$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft File: cOo3wZMr00-ztIWaNIMaEOYR0PY.mft (raw, json) Hash identifier: ckXVr55O8wvj80Hcxi2ISe3bLV40iy9w1EulSQdp5/g= Subject key identifier: 75:85:5B:AD:86:D8:19:5A:3B:EB:54:AA:C3:C9:0C:71:F1:0A:5B:20 Authority key identifier: 70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6 Certificate issuer: /CN=A91BA1BF/serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6 Certificate serial: 015A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft Manifest number: 0156 Signing time: Sat 23 Aug 2025 04:15:12 +0000 Manifest this update: Sat 23 Aug 2025 04:15:12 +0000 Manifest next update: Sat 30 Aug 2025 04:15:12 +0000 Files and hashes: 1: cOo3wZMr00-ztIWaNIMaEOYR0PY.crl (hash: oYcF2VkhNKx9++nyGFF7lqjCny0dfDr/RlVrAd13GTo=) 2: BC630BAE84FC11EE9887345FC4F9AE02.roa (hash: E3DVtUK4PKLNRTNWPdaED3S506iNVROikAhxbftKIaQ=) 3: 7C58D40872CD11EE81C60650C4F9AE02.roa (hash: hhVy8VlS8PQRYDzu0z2SFqVi4xOaWLt/VFPzg2LCqTM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:15:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 346 (0x15a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA1BF, serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6 Validity Not Before: Aug 23 04:15:12 2025 GMT Not After : Aug 30 04:15:12 2025 GMT Subject: CN=68a94050-d323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:81:31:2e:6d:ca:0b:c7:e2:2c:fa:88:91:3f: 58:06:61:00:f3:94:48:7a:19:44:c0:23:86:3f:90: b9:3a:45:69:a1:70:24:b7:98:df:0f:ad:76:d7:da: ea:78:52:10:70:d2:f9:c4:e1:8b:d2:5c:fe:3c:96: ad:d9:5f:77:38:8c:19:4d:bc:6d:74:d4:3f:86:ec: e5:40:55:4a:b8:64:d1:05:ac:07:61:b6:66:10:da: 23:a2:7e:ab:5e:b9:64:0b:8e:0f:74:f0:d9:fa:5e: 4c:22:58:00:64:fa:0e:1b:69:96:93:85:3f:ef:e3: 24:aa:8c:9b:86:f9:4f:8d:e6:bd:91:00:72:ff:e8: c6:27:8c:19:ad:e9:9e:f8:c8:65:c8:c5:a7:bf:fe: b3:f8:1c:b8:86:b7:42:0c:76:bf:c3:b3:b3:5b:88: d1:08:1d:f6:ba:53:72:b6:18:01:0b:c3:a1:e3:de: b3:37:c3:40:b5:db:94:93:5d:96:d6:f6:18:e1:e5: ab:7d:c1:9a:0b:15:3e:95:09:15:b6:59:ed:c5:d0: 0b:90:19:d2:3a:28:86:7d:18:82:23:6c:67:58:f8: 56:2c:38:d6:87:ae:fb:e8:b5:6d:b4:7f:46:18:f1: a4:0d:d5:92:1e:f8:a6:07:8a:c4:9e:de:d7:cb:53: 6d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:85:5B:AD:86:D8:19:5A:3B:EB:54:AA:C3:C9:0C:71:F1:0A:5B:20 X509v3 Authority Key Identifier: keyid:70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:8d:e2:6b:d4:75:7f:00:c8:03:20:64:53:51:e3:4c:b3:3e: 69:30:cb:e4:6e:e6:01:11:ea:e9:5d:51:d9:c5:90:14:68:08: de:3e:e6:37:30:1e:cb:1b:f6:ea:e1:2d:c2:94:49:e8:41:0a: c9:4e:13:b8:7b:33:58:48:3c:2e:ce:1d:d4:4b:d0:c6:cd:86: 04:92:45:2b:bc:8a:14:a8:5d:2b:97:1f:57:06:38:d2:22:19: 49:cd:bb:4f:88:41:f5:84:16:35:d4:95:d7:de:a6:a5:b8:e9: 15:93:5a:92:0f:bd:13:02:74:e0:40:2e:bb:74:3e:0f:03:81: 6f:08:f5:79:57:84:bc:bb:91:8b:b4:d3:eb:4d:05:0a:25:9d: 3b:bd:67:ee:79:e9:ce:fe:d2:bf:2f:e7:e0:0a:dd:85:65:e2: 3d:06:86:d0:26:5a:5d:d0:df:49:e7:12:2f:ec:95:39:61:ab: 37:77:2e:f2:c3:ba:c5:18:62:bf:1d:9b:92:cc:20:b0:b2:0b: d8:ea:8e:b3:de:81:77:6e:99:2b:a7:02:8a:c5:c7:06:83:94: 38:b2:2b:51:0b:f2:17:e6:35:14:b5:20:aa:d4:0b:de:9f:52: 68:6f:14:cd:95:59:7c:63:74:dc:bf:98:f6:ed:45:b5:e5:34: 0e:07:65:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkExQkYxMTAvBgNVBAUTKDcwRUEzN0MxOTMyQkQzNEZCM0I0ODU5QTM0ODMxQTEw RTYxMUQwRjYwHhcNMjUwODIzMDQxNTEyWhcNMjUwODMwMDQxNTEyWjAYMRYwFAYD VQQDEw02OGE5NDA1MC1kMzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2oExLm3KC8fiLPqIkT9YBmEA85RIehlEwCOGP5C5OkVpoXAkt5jfD61219rq eFIQcNL5xOGL0lz+PJat2V93OIwZTbxtdNQ/huzlQFVKuGTRBawHYbZmENojon6r XrlkC44PdPDZ+l5MIlgAZPoOG2mWk4U/7+MkqoybhvlPjea9kQBy/+jGJ4wZreme +MhlyMWnv/6z+By4hrdCDHa/w7OzW4jRCB32ulNythgBC8Oh496zN8NAtduUk12W 1vYY4eWrfcGaCxU+lQkVtlntxdALkBnSOiiGfRiCI2xnWPhWLDjWh6776LVttH9G GPGkDdWSHvimB4rEnt7Xy1NtFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHWFW62G 2BlaO+tUqsPJDHHxClsgMB8GA1UdIwQYMBaAFHDqN8GTK9NPs7SFmjSDGhDmEdD2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTFCRi84NEUxMEE0Mjcy Q0MxMUVFQjc5NDVBNERDNEY5QUUwMi9jT28zd1pNcjAwLXp0SVdhTklNYUVPWVIw UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NPbzN3Wk1yMDAtenRJV2FOSU1hRU9ZUjBQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTFCRi84NEUxMEE0MjcyQ0MxMUVFQjc5NDVBNERDNEY5QUUwMi9jT28zd1pNcjAw LXp0SVdhTklNYUVPWVIwUFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSjeJr1HV/AMgDIGRTUeNMsz5pMMvkbuYBEerpXVHZxZAUaAjePuY3 MB7LG/bq4S3ClEnoQQrJThO4ezNYSDwuzh3US9DGzYYEkkUrvIoUqF0rlx9XBjjS IhlJzbtPiEH1hBY11JXX3qaluOkVk1qSD70TAnTgQC67dD4PA4FvCPV5V4S8u5GL tNPrTQUKJZ07vWfueenO/tK/L+fgCt2FZeI9BobQJlpd0N9J5xIv7JU5Yas3dy7y w7rFGGK/HZuSzCCwsgvY6o6z3oF3bpkrpwKKxccGg5Q4sitRC/IX5jUUtSCq1Ave n1JobxTNlVl8Y3Tcv5j27UW15TQOB2U5 -----END CERTIFICATE-----Generated at Sun Aug 24 06:48:59 2025 by rpki-client