$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft File: Soo5XlVsx_Garmqwav8GeUSVa0Y.mft (raw, json) Hash identifier: Pb7y4+eQBQsS1FlSe5agNNlhMeL6HkksXqovUS7URQM= Subject key identifier: E1:DA:52:00:98:E0:32:B9:06:DC:7E:97:2C:47:34:DA:58:2D:FF:CF Authority key identifier: 4A:8A:39:5E:55:6C:C7:F1:9A:AE:6A:B0:6A:FF:06:79:44:95:6B:46 Certificate issuer: /CN=A91CFD5A/serialNumber=4A8A395E556CC7F19AAE6AB06AFF067944956B46 Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft Manifest number: 012E Signing time: Sat 23 Aug 2025 04:47:24 +0000 Manifest this update: Sat 23 Aug 2025 04:47:24 +0000 Manifest next update: Sat 30 Aug 2025 04:47:24 +0000 Files and hashes: 1: Soo5XlVsx_Garmqwav8GeUSVa0Y.crl (hash: 6JOqgW0VA6q7FeLdpyPF0r7S86JI7MEi0YRRhlYSNpI=) 2: D60B1BCCB9AF11EE97EEDB49C4F9AE02.roa (hash: VWW3LG8bH56OHxKp9a6acMJUcTvLWrd2aS1b8cisvbE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.crl rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:47:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFD5A, serialNumber=4A8A395E556CC7F19AAE6AB06AFF067944956B46 Validity Not Before: Aug 23 04:47:24 2025 GMT Not After : Aug 30 04:47:24 2025 GMT Subject: CN=68a947dc-e08f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e4:b0:13:4e:00:89:17:88:ea:94:9c:35:2a: a1:98:a5:6f:08:c7:2d:ac:bd:31:96:35:76:54:c8: b3:67:a1:a4:cb:9c:48:ec:33:a3:cb:2a:84:f3:40: 18:37:6a:49:9f:64:a7:15:dc:14:fe:e0:d3:f4:ee: cc:9a:fe:2b:3d:8d:51:e6:a5:87:46:09:18:ba:a5: 66:15:4a:9d:09:33:d5:46:d5:31:55:16:20:3e:9a: 18:9c:5a:08:37:bf:3e:4c:a7:f0:a9:07:0d:92:45: 55:b3:44:27:5c:11:84:cd:33:0c:cf:4a:d8:87:b2: 69:50:b3:b5:2e:cc:57:5e:43:02:df:c5:37:97:f1: 0f:55:83:d7:cc:f1:6a:c6:08:eb:53:05:11:31:68: 51:0b:83:48:5d:f1:70:2d:07:3a:fb:92:26:da:44: 46:21:dd:12:b8:de:a1:28:98:db:d4:eb:b4:1e:7b: 21:a9:c2:1b:81:0f:23:07:fb:0f:fe:0e:21:24:96: 9e:73:30:33:6d:6c:b3:d9:3a:5b:53:f4:02:48:be: 86:cf:a3:f4:f8:a4:25:d2:f5:4a:ac:0c:99:f6:7e: c1:24:71:2c:60:73:8c:fb:7a:e7:66:4a:66:75:49: 56:ea:e8:71:01:58:0f:a8:40:16:da:c3:9d:57:e1: 23:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:DA:52:00:98:E0:32:B9:06:DC:7E:97:2C:47:34:DA:58:2D:FF:CF X509v3 Authority Key Identifier: keyid:4A:8A:39:5E:55:6C:C7:F1:9A:AE:6A:B0:6A:FF:06:79:44:95:6B:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:bc:bf:22:22:1a:27:17:4a:1f:b4:4e:f1:f2:08:07:4e:3a: d1:46:cb:a2:e6:d5:d3:ec:20:28:45:91:9c:ef:18:08:65:c8: bd:f7:6f:49:2d:49:9d:0e:37:22:f5:02:08:70:d3:72:a8:fa: 0c:d3:fd:4d:4d:9d:0a:2a:4e:49:f6:d4:d6:90:33:95:93:11: 1b:47:1c:3c:b5:0e:ed:3c:6f:bc:a1:c7:d4:4e:89:6f:8f:da: db:66:2b:1a:89:6d:11:fc:ae:84:a6:4e:9d:fb:c1:ab:15:34: 02:af:f1:6f:de:45:3f:2a:72:ab:3c:5a:e3:a9:4f:ef:62:d8: e6:1f:d6:bd:59:da:36:51:81:e8:bb:df:5d:d0:2f:44:8f:24: 43:41:b2:e6:72:f0:79:56:2d:6b:11:bc:c5:a5:00:a9:97:17: 3f:f7:ed:2e:87:27:6b:72:4e:e2:e4:89:8e:d1:17:20:ab:f9: cb:fd:8e:50:4e:18:7d:4a:94:08:3a:42:53:65:23:0a:b2:9e: 36:63:53:ac:fc:41:fe:9e:ae:ab:d8:22:0e:8e:77:60:be:e7: e0:c7:22:73:ea:82:7f:63:1b:16:e5:7b:42:0a:13:47:36:23: 10:a6:3a:2e:91:61:20:30:68:18:aa:bf:52:47:7a:36:4d:d1: ba:30:d7:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZENUExMTAvBgNVBAUTKDRBOEEzOTVFNTU2Q0M3RjE5QUFFNkFCMDZBRkYwNjc5 NDQ5NTZCNDYwHhcNMjUwODIzMDQ0NzI0WhcNMjUwODMwMDQ0NzI0WjAYMRYwFAYD VQQDEw02OGE5NDdkYy1lMDhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq+SwE04AiReI6pScNSqhmKVvCMctrL0xljV2VMizZ6Gky5xI7DOjyyqE80AY N2pJn2SnFdwU/uDT9O7Mmv4rPY1R5qWHRgkYuqVmFUqdCTPVRtUxVRYgPpoYnFoI N78+TKfwqQcNkkVVs0QnXBGEzTMMz0rYh7JpULO1LsxXXkMC38U3l/EPVYPXzPFq xgjrUwURMWhRC4NIXfFwLQc6+5Im2kRGId0SuN6hKJjb1Ou0HnshqcIbgQ8jB/sP /g4hJJaeczAzbWyz2TpbU/QCSL6Gz6P0+KQl0vVKrAyZ9n7BJHEsYHOM+3rnZkpm dUlW6uhxAVgPqEAW2sOdV+EjRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOHaUgCY 4DK5Btx+lyxHNNpYLf/PMB8GA1UdIwQYMBaAFEqKOV5VbMfxmq5qsGr/BnlElWtG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkQ1QS8yMzc1QjMwNkI5 NDUxMUVFQkI4MTg4MzRDNEY5QUUwMi9Tb281WGxWc3hfR2FybXF3YXY4R2VVU1Zh MFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NvbzVYbFZzeF9HYXJtcXdhdjhHZVVTVmEwWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkQ1QS8yMzc1QjMwNkI5NDUxMUVFQkI4MTg4MzRDNEY5QUUwMi9Tb281WGxWc3hf R2FybXF3YXY4R2VVU1ZhMFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyvL8iIhonF0oftE7x8ggHTjrRRsui5tXT7CAoRZGc7xgIZci9929J LUmdDjci9QIIcNNyqPoM0/1NTZ0KKk5J9tTWkDOVkxEbRxw8tQ7tPG+8ocfUTolv j9rbZisaiW0R/K6Epk6d+8GrFTQCr/Fv3kU/KnKrPFrjqU/vYtjmH9a9Wdo2UYHo u99d0C9EjyRDQbLmcvB5Vi1rEbzFpQCplxc/9+0uhydrck7i5ImO0Rcgq/nL/Y5Q Thh9SpQIOkJTZSMKsp42Y1Os/EH+nq6r2CIOjndgvufgxyJz6oJ/YxsW5XtCChNH NiMQpjoukWEgMGgYqr9SR3o2TdG6MNeC -----END CERTIFICATE-----Generated at Sat Aug 23 19:03:56 2025 by rpki-client