$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft File: OddGjPgMUFXp0EybT60xF1wU1l8.mft (raw, json) Hash identifier: XhWq+/A4R7yYAsTYiYolfttIKhEG4HFVUg/GA+lN+xE= Subject key identifier: BD:48:D3:6F:A9:2C:38:8D:C3:E0:1F:55:5C:9C:C6:FF:ED:14:91:72 Authority key identifier: 39:D7:46:8C:F8:0C:50:55:E9:D0:4C:9B:4F:AD:31:17:5C:14:D6:5F Certificate issuer: /CN=A91AD643/serialNumber=39D7468CF80C5055E9D04C9B4FAD31175C14D65F Certificate serial: 0701 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft Manifest number: 06F5 Signing time: Fri 22 Aug 2025 22:07:07 +0000 Manifest this update: Fri 22 Aug 2025 22:07:07 +0000 Manifest next update: Fri 29 Aug 2025 22:07:07 +0000 Files and hashes: 1: OddGjPgMUFXp0EybT60xF1wU1l8.crl (hash: TfDrligqZUBecKnyJuQSzCPMt304zxQThuy8Lq8LpVI=) 2: 865F2F80EE8911EBB390AC76C4F9AE02.roa (hash: 0ULrTT5sEmnlV5jXg9GCbo9G2IRIBRTqvgY01zsRTW8=) 3: 81E9653E5B8A11EB857A3F77C4F9AE02.roa (hash: hFkz2Rxz8bjHa9W5ewxpkxAw84TOeg9mnyL9BGUNw+E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.crl rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:07:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1793 (0x701) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD643, serialNumber=39D7468CF80C5055E9D04C9B4FAD31175C14D65F Validity Not Before: Aug 22 22:07:07 2025 GMT Not After : Aug 29 22:07:07 2025 GMT Subject: CN=68a8ea0b-9250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:34:ad:6a:10:7c:06:03:b6:0f:32:82:56:7f: a7:7d:aa:98:d9:fb:18:39:55:73:e7:cf:b9:42:4a: 85:4d:86:d9:16:6f:d4:a2:c4:d6:51:4f:c1:01:d2: ef:8c:58:e0:06:3c:25:53:e8:35:c4:a0:45:ce:86: c8:d5:0f:df:7e:74:a3:5d:53:7f:77:a1:a5:b4:d4: 0c:42:67:86:7f:8a:a0:d5:cd:b4:14:bd:a5:21:8d: b4:b1:96:35:5c:c2:5d:6f:ff:56:24:50:0c:1a:3c: ac:48:77:0d:4c:b9:16:6d:a3:61:3a:e6:65:c7:79: a5:74:b8:e9:e7:47:ac:22:15:5a:04:a4:dd:01:ac: f5:81:cc:4b:f4:02:1c:67:86:12:a4:ad:65:34:70: 8e:18:9e:7f:e3:e8:30:01:73:e5:cb:a1:e7:ad:0f: 18:5a:42:6f:a7:03:58:e6:e0:dd:f4:78:f1:de:8f: e4:aa:c3:cb:98:5f:a8:a9:a9:a7:f7:04:fe:99:29: 4f:8a:57:73:26:c2:3c:4f:7e:75:39:0b:0f:74:b5: cd:dd:4f:30:fb:5c:ea:c6:7c:a1:c6:0e:c0:d6:af: c9:51:b5:b5:7d:28:db:6b:7f:d9:3f:1e:e4:dd:51: 27:b4:33:74:92:0a:85:eb:5f:be:fd:bc:f4:86:81: 88:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:48:D3:6F:A9:2C:38:8D:C3:E0:1F:55:5C:9C:C6:FF:ED:14:91:72 X509v3 Authority Key Identifier: keyid:39:D7:46:8C:F8:0C:50:55:E9:D0:4C:9B:4F:AD:31:17:5C:14:D6:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:5e:19:f2:53:b1:3d:2f:a1:58:40:e5:b0:62:c9:2d:6a:b5: db:b0:07:6e:ad:b4:c3:fb:ff:3c:05:e0:6c:d7:e1:9f:77:f0: 1c:92:69:31:45:66:65:50:54:6a:d9:1d:40:da:0b:c0:77:b9: 47:42:4b:57:58:df:45:50:cc:c0:b2:f9:a1:a9:e2:da:dc:f2: 14:94:cf:14:3c:fb:8b:bf:83:db:51:ad:00:e3:48:f5:e4:51: a9:da:0a:14:07:88:44:f5:df:09:35:cc:4d:4a:98:22:0f:cf: dc:8e:9f:54:f8:de:1a:a0:b3:bb:f5:da:9a:0e:c7:e6:3b:05: 9f:55:b9:e6:37:e8:e7:f8:91:bb:3f:ff:8b:37:c2:59:d5:b3: 59:91:80:15:89:8d:b8:2b:dd:b7:00:66:91:7e:43:23:4f:3a: 55:80:f7:47:4d:de:5a:2e:e0:54:a2:39:f1:e0:da:c3:b8:9f: 2f:a7:d7:b4:78:b2:67:81:ee:7c:d0:e2:22:56:3b:8c:75:01: ba:92:9d:11:dd:74:50:72:a8:cc:12:b8:c0:38:47:ce:8e:d2: 4d:54:2d:ea:93:31:d5:a3:4b:dc:d9:99:07:2e:a5:69:a8:0d: 0e:0e:9e:2d:95:e0:89:da:79:da:5b:94:48:ea:ee:c9:fd:16: c2:f9:76:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ2NDMxMTAvBgNVBAUTKDM5RDc0NjhDRjgwQzUwNTVFOUQwNEM5QjRGQUQzMTE3 NUMxNEQ2NUYwHhcNMjUwODIyMjIwNzA3WhcNMjUwODI5MjIwNzA3WjAYMRYwFAYD VQQDEw02OGE4ZWEwYi05MjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqDStahB8BgO2DzKCVn+nfaqY2fsYOVVz58+5QkqFTYbZFm/UosTWUU/BAdLv jFjgBjwlU+g1xKBFzobI1Q/ffnSjXVN/d6GltNQMQmeGf4qg1c20FL2lIY20sZY1 XMJdb/9WJFAMGjysSHcNTLkWbaNhOuZlx3mldLjp50esIhVaBKTdAaz1gcxL9AIc Z4YSpK1lNHCOGJ5/4+gwAXPly6HnrQ8YWkJvpwNY5uDd9Hjx3o/kqsPLmF+oqamn 9wT+mSlPildzJsI8T351OQsPdLXN3U8w+1zqxnyhxg7A1q/JUbW1fSjba3/ZPx7k 3VEntDN0kgqF61++/bz0hoGI5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL1I02+p LDiNw+AfVVycxv/tFJFyMB8GA1UdIwQYMBaAFDnXRoz4DFBV6dBMm0+tMRdcFNZf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDY0My9FRkJFNkVCMjVC ODgxMUVCQkQ1RjMwNzZDNEY5QUUwMi9PZGRHalBnTVVGWHAwRXliVDYweEYxd1Ux bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09kZEdqUGdNVUZYcDBFeWJUNjB4RjF3VTFsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDY0My9FRkJFNkVCMjVCODgxMUVCQkQ1RjMwNzZDNEY5QUUwMi9PZGRHalBnTVVG WHAwRXliVDYweEYxd1UxbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAXhnyU7E9L6FYQOWwYsktarXbsAdurbTD+/88BeBs1+Gfd/Ackmkx RWZlUFRq2R1A2gvAd7lHQktXWN9FUMzAsvmhqeLa3PIUlM8UPPuLv4PbUa0A40j1 5FGp2goUB4hE9d8JNcxNSpgiD8/cjp9U+N4aoLO79dqaDsfmOwWfVbnmN+jn+JG7 P/+LN8JZ1bNZkYAViY24K923AGaRfkMjTzpVgPdHTd5aLuBUojnx4NrDuJ8vp9e0 eLJnge580OIiVjuMdQG6kp0R3XRQcqjMErjAOEfOjtJNVC3qkzHVo0vc2ZkHLqVp qA0ODp4tleCJ2nnaW5RI6u7J/RbC+Xb/ -----END CERTIFICATE-----Generated at Sat Aug 23 20:32:43 2025 by rpki-client