$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft File: oE50OtMfT4PwncXS9-9Pq-HvaHs.mft (raw, json) Hash identifier: t4DVbb8Aaa+vahvhbawNfHlS1YeLA/s2f+BLTPJ/12U= Subject key identifier: 9B:F0:05:B4:2A:7B:6D:FF:0D:A4:4D:7D:B0:F8:95:46:84:14:5E:EC Authority key identifier: A0:4E:74:3A:D3:1F:4F:83:F0:9D:C5:D2:F7:EF:4F:AB:E1:EF:68:7B Certificate issuer: /CN=A91E0EF8/serialNumber=A04E743AD31F4F83F09DC5D2F7EF4FABE1EF687B Certificate serial: 05F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft Manifest number: 05DA Signing time: Fri 22 Aug 2025 23:13:49 +0000 Manifest this update: Fri 22 Aug 2025 23:13:49 +0000 Manifest next update: Fri 29 Aug 2025 23:13:49 +0000 Files and hashes: 1: oE50OtMfT4PwncXS9-9Pq-HvaHs.crl (hash: ci4xcrNngTZYYOnWfLotGKSi6tXIb0tw8JCVV2/mdkc=) 2: 2F581CEA33F311EEABFC7410C4F9AE02.roa (hash: weFEOxrVQ1R73fykzCNyC6/gZBqdWvZXSpKP3W9J0hQ=) 3: 180DF9BE93C711EDB3D8A867C4F9AE02.roa (hash: SoMp5duXOAwol503IxpDfQSWDWEVUuEjZp2f9lzEdw8=) 4: 1767CE4A93C711EDB3D8A867C4F9AE02.roa (hash: MXR9v07MaUgaUp2EpRPUYi0YWE/byXOzVwu5NXbaWsg=) 5: 16A4DFE893C711EDB3D8A867C4F9AE02.roa (hash: vWRcSTu3hKVKTzFiY2NVAPZ7PA6+HMwNwvKyVpnCyx8=) 6: 1614034C93C711EDB3D8A867C4F9AE02.roa (hash: ywF33ZMJOUcpgMUIi20lZlpyg8JGMBrKC6zMJ/6wuTs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.crl rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:13:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1524 (0x5f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0EF8, serialNumber=A04E743AD31F4F83F09DC5D2F7EF4FABE1EF687B Validity Not Before: Aug 22 23:13:49 2025 GMT Not After : Aug 29 23:13:49 2025 GMT Subject: CN=68a8f9ad-49e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7a:24:b5:cf:77:c8:f3:e3:31:5e:27:29:96: c6:ba:1c:49:7a:77:aa:d6:4b:59:36:ec:c8:91:9b: 88:42:0b:14:92:02:f5:21:da:24:bc:55:5e:87:66: 76:62:f4:c4:2c:84:01:a4:66:04:77:82:32:3a:b5: 6d:f9:06:27:30:6c:f3:f6:6e:0b:e7:a8:06:d4:4d: 2d:ed:83:67:64:68:ad:ef:87:c2:30:90:94:f1:2e: ea:0a:f5:e2:26:b9:df:19:88:32:df:f2:8e:7a:44: 82:55:a7:0c:13:eb:86:6e:44:9b:d5:7a:9a:94:2c: 3a:dc:4c:23:be:ae:6e:fb:21:d6:85:24:ca:05:14: 3f:30:0c:50:aa:9c:88:9b:d6:68:d5:f4:d0:52:12: 10:bb:d6:c7:6b:bd:78:e6:16:04:31:64:87:b6:e4: 1c:10:99:c6:7d:27:c6:b7:6f:10:04:03:5f:e0:d9: 49:fe:b5:60:3c:86:81:d7:29:44:30:f8:9a:a4:6c: 99:de:c0:25:ef:e7:29:e9:b6:16:57:62:d9:3e:c3: 6f:5f:cf:5c:43:3e:3d:66:9b:66:4a:bc:7c:30:98: a2:24:d4:3c:d1:11:c7:9e:db:11:3a:bb:88:87:ef: 3e:03:ab:32:3e:1b:76:da:b1:6e:1c:51:27:1e:1e: 64:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:F0:05:B4:2A:7B:6D:FF:0D:A4:4D:7D:B0:F8:95:46:84:14:5E:EC X509v3 Authority Key Identifier: keyid:A0:4E:74:3A:D3:1F:4F:83:F0:9D:C5:D2:F7:EF:4F:AB:E1:EF:68:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:ef:25:b2:10:6e:e4:6e:b8:00:d5:dc:e6:03:2f:e7:a3:a5: 32:41:3e:ea:50:e4:f5:4e:7a:c2:a2:74:93:85:d5:e4:ee:e1: 4f:35:99:5f:3d:ac:3a:04:c6:c4:c7:87:4c:67:b4:04:35:13: d2:59:fd:1a:ba:22:1f:4e:71:cc:50:cb:4c:02:bc:d5:94:78: 6a:fc:9a:82:f1:83:b6:c0:de:70:69:bb:f4:af:4d:c9:f0:00: b1:ff:72:31:b3:47:e0:28:f5:70:37:98:ad:48:ea:e6:48:de: 6f:c7:b2:79:fc:89:b9:88:20:6e:fd:a7:64:d9:4b:43:4b:84: 06:94:cc:52:18:03:e6:d2:81:36:24:82:02:1c:4f:6b:b0:b7: ce:18:a0:a3:ec:e8:74:7b:df:1b:e8:df:9c:d0:52:ad:e6:ed: 56:06:13:3a:04:fe:22:a8:03:1f:7a:e6:2f:db:b1:52:c6:38: 45:62:a2:25:19:c2:3d:a4:92:87:72:24:59:f7:a4:59:21:db: aa:44:6a:4b:9e:c5:93:15:84:ef:97:43:b8:0f:b2:79:8d:1d: 42:9c:90:fd:67:55:71:ed:d8:51:3a:02:cb:04:77:b4:c0:93: 4c:06:f7:11:7f:6c:d2:7c:7d:b8:bc:39:85:35:42:5b:74:b2: 2f:ee:cd:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBFRjgxMTAvBgNVBAUTKEEwNEU3NDNBRDMxRjRGODNGMDlEQzVEMkY3RUY0RkFC RTFFRjY4N0IwHhcNMjUwODIyMjMxMzQ5WhcNMjUwODI5MjMxMzQ5WjAYMRYwFAYD VQQDEw02OGE4ZjlhZC00OWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunoktc93yPPjMV4nKZbGuhxJeneq1ktZNuzIkZuIQgsUkgL1IdokvFVeh2Z2 YvTELIQBpGYEd4IyOrVt+QYnMGzz9m4L56gG1E0t7YNnZGit74fCMJCU8S7qCvXi JrnfGYgy3/KOekSCVacME+uGbkSb1XqalCw63Ewjvq5u+yHWhSTKBRQ/MAxQqpyI m9Zo1fTQUhIQu9bHa7145hYEMWSHtuQcEJnGfSfGt28QBANf4NlJ/rVgPIaB1ylE MPiapGyZ3sAl7+cp6bYWV2LZPsNvX89cQz49ZptmSrx8MJiiJNQ80RHHntsROruI h+8+A6syPht22rFuHFEnHh5kDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJvwBbQq e23/DaRNfbD4lUaEFF7sMB8GA1UdIwQYMBaAFKBOdDrTH0+D8J3F0vfvT6vh72h7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEVGOC9DOTM4RDEwNkNC NTQxMUVCQTNEMzZDNUJDNEY5QUUwMi9vRTUwT3RNZlQ0UHduY1hTOS05UHEtSHZh SHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29FNTBPdE1mVDRQd25jWFM5LTlQcS1IdmFIcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEVGOC9DOTM4RDEwNkNCNTQxMUVCQTNEMzZDNUJDNEY5QUUwMi9vRTUwT3RNZlQ0 UHduY1hTOS05UHEtSHZhSHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAq7yWyEG7kbrgA1dzmAy/no6UyQT7qUOT1TnrConSThdXk7uFPNZlf Paw6BMbEx4dMZ7QENRPSWf0auiIfTnHMUMtMArzVlHhq/JqC8YO2wN5wabv0r03J 8ACx/3Ixs0fgKPVwN5itSOrmSN5vx7J5/Im5iCBu/adk2UtDS4QGlMxSGAPm0oE2 JIICHE9rsLfOGKCj7Oh0e98b6N+c0FKt5u1WBhM6BP4iqAMfeuYv27FSxjhFYqIl GcI9pJKHciRZ96RZIduqRGpLnsWTFYTvl0O4D7J5jR1CnJD9Z1Vx7dhROgLLBHe0 wJNMBvcRf2zSfH24vDmFNUJbdLIv7s2y -----END CERTIFICATE-----Generated at Sat Aug 23 19:09:52 2025 by rpki-client