwMi9iT2UxZFE1dUY5UFRucld3aF8wX3JWbFo4 eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JPZTFkUTV1RjlQVG5yV3doXzBfclZsWjh5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkM4QS82MUVDNDkxNjI0QzkxMUVGOUM4QzYyNTlDNEY5QUUwMi9iT2UxZFE1dUY5 UFRucld3aF8wX3JWbFo4eVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7ZXipCV63oBteOBt4mDT8VDX3SVs6Q/tZzRbObB/6Tj1ryri77haZ mBcSaR99IUMcGi5NSQ60Y3HV6C34+dO4K3QQwHkqRE6SIp8SIemmG5souXZuu+YL L9UwEL9Y6Z7ErchMtnQkKstc4figdzbwXKOoXkYYvbsi8JzVcfN7a8i1gNpcrh09 X5p3f9JeUyR5sfAo2jpkf5XLkbVwXrw5hZDYQP0/jmda/YqMHECUgzAKDXp7CSr6 3s+EzkhUEDUNLb5GE0Km9i9CEN9L0/FDzCRbzymsG2/ppO480fKH644S9DFhaCbe c+DGchEbV0imlNsyFz0GIabKaWVPFP+7 -----END CERTIFICATE-----Generated at Sat Sep 6 06:45:25 2025 by rpki-client