$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft File: ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft (raw, json) Hash identifier: GTUh1Xs7Ln14QQ2I3Asz+HVf1zUgha6Zu6dl53/Nz2k= Subject key identifier: EC:84:64:41:1E:B4:D9:14:AF:B0:68:36:91:91:E0:84:25:48:CD:EC Authority key identifier: A1:C2:39:65:70:40:17:72:42:9E:B8:CB:B0:DF:66:53:F1:67:8C:F6 Certificate issuer: /CN=A91CE6EC/serialNumber=A1C2396570401772429EB8CBB0DF6653F1678CF6 Certificate serial: 25B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft Manifest number: 25A5 Signing time: Fri 22 Aug 2025 15:46:59 +0000 Manifest this update: Fri 22 Aug 2025 15:46:59 +0000 Manifest next update: Fri 29 Aug 2025 15:46:59 +0000 Files and hashes: 1: ocI5ZXBAF3JCnrjLsN9mU_FnjPY.crl (hash: 0/AWBM6nj+87WL/KAPxdSziQmqNkaxkl2Ev/BrCI/9s=) 2: 96F26DD8E4A511EF8259C769C4F9AE02.roa (hash: 106BmLtTyVCv8aiEyQESyMsMUTUgBCG4YPN0EmuEMYs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.crl rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9649 (0x25b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE6EC, serialNumber=A1C2396570401772429EB8CBB0DF6653F1678CF6 Validity Not Before: Aug 22 15:46:59 2025 GMT Not After : Aug 29 15:46:59 2025 GMT Subject: CN=68a890f3-c8d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:16:26:f2:3d:61:28:63:b5:b3:30:ea:71:62: 2f:5e:37:97:d9:10:d5:ca:6a:ac:68:d6:a8:32:0f: 9a:2d:69:10:e5:14:91:46:de:a9:84:66:34:a8:3c: 92:d3:53:bc:1e:d0:5b:25:ff:cb:23:bc:ad:64:cd: e7:4e:fb:44:38:f9:3c:5a:29:46:38:09:af:c2:7a: c0:34:90:55:5c:b7:f9:40:bd:2f:9c:dd:4d:9c:51: f1:5c:21:d8:9c:a1:20:90:e8:3a:4c:6a:d3:d9:32: 45:34:a3:2c:d9:d1:ec:f0:dd:21:ee:e1:29:e6:2b: a3:79:46:70:b8:c5:cd:f8:e6:44:55:e1:e9:bf:79: 2f:28:80:c8:32:60:41:6e:ea:b9:85:af:e7:0c:c0: 89:c8:04:70:ea:82:1d:80:2a:5f:9b:ce:da:94:1e: b2:c5:c2:28:cb:de:41:ff:2a:35:32:e3:36:5b:4f: 9d:63:cd:42:89:ce:dd:17:9f:3e:0b:96:df:be:48: 12:a5:f7:0b:3e:66:75:9b:cf:14:f7:d2:f6:41:d6: 1e:e0:6a:8e:28:d2:aa:52:48:e3:48:3c:11:df:0c: 0a:c2:81:87:eb:b5:67:75:d9:ef:06:d6:75:dc:e4: 87:df:7c:76:51:be:bb:f9:e5:b0:e4:50:61:eb:d2: 6c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:84:64:41:1E:B4:D9:14:AF:B0:68:36:91:91:E0:84:25:48:CD:EC X509v3 Authority Key Identifier: keyid:A1:C2:39:65:70:40:17:72:42:9E:B8:CB:B0:DF:66:53:F1:67:8C:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:83:83:dc:cd:ea:ea:87:f3:71:65:aa:a0:48:34:9a:cf:40: 00:e4:d3:fe:ac:29:1d:6a:e7:86:30:c3:f1:d5:78:a8:af:07: e9:ea:f0:83:d0:f4:21:88:bf:04:ef:80:0d:a9:bc:0a:2e:52: ad:e7:13:2f:0e:73:c4:e6:30:dc:83:31:2d:11:5d:d4:f7:5c: 2f:36:e4:54:03:4a:dd:a7:5f:c3:bb:69:68:ad:f7:12:3a:9d: 7d:56:d0:ef:2d:31:7d:b6:e2:a7:82:58:b1:74:ee:c7:b9:30: 81:a5:f0:c9:b5:0b:50:dc:4e:df:5d:d1:43:4c:b8:19:90:dd: 8f:14:92:0a:21:94:06:16:bd:96:fe:58:c1:f0:e4:ad:a7:b0: 5c:b8:76:3e:3e:d6:0c:56:ec:ca:fd:01:58:fc:42:dd:85:89: 0f:5c:2e:fa:4d:a8:c1:74:f0:8f:77:6e:1e:21:3a:c8:49:fe: d2:bb:8d:98:42:26:3e:c1:bc:44:e1:c3:97:52:de:97:74:e7: b3:49:59:8e:e3:40:1a:fa:e1:c2:41:ca:38:23:6d:8f:27:29: 5b:f3:82:7b:c8:a6:dc:81:e2:68:61:99:42:cf:39:7f:bd:d6: 15:5f:c3:94:2c:54:89:57:63:d6:1d:53:2e:ef:25:52:f4:35: 23:da:55:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U2RUMxMTAvBgNVBAUTKEExQzIzOTY1NzA0MDE3NzI0MjlFQjhDQkIwREY2NjUz RjE2NzhDRjYwHhcNMjUwODIyMTU0NjU5WhcNMjUwODI5MTU0NjU5WjAYMRYwFAYD VQQDEw02OGE4OTBmMy1jOGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAohYm8j1hKGO1szDqcWIvXjeX2RDVymqsaNaoMg+aLWkQ5RSRRt6phGY0qDyS 01O8HtBbJf/LI7ytZM3nTvtEOPk8WilGOAmvwnrANJBVXLf5QL0vnN1NnFHxXCHY nKEgkOg6TGrT2TJFNKMs2dHs8N0h7uEp5iujeUZwuMXN+OZEVeHpv3kvKIDIMmBB buq5ha/nDMCJyARw6oIdgCpfm87alB6yxcIoy95B/yo1MuM2W0+dY81Cic7dF58+ C5bfvkgSpfcLPmZ1m88U99L2QdYe4GqOKNKqUkjjSDwR3wwKwoGH67VnddnvBtZ1 3OSH33x2Ub67+eWw5FBh69JsrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOyEZEEe tNkUr7BoNpGR4IQlSM3sMB8GA1UdIwQYMBaAFKHCOWVwQBdyQp64y7DfZlPxZ4z2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTZFQy9EM0FCNjAxNjE0 QzgxMUU1QTJGQ0VGMTVDNEY5QUUwMi9vY0k1WlhCQUYzSkNucmpMc045bVVfRm5q UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29jSTVaWEJBRjNKQ25yakxzTjltVV9GbmpQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTZFQy9EM0FCNjAxNjE0QzgxMUU1QTJGQ0VGMTVDNEY5QUUwMi9vY0k1WlhCQUYz SkNucmpMc045bVVfRm5qUFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJg4Pczerqh/NxZaqgSDSaz0AA5NP+rCkdaueGMMPx1Xiorwfp6vCD 0PQhiL8E74ANqbwKLlKt5xMvDnPE5jDcgzEtEV3U91wvNuRUA0rdp1/Du2lorfcS Op19VtDvLTF9tuKnglixdO7HuTCBpfDJtQtQ3E7fXdFDTLgZkN2PFJIKIZQGFr2W /ljB8OStp7BcuHY+PtYMVuzK/QFY/ELdhYkPXC76TajBdPCPd24eITrISf7Su42Y QiY+wbxE4cOXUt6XdOezSVmO40Aa+uHCQco4I22PJylb84J7yKbcgeJoYZlCzzl/ vdYVX8OULFSJV2PWHVMu7yVS9DUj2lXd -----END CERTIFICATE-----Generated at Sat Aug 23 16:10:52 2025 by rpki-client