$ rpki-client -vvf rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft File: OoeHHjuuZe3i8xuxrVxZu3p0q90.mft (raw, json) Hash identifier: qN3oVIzHQossREP4YS7gkVphgKJJYqnRNRR2YdRho7E= Subject key identifier: 93:8B:F4:71:E6:90:CA:68:D2:37:34:57:1B:58:CA:4A:99:47:AD:B5 Authority key identifier: 3A:87:87:1E:3B:AE:65:ED:E2:F3:1B:B1:AD:5C:59:BB:7A:74:AB:DD Certificate issuer: /CN=A91B87FC/serialNumber=3A87871E3BAE65EDE2F31BB1AD5C59BB7A74ABDD Certificate serial: 8F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft Manifest number: 8C Signing time: Thu 03 Jul 2025 06:44:37 +0000 Manifest this update: Thu 03 Jul 2025 06:44:36 +0000 Manifest next update: Thu 10 Jul 2025 06:44:36 +0000 Files and hashes: 1: OoeHHjuuZe3i8xuxrVxZu3p0q90.crl (hash: 8WDc+dY5w5qjV8zjquMN4W7TiKxHpjDYblPv2jZAogQ=) 2: 5E85AD042B1B11F0AE3E223BC4F9AE02.roa (hash: ehnqd1f3QowHKupxZCgtiZG9EfVwv3NoZQIQlB2w/i4=) 3: 64517A3886E311EFA2B33527C4F9AE02.roa (hash: a8PUztMZjKwlO5oAsBw+JL1gQU9NMI2G6jad/TSX5I0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.crl rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 143 (0x8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B87FC, serialNumber=3A87871E3BAE65EDE2F31BB1AD5C59BB7A74ABDD Validity Not Before: Jul 3 06:44:36 2025 GMT Not After : Jul 10 06:44:36 2025 GMT Subject: CN=686626d5-0d78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:37:01:13:b3:73:cc:42:5d:d8:29:28:38:b6: e5:63:fe:44:b3:45:21:ae:de:0d:e2:51:e0:04:4d: 4e:88:16:9d:ef:2f:86:2f:f5:cd:54:35:39:d7:66: 6f:d0:f4:bd:a6:13:d8:b2:8b:1a:e2:63:f8:95:37: 98:c5:ed:aa:68:8f:9c:13:15:95:ea:cc:a6:49:ab: a0:1e:df:0e:f3:57:98:34:30:fe:b5:06:3b:bd:e0: fc:0e:8f:9a:7f:10:93:57:18:5f:0b:75:60:ee:2d: 72:c7:f3:c4:6a:7e:72:43:b9:d2:c0:4e:ec:98:91: e1:9a:00:83:1d:76:fe:52:37:bd:dd:60:c6:62:3e: bd:b7:2a:51:52:61:e0:0d:81:29:ea:95:b2:68:c5: 7b:3b:5e:28:9a:c3:e6:e0:28:7e:23:41:72:d7:c5: c1:f5:5f:be:b8:52:50:e2:83:c0:27:3b:6d:86:25: 00:67:ca:4e:3e:f6:42:1f:20:bd:c6:b5:0f:82:b9: a2:29:4f:6a:ed:89:3e:7a:74:91:21:75:8c:cb:57: d8:9e:b6:00:dc:90:b2:ee:18:4f:68:5b:15:84:50: 1a:49:b6:16:12:08:fe:ad:f8:68:85:2f:1a:59:a2: 5f:72:b2:4a:0d:d0:af:30:1c:29:50:a3:60:e1:07: 46:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:8B:F4:71:E6:90:CA:68:D2:37:34:57:1B:58:CA:4A:99:47:AD:B5 X509v3 Authority Key Identifier: keyid:3A:87:87:1E:3B:AE:65:ED:E2:F3:1B:B1:AD:5C:59:BB:7A:74:AB:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:38:61:b1:70:6e:6a:ec:a0:84:6e:de:6a:af:4a:b5:6f:ad: 72:f9:89:7b:a5:49:71:a7:d5:a5:ea:a0:c1:e7:e0:19:c8:9b: 4e:d9:4d:89:42:95:fb:7a:92:86:58:73:02:03:33:c1:da:74: ca:fd:9b:92:db:9a:ea:0b:73:53:d6:5f:52:67:26:e7:e8:35: 50:17:67:d2:a3:9f:68:91:31:60:41:22:77:0f:18:e5:26:53: 2b:74:45:47:07:1f:5c:d1:82:40:3b:0a:54:77:6f:f3:e2:ca: 62:2f:52:57:d4:23:24:f6:73:78:b7:f9:dc:82:31:f8:38:d7: 0f:c6:ea:ea:7c:9b:2b:00:10:19:b1:a4:1f:bb:84:d4:96:6b: dc:b8:32:ef:cb:de:3b:96:ce:11:8b:0b:f1:9f:7e:f2:30:59: 86:cc:bb:93:80:e8:87:58:f2:98:13:0e:86:b4:54:45:2a:aa: 32:19:53:09:2f:c9:72:fd:32:c2:54:38:51:85:83:11:90:55: 1f:bf:29:9a:b8:d6:b0:2c:61:0c:88:09:bd:a3:0e:b3:52:8b: 79:0a:84:b1:42:19:b2:b9:85:ef:1c:56:a8:8f:5d:b2:53:2a: 5e:a0:04:ba:bd:3c:5b:38:86:cd:ce:74:b4:64:13:7d:8d:86: 4a:b3:9d:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg3RkMxMTAvBgNVBAUTKDNBODc4NzFFM0JBRTY1RURFMkYzMUJCMUFENUM1OUJC N0E3NEFCREQwHhcNMjUwNzAzMDY0NDM2WhcNMjUwNzEwMDY0NDM2WjAYMRYwFAYD VQQDEw02ODY2MjZkNS0wZDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1DcBE7NzzEJd2CkoOLblY/5Es0Uhrt4N4lHgBE1OiBad7y+GL/XNVDU512Zv 0PS9phPYsosa4mP4lTeYxe2qaI+cExWV6symSaugHt8O81eYNDD+tQY7veD8Do+a fxCTVxhfC3Vg7i1yx/PEan5yQ7nSwE7smJHhmgCDHXb+Uje93WDGYj69typRUmHg DYEp6pWyaMV7O14omsPm4Ch+I0Fy18XB9V++uFJQ4oPAJztthiUAZ8pOPvZCHyC9 xrUPgrmiKU9q7Yk+enSRIXWMy1fYnrYA3JCy7hhPaFsVhFAaSbYWEgj+rfhohS8a WaJfcrJKDdCvMBwpUKNg4QdG9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJOL9HHm kMpo0jc0VxtYykqZR621MB8GA1UdIwQYMBaAFDqHhx47rmXt4vMbsa1cWbt6dKvd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODdGQy8zOTc4RTMxNjg2 RTExMUVGOEY3NzNGODJDNEY5QUUwMi9Pb2VISGp1dVplM2k4eHV4clZ4WnUzcDBx OTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09vZUhIanV1WmUzaTh4dXhyVnhadTNwMHE5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODdGQy8zOTc4RTMxNjg2RTExMUVGOEY3NzNGODJDNEY5QUUwMi9Pb2VISGp1dVpl M2k4eHV4clZ4WnUzcDBxOTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuOGGxcG5q7KCEbt5qr0q1b61y+Yl7pUlxp9Wl6qDB5+AZyJtO2U2J QpX7epKGWHMCAzPB2nTK/ZuS25rqC3NT1l9SZybn6DVQF2fSo59okTFgQSJ3Dxjl JlMrdEVHBx9c0YJAOwpUd2/z4spiL1JX1CMk9nN4t/ncgjH4ONcPxurqfJsrABAZ saQfu4TUlmvcuDLvy947ls4Riwvxn37yMFmGzLuTgOiHWPKYEw6GtFRFKqoyGVMJ L8ly/TLCVDhRhYMRkFUfvymauNawLGEMiAm9ow6zUot5CoSxQhmyuYXvHFaoj12y UypeoAS6vTxbOIbNznS0ZBN9jYZKs52N -----END CERTIFICATE-----Generated at Fri Jul 4 14:59:50 2025 by rpki-client