$ rpki-client -vvf rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.mft File: 0va3pYZYVsPyxEYWNgMfsFtgYGo.mft (raw, json) Hash identifier: Ta78ha30Zk5sgoGgHdinqf+Za4MSo0INf/RU7rboUTo= Subject key identifier: F5:F4:30:89:A6:5C:96:FE:C3:3F:AF:2A:49:10:7D:18:FF:E6:49:A6 Authority key identifier: D2:F6:B7:A5:86:58:56:C3:F2:C4:46:16:36:03:1F:B0:5B:60:60:6A Certificate issuer: /CN=A91149C8/serialNumber=D2F6B7A5865856C3F2C4461636031FB05B60606A Certificate serial: 0C8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0va3pYZYVsPyxEYWNgMfsFtgYGo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.mft Manifest number: 0C85 Signing time: Sat 02 Aug 2025 18:25:42 +0000 Manifest this update: Sat 02 Aug 2025 18:25:42 +0000 Manifest next update: Sat 09 Aug 2025 18:25:42 +0000 Files and hashes: 1: 0va3pYZYVsPyxEYWNgMfsFtgYGo.crl (hash: 2STAHRoNQ6sZEaD47YivBK77g5UhQUor+9/JBnOmgFo=) 2: A2A7584ACA7F11EAB343722AC4F9AE02.roa (hash: mvYo+h5Nn35EgX86xIvICgq41pXxREG1bc5pyoPj450=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.crl rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0va3pYZYVsPyxEYWNgMfsFtgYGo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 18:25:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3215 (0xc8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91149C8, serialNumber=D2F6B7A5865856C3F2C4461636031FB05B60606A Validity Not Before: Aug 2 18:25:42 2025 GMT Not After : Aug 9 18:25:42 2025 GMT Subject: CN=688e5826-ef4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3b:80:6c:5d:6c:35:a5:d8:37:73:50:6f:63: 53:00:d2:58:e3:2f:f7:a2:84:4f:bd:d2:9d:11:a8: 1b:48:36:c8:7a:c8:0d:a8:3b:d1:10:7e:1d:ed:cd: f3:94:99:61:a3:77:55:15:9f:07:4d:61:c6:30:5c: 03:39:86:73:c7:bc:fa:1f:c6:d4:d9:82:3b:48:03: fd:2f:90:79:0b:d2:ed:3d:08:4c:76:30:89:b9:8c: da:f6:b0:49:f6:c5:98:a8:f6:ee:65:6f:ce:ea:53: 3b:e0:08:0f:e8:d7:49:47:6b:32:df:42:53:f2:02: 71:8c:79:1f:51:20:3f:4e:37:28:22:d9:89:c5:af: 52:7d:2e:6c:38:f4:bd:12:11:c6:9e:0d:35:d9:59: bb:42:06:f8:9f:9a:a5:00:51:ac:44:96:64:5e:c4: a7:cd:48:1f:7e:a5:31:1c:3c:b6:b1:f3:d7:87:e6: ec:b6:62:7b:4e:e9:16:a4:79:b1:14:38:75:6b:70: 4c:58:1a:3a:20:27:59:91:a8:78:d2:60:81:35:50: b4:6a:66:24:64:38:c4:c6:1f:05:7a:a6:e0:31:98: 35:a0:57:4b:50:4a:34:98:ec:23:bf:4d:4c:4a:4b: ca:51:fb:a3:93:2e:72:85:aa:a3:b0:93:14:9e:2d: 74:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:F4:30:89:A6:5C:96:FE:C3:3F:AF:2A:49:10:7D:18:FF:E6:49:A6 X509v3 Authority Key Identifier: keyid:D2:F6:B7:A5:86:58:56:C3:F2:C4:46:16:36:03:1F:B0:5B:60:60:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0va3pYZYVsPyxEYWNgMfsFtgYGo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:21:28:54:6f:db:3d:44:f2:81:88:9c:03:70:83:a4:14:cb: 15:d4:e8:41:e1:f9:ba:b6:1c:a7:89:be:d5:5c:5d:1e:d8:e8: b0:3a:1c:4a:53:85:b5:4a:2e:90:35:f8:48:d5:f3:e4:01:d5: f4:e4:fb:3b:a3:79:9e:1a:00:63:d4:f2:50:ee:8b:39:44:4f: a9:29:a7:9a:d1:45:a2:68:2b:67:ca:d2:45:d3:dd:1e:19:98: 14:e6:08:7e:48:1f:01:d6:90:dd:5f:54:38:99:17:87:92:5e: 98:95:82:57:8d:b3:46:49:6c:80:52:b6:3c:d2:94:b5:77:a8: 46:d3:9f:95:43:cc:4e:70:37:69:5a:4b:cb:5e:fa:47:91:92: 0d:cf:51:8f:20:f1:ad:78:49:aa:07:e6:d0:55:cf:3e:46:1d: 76:a3:52:cb:26:f1:cc:00:6a:20:fb:4d:3a:80:e7:fa:0e:34: 06:14:e7:89:29:09:ac:58:da:a5:12:dc:a3:07:c6:32:4a:8f: cf:95:fc:90:85:a7:20:c6:04:2b:1b:29:67:26:8b:b0:19:3c: 8f:8c:45:73:d3:28:44:b6:39:f8:cd:d6:09:c3:70:cf:fe:e3: 13:de:8f:86:51:df:ab:c1:78:03:07:0e:64:a1:d2:83:3c:a8: 46:5b:c4:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ5QzgxMTAvBgNVBAUTKEQyRjZCN0E1ODY1ODU2QzNGMkM0NDYxNjM2MDMxRkIw NUI2MDYwNkEwHhcNMjUwODAyMTgyNTQyWhcNMjUwODA5MTgyNTQyWjAYMRYwFAYD VQQDEw02ODhlNTgyNi1lZjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxjuAbF1sNaXYN3NQb2NTANJY4y/3ooRPvdKdEagbSDbIesgNqDvREH4d7c3z lJlho3dVFZ8HTWHGMFwDOYZzx7z6H8bU2YI7SAP9L5B5C9LtPQhMdjCJuYza9rBJ 9sWYqPbuZW/O6lM74AgP6NdJR2sy30JT8gJxjHkfUSA/TjcoItmJxa9SfS5sOPS9 EhHGng012Vm7Qgb4n5qlAFGsRJZkXsSnzUgffqUxHDy2sfPXh+bstmJ7TukWpHmx FDh1a3BMWBo6ICdZkah40mCBNVC0amYkZDjExh8FeqbgMZg1oFdLUEo0mOwjv01M SkvKUfujky5yhaqjsJMUni10UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPX0MImm XJb+wz+vKkkQfRj/5kmmMB8GA1UdIwQYMBaAFNL2t6WGWFbD8sRGFjYDH7BbYGBq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDlDOC8yRkM0NjU5MEZG MkIxMUU5QkYyMEJGMURDNEY5QUUwMi8wdmEzcFlaWVZzUHl4RVlXTmdNZnNGdGdZ R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB2YTNwWVpZVnNQeXhFWVdOZ01mc0Z0Z1lHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDlDOC8yRkM0NjU5MEZGMkIxMUU5QkYyMEJGMURDNEY5QUUwMi8wdmEzcFlaWVZz UHl4RVlXTmdNZnNGdGdZR28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEIShUb9s9RPKBiJwDcIOkFMsV1OhB4fm6thynib7VXF0e2OiwOhxK U4W1Si6QNfhI1fPkAdX05Ps7o3meGgBj1PJQ7os5RE+pKaea0UWiaCtnytJF090e GZgU5gh+SB8B1pDdX1Q4mReHkl6YlYJXjbNGSWyAUrY80pS1d6hG05+VQ8xOcDdp WkvLXvpHkZINz1GPIPGteEmqB+bQVc8+Rh12o1LLJvHMAGog+006gOf6DjQGFOeJ KQmsWNqlEtyjB8YySo/PlfyQhacgxgQrGylnJouwGTyPjEVz0yhEtjn4zdYJw3DP /uMT3o+GUd+rwXgDBw5kodKDPKhGW8S4 -----END CERTIFICATE-----Generated at Mon Aug 4 19:13:01 2025 by rpki-client