$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft File: uOpx0E7INugYCHPJ6dQM0uNVNwE.mft (raw, json) Hash identifier: gKKj3RtXbDQPbeyWFUQeIYRjiT+7acC7VleaSmDS568= Subject key identifier: D2:5D:7D:A9:28:63:CB:42:6E:B1:87:32:A7:CB:A3:67:D9:1E:CB:66 Authority key identifier: B8:EA:71:D0:4E:C8:36:E8:18:08:73:C9:E9:D4:0C:D2:E3:55:37:01 Certificate issuer: /CN=A91CCF10/serialNumber=B8EA71D04EC836E8180873C9E9D40CD2E3553701 Certificate serial: 0224 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft Manifest number: 0212 Signing time: Sat 23 Aug 2025 02:20:53 +0000 Manifest this update: Sat 23 Aug 2025 02:20:53 +0000 Manifest next update: Sat 30 Aug 2025 02:20:53 +0000 Files and hashes: 1: uOpx0E7INugYCHPJ6dQM0uNVNwE.crl (hash: Xp/JMD71L6m8TUA1lV7UA2kwG5+fw57lY9UdImO5c34=) 2: CC74271E8A8711ED98572D26C4F9AE02.roa (hash: rGioCcK4Zr+knzNA5J2qJp6M9oaPBmCCilGkVDkio+Y=) 3: 4D54B546616411F0B65D5F70C4F9AE02.roa (hash: CJJ1swHPV2FS2o94pZ274vtIWz1N4ntGwGv8bt1RfcY=) 4: C9E35E848A8711ED98572D26C4F9AE02.roa (hash: eHox8CScwy17I91npttE3xAPIO9P1S6yAPyglPvKM8k=) 5: 82B99B1C6B9F11F09CD3A334C4F9AE02.roa (hash: MOy3nx724ovxMfijazGrKwrHh5j4BrBp6Yxw1lx+7NA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.crl rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 548 (0x224) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCF10, serialNumber=B8EA71D04EC836E8180873C9E9D40CD2E3553701 Validity Not Before: Aug 23 02:20:53 2025 GMT Not After : Aug 30 02:20:53 2025 GMT Subject: CN=68a92585-ed6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7c:c1:cd:96:e5:e5:21:cc:6a:67:ce:93:6e: ad:e4:77:c7:b3:4e:56:03:9d:0b:09:16:c3:bf:ac: 9e:92:94:11:6d:38:81:f5:2b:fd:86:96:12:db:84: fb:fe:4e:62:c1:25:d3:e9:e2:c8:e2:45:a2:2f:f0: df:96:16:7d:2c:7a:ef:50:45:71:7a:30:51:35:6d: 50:f9:4b:e2:8e:40:65:c0:d6:bf:09:61:93:fc:e4: b3:a4:e1:75:ec:f8:6d:42:07:bd:a1:84:54:ac:00: b5:00:b1:2e:b4:84:17:f5:21:07:4d:41:ed:a1:ce: 68:db:ee:0d:05:b9:a6:8a:a1:d7:f3:c0:4f:92:af: 8f:2b:e1:28:88:89:29:90:c1:5c:3a:f1:31:d4:2f: 6e:b7:91:8f:c8:c7:43:3f:6a:7e:f1:42:83:aa:bd: 40:f6:11:be:14:02:0b:b0:89:c0:fc:20:44:92:9e: 98:72:33:78:31:5a:3d:07:93:0f:2d:0e:e0:3f:45: 1d:fe:f4:0d:4b:70:16:65:a9:b0:5a:47:8e:ba:d1: 22:26:48:b3:74:3e:d6:89:b1:50:0c:df:6b:e4:04: f8:79:fd:95:94:16:d1:39:fc:4b:bf:fc:ba:80:e1: ed:14:5e:6c:fc:ba:b6:38:1a:50:89:e4:3f:36:be: d4:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:5D:7D:A9:28:63:CB:42:6E:B1:87:32:A7:CB:A3:67:D9:1E:CB:66 X509v3 Authority Key Identifier: keyid:B8:EA:71:D0:4E:C8:36:E8:18:08:73:C9:E9:D4:0C:D2:E3:55:37:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:05:1c:6c:e0:be:b2:98:f9:a2:1e:41:b7:d5:39:87:00:ef: 47:ff:56:00:d8:83:0a:e1:07:80:e0:33:41:f1:30:8f:ff:e1: ee:a0:cd:10:5a:fe:0d:31:98:4a:59:47:15:d9:10:ec:bf:34: e0:f3:df:0b:cc:ca:1f:d6:a0:d6:8f:79:89:3a:48:cb:14:da: 68:ef:81:4e:85:14:ae:f8:1c:92:a1:cd:9b:53:5b:72:e8:1f: 42:c4:b0:47:a0:c0:ca:e5:61:5a:13:bd:8c:0d:38:62:5d:8f: ca:7d:69:89:b3:ee:47:05:de:14:3f:98:d6:e9:6a:52:70:2c: 00:14:45:80:d4:61:e6:92:fe:1a:ec:0c:48:36:ff:e9:ef:80: 65:32:79:bd:cd:de:f3:4e:61:47:d2:4c:43:6a:d7:56:8b:7e: 46:1b:59:9d:b4:ec:ed:53:2a:de:32:ed:e3:24:db:5c:b3:89: 4c:68:0a:02:61:d0:47:d4:a2:0b:41:cd:d3:71:38:c0:28:f8: 0f:99:72:ba:90:db:74:41:8d:2a:60:24:74:5d:d7:a5:17:51: 45:74:6d:13:21:1d:e9:b6:b1:5a:1c:ba:a2:a2:32:a5:b3:f8: 64:73:80:5e:d4:4b:69:80:a1:76:ed:39:91:04:78:d4:d7:fd: 6d:d4:72:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NGMTAxMTAvBgNVBAUTKEI4RUE3MUQwNEVDODM2RTgxODA4NzNDOUU5RDQwQ0Qy RTM1NTM3MDEwHhcNMjUwODIzMDIyMDUzWhcNMjUwODMwMDIyMDUzWjAYMRYwFAYD VQQDEw02OGE5MjU4NS1lZDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt3zBzZbl5SHMamfOk26t5HfHs05WA50LCRbDv6yekpQRbTiB9Sv9hpYS24T7 /k5iwSXT6eLI4kWiL/DflhZ9LHrvUEVxejBRNW1Q+UvijkBlwNa/CWGT/OSzpOF1 7PhtQge9oYRUrAC1ALEutIQX9SEHTUHtoc5o2+4NBbmmiqHX88BPkq+PK+EoiIkp kMFcOvEx1C9ut5GPyMdDP2p+8UKDqr1A9hG+FAILsInA/CBEkp6YcjN4MVo9B5MP LQ7gP0Ud/vQNS3AWZamwWkeOutEiJkizdD7WibFQDN9r5AT4ef2VlBbROfxLv/y6 gOHtFF5s/Lq2OBpQieQ/Nr7UKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNJdfako Y8tCbrGHMqfLo2fZHstmMB8GA1UdIwQYMBaAFLjqcdBOyDboGAhzyenUDNLjVTcB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0YxMC9FQzY3MzMzRTYw OTAxMUVEQTY3OTFBMERDNEY5QUUwMi91T3B4MEU3SU51Z1lDSFBKNmRRTTB1TlZO d0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VPcHgwRTdJTnVnWUNIUEo2ZFFNMHVOVk53RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0YxMC9FQzY3MzMzRTYwOTAxMUVEQTY3OTFBMERDNEY5QUUwMi91T3B4MEU3SU51 Z1lDSFBKNmRRTTB1TlZOd0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8BRxs4L6ymPmiHkG31TmHAO9H/1YA2IMK4QeA4DNB8TCP/+HuoM0Q Wv4NMZhKWUcV2RDsvzTg898LzMof1qDWj3mJOkjLFNpo74FOhRSu+BySoc2bU1ty 6B9CxLBHoMDK5WFaE72MDThiXY/KfWmJs+5HBd4UP5jW6WpScCwAFEWA1GHmkv4a 7AxINv/p74BlMnm9zd7zTmFH0kxDatdWi35GG1mdtOztUyreMu3jJNtcs4lMaAoC YdBH1KILQc3TcTjAKPgPmXK6kNt0QY0qYCR0XdelF1FFdG0TIR3ptrFaHLqiojKl s/hkc4Be1EtpgKF27TmRBHjU1/1t1HJs -----END CERTIFICATE-----Generated at Sun Aug 24 00:33:19 2025 by rpki-client