$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft File: A-8OOQoxXl88RhsKcrIYvuIj4A4.mft (raw, json) Hash identifier: p9+O5ZTKq9C1cFsZ/PeYT/2/Hqplijjoxyd4jST6hYg= Subject key identifier: 9E:97:F1:41:F9:5B:4B:A8:22:A4:0E:B1:0F:44:97:8A:5A:B9:76:82 Authority key identifier: 03:EF:0E:39:0A:31:5E:5F:3C:46:1B:0A:72:B2:18:BE:E2:23:E0:0E Certificate issuer: /CN=A91A0FC0/serialNumber=03EF0E390A315E5F3C461B0A72B218BEE223E00E Certificate serial: DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A-8OOQoxXl88RhsKcrIYvuIj4A4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft Manifest number: 0491 Signing time: Tue 01 Jul 2025 01:15:26 +0000 Manifest this update: Tue 01 Jul 2025 01:15:26 +0000 Manifest next update: Tue 08 Jul 2025 01:15:26 +0000 Files and hashes: 1: A-8OOQoxXl88RhsKcrIYvuIj4A4.crl (hash: QVMmDMuYsyMQoYwbszqhIoOKExRlMt6/J760Z5+MBn4=) 2: 9190CF9E2E7811EFB7206224C4F9AE02.roa (hash: h88YKkcazjRoHLRQFSfgpu+Eo1A4vft9VL2aQVc7RoU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.crl rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A-8OOQoxXl88RhsKcrIYvuIj4A4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:15:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0FC0, serialNumber=03EF0E390A315E5F3C461B0A72B218BEE223E00E Validity Not Before: Jul 1 01:15:26 2025 GMT Not After : Jul 8 01:15:26 2025 GMT Subject: CN=686336ae-796a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:33:54:a8:24:42:a5:16:36:1e:4b:d6:27:38: c4:ee:24:ad:db:89:ad:4d:35:0f:8e:50:c3:ee:72: a6:54:77:0a:bf:10:98:33:6b:ff:49:cb:11:79:8c: 9c:ea:98:20:6e:48:1b:30:f4:42:f1:44:94:f2:69: 62:f1:ef:b1:d8:f0:0e:ac:47:3e:3f:dc:d8:c5:a0: 11:f8:30:19:96:d4:4f:73:2c:a3:a3:8b:73:b4:36: 65:dd:53:78:d1:ad:d6:22:66:39:f3:49:d0:9c:3a: bc:37:3a:a4:94:01:c5:7e:ca:1d:2f:fb:c1:43:f3: bb:95:d0:2c:ed:74:71:b3:76:0e:b2:f9:dc:b8:50: 55:f9:41:ba:b3:d4:f5:f6:c5:7e:4f:79:5d:2d:60: 30:77:7f:58:bd:9d:de:57:dd:e1:b8:0a:b6:dc:35: 13:e2:95:fe:41:48:87:e8:42:02:fd:93:65:07:b2: 86:ef:6c:59:64:8a:02:0f:58:dd:56:a5:b6:6f:fc: 0c:38:31:80:63:f7:4c:78:39:3d:a7:88:08:89:49: db:6d:0e:e4:47:1e:f5:e2:3b:03:87:88:2d:98:d1: 11:a5:8d:50:4a:1f:ff:5b:14:95:9e:fc:ef:be:fa: e6:09:fd:e7:cf:29:d3:a3:bf:de:ee:20:68:ed:0c: cb:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:97:F1:41:F9:5B:4B:A8:22:A4:0E:B1:0F:44:97:8A:5A:B9:76:82 X509v3 Authority Key Identifier: keyid:03:EF:0E:39:0A:31:5E:5F:3C:46:1B:0A:72:B2:18:BE:E2:23:E0:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A-8OOQoxXl88RhsKcrIYvuIj4A4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:de:98:24:61:40:d6:0b:2c:d4:53:73:66:88:5d:5f:23:0e: e0:9a:f3:7f:20:4e:66:eb:58:e2:ac:0a:1b:bf:ad:2b:db:0a: 2b:ab:88:02:1c:3c:73:f3:97:03:c7:31:2a:34:10:04:07:03: d5:10:8e:2a:56:0f:d5:28:2a:ec:19:4f:5e:9f:f0:ff:c8:d6: 4c:95:54:ba:e1:c3:3f:19:f5:6f:bd:4b:60:bd:5a:10:b5:f6: 90:3d:53:c9:49:be:02:fd:22:9f:e6:43:a5:4d:c1:96:2d:5d: 5a:9d:69:6a:03:bf:11:a0:98:b0:b8:78:52:e7:9d:5c:42:37: 76:be:e9:24:a2:62:5b:42:1d:18:78:c8:07:1e:d7:2c:dc:ec: d0:0c:8f:36:4a:31:a8:85:fc:a9:31:a2:05:29:37:90:14:eb: 9c:63:8e:d4:a1:42:52:fa:8f:d8:f9:3f:86:d2:ba:24:80:e4: 97:09:d2:c5:d5:91:be:b7:62:58:44:d3:06:d4:8b:e0:57:a2: 8d:1a:70:96:67:53:72:57:c8:95:ec:92:3e:f7:8a:91:cb:2c: 7d:0c:3b:64:c4:cf:82:e8:5c:9e:c5:06:c5:9b:ab:ab:b3:fa: af:70:a5:eb:a5:7a:84:cf:62:59:2f:82:0d:31:91:b5:e3:0b: bc:15:ae:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBGQzAxMTAvBgNVBAUTKDAzRUYwRTM5MEEzMTVFNUYzQzQ2MUIwQTcyQjIxOEJF RTIyM0UwMEUwHhcNMjUwNzAxMDExNTI2WhcNMjUwNzA4MDExNTI2WjAYMRYwFAYD VQQDEw02ODYzMzZhZS03OTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxjNUqCRCpRY2HkvWJzjE7iSt24mtTTUPjlDD7nKmVHcKvxCYM2v/ScsReYyc 6pggbkgbMPRC8USU8mli8e+x2PAOrEc+P9zYxaAR+DAZltRPcyyjo4tztDZl3VN4 0a3WImY580nQnDq8NzqklAHFfsodL/vBQ/O7ldAs7XRxs3YOsvncuFBV+UG6s9T1 9sV+T3ldLWAwd39YvZ3eV93huAq23DUT4pX+QUiH6EIC/ZNlB7KG72xZZIoCD1jd VqW2b/wMODGAY/dMeDk9p4gIiUnbbQ7kRx714jsDh4gtmNERpY1QSh//WxSVnvzv vvrmCf3nzynTo7/e7iBo7QzLowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ6X8UH5 W0uoIqQOsQ9El4pauXaCMB8GA1UdIwQYMBaAFAPvDjkKMV5fPEYbCnKyGL7iI+AO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEZDMC9DREUwOTg3Njk1 NzgxMUVDQTMyQ0NGNTVDNEY5QUUwMi9BLThPT1FveFhsODhSaHNLY3JJWXZ1SWo0 QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EtOE9PUW94WGw4OFJoc0tjcklZdnVJajRBNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEZDMC9DREUwOTg3Njk1NzgxMUVDQTMyQ0NGNTVDNEY5QUUwMi9BLThPT1FveFhs ODhSaHNLY3JJWXZ1SWo0QTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAr3pgkYUDWCyzUU3NmiF1fIw7gmvN/IE5m61jirAobv60r2worq4gC HDxz85cDxzEqNBAEBwPVEI4qVg/VKCrsGU9en/D/yNZMlVS64cM/GfVvvUtgvVoQ tfaQPVPJSb4C/SKf5kOlTcGWLV1anWlqA78RoJiwuHhS551cQjd2vukkomJbQh0Y eMgHHtcs3OzQDI82SjGohfypMaIFKTeQFOucY47UoUJS+o/Y+T+G0rokgOSXCdLF 1ZG+t2JYRNMG1IvgV6KNGnCWZ1NyV8iV7JI+94qRyyx9DDtkxM+C6FyexQbFm6ur s/qvcKXrpXqEz2JZL4INMZG14wu8Fa5n -----END CERTIFICATE-----Generated at Thu Jul 3 00:49:48 2025 by rpki-client