$ rpki-client -vvf rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.mft File: 0va3pYZYVsPyxEYWNgMfsFtgYGo.mft (raw, json) Hash identifier: K+cXypH0qUvei5cKHQTWzam43hlGr2aljviGq0m25T0= Subject key identifier: 3D:DC:8C:C8:69:E0:BF:5B:11:27:A4:6E:B9:6C:B5:E5:26:6B:D0:11 Authority key identifier: D2:F6:B7:A5:86:58:56:C3:F2:C4:46:16:36:03:1F:B0:5B:60:60:6A Certificate issuer: /CN=A91149C8/serialNumber=D2F6B7A5865856C3F2C4461636031FB05B60606A Certificate serial: 0C99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0va3pYZYVsPyxEYWNgMfsFtgYGo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.mft Manifest number: 0C8F Signing time: Fri 22 Aug 2025 18:20:48 +0000 Manifest this update: Fri 22 Aug 2025 18:20:48 +0000 Manifest next update: Fri 29 Aug 2025 18:20:48 +0000 Files and hashes: 1: 0va3pYZYVsPyxEYWNgMfsFtgYGo.crl (hash: C7MNcX5KurxZL7zfTjovS0aunN6zzaC994yZjmfN40s=) 2: A2A7584ACA7F11EAB343722AC4F9AE02.roa (hash: mvYo+h5Nn35EgX86xIvICgq41pXxREG1bc5pyoPj450=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.crl rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0va3pYZYVsPyxEYWNgMfsFtgYGo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:20:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3225 (0xc99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91149C8, serialNumber=D2F6B7A5865856C3F2C4461636031FB05B60606A Validity Not Before: Aug 22 18:20:48 2025 GMT Not After : Aug 29 18:20:48 2025 GMT Subject: CN=68a8b500-1937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:67:67:37:f9:e9:32:fa:f6:fd:1e:4f:2b:49: c9:dc:1d:59:47:3b:55:7f:f9:eb:97:63:6e:25:d9: 06:a5:7b:1f:96:6e:3d:5c:55:ed:b7:f4:13:07:e6: ba:61:02:8d:e3:58:7b:69:e9:8b:ae:7f:5e:64:33: 17:93:78:67:9f:1d:76:e6:30:44:97:9a:a6:35:3c: 64:9b:2e:d7:78:16:bd:d1:f5:54:3c:bd:51:f9:d4: be:a4:fa:f1:bc:a0:cf:46:d0:ee:7c:b8:ef:12:b6: 92:93:15:46:a0:ba:94:af:b7:22:eb:10:5f:c5:2f: 34:21:08:22:7b:56:5d:3d:e6:23:9c:de:0f:bc:af: b4:8c:fe:d3:b7:3d:9d:e8:da:23:db:bc:5a:32:3c: b7:90:7b:7e:e6:80:64:6f:e4:9f:ce:d0:f4:e5:78: 48:04:16:db:3c:16:3f:84:8a:c1:9c:42:42:16:d6: b8:8c:3e:5a:d3:b2:99:c4:34:65:f2:61:79:fe:a6: 29:a3:ec:b5:65:e5:3d:9e:d6:46:3c:07:73:13:89: c3:55:e9:ad:2e:3a:c2:bf:1c:39:94:8b:3d:66:8e: 0b:f1:e4:04:a6:8d:c2:ff:db:53:7d:a1:fe:bf:db: 3f:22:e7:be:a7:15:4f:05:80:f2:dc:58:c6:d7:4a: 5c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:DC:8C:C8:69:E0:BF:5B:11:27:A4:6E:B9:6C:B5:E5:26:6B:D0:11 X509v3 Authority Key Identifier: keyid:D2:F6:B7:A5:86:58:56:C3:F2:C4:46:16:36:03:1F:B0:5B:60:60:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0va3pYZYVsPyxEYWNgMfsFtgYGo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:97:ee:c7:3e:b0:e0:fb:e4:10:e5:86:e7:4a:c8:34:aa:da: 1d:1b:68:28:9e:2e:1f:19:1f:bf:59:8e:9c:62:2e:f4:8c:b4: f6:70:aa:29:2f:52:25:b4:38:17:d3:26:5e:11:36:5e:f1:53: 3e:89:d5:50:2f:79:88:6d:c4:59:c0:fd:63:bd:cd:5e:85:2e: 70:bd:6c:c4:14:7e:6d:3c:20:df:0c:ac:83:5d:b6:3f:de:00: b7:5d:51:f3:2d:d5:d8:9b:56:fd:f1:a1:7f:e0:4f:a1:7c:06: 6f:e2:f3:4f:0c:e9:f2:ca:d0:6e:12:ab:a1:e3:eb:39:46:01: 38:92:f7:80:50:65:ba:f9:8a:2f:54:37:be:d3:48:59:99:28: 2e:9b:bb:ff:a4:64:f6:35:f9:1c:f0:f6:c0:17:4d:60:ff:81: 31:c3:d4:b4:00:b3:7a:41:f0:9b:8d:71:5f:8d:ce:29:7b:0d: 8c:9e:e8:ce:92:2e:0b:f0:bd:52:b2:a4:2a:81:c1:ae:0f:1f: a3:65:c5:0b:77:4f:5c:5f:0e:3f:05:b3:96:3d:6a:eb:31:b4: 42:32:6d:da:b6:04:63:43:e7:4e:b2:8d:9d:34:69:02:3e:f6: 8e:72:b9:90:1b:c6:d7:d7:d5:06:5a:cc:a2:6d:62:b0:be:78: a6:1b:4a:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ5QzgxMTAvBgNVBAUTKEQyRjZCN0E1ODY1ODU2QzNGMkM0NDYxNjM2MDMxRkIw NUI2MDYwNkEwHhcNMjUwODIyMTgyMDQ4WhcNMjUwODI5MTgyMDQ4WjAYMRYwFAYD VQQDEw02OGE4YjUwMC0xOTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAomdnN/npMvr2/R5PK0nJ3B1ZRztVf/nrl2NuJdkGpXsflm49XFXtt/QTB+a6 YQKN41h7aemLrn9eZDMXk3hnnx125jBEl5qmNTxkmy7XeBa90fVUPL1R+dS+pPrx vKDPRtDufLjvEraSkxVGoLqUr7ci6xBfxS80IQgie1ZdPeYjnN4PvK+0jP7Ttz2d 6Noj27xaMjy3kHt+5oBkb+SfztD05XhIBBbbPBY/hIrBnEJCFta4jD5a07KZxDRl 8mF5/qYpo+y1ZeU9ntZGPAdzE4nDVemtLjrCvxw5lIs9Zo4L8eQEpo3C/9tTfaH+ v9s/Iue+pxVPBYDy3FjG10pcmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD3cjMhp 4L9bESekbrlsteUma9ARMB8GA1UdIwQYMBaAFNL2t6WGWFbD8sRGFjYDH7BbYGBq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDlDOC8yRkM0NjU5MEZG MkIxMUU5QkYyMEJGMURDNEY5QUUwMi8wdmEzcFlaWVZzUHl4RVlXTmdNZnNGdGdZ R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB2YTNwWVpZVnNQeXhFWVdOZ01mc0Z0Z1lHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDlDOC8yRkM0NjU5MEZGMkIxMUU5QkYyMEJGMURDNEY5QUUwMi8wdmEzcFlaWVZz UHl4RVlXTmdNZnNGdGdZR28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3l+7HPrDg++QQ5YbnSsg0qtodG2goni4fGR+/WY6cYi70jLT2cKop L1IltDgX0yZeETZe8VM+idVQL3mIbcRZwP1jvc1ehS5wvWzEFH5tPCDfDKyDXbY/ 3gC3XVHzLdXYm1b98aF/4E+hfAZv4vNPDOnyytBuEquh4+s5RgE4kveAUGW6+Yov VDe+00hZmSgum7v/pGT2Nfkc8PbAF01g/4Exw9S0ALN6QfCbjXFfjc4pew2MnujO ki4L8L1SsqQqgcGuDx+jZcULd09cXw4/BbOWPWrrMbRCMm3atgRjQ+dOso2dNGkC PvaOcrmQG8bX19UGWsyibWKwvnimG0r8 -----END CERTIFICATE-----Generated at Sat Aug 23 17:50:48 2025 by rpki-client