$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.mft File: OZp7H8QgfroHB6hRUZXMaOg2q_g.mft (raw, json) Hash identifier: 75mRUbtGb5WtZSX6POue4XQzq27c7i52qGByClIrqjk= Subject key identifier: 52:13:3E:DE:B6:D0:DA:5B:AE:41:94:29:04:1C:E1:BF:02:71:B3:CB Authority key identifier: 39:9A:7B:1F:C4:20:7E:BA:07:07:A8:51:51:95:CC:68:E8:36:AB:F8 Certificate issuer: /CN=A91C1025/serialNumber=399A7B1FC4207EBA0707A8515195CC68E836ABF8 Certificate serial: 9C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZp7H8QgfroHB6hRUZXMaOg2q_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.mft Manifest number: 99 Signing time: Sat 23 Aug 2025 06:39:16 +0000 Manifest this update: Sat 23 Aug 2025 06:39:16 +0000 Manifest next update: Sat 30 Aug 2025 06:39:16 +0000 Files and hashes: 1: OZp7H8QgfroHB6hRUZXMaOg2q_g.crl (hash: cDUPpFHzLZCA8ZswSpHRmnEpleDkgQTfQcvbdLiOJnE=) 2: 4996A7209D9211EFAD3DCF45C4F9AE02.roa (hash: X6VArMN74z4tgeDbEQQzHaT88BAEASciUle7rIza6xc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.crl rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZp7H8QgfroHB6hRUZXMaOg2q_g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:39:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1025, serialNumber=399A7B1FC4207EBA0707A8515195CC68E836ABF8 Validity Not Before: Aug 23 06:39:16 2025 GMT Not After : Aug 30 06:39:16 2025 GMT Subject: CN=68a96214-5dad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:78:44:86:7b:3e:18:ac:97:65:74:b9:5a:f6: 1f:0f:ff:e4:88:c7:67:38:d0:ea:8e:39:d5:94:26: f1:e8:38:91:a6:3f:30:26:4b:fb:ee:f7:25:85:8b: c6:f5:31:11:28:8a:40:d3:fc:27:d0:12:7d:8e:55: 83:9b:8b:e9:ff:a4:67:26:e3:4d:6a:1b:f5:f7:be: e0:cd:b4:bb:cb:e5:20:64:68:70:73:f6:f1:a0:3d: ad:01:41:cc:d4:e8:44:65:90:55:e6:37:59:53:ec: bf:75:de:ab:31:be:34:52:e3:1a:a9:7c:f0:b9:55: 8a:bb:44:49:19:8e:b3:58:bc:1e:83:90:96:15:f4: fb:b6:ac:15:4e:89:42:49:8f:c0:42:94:56:37:98: 9a:45:ec:a1:b5:6a:be:4f:d2:c6:e7:2e:04:e7:b8: d2:cb:41:90:1e:0e:58:4f:35:59:7b:ce:87:0c:9a: 6e:c0:62:a3:e9:f1:3f:01:18:2c:3c:f6:02:52:5f: fb:0a:bc:aa:d8:e7:86:a8:97:67:02:8f:89:e1:2d: e2:b7:b4:17:78:9a:94:ba:20:a0:dc:12:9b:c1:26: 35:9f:72:5d:b5:e3:e2:44:01:86:4b:8e:45:f9:c2: 66:99:c6:99:0e:5e:83:94:06:b8:80:31:2d:f0:ec: 68:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:13:3E:DE:B6:D0:DA:5B:AE:41:94:29:04:1C:E1:BF:02:71:B3:CB X509v3 Authority Key Identifier: keyid:39:9A:7B:1F:C4:20:7E:BA:07:07:A8:51:51:95:CC:68:E8:36:AB:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZp7H8QgfroHB6hRUZXMaOg2q_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:f8:02:01:08:a3:bb:80:5a:99:1d:74:26:d1:73:12:9c:b6: 16:de:2b:02:31:8d:37:8f:98:10:d9:28:11:9a:86:d8:cf:26: 93:51:d4:5c:aa:ca:2c:ac:45:be:1b:64:f9:78:4c:8e:c1:fa: cd:c2:cf:70:0a:d5:00:3f:70:b5:4a:6b:37:e2:1a:18:ba:3b: 47:50:cb:c9:bd:30:b3:f5:f8:c5:76:54:a9:9e:6e:33:4a:56: 44:35:8e:90:b2:d6:de:19:e8:e1:14:b8:03:4a:6c:c3:b7:e3: 77:c4:18:e0:3d:94:63:fd:2f:71:bc:43:d9:2a:de:a1:7a:f9: 93:60:a9:21:bd:84:96:59:52:e3:9d:d3:f4:fd:af:42:ca:dc: dc:b1:66:35:11:d6:64:af:9e:c1:e7:da:05:ab:5e:c3:41:7a: cd:b0:67:11:66:ef:d6:a5:2d:e7:a9:fd:7b:dd:ff:a9:91:e0: 94:62:11:67:20:fe:d0:d5:4d:1d:5c:65:04:94:ef:cd:44:88: 26:95:82:dd:73:cc:d7:9f:44:d8:c8:59:64:44:2a:08:fd:d9: 28:bb:0b:b1:0c:29:dd:0f:67:1d:63:6b:2c:34:45:a9:08:2c: 87:f0:69:7a:5c:44:69:20:1c:b0:a8:60:dd:8b:6b:3b:3f:6f: d7:c9:4d:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEwMjUxMTAvBgNVBAUTKDM5OUE3QjFGQzQyMDdFQkEwNzA3QTg1MTUxOTVDQzY4 RTgzNkFCRjgwHhcNMjUwODIzMDYzOTE2WhcNMjUwODMwMDYzOTE2WjAYMRYwFAYD VQQDEw02OGE5NjIxNC01ZGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyXhEhns+GKyXZXS5WvYfD//kiMdnONDqjjnVlCbx6DiRpj8wJkv77vclhYvG 9TERKIpA0/wn0BJ9jlWDm4vp/6RnJuNNahv1977gzbS7y+UgZGhwc/bxoD2tAUHM 1OhEZZBV5jdZU+y/dd6rMb40UuMaqXzwuVWKu0RJGY6zWLweg5CWFfT7tqwVTolC SY/AQpRWN5iaReyhtWq+T9LG5y4E57jSy0GQHg5YTzVZe86HDJpuwGKj6fE/ARgs PPYCUl/7Cryq2OeGqJdnAo+J4S3it7QXeJqUuiCg3BKbwSY1n3JdtePiRAGGS45F +cJmmcaZDl6DlAa4gDEt8Oxo9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFITPt62 0NpbrkGUKQQc4b8CcbPLMB8GA1UdIwQYMBaAFDmaex/EIH66BweoUVGVzGjoNqv4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTAyNS84RDdCOUJGMjlE ODQxMUVGODE3RTE0MjBDNEY5QUUwMi9PWnA3SDhRZ2Zyb0hCNmhSVVpYTWFPZzJx X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09acDdIOFFnZnJvSEI2aFJVWlhNYU9nMnFfZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTAyNS84RDdCOUJGMjlEODQxMUVGODE3RTE0MjBDNEY5QUUwMi9PWnA3SDhRZ2Zy b0hCNmhSVVpYTWFPZzJxX2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCd+AIBCKO7gFqZHXQm0XMSnLYW3isCMY03j5gQ2SgRmobYzyaTUdRc qsosrEW+G2T5eEyOwfrNws9wCtUAP3C1Sms34hoYujtHUMvJvTCz9fjFdlSpnm4z SlZENY6QstbeGejhFLgDSmzDt+N3xBjgPZRj/S9xvEPZKt6hevmTYKkhvYSWWVLj ndP0/a9CytzcsWY1EdZkr57B59oFq17DQXrNsGcRZu/WpS3nqf173f+pkeCUYhFn IP7Q1U0dXGUElO/NRIgmlYLdc8zXn0TYyFlkRCoI/dkouwuxDCndD2cdY2ssNEWp CCyH8Gl6XERpIBywqGDdi2s7P2/XyU18 -----END CERTIFICATE-----Generated at Sat Aug 23 12:38:44 2025 by rpki-client