$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft File: A-8OOQoxXl88RhsKcrIYvuIj4A4.mft (raw, json) Hash identifier: IlmnW3mIHeZdk5z7PGqXgq0JfHzkoKDQ+4hixyo7uCw= Subject key identifier: F6:7D:E7:6A:28:93:6F:4B:EC:47:B1:D9:50:E5:39:7C:63:6D:86:80 Authority key identifier: 03:EF:0E:39:0A:31:5E:5F:3C:46:1B:0A:72:B2:18:BE:E2:23:E0:0E Certificate issuer: /CN=A91A0FC0/serialNumber=03EF0E390A315E5F3C461B0A72B218BEE223E00E Certificate serial: F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A-8OOQoxXl88RhsKcrIYvuIj4A4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft Manifest number: 04C7 Signing time: Sat 23 Aug 2025 00:49:35 +0000 Manifest this update: Sat 23 Aug 2025 00:49:35 +0000 Manifest next update: Sat 30 Aug 2025 00:49:35 +0000 Files and hashes: 1: A-8OOQoxXl88RhsKcrIYvuIj4A4.crl (hash: JWn/NcWMxCQo/vc78mMryoLIApESVGqxtYuh3CCvyk4=) 2: 9190CF9E2E7811EFB7206224C4F9AE02.roa (hash: h88YKkcazjRoHLRQFSfgpu+Eo1A4vft9VL2aQVc7RoU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.crl rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A-8OOQoxXl88RhsKcrIYvuIj4A4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:49:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 247 (0xf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0FC0, serialNumber=03EF0E390A315E5F3C461B0A72B218BEE223E00E Validity Not Before: Aug 23 00:49:35 2025 GMT Not After : Aug 30 00:49:35 2025 GMT Subject: CN=68a9101f-0423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:37:35:b5:35:2e:8a:4b:42:70:16:01:14:05: 0d:24:09:cd:df:22:c3:ab:35:7a:60:0d:3b:31:b9: 20:d0:74:cf:d6:b9:dd:1e:4c:ab:7a:ee:48:bb:9f: 74:fb:32:52:df:b6:df:e6:62:93:ad:75:a2:9c:31: 3a:fe:ea:8c:bf:75:0f:dd:ef:1a:b6:3b:4d:9b:83: 1a:92:84:da:1d:ad:15:3e:aa:62:c8:e0:cc:7a:f5: ee:be:90:55:9e:2a:f1:f6:8c:88:f7:55:6a:f5:53: 30:03:d0:e5:f4:3f:da:88:4e:5c:65:ff:4a:57:6a: 74:bb:db:ec:d4:a2:15:59:fb:ee:40:f5:53:5d:7f: f1:68:cc:aa:a7:7b:09:72:00:cd:f7:6c:85:6a:68: 69:73:ce:0e:78:3c:01:68:f2:84:a1:dc:2c:98:e2: c3:67:0c:91:1d:08:89:07:e7:91:16:b7:50:1e:c5: 28:4d:f4:01:0f:45:e7:2e:e6:f7:19:13:2a:49:64: dd:58:c9:a0:21:c0:c8:64:f9:71:84:97:72:2d:d9: 45:33:bd:ef:b5:90:ef:60:c4:c2:77:87:6f:32:3e: c6:25:aa:aa:98:d2:73:88:fa:ac:8d:9c:a5:e1:07: 89:e6:4c:b1:93:66:2e:f8:22:6e:13:06:9d:e3:00: 2a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:7D:E7:6A:28:93:6F:4B:EC:47:B1:D9:50:E5:39:7C:63:6D:86:80 X509v3 Authority Key Identifier: keyid:03:EF:0E:39:0A:31:5E:5F:3C:46:1B:0A:72:B2:18:BE:E2:23:E0:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A-8OOQoxXl88RhsKcrIYvuIj4A4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:81:90:ba:2e:94:6e:4c:be:c0:3d:ca:0b:a4:10:b2:97:cc: e9:81:93:45:5b:f6:be:3d:1a:5b:f2:38:bd:58:94:a0:d8:7f: 73:24:86:08:3c:81:7b:85:dc:e4:f6:a9:5c:90:0e:4f:cc:95: 2f:01:51:a4:30:13:57:9d:9e:34:da:52:e7:0c:6d:33:7a:da: a3:5b:13:41:96:b2:9b:68:f9:aa:01:b7:3d:b3:df:a1:b9:fc: 67:49:1e:38:97:fc:93:d2:a7:5a:23:95:82:2e:be:78:96:e0: dd:8f:1c:b4:3c:67:8b:fb:e5:a4:c8:4d:72:ea:bc:23:a2:5d: 9d:10:75:a4:2c:5f:3d:15:54:90:08:68:a1:39:9b:e7:b8:1d: f6:fe:b1:38:fe:93:90:2e:e8:3b:48:81:44:fa:ad:5f:b2:67: 82:d3:1b:3f:27:e5:31:ec:70:13:3f:c0:47:27:cb:a2:d2:61: 32:6f:60:9e:bb:07:fe:d2:22:5a:0c:26:62:e5:f4:f3:cb:74: 7e:6a:62:6f:4a:af:78:b2:15:b6:0a:8a:95:35:32:8d:08:8d: 4e:e9:71:04:b2:c6:53:c5:f7:89:18:ba:c9:52:5c:c3:af:11: 42:eb:ec:4c:ca:5a:18:fd:09:eb:2b:c6:95:85:23:f7:3b:c3: 4c:9c:f0:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBGQzAxMTAvBgNVBAUTKDAzRUYwRTM5MEEzMTVFNUYzQzQ2MUIwQTcyQjIxOEJF RTIyM0UwMEUwHhcNMjUwODIzMDA0OTM1WhcNMjUwODMwMDA0OTM1WjAYMRYwFAYD VQQDEw02OGE5MTAxZi0wNDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoDc1tTUuiktCcBYBFAUNJAnN3yLDqzV6YA07Mbkg0HTP1rndHkyreu5Iu590 +zJS37bf5mKTrXWinDE6/uqMv3UP3e8atjtNm4MakoTaHa0VPqpiyODMevXuvpBV nirx9oyI91Vq9VMwA9Dl9D/aiE5cZf9KV2p0u9vs1KIVWfvuQPVTXX/xaMyqp3sJ cgDN92yFamhpc84OeDwBaPKEodwsmOLDZwyRHQiJB+eRFrdQHsUoTfQBD0XnLub3 GRMqSWTdWMmgIcDIZPlxhJdyLdlFM73vtZDvYMTCd4dvMj7GJaqqmNJziPqsjZyl 4QeJ5kyxk2Yu+CJuEwad4wAqDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPZ952oo k29L7Eex2VDlOXxjbYaAMB8GA1UdIwQYMBaAFAPvDjkKMV5fPEYbCnKyGL7iI+AO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEZDMC9DREUwOTg3Njk1 NzgxMUVDQTMyQ0NGNTVDNEY5QUUwMi9BLThPT1FveFhsODhSaHNLY3JJWXZ1SWo0 QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EtOE9PUW94WGw4OFJoc0tjcklZdnVJajRBNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEZDMC9DREUwOTg3Njk1NzgxMUVDQTMyQ0NGNTVDNEY5QUUwMi9BLThPT1FveFhs ODhSaHNLY3JJWXZ1SWo0QTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJgZC6LpRuTL7APcoLpBCyl8zpgZNFW/a+PRpb8ji9WJSg2H9zJIYI PIF7hdzk9qlckA5PzJUvAVGkMBNXnZ402lLnDG0zetqjWxNBlrKbaPmqAbc9s9+h ufxnSR44l/yT0qdaI5WCLr54luDdjxy0PGeL++WkyE1y6rwjol2dEHWkLF89FVSQ CGihOZvnuB32/rE4/pOQLug7SIFE+q1fsmeC0xs/J+Ux7HATP8BHJ8ui0mEyb2Ce uwf+0iJaDCZi5fTzy3R+amJvSq94shW2CoqVNTKNCI1O6XEEssZTxfeJGLrJUlzD rxFC6+xMyloY/QnrK8aVhSP3O8NMnPDX -----END CERTIFICATE-----Generated at Sat Aug 23 15:16:07 2025 by rpki-client