$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft File: oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft (raw, json) Hash identifier: BFQNBZXDOt1Q1/juA8tgREeT2dLjWlGqOGE+HvIhQmg= Subject key identifier: E9:6D:8F:5D:FB:2D:E1:2E:78:35:55:13:94:6B:DC:52:36:04:88:02 Authority key identifier: A0:5E:C2:66:B3:C0:BF:D6:CE:B5:17:10:0B:E0:5C:50:5B:94:36:24 Certificate issuer: /CN=A91E6A01/serialNumber=A05EC266B3C0BFD6CEB517100BE05C505B943624 Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft Manifest number: 24 Signing time: Thu 21 Aug 2025 08:08:06 +0000 Manifest this update: Thu 21 Aug 2025 08:08:06 +0000 Manifest next update: Thu 28 Aug 2025 08:08:06 +0000 Files and hashes: 1: oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl (hash: iGMEGOssq2wTaNJyk6RPaGch74zdOcbplg4HVbHXdNY=) 2: 041803705DEE11F0B3FA764DC4F9AE02.roa (hash: g234+BOrsFID00gHUsuGQ7ja/TZsYXQzY8A84ZILmbw=) 3: E57772525DED11F0B0B00C4DC4F9AE02.roa (hash: SDWOzOls7ewbKsDsDovGzzc6zqRka52NsV9334kX+ts=) 4: 230AFEA45DEE11F0B0B1CF4DC4F9AE02.roa (hash: DDcpKf4cwajzPz7iOk0WiFF4+R4nRejRaM+Ry6/ubVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 08:08:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6A01, serialNumber=A05EC266B3C0BFD6CEB517100BE05C505B943624 Validity Not Before: Aug 21 08:08:06 2025 GMT Not After : Aug 28 08:08:06 2025 GMT Subject: CN=68a6d3e6-9d04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:15:8e:8b:b0:f0:88:57:45:a9:65:b8:7b:6f: be:9d:8c:0b:d8:b7:07:b9:7c:61:b2:b3:c6:81:40: 3a:45:9d:27:c0:d9:6f:88:4c:45:9e:b5:e6:30:ad: 59:ee:4c:14:17:c5:d0:97:ef:04:85:89:1f:41:8e: 81:b4:7c:9e:b2:ff:dd:d3:7f:86:2b:82:56:11:03: 43:90:01:dc:3a:97:8a:d8:e6:2f:6b:e7:9a:f9:d4: 6e:02:8d:45:6d:dc:03:a3:4e:a3:79:fc:98:7a:4f: 3a:23:57:0c:12:d4:8e:d3:3f:13:cd:2c:ad:bb:74: 87:17:5a:56:53:04:ba:41:f9:18:09:68:48:16:52: b5:60:29:6e:84:c1:4d:f8:75:5d:51:84:35:d0:2e: 5c:3c:8a:5e:36:5d:e4:a1:b3:0e:31:2f:cc:2d:11: 60:90:65:83:b5:ed:f8:76:cf:90:1f:aa:b3:36:e7: 4d:ac:8a:05:c4:39:20:cb:be:62:fb:d0:20:50:90: 2b:a2:6b:19:7e:28:31:8f:5a:d9:04:9e:33:e0:20: 17:5c:26:68:4f:16:72:12:1c:f1:06:9e:94:86:c4: 04:9d:1c:d7:f4:95:34:3d:4e:1b:29:f6:13:ea:05: c7:1c:32:68:6f:c6:3a:42:43:7b:e8:86:0b:e4:fe: 74:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:6D:8F:5D:FB:2D:E1:2E:78:35:55:13:94:6B:DC:52:36:04:88:02 X509v3 Authority Key Identifier: keyid:A0:5E:C2:66:B3:C0:BF:D6:CE:B5:17:10:0B:E0:5C:50:5B:94:36:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:da:31:6a:f6:2f:18:b9:d0:70:4b:55:48:93:da:83:30:8b: 96:68:1b:44:ab:d1:e1:19:a3:c4:30:f2:5c:30:88:df:12:02: 23:fa:4d:c0:91:2c:c8:d1:0a:50:88:69:ae:ee:69:38:37:bc: 58:0a:20:94:f1:f2:7d:a1:96:fc:b3:3f:d1:f9:b8:f8:95:dd: 3b:1c:5b:39:ed:b3:43:61:85:03:22:f7:52:34:28:43:f8:23: 20:92:7d:0d:5e:55:68:13:00:3e:ba:97:e3:c7:ab:5d:92:d3: 2f:99:f9:a1:33:ad:55:9a:98:5c:e0:60:e6:1a:01:02:2d:e5: 50:fd:76:6e:e0:04:83:0d:eb:8b:61:25:05:f4:8a:78:b3:c8: a6:88:6d:58:c6:9d:9f:c5:64:70:eb:93:77:38:e8:4b:e7:f0: 10:24:38:60:71:a4:ce:29:94:1a:8d:fc:18:fe:9e:7a:46:48: ec:c2:2a:94:84:55:80:b8:df:0a:c5:8d:e6:e6:13:16:bb:fc: 9a:e2:7f:dd:8b:ec:4c:61:8f:b3:ec:8d:17:2b:88:85:27:98: 59:bd:e8:e8:6b:ff:f4:12:f3:c3:08:67:f9:cc:26:1a:b3:35: 72:54:d4:40:3c:9f:fb:7a:87:0d:da:e4:36:96:07:a9:5f:f4: 87:4a:63:9f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NkEwMTExMC8GA1UEBRMoQTA1RUMyNjZCM0MwQkZENkNFQjUxNzEwMEJFMDVDNTA1 Qjk0MzYyNDAeFw0yNTA4MjEwODA4MDZaFw0yNTA4MjgwODA4MDZaMBgxFjAUBgNV BAMTDTY4YTZkM2U2LTlkMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDnFY6LsPCIV0WpZbh7b76djAvYtwe5fGGys8aBQDpFnSfA2W+ITEWeteYwrVnu TBQXxdCX7wSFiR9BjoG0fJ6y/93Tf4YrglYRA0OQAdw6l4rY5i9r55r51G4CjUVt 3AOjTqN5/Jh6TzojVwwS1I7TPxPNLK27dIcXWlZTBLpB+RgJaEgWUrVgKW6EwU34 dV1RhDXQLlw8il42XeShsw4xL8wtEWCQZYO17fh2z5AfqrM2502sigXEOSDLvmL7 0CBQkCuiaxl+KDGPWtkEnjPgIBdcJmhPFnISHPEGnpSGxASdHNf0lTQ9Thsp9hPq BcccMmhvxjpCQ3vohgvk/nTZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6W2PXfst 4S54NVUTlGvcUjYEiAIwHwYDVR0jBBgwFoAUoF7CZrPAv9bOtRcQC+BcUFuUNiQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2QTAxL0Y2NEQzQjI0NTdB OTExRjA4RUU0MjYwOUM0RjlBRTAyL29GN0NaclBBdjliT3RSY1FDLUJjVUZ1VU5p US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb0Y3Q1pyUEF2OWJPdFJjUUMtQmNVRnVVTmlRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2 QTAxL0Y2NEQzQjI0NTdBOTExRjA4RUU0MjYwOUM0RjlBRTAyL29GN0NaclBBdjli T3RSY1FDLUJjVUZ1VU5pUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHjaMWr2Lxi50HBLVUiT2oMwi5ZoG0Sr0eEZo8Qw8lwwiN8SAiP6TcCR LMjRClCIaa7uaTg3vFgKIJTx8n2hlvyzP9H5uPiV3TscWznts0NhhQMi91I0KEP4 IyCSfQ1eVWgTAD66l+PHq12S0y+Z+aEzrVWamFzgYOYaAQIt5VD9dm7gBIMN64th JQX0inizyKaIbVjGnZ/FZHDrk3c46Evn8BAkOGBxpM4plBqN/Bj+nnpGSOzCKpSE VYC43wrFjebmExa7/Jrif92L7Exhj7PsjRcriIUnmFm96Ohr//QS88MIZ/nMJhqz NXJU1EA8n/t6hw3a5DaWB6lf9IdKY58= -----END CERTIFICATE-----Generated at Thu Aug 21 20:44:34 2025 by rpki-client