$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.mft File: ooradhG9_Q-tuB2KgDoRCZAPd4A.mft (raw, json) Hash identifier: tqBdGBC4gefDzrh0PUwbMtfeAmdtTpImnsas+Ca4iPE= Subject key identifier: 33:C2:0B:10:2F:B1:85:1B:3C:B7:1C:4D:30:8D:80:54:8D:AF:45:E3 Authority key identifier: A2:8A:DA:76:11:BD:FD:0F:AD:B8:1D:8A:80:3A:11:09:90:0F:77:80 Certificate issuer: /CN=A91FBFC9/serialNumber=A28ADA7611BDFD0FADB81D8A803A1109900F7780 Certificate serial: 0837 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ooradhG9_Q-tuB2KgDoRCZAPd4A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.mft Manifest number: 082B Signing time: Fri 22 Aug 2025 20:56:15 +0000 Manifest this update: Fri 22 Aug 2025 20:56:14 +0000 Manifest next update: Fri 29 Aug 2025 20:56:14 +0000 Files and hashes: 1: ooradhG9_Q-tuB2KgDoRCZAPd4A.crl (hash: 3K3/cClscT/dcxQ0wN1FMNppS2DTbUzLrmtjDYxlbDg=) 2: 76A59020E12911EAB8642E19C4F9AE02.roa (hash: 7SJtSkXKrhgxiJ/u+ScdWT/CZ8bW5ltRvm0xbyH8/2Q=) 3: B019C596499E11EBA61D7146C4F9AE02.roa (hash: 9WsPzCvsd/JuejjAiVSpINcZRZVtqlKA7kdOF+8fdUE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.crl rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ooradhG9_Q-tuB2KgDoRCZAPd4A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:56:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2103 (0x837) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBFC9, serialNumber=A28ADA7611BDFD0FADB81D8A803A1109900F7780 Validity Not Before: Aug 22 20:56:14 2025 GMT Not After : Aug 29 20:56:14 2025 GMT Subject: CN=68a8d96e-e5ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:fa:b8:a5:c9:e0:ab:7d:e8:a2:f5:69:27:0f: 13:d9:ed:87:42:7c:5a:81:d5:15:09:5f:25:ae:db: 17:11:20:c6:e5:51:5f:27:d8:ef:29:13:59:c1:25: 02:49:38:06:4f:76:e9:2b:5b:b2:e0:57:04:2c:01: 70:cc:a6:f1:64:71:b0:88:9b:41:53:69:5c:1c:72: 8e:23:10:08:05:12:8c:6c:fc:81:2a:42:6f:d2:70: 12:83:64:0b:df:f1:ef:f3:a5:92:7d:b7:e2:de:4d: bc:01:a7:4d:47:5d:7c:87:d3:78:b1:62:ab:e8:21: 4a:a7:cd:0a:aa:b6:dc:09:96:16:32:39:7e:7c:63: c6:1b:45:5b:1e:c9:a9:44:2c:a4:35:3c:e4:f0:1f: 7c:35:8d:bf:fa:4f:f5:a1:db:e0:f6:98:ff:c5:93: 93:b7:62:33:f2:b0:f8:83:ac:4c:a8:fc:a7:7b:50: a0:f2:92:ba:21:b3:1d:a3:c3:4f:cb:de:c4:65:e8: de:4e:f8:a1:12:7d:66:f0:76:e4:72:d3:e7:25:5f: 41:77:3c:f2:30:ae:69:b5:71:c2:a2:54:88:34:17: b1:8d:00:a9:41:6f:74:74:9c:41:19:98:28:64:cb: 4a:ab:ee:53:2d:47:8e:02:b8:d3:ff:d1:7c:76:e1: 33:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:C2:0B:10:2F:B1:85:1B:3C:B7:1C:4D:30:8D:80:54:8D:AF:45:E3 X509v3 Authority Key Identifier: keyid:A2:8A:DA:76:11:BD:FD:0F:AD:B8:1D:8A:80:3A:11:09:90:0F:77:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ooradhG9_Q-tuB2KgDoRCZAPd4A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:8c:78:3f:3e:b7:47:ba:48:89:6f:39:b5:ff:06:45:cc:9d: 63:08:bf:5d:69:f1:92:05:09:fe:79:5b:d3:f6:1b:fc:e3:26: d9:c1:42:f9:47:6b:91:53:ae:16:b4:73:4b:0e:57:f8:76:c9: 6f:5b:94:25:30:00:90:16:80:4e:38:e9:d2:93:26:3a:9b:c3: 46:8e:4f:4a:f4:10:de:90:7a:9e:ff:db:71:e8:a1:89:84:06: d8:11:3f:62:5d:18:4c:07:58:41:0a:bc:19:bb:b5:d2:72:f0: 5c:98:e8:22:f1:e8:7e:31:1e:b6:ce:52:35:d3:8b:e1:fe:ae: 88:9a:f5:35:fb:16:ac:c3:ac:be:3a:9a:52:fd:d8:b5:be:31: ff:7f:9e:38:23:0a:62:bf:fd:3e:52:74:d7:6c:9e:07:c7:90: db:7d:32:91:b8:15:49:59:c2:56:07:37:4f:de:71:e2:f3:84: 03:2c:00:95:26:40:5f:68:bb:42:3a:68:f0:59:1f:92:48:4d: 80:16:94:21:c2:ed:aa:40:03:e0:57:9c:64:40:bb:c1:31:a0: 41:d0:93:03:00:1f:6d:36:6e:37:44:3e:23:02:ab:93:8c:c4: ae:d8:85:cc:71:fe:30:32:bc:5d:1b:9b:f0:2c:c2:d6:fe:84: f1:c4:ee:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJGQzkxMTAvBgNVBAUTKEEyOEFEQTc2MTFCREZEMEZBREI4MUQ4QTgwM0ExMTA5 OTAwRjc3ODAwHhcNMjUwODIyMjA1NjE0WhcNMjUwODI5MjA1NjE0WjAYMRYwFAYD VQQDEw02OGE4ZDk2ZS1lNWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1/q4pcngq33oovVpJw8T2e2HQnxagdUVCV8lrtsXESDG5VFfJ9jvKRNZwSUC STgGT3bpK1uy4FcELAFwzKbxZHGwiJtBU2lcHHKOIxAIBRKMbPyBKkJv0nASg2QL 3/Hv86WSfbfi3k28AadNR118h9N4sWKr6CFKp80KqrbcCZYWMjl+fGPGG0VbHsmp RCykNTzk8B98NY2/+k/1odvg9pj/xZOTt2Iz8rD4g6xMqPyne1Cg8pK6IbMdo8NP y97EZejeTvihEn1m8HbkctPnJV9BdzzyMK5ptXHColSINBexjQCpQW90dJxBGZgo ZMtKq+5TLUeOArjT/9F8duEz2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDPCCxAv sYUbPLccTTCNgFSNr0XjMB8GA1UdIwQYMBaAFKKK2nYRvf0PrbgdioA6EQmQD3eA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkZDOS9CMzdGNjUyMkUx MjcxMUVBOEVBQTIxMTZDNEY5QUUwMi9vb3JhZGhHOV9RLXR1QjJLZ0RvUkNaQVBk NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29vcmFkaEc5X1EtdHVCMktnRG9SQ1pBUGQ0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkZDOS9CMzdGNjUyMkUxMjcxMUVBOEVBQTIxMTZDNEY5QUUwMi9vb3JhZGhHOV9R LXR1QjJLZ0RvUkNaQVBkNEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8jHg/PrdHukiJbzm1/wZFzJ1jCL9dafGSBQn+eVvT9hv84ybZwUL5 R2uRU64WtHNLDlf4dslvW5QlMACQFoBOOOnSkyY6m8NGjk9K9BDekHqe/9tx6KGJ hAbYET9iXRhMB1hBCrwZu7XScvBcmOgi8eh+MR62zlI104vh/q6ImvU1+xasw6y+ OppS/di1vjH/f544Iwpiv/0+UnTXbJ4Hx5DbfTKRuBVJWcJWBzdP3nHi84QDLACV JkBfaLtCOmjwWR+SSE2AFpQhwu2qQAPgV5xkQLvBMaBB0JMDAB9tNm43RD4jAquT jMSu2IXMcf4wMrxdG5vwLMLW/oTxxO55 -----END CERTIFICATE-----Generated at Sat Aug 23 17:05:49 2025 by rpki-client