$ rpki-client -vvf rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft File: O4dpDvQFVnODtvcv3TARYM6CHys.mft (raw, json) Hash identifier: 7s4oUmTCfMMj7bKY72qkcacSAIbaCnUzp5DQgNAPzFY= Subject key identifier: A7:DC:C1:B7:AC:65:62:17:4B:4E:15:78:6B:4D:78:7A:AC:5A:50:77 Authority key identifier: 3B:87:69:0E:F4:05:56:73:83:B6:F7:2F:DD:30:11:60:CE:82:1F:2B Certificate issuer: /CN=A91F81AD/serialNumber=3B87690EF405567383B6F72FDD301160CE821F2B Certificate serial: 0258 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft Manifest number: 0252 Signing time: Sat 23 Aug 2025 02:02:32 +0000 Manifest this update: Sat 23 Aug 2025 02:02:32 +0000 Manifest next update: Sat 30 Aug 2025 02:02:32 +0000 Files and hashes: 1: O4dpDvQFVnODtvcv3TARYM6CHys.crl (hash: nETrJDh8bsYHt8Si+h8U3ekpJM+lQMmna0xczEfrXY8=) 2: F9424C6C80FA11ED9B35954DC4F9AE02.roa (hash: GNMO+8voOxNBOb5ixsUP/MtpdlZbS27Vb7o1TavyMdI=) 3: F86A2F7680FA11ED9B35954DC4F9AE02.roa (hash: vq0srwLbA5KHVy52W5biflCYsAzYNYb+3xV7SnajFW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.crl rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:02:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 600 (0x258) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F81AD, serialNumber=3B87690EF405567383B6F72FDD301160CE821F2B Validity Not Before: Aug 23 02:02:32 2025 GMT Not After : Aug 30 02:02:32 2025 GMT Subject: CN=68a92138-11b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:34:ed:fc:32:b7:70:a9:97:2e:f8:da:71:c5: 15:d6:72:83:97:de:b9:31:bb:55:9d:a3:d5:3c:cd: 67:a9:79:f5:eb:53:a9:11:7c:19:30:40:ee:ff:0d: 99:11:36:05:ea:35:44:1e:78:3f:02:dc:aa:07:7e: 39:13:1e:f3:9f:db:01:6d:81:75:ed:19:dc:d4:8c: 56:9e:07:24:33:69:0d:d2:9e:b3:62:b3:4c:18:7d: ca:2b:f9:1a:28:23:be:c5:6a:9f:33:85:16:48:5c: 98:11:e7:94:86:f4:87:c0:cf:3b:3a:63:2e:88:e1: 9c:91:19:bf:fc:69:8c:0b:11:38:c8:58:69:ab:34: 97:65:0d:60:18:f4:f4:94:21:47:52:24:27:d2:34: 79:71:07:5e:91:3a:9b:f2:13:2f:0b:82:0d:82:45: cc:bf:46:f0:e1:9c:f9:84:a1:e8:31:45:84:22:05: d9:6c:a7:03:25:2d:96:29:82:d5:dd:b5:ee:96:10: 85:b3:07:8d:76:16:50:71:eb:22:86:6d:79:d6:86: 08:1c:c6:59:4e:0d:dc:cd:1c:af:2b:b8:e0:b1:8a: ee:e9:10:c4:18:09:aa:0b:c8:4a:68:d9:a5:a6:e4: 73:dd:d3:44:f2:73:b5:51:0b:78:ef:c5:3c:22:ce: 33:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:DC:C1:B7:AC:65:62:17:4B:4E:15:78:6B:4D:78:7A:AC:5A:50:77 X509v3 Authority Key Identifier: keyid:3B:87:69:0E:F4:05:56:73:83:B6:F7:2F:DD:30:11:60:CE:82:1F:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:b6:1b:55:af:83:2f:14:ae:7b:5d:82:3a:c1:2c:49:ae:79: 8f:77:44:ed:6c:13:a9:00:3c:0e:bd:39:37:f8:1b:33:c8:13: aa:84:8b:fa:dd:ac:47:ba:79:77:ab:57:d9:e7:38:35:5f:1c: dc:f5:4f:36:81:0f:d8:cd:01:00:68:61:14:f4:13:5d:21:a9: 52:53:50:f7:08:9a:06:d4:e0:4e:d0:5c:00:0d:3c:bb:bc:97: ed:39:18:c2:07:1b:12:52:c4:8d:96:92:34:e5:8c:d2:b3:24: 58:8b:6e:60:bc:a2:39:0b:73:4f:7e:5d:da:3d:a6:94:99:b2: 6c:23:79:3c:ae:99:d8:1d:89:fa:f4:63:42:f6:20:75:0e:61: 61:7c:57:16:57:73:3f:a0:a3:e9:29:ed:d8:17:c3:cd:3c:3a: 58:b3:f2:7e:33:bb:16:70:3e:50:4a:00:bb:83:85:2d:8f:7c: 03:ed:03:e0:bd:24:10:e1:6c:0a:42:1e:be:71:05:eb:db:4e: 41:c7:65:06:c7:1b:fb:bf:8e:cc:92:f2:d2:2b:b6:6d:fb:33: 3a:9a:67:f5:c1:ad:2e:f3:76:b5:08:5f:d4:2d:1a:5e:0a:92: 64:a9:9f:04:b4:df:bb:1b:bf:01:66:8e:29:50:ff:b6:4b:53: f1:84:01:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgxQUQxMTAvBgNVBAUTKDNCODc2OTBFRjQwNTU2NzM4M0I2RjcyRkREMzAxMTYw Q0U4MjFGMkIwHhcNMjUwODIzMDIwMjMyWhcNMjUwODMwMDIwMjMyWjAYMRYwFAYD VQQDEw02OGE5MjEzOC0xMWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArjTt/DK3cKmXLvjaccUV1nKDl965MbtVnaPVPM1nqXn161OpEXwZMEDu/w2Z ETYF6jVEHng/AtyqB345Ex7zn9sBbYF17Rnc1IxWngckM2kN0p6zYrNMGH3KK/ka KCO+xWqfM4UWSFyYEeeUhvSHwM87OmMuiOGckRm//GmMCxE4yFhpqzSXZQ1gGPT0 lCFHUiQn0jR5cQdekTqb8hMvC4INgkXMv0bw4Zz5hKHoMUWEIgXZbKcDJS2WKYLV 3bXulhCFsweNdhZQcesihm151oYIHMZZTg3czRyvK7jgsYru6RDEGAmqC8hKaNml puRz3dNE8nO1UQt478U8Is4z7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKfcwbes ZWIXS04VeGtNeHqsWlB3MB8GA1UdIwQYMBaAFDuHaQ70BVZzg7b3L90wEWDOgh8r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODFBRC80M0E1MTFBRTJD QkUxMUVEOTk4MjRCNENDNEY5QUUwMi9PNGRwRHZRRlZuT0R0dmN2M1RBUllNNkNI eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL080ZHBEdlFGVm5PRHR2Y3YzVEFSWU02Q0h5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODFBRC80M0E1MTFBRTJDQkUxMUVEOTk4MjRCNENDNEY5QUUwMi9PNGRwRHZRRlZu T0R0dmN2M1RBUllNNkNIeXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYthtVr4MvFK57XYI6wSxJrnmPd0TtbBOpADwOvTk3+BszyBOqhIv6 3axHunl3q1fZ5zg1Xxzc9U82gQ/YzQEAaGEU9BNdIalSU1D3CJoG1OBO0FwADTy7 vJftORjCBxsSUsSNlpI05YzSsyRYi25gvKI5C3NPfl3aPaaUmbJsI3k8rpnYHYn6 9GNC9iB1DmFhfFcWV3M/oKPpKe3YF8PNPDpYs/J+M7sWcD5QSgC7g4Utj3wD7QPg vSQQ4WwKQh6+cQXr205Bx2UGxxv7v47MkvLSK7Zt+zM6mmf1wa0u83a1CF/ULRpe CpJkqZ8EtN+7G78BZo4pUP+2S1PxhAHD -----END CERTIFICATE-----Generated at Sat Aug 23 12:40:39 2025 by rpki-client