$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft File: OopqLuXcCfyqgv8BjwnBr4S0EZY.mft (raw, json) Hash identifier: jQ20czaKso7DRm6BINZe2ksSkGFxSqGGjk4ZFkgv7B4= Subject key identifier: 98:89:24:33:11:25:AF:F4:16:EE:6F:91:7C:5C:66:E0:CD:F8:0F:28 Authority key identifier: 3A:8A:6A:2E:E5:DC:09:FC:AA:82:FF:01:8F:09:C1:AF:84:B4:11:96 Certificate issuer: /CN=A91CCCDD/serialNumber=3A8A6A2EE5DC09FCAA82FF018F09C1AF84B41196 Certificate serial: 01ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft Manifest number: 01E8 Signing time: Thu 21 Aug 2025 02:43:02 +0000 Manifest this update: Thu 21 Aug 2025 02:43:02 +0000 Manifest next update: Thu 28 Aug 2025 02:43:02 +0000 Files and hashes: 1: OopqLuXcCfyqgv8BjwnBr4S0EZY.crl (hash: KJzQ3sn56CEVrb3RPXSKaI7Cp8O+lfQQsNrZEbWwWsQ=) 2: F77C1438964111EDAAB8E74AC4F9AE02.roa (hash: 4yRhL9kVMGnZbWA+LNDehvbTaP/J/shZ+9q9XJ0iuQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.crl rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 02:43:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 493 (0x1ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCCDD, serialNumber=3A8A6A2EE5DC09FCAA82FF018F09C1AF84B41196 Validity Not Before: Aug 21 02:43:02 2025 GMT Not After : Aug 28 02:43:02 2025 GMT Subject: CN=68a687b6-1c86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:24:54:74:9a:41:84:34:70:75:74:ee:a9:c5: cc:d2:3f:9f:0d:dc:e6:9e:d2:b5:7f:d5:6b:c3:00: 74:f3:18:e8:2e:0e:a6:17:b6:6f:11:5c:84:03:ac: 12:75:33:96:d2:02:e0:cb:6e:b8:84:77:fe:8b:d4: 71:5f:a2:78:ad:19:63:e0:8e:91:0b:ed:c9:23:23: 7c:b7:d9:47:83:e0:3c:d8:c5:75:ce:34:75:15:55: b1:bd:a3:47:69:f3:19:b1:bd:c0:d6:87:5e:f9:a5: 55:bd:20:7c:ba:45:ba:e7:5c:d0:2c:ac:e3:b1:a4: f5:69:06:d8:57:71:6a:47:4e:a3:f3:61:2c:4a:aa: d7:73:c0:b5:d0:f9:e4:80:34:07:5f:5f:30:5f:9b: 6a:33:fa:b7:b6:32:42:d3:f2:21:a7:a3:1b:39:76: 8b:f7:71:dc:99:a5:e5:2f:ce:94:26:78:79:c0:a5: 7d:28:d0:45:16:6e:32:93:52:b5:4c:f5:43:a1:e8: 42:13:de:fc:6c:5f:97:95:4c:33:74:b9:e7:1b:7c: 24:1e:77:a2:9b:f8:77:bd:d3:e8:ba:55:b8:d3:b7: c7:02:de:d6:ec:58:b0:e3:46:e1:fb:7d:df:2e:2e: 41:1d:6e:4b:50:56:68:39:f7:6d:65:52:77:41:8f: 66:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:89:24:33:11:25:AF:F4:16:EE:6F:91:7C:5C:66:E0:CD:F8:0F:28 X509v3 Authority Key Identifier: keyid:3A:8A:6A:2E:E5:DC:09:FC:AA:82:FF:01:8F:09:C1:AF:84:B4:11:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:9a:1a:3b:14:cd:47:9f:ec:c8:ff:ac:34:05:79:78:ba:79: fb:93:a3:82:f7:e2:d2:05:37:b5:80:2d:0e:c8:3b:82:1b:01: 80:b9:53:a8:05:7d:72:f7:13:50:57:bb:22:eb:92:c6:93:98: bc:86:b3:9b:b5:8d:49:a6:ea:ef:3e:3f:49:22:1b:f5:76:93: b2:75:6a:4d:92:62:68:b4:0b:e7:8f:f6:a6:af:0a:31:42:63: 0f:23:90:b3:cc:8f:27:3d:55:c2:13:e2:5d:46:05:6e:33:31: 38:1c:e0:10:df:0a:27:84:34:91:7c:20:f0:e7:14:1c:9f:fc: 89:49:e0:47:5a:3f:4d:28:02:b8:9c:7e:6a:c0:ac:4f:99:8e: cc:8e:b1:14:ed:11:99:1a:10:cd:f3:c5:92:e9:cc:85:89:80: 40:15:fb:a1:42:a0:d0:5a:68:bc:d9:df:3c:c4:f6:28:be:33: c7:8a:6a:b6:26:5d:f7:f1:1f:2b:9b:d2:8d:22:c7:6c:76:6b: 0d:ab:7b:1d:7e:b1:5f:2c:22:4c:0a:c6:08:a5:59:09:aa:db: fc:71:1c:37:30:ed:4d:cb:3b:60:b0:6b:eb:ab:90:cc:d6:1a: 8b:9a:90:82:09:55:c1:d2:e2:ba:63:5d:56:29:10:94:d0:56: e0:72:66:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NDREQxMTAvBgNVBAUTKDNBOEE2QTJFRTVEQzA5RkNBQTgyRkYwMThGMDlDMUFG ODRCNDExOTYwHhcNMjUwODIxMDI0MzAyWhcNMjUwODI4MDI0MzAyWjAYMRYwFAYD VQQDEw02OGE2ODdiNi0xYzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+yRUdJpBhDRwdXTuqcXM0j+fDdzmntK1f9VrwwB08xjoLg6mF7ZvEVyEA6wS dTOW0gLgy264hHf+i9RxX6J4rRlj4I6RC+3JIyN8t9lHg+A82MV1zjR1FVWxvaNH afMZsb3A1ode+aVVvSB8ukW651zQLKzjsaT1aQbYV3FqR06j82EsSqrXc8C10Pnk gDQHX18wX5tqM/q3tjJC0/Ihp6MbOXaL93HcmaXlL86UJnh5wKV9KNBFFm4yk1K1 TPVDoehCE978bF+XlUwzdLnnG3wkHneim/h3vdPoulW407fHAt7W7Fiw40bh+33f Li5BHW5LUFZoOfdtZVJ3QY9m0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJiJJDMR Ja/0Fu5vkXxcZuDN+A8oMB8GA1UdIwQYMBaAFDqKai7l3An8qoL/AY8Jwa+EtBGW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0NERC9GM0JCRTc2RTk2 M0QxMUVEQkUzRkQwMUFDNEY5QUUwMi9Pb3BxTHVYY0NmeXFndjhCanduQnI0UzBF WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09vcHFMdVhjQ2Z5cWd2OEJqd25CcjRTMEVaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0NERC9GM0JCRTc2RTk2M0QxMUVEQkUzRkQwMUFDNEY5QUUwMi9Pb3BxTHVYY0Nm eXFndjhCanduQnI0UzBFWlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbmho7FM1Hn+zI/6w0BXl4unn7k6OC9+LSBTe1gC0OyDuCGwGAuVOo BX1y9xNQV7si65LGk5i8hrObtY1JpurvPj9JIhv1dpOydWpNkmJotAvnj/amrwox QmMPI5CzzI8nPVXCE+JdRgVuMzE4HOAQ3wonhDSRfCDw5xQcn/yJSeBHWj9NKAK4 nH5qwKxPmY7MjrEU7RGZGhDN88WS6cyFiYBAFfuhQqDQWmi82d88xPYovjPHimq2 Jl338R8rm9KNIsdsdmsNq3sdfrFfLCJMCsYIpVkJqtv8cRw3MO1NyztgsGvrq5DM 1hqLmpCCCVXB0uK6Y11WKRCU0FbgcmaL -----END CERTIFICATE-----Generated at Fri Aug 22 16:33:10 2025 by rpki-client