$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft File: oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft (raw, json) Hash identifier: zOV1u/l6UI38fA72xn2T0Yvh0ImvtbkoxU+APBgkOG0= Subject key identifier: 63:37:4A:DE:2A:0D:CF:55:20:CF:1F:14:51:C8:01:D8:25:CB:AB:14 Authority key identifier: A0:5E:C2:66:B3:C0:BF:D6:CE:B5:17:10:0B:E0:5C:50:5B:94:36:24 Certificate issuer: /CN=A91E6A01/serialNumber=A05EC266B3C0BFD6CEB517100BE05C505B943624 Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft Manifest number: 25 Signing time: Sat 23 Aug 2025 08:08:16 +0000 Manifest this update: Sat 23 Aug 2025 08:08:15 +0000 Manifest next update: Sat 30 Aug 2025 08:08:15 +0000 Files and hashes: 1: oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl (hash: ukTDpS1R+FJZDw88c8JFuT/tN/hiNkHk627rxM1Iezo=) 2: 041803705DEE11F0B3FA764DC4F9AE02.roa (hash: g234+BOrsFID00gHUsuGQ7ja/TZsYXQzY8A84ZILmbw=) 3: E57772525DED11F0B0B00C4DC4F9AE02.roa (hash: SDWOzOls7ewbKsDsDovGzzc6zqRka52NsV9334kX+ts=) 4: 230AFEA45DEE11F0B0B1CF4DC4F9AE02.roa (hash: DDcpKf4cwajzPz7iOk0WiFF4+R4nRejRaM+Ry6/ubVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:08:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6A01, serialNumber=A05EC266B3C0BFD6CEB517100BE05C505B943624 Validity Not Before: Aug 23 08:08:15 2025 GMT Not After : Aug 30 08:08:15 2025 GMT Subject: CN=68a976f0-9776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f0:40:56:d5:1a:ad:38:5c:b1:73:05:f0:d2: 31:fb:50:ac:b1:e6:b3:2a:c5:ae:4d:ea:23:37:f5: 86:7b:a9:a0:cd:83:53:10:8e:99:44:69:90:09:e1: 1e:8a:da:d3:51:4e:ae:dc:71:07:69:a0:1c:de:02: af:8c:7f:73:ff:af:43:3e:60:c4:c4:50:47:08:0d: 81:b8:6f:87:9d:6a:57:5f:8a:63:ac:b9:89:5e:35: 5c:34:bd:6c:73:0b:23:9c:7a:e6:85:f7:ef:b0:0e: af:90:02:40:c4:aa:37:88:e6:51:40:80:a3:32:af: 3e:9a:0a:f5:bc:c6:00:17:6c:2a:dd:51:54:1e:7a: ed:41:5b:99:7c:0c:a3:75:9d:63:29:a6:1d:db:f1: ad:59:d2:b4:1d:29:15:d9:66:b4:6b:87:9a:77:67: 1d:14:ee:c2:8f:77:e9:62:65:4c:e7:35:e7:44:43: d0:02:af:4c:c2:8f:1d:86:1f:7e:81:a6:92:b1:29: d6:c7:e8:76:4b:a5:56:fe:5d:ec:e6:33:05:21:cf: 7f:ae:64:48:e2:8e:1a:a5:35:1b:ab:f2:a2:d8:36: 78:7d:af:54:23:f5:e6:38:a2:be:f4:1b:56:94:ab: 66:02:0e:b2:db:ae:16:24:99:d6:58:68:0d:29:0c: ac:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:37:4A:DE:2A:0D:CF:55:20:CF:1F:14:51:C8:01:D8:25:CB:AB:14 X509v3 Authority Key Identifier: keyid:A0:5E:C2:66:B3:C0:BF:D6:CE:B5:17:10:0B:E0:5C:50:5B:94:36:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:86:fd:f9:47:fa:de:03:3b:70:f9:e1:c9:35:10:2e:72:34: 9e:d5:62:09:76:e4:8a:15:54:08:ce:e1:7e:f0:14:8b:c8:1a: 32:10:a7:47:ea:5e:75:de:1a:e2:49:ce:2f:1b:af:eb:f9:45: 79:4b:25:d2:a3:6a:dd:ed:63:19:fe:8c:05:5b:9d:a8:50:e6: 83:6c:3a:92:4c:07:cd:a2:3e:40:43:4e:b4:74:a1:9d:3a:80: 6a:a9:ef:10:68:db:17:28:01:5e:04:ce:65:75:24:9f:c6:26: de:24:61:a3:95:a2:a3:4b:ad:96:1e:ad:02:b4:71:09:98:fe: 09:80:24:c4:91:91:66:86:12:c9:5e:51:78:da:63:15:da:8d: aa:9e:79:5c:9f:09:f1:a3:b4:80:ac:ea:39:35:eb:07:b7:d9: 32:23:37:18:a4:40:88:41:8c:66:83:07:5c:47:4c:6f:47:f0: f5:30:e3:6e:71:bb:e3:fe:1d:68:7f:7d:e8:f7:be:41:56:4f: c4:03:c4:dc:f6:55:82:0a:ff:a7:40:77:d8:98:f1:42:67:32: ef:ca:7b:e3:c1:9e:1d:0b:a5:f4:91:e3:29:05:92:97:53:c1: fc:c4:fb:7e:e6:3b:1c:f9:f9:a5:67:5b:af:6e:e7:40:78:c1: b1:2f:0e:29 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NkEwMTExMC8GA1UEBRMoQTA1RUMyNjZCM0MwQkZENkNFQjUxNzEwMEJFMDVDNTA1 Qjk0MzYyNDAeFw0yNTA4MjMwODA4MTVaFw0yNTA4MzAwODA4MTVaMBgxFjAUBgNV BAMTDTY4YTk3NmYwLTk3NzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCm8EBW1RqtOFyxcwXw0jH7UKyx5rMqxa5N6iM39YZ7qaDNg1MQjplEaZAJ4R6K 2tNRTq7ccQdpoBzeAq+Mf3P/r0M+YMTEUEcIDYG4b4edaldfimOsuYleNVw0vWxz CyOceuaF9++wDq+QAkDEqjeI5lFAgKMyrz6aCvW8xgAXbCrdUVQeeu1BW5l8DKN1 nWMpph3b8a1Z0rQdKRXZZrRrh5p3Zx0U7sKPd+liZUznNedEQ9ACr0zCjx2GH36B ppKxKdbH6HZLpVb+XezmMwUhz3+uZEjijhqlNRur8qLYNnh9r1Qj9eY4or70G1aU q2YCDrLbrhYkmdZYaA0pDKxnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYzdK3ioN z1Ugzx8UUcgB2CXLqxQwHwYDVR0jBBgwFoAUoF7CZrPAv9bOtRcQC+BcUFuUNiQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2QTAxL0Y2NEQzQjI0NTdB OTExRjA4RUU0MjYwOUM0RjlBRTAyL29GN0NaclBBdjliT3RSY1FDLUJjVUZ1VU5p US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb0Y3Q1pyUEF2OWJPdFJjUUMtQmNVRnVVTmlRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2 QTAxL0Y2NEQzQjI0NTdBOTExRjA4RUU0MjYwOUM0RjlBRTAyL29GN0NaclBBdjli T3RSY1FDLUJjVUZ1VU5pUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA6G/flH+t4DO3D54ck1EC5yNJ7VYgl25IoVVAjO4X7wFIvIGjIQp0fq XnXeGuJJzi8br+v5RXlLJdKjat3tYxn+jAVbnahQ5oNsOpJMB82iPkBDTrR0oZ06 gGqp7xBo2xcoAV4EzmV1JJ/GJt4kYaOVoqNLrZYerQK0cQmY/gmAJMSRkWaGEsle UXjaYxXajaqeeVyfCfGjtICs6jk16we32TIjNxikQIhBjGaDB1xHTG9H8PUw425x u+P+HWh/fej3vkFWT8QDxNz2VYIK/6dAd9iY8UJnMu/Ke+PBnh0LpfSR4ykFkpdT wfzE+37mOxz5+aVnW69u50B4wbEvDik= -----END CERTIFICATE-----Generated at Sat Aug 23 12:50:10 2025 by rpki-client