$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft File: 3oqNpw4WUAnRQNn2JFJNxNR51eg.mft (raw, json) Hash identifier: VbKcXUXpZnyjZbvQ3OV06RvSOm9t7EiNSINEhr4NYbI= Subject key identifier: 3A:A3:27:C4:25:1F:E2:4C:09:E0:3F:45:1C:32:93:87:D2:6F:DB:6A Authority key identifier: DE:8A:8D:A7:0E:16:50:09:D1:40:D9:F6:24:52:4D:C4:D4:79:D5:E8 Certificate issuer: /CN=A91DA13E/serialNumber=DE8A8DA70E165009D140D9F624524DC4D479D5E8 Certificate serial: 07F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft Manifest number: 07DE Signing time: Wed 20 Aug 2025 21:14:36 +0000 Manifest this update: Wed 20 Aug 2025 21:14:36 +0000 Manifest next update: Wed 27 Aug 2025 21:14:36 +0000 Files and hashes: 1: 3oqNpw4WUAnRQNn2JFJNxNR51eg.crl (hash: 3O8dnqIYBeZ0XBYkmZd8i1YsmZK+DOUJDZxU++ZNOjA=) 2: 29D6DCB2849211EE8F9C5870C4F9AE02.roa (hash: Rw6zEr6DY5Vp9Hj5tF7TI5Kq9ScA3GH+aMoga9/kLfs=) 3: B9A51B1AFA4F11EDB82FCB1FC4F9AE02.roa (hash: 5YYK0YKoDCpaklYir4k5rIBA5wPjwgrEAbtRskRmQT8=) 4: 298965AC06B611EBBBFD6B2CC4F9AE02.roa (hash: TH9JF4+CN1WO9NYgkx1yWi97+W1C48OFIwRdTh3Mt1Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.crl rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 21:14:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2037 (0x7f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA13E, serialNumber=DE8A8DA70E165009D140D9F624524DC4D479D5E8 Validity Not Before: Aug 20 21:14:36 2025 GMT Not After : Aug 27 21:14:36 2025 GMT Subject: CN=68a63abc-7edb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b1:40:ba:3e:18:1b:e7:a0:19:b8:b2:cc:e5: 5a:c8:a5:6a:c1:28:27:f7:f3:f9:49:2c:4a:b2:15: 6e:d1:a7:3f:d7:3c:d9:51:0d:bb:63:4e:85:fb:2b: 66:cd:9a:b9:1e:44:a9:fa:24:35:33:97:f3:ec:2d: 72:07:3e:bc:c7:02:d4:c1:c9:1f:17:cb:7a:01:4f: 7a:69:ba:24:e0:41:d3:6b:33:b5:5d:4c:69:73:be: c9:7f:b4:14:77:64:20:51:73:08:8a:97:9d:e8:b5: 9e:3a:55:51:72:6b:41:4e:ac:32:24:0d:8c:01:41: 37:b8:33:1a:87:20:d7:82:09:84:d5:1d:36:b0:db: 4a:14:79:4b:46:47:92:b7:7a:d5:cd:d0:5d:e6:42: 7e:f5:58:a3:de:30:89:ac:fa:83:17:a0:f5:c5:ae: 47:15:fe:df:0b:2b:c6:ed:03:2c:57:d0:dc:bb:34: cf:c5:85:23:a6:49:f5:33:56:cf:b9:40:4c:b9:b1: 1a:1d:7f:07:fb:22:f9:88:6b:10:4a:41:d8:67:31: e2:4d:26:07:82:94:31:80:ad:24:03:2f:b9:42:83: 6a:a5:aa:c0:c1:7b:fa:94:68:13:0a:4a:12:b1:e0: cd:90:ad:ac:52:4d:ba:3b:0a:bb:e6:be:fb:2b:21: e3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:A3:27:C4:25:1F:E2:4C:09:E0:3F:45:1C:32:93:87:D2:6F:DB:6A X509v3 Authority Key Identifier: keyid:DE:8A:8D:A7:0E:16:50:09:D1:40:D9:F6:24:52:4D:C4:D4:79:D5:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:c5:8c:be:eb:b6:26:92:d4:b9:c4:63:b7:b9:1b:db:e7:cb: a8:4b:68:90:9e:f2:8a:59:7d:4a:07:fc:56:4a:9f:a5:8a:66: e3:b6:94:60:96:f6:b5:b8:ce:64:b1:90:59:83:f7:84:7e:0e: c4:f8:e3:b8:b4:0b:7b:79:ca:b3:0c:43:b6:b1:05:bb:ff:33: d3:68:6c:02:1c:7e:71:eb:33:65:9f:02:c3:74:31:0f:a7:2d: 42:9d:15:77:93:f3:97:54:ff:b1:b6:77:a4:f8:17:e3:ee:61: dc:39:32:ea:72:e6:57:d5:b8:0f:10:b7:92:c2:57:f9:a2:c4: 4e:a6:88:e2:b1:42:31:e4:73:95:81:3c:38:f0:75:2b:53:25: d7:13:92:66:90:fa:a3:99:8d:df:e3:35:34:fd:4f:61:b6:f9: 86:18:11:cb:e9:55:72:30:05:72:3d:11:ed:85:9c:07:bd:75: 8e:7a:1d:1c:44:0f:2e:da:f8:1f:54:7f:9b:f1:91:08:c5:1c: 3a:17:54:d2:10:a4:fe:ba:1a:98:62:e0:2c:4b:0d:24:d4:ba: d5:ff:d6:df:95:61:23:54:a7:42:33:80:59:82:94:35:58:f9: d3:31:f6:09:f1:dc:2a:55:c9:4f:97:3c:3d:aa:1d:07:ac:3a: aa:19:fc:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REExM0UxMTAvBgNVBAUTKERFOEE4REE3MEUxNjUwMDlEMTQwRDlGNjI0NTI0REM0 RDQ3OUQ1RTgwHhcNMjUwODIwMjExNDM2WhcNMjUwODI3MjExNDM2WjAYMRYwFAYD VQQDEw02OGE2M2FiYy03ZWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7FAuj4YG+egGbiyzOVayKVqwSgn9/P5SSxKshVu0ac/1zzZUQ27Y06F+ytm zZq5HkSp+iQ1M5fz7C1yBz68xwLUwckfF8t6AU96abok4EHTazO1XUxpc77Jf7QU d2QgUXMIiped6LWeOlVRcmtBTqwyJA2MAUE3uDMahyDXggmE1R02sNtKFHlLRkeS t3rVzdBd5kJ+9Vij3jCJrPqDF6D1xa5HFf7fCyvG7QMsV9DcuzTPxYUjpkn1M1bP uUBMubEaHX8H+yL5iGsQSkHYZzHiTSYHgpQxgK0kAy+5QoNqparAwXv6lGgTCkoS seDNkK2sUk26Owq75r77KyHj8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDqjJ8Ql H+JMCeA/RRwyk4fSb9tqMB8GA1UdIwQYMBaAFN6KjacOFlAJ0UDZ9iRSTcTUedXo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTEzRS81NEQ2QTUwRTA2 QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi8zb3FOcHc0V1VBblJRTm4ySkZKTnhOUjUx ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNvcU5wdzRXVUFuUlFObjJKRkpOeE5SNTFlZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTEzRS81NEQ2QTUwRTA2QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi8zb3FOcHc0V1VB blJRTm4ySkZKTnhOUjUxZWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYxYy+67YmktS5xGO3uRvb58uoS2iQnvKKWX1KB/xWSp+limbjtpRg lva1uM5ksZBZg/eEfg7E+OO4tAt7ecqzDEO2sQW7/zPTaGwCHH5x6zNlnwLDdDEP py1CnRV3k/OXVP+xtnek+Bfj7mHcOTLqcuZX1bgPELeSwlf5osROpojisUIx5HOV gTw48HUrUyXXE5JmkPqjmY3f4zU0/U9htvmGGBHL6VVyMAVyPRHthZwHvXWOeh0c RA8u2vgfVH+b8ZEIxRw6F1TSEKT+uhqYYuAsSw0k1LrV/9bflWEjVKdCM4BZgpQ1 WPnTMfYJ8dwqVclPlzw9qh0HrDqqGfzF -----END CERTIFICATE-----Generated at Thu Aug 21 13:51:01 2025 by rpki-client