$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft File: pOaGeeZ7phon9Pib0JKu5cH3ITk.mft (raw, json) Hash identifier: Wb2Ut1cugeXINEzRMpEZ0pEqfjWT4HnhOOvMxG9Uoq8= Subject key identifier: D9:9C:49:42:DF:92:01:0C:7A:D1:38:86:61:92:08:E3:32:45:BE:53 Authority key identifier: A4:E6:86:79:E6:7B:A6:1A:27:F4:F8:9B:D0:92:AE:E5:C1:F7:21:39 Certificate issuer: /CN=A91E1B48/serialNumber=A4E68679E67BA61A27F4F89BD092AEE5C1F72139 Certificate serial: 9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft Manifest number: 9D Signing time: Sat 23 Aug 2025 06:34:28 +0000 Manifest this update: Sat 23 Aug 2025 06:34:27 +0000 Manifest next update: Sat 30 Aug 2025 06:34:27 +0000 Files and hashes: 1: pOaGeeZ7phon9Pib0JKu5cH3ITk.crl (hash: TcqIBctNvrmzuTFgtID7GkyrQl++Q93kT1m51hsHZ/w=) 2: FB03B42C927411EF870E655AC4F9AE02.roa (hash: 1Pw3F4k0O1ke+ThDTspVWhZWgUjv2zsb15CKjPdj4IQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.crl rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:34:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1B48, serialNumber=A4E68679E67BA61A27F4F89BD092AEE5C1F72139 Validity Not Before: Aug 23 06:34:27 2025 GMT Not After : Aug 30 06:34:27 2025 GMT Subject: CN=68a960f4-f181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:21:4d:45:ea:75:8a:9f:04:22:f7:47:3f:77: 28:ea:be:f8:7d:cb:02:58:90:fc:d7:a3:4c:43:2b: 34:ef:ad:3d:3d:41:60:5d:40:90:83:9b:74:90:80: b8:39:f5:aa:af:b1:13:2a:3f:61:13:0b:a3:46:ea: 84:9b:80:a2:d4:62:00:0b:fd:ba:54:ad:52:9f:dd: c0:08:0b:8a:bc:eb:43:8f:48:ae:bb:d6:ea:3f:d5: f5:8f:61:26:a4:d9:93:7b:9c:85:c2:1f:75:76:e0: 15:51:f3:2f:7a:24:40:46:d4:62:80:9d:92:71:ea: e5:d7:e4:77:7f:7e:d4:d1:27:f2:14:75:c9:d4:6d: 88:5c:18:65:cd:e8:d2:df:79:00:f9:1b:80:58:aa: d1:a0:ff:4e:2b:13:16:95:aa:88:6b:99:1e:cf:66: 1d:af:56:10:22:d8:2d:3d:cf:1f:58:ed:0a:da:2b: 9b:84:88:86:35:7c:ed:94:ac:aa:24:ab:fe:23:1c: 49:4b:c1:74:e7:a0:45:a8:fd:76:fc:f8:da:bf:3f: b9:3c:b1:41:11:f8:47:87:89:a9:46:3e:70:9f:72: 20:64:b9:f5:7b:f4:91:f5:b1:6e:3f:fe:9d:44:fe: 67:43:78:8f:62:da:39:f1:ef:29:20:fb:91:4f:fd: f1:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:9C:49:42:DF:92:01:0C:7A:D1:38:86:61:92:08:E3:32:45:BE:53 X509v3 Authority Key Identifier: keyid:A4:E6:86:79:E6:7B:A6:1A:27:F4:F8:9B:D0:92:AE:E5:C1:F7:21:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:5d:dc:0d:1a:12:58:0b:b6:46:68:0d:2a:88:6a:40:c4:79: 68:35:ec:b6:a6:f7:f8:3d:60:1c:21:74:2b:b8:03:65:59:fa: c7:fc:cd:fb:2d:ca:07:c9:63:40:d6:2a:bb:9a:c3:6f:e4:82: 3a:24:dd:8f:d2:cf:1d:e7:d5:23:67:64:21:5f:b4:10:8c:59: 33:63:51:c4:d0:bb:b7:74:7b:b6:17:af:4d:ac:12:9e:51:f8: 07:63:b3:2c:f2:bb:3c:89:ec:7b:9d:f5:4e:e7:ac:8c:fa:32: 00:5e:ae:15:6d:3c:8e:2c:ee:41:bd:f1:cf:4c:d0:7c:62:1a: be:0a:16:3c:76:18:3c:91:6e:a8:f3:57:4b:ec:13:52:54:6e: 5f:51:a7:6d:26:50:79:cf:50:f0:93:34:4e:80:5f:14:ab:ef: ee:23:2e:fe:4c:35:c0:33:03:32:5b:f5:d3:bd:e3:73:37:fe: 43:47:05:7a:ce:da:b9:d3:16:aa:90:8f:01:51:7b:57:17:1b: e2:95:55:0c:f2:2b:f1:d5:61:d1:76:c5:b9:52:23:56:fd:a1: d2:dd:bb:72:16:33:f8:d4:37:ff:51:6b:c5:10:14:f3:8f:06: 40:c0:1a:d5:f3:e5:54:f9:ce:76:27:2b:bc:23:ef:d6:07:e0: 89:b6:d3:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFCNDgxMTAvBgNVBAUTKEE0RTY4Njc5RTY3QkE2MUEyN0Y0Rjg5QkQwOTJBRUU1 QzFGNzIxMzkwHhcNMjUwODIzMDYzNDI3WhcNMjUwODMwMDYzNDI3WjAYMRYwFAYD VQQDEw02OGE5NjBmNC1mMTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnCFNRep1ip8EIvdHP3co6r74fcsCWJD816NMQys07609PUFgXUCQg5t0kIC4 OfWqr7ETKj9hEwujRuqEm4Ci1GIAC/26VK1Sn93ACAuKvOtDj0iuu9bqP9X1j2Em pNmTe5yFwh91duAVUfMveiRARtRigJ2Scerl1+R3f37U0SfyFHXJ1G2IXBhlzejS 33kA+RuAWKrRoP9OKxMWlaqIa5kez2Ydr1YQItgtPc8fWO0K2iubhIiGNXztlKyq JKv+IxxJS8F056BFqP12/Pjavz+5PLFBEfhHh4mpRj5wn3IgZLn1e/SR9bFuP/6d RP5nQ3iPYto58e8pIPuRT/3xsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNmcSULf kgEMetE4hmGSCOMyRb5TMB8GA1UdIwQYMBaAFKTmhnnme6YaJ/T4m9CSruXB9yE5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUI0OC82NkY1NzY0NDky NzQxMUVGQkY4NjRBM0RDNEY5QUUwMi9wT2FHZWVaN3Bob245UGliMEpLdTVjSDNJ VGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BPYUdlZVo3cGhvbjlQaWIwSkt1NWNIM0lUay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUI0OC82NkY1NzY0NDkyNzQxMUVGQkY4NjRBM0RDNEY5QUUwMi9wT2FHZWVaN3Bo b245UGliMEpLdTVjSDNJVGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6XdwNGhJYC7ZGaA0qiGpAxHloNey2pvf4PWAcIXQruANlWfrH/M37 LcoHyWNA1iq7msNv5II6JN2P0s8d59UjZ2QhX7QQjFkzY1HE0Lu3dHu2F69NrBKe UfgHY7Ms8rs8iex7nfVO56yM+jIAXq4VbTyOLO5BvfHPTNB8Yhq+ChY8dhg8kW6o 81dL7BNSVG5fUadtJlB5z1DwkzROgF8Uq+/uIy7+TDXAMwMyW/XTveNzN/5DRwV6 ztq50xaqkI8BUXtXFxvilVUM8ivx1WHRdsW5UiNW/aHS3btyFjP41Df/UWvFEBTz jwZAwBrV8+VU+c52Jyu8I+/WB+CJttPb -----END CERTIFICATE-----Generated at Sun Aug 24 03:09:43 2025 by rpki-client