$ rpki-client -vvf rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft File: U-OPHbJadp7S9ONa2_fqxILGEaU.mft (raw, json) Hash identifier: +9x3S9Vw5q8k8oep+i790MyCOxHo5Bmh/7NwMvhjfGc= Subject key identifier: B3:88:F0:F7:71:3A:73:E4:6E:46:0A:8D:A6:59:4C:6B:4C:46:F6:EE Authority key identifier: 53:E3:8F:1D:B2:5A:76:9E:D2:F4:E3:5A:DB:F7:EA:C4:82:C6:11:A5 Certificate issuer: /CN=A91449DF/serialNumber=53E38F1DB25A769ED2F4E35ADBF7EAC482C611A5 Certificate serial: 0802 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-OPHbJadp7S9ONa2_fqxILGEaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft Manifest number: 07F5 Signing time: Sun 10 Aug 2025 21:02:45 +0000 Manifest this update: Sun 10 Aug 2025 21:02:45 +0000 Manifest next update: Sun 17 Aug 2025 21:02:45 +0000 Files and hashes: 1: U-OPHbJadp7S9ONa2_fqxILGEaU.crl (hash: 8scV9nrgC6JHX7mr8AA/RCa4Aifr0iS9NIQIbOImzZw=) 2: E5ADB5CAF73A11EAB074A016C4F9AE02.roa (hash: dLHVUNtLIV41+zRNY3QMkvAZyxZkYsTbNoR5dSniJzY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.crl rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-OPHbJadp7S9ONa2_fqxILGEaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2050 (0x802) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91449DF, serialNumber=53E38F1DB25A769ED2F4E35ADBF7EAC482C611A5 Validity Not Before: Aug 10 21:02:45 2025 GMT Not After : Aug 17 21:02:45 2025 GMT Subject: CN=689908f5-e884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:22:aa:ba:9c:34:b5:e1:9a:d5:0b:19:e6:d2: 2f:ba:19:ba:85:40:d4:82:e8:7e:69:cf:ca:aa:90: c3:e8:c0:e8:13:e0:17:7f:90:9a:3a:34:5f:8c:c0: 8a:ce:5d:94:ee:d8:3f:7c:b5:2f:6b:5c:a4:16:2c: 9f:dc:25:51:ea:1e:60:f0:84:14:81:f2:0d:0f:99: b7:56:8a:76:c9:22:68:29:ca:e6:17:11:17:40:70: a5:d1:3d:04:73:23:6f:31:b7:82:eb:83:93:3d:46: 4a:c4:cb:2e:3b:78:77:41:cc:a2:b2:8b:42:2f:f6: 05:2f:03:50:d1:78:b6:fb:e4:06:3c:fb:c9:d3:76: 66:d1:40:4c:f4:c4:02:58:81:cc:f4:47:e0:e4:05: a7:67:0d:c7:96:cc:ec:88:39:d8:c4:3e:64:b2:69: 48:b5:58:51:32:19:09:40:63:fa:79:3e:7f:af:a8: 0a:e2:84:94:a5:cc:6e:cd:0b:f8:26:00:cf:ad:5a: 8a:8a:7f:42:39:dd:90:3b:93:ee:6b:24:39:36:1c: 3e:41:71:11:7a:dc:4a:87:1c:e4:94:c4:98:b4:09: e9:fc:2d:65:e2:5d:15:d8:bc:e1:76:f3:63:e9:b0: ef:61:0a:69:77:0e:b4:17:fd:24:15:2d:e5:68:f8: 89:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:88:F0:F7:71:3A:73:E4:6E:46:0A:8D:A6:59:4C:6B:4C:46:F6:EE X509v3 Authority Key Identifier: keyid:53:E3:8F:1D:B2:5A:76:9E:D2:F4:E3:5A:DB:F7:EA:C4:82:C6:11:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-OPHbJadp7S9ONa2_fqxILGEaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:e8:d3:44:44:16:0b:1e:12:73:9f:16:7c:61:ed:34:30:33: 4c:26:1b:2d:e8:1f:f6:7b:30:89:34:a6:f0:cb:3f:93:08:b3: 3b:f6:be:0b:b6:f6:66:3d:c3:15:79:76:b5:68:6c:a1:1a:f7: 99:46:56:ed:9c:52:2e:e3:37:19:0e:6e:41:dc:81:77:a7:b0: 48:59:a9:b8:bd:2f:8d:0e:d5:78:fd:44:99:d5:70:4c:33:e8: 79:5b:7d:7b:02:98:ef:f0:77:a7:4e:8c:85:98:3c:37:27:72: 6f:5f:be:78:6d:20:70:9c:60:e7:e4:73:c5:3c:fc:57:e5:7c: 78:1b:b5:1f:17:34:5c:5b:59:9a:29:9e:c2:da:e5:f5:1c:cc: 8b:7a:b7:e9:1c:23:27:db:37:b8:ab:45:a4:6b:0b:af:b0:d0: a8:6d:c4:52:ed:18:25:55:cc:8b:70:e5:97:f4:e1:96:2a:5e: 48:f6:a3:1e:7c:f0:96:b1:91:5f:ef:ca:a9:bc:a0:b4:69:35: b3:eb:09:b0:5a:d0:99:7d:8c:40:a2:04:38:7d:74:42:81:82: 82:b4:6c:f8:2b:0e:d3:83:d5:75:69:59:ac:8e:37:85:17:2b: 5e:ba:22:62:28:d6:60:93:9c:2d:f4:b3:6f:5a:13:bd:3a:6a: 8e:3d:f3:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ5REYxMTAvBgNVBAUTKDUzRTM4RjFEQjI1QTc2OUVEMkY0RTM1QURCRjdFQUM0 ODJDNjExQTUwHhcNMjUwODEwMjEwMjQ1WhcNMjUwODE3MjEwMjQ1WjAYMRYwFAYD VQQDEw02ODk5MDhmNS1lODg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoSKqupw0teGa1QsZ5tIvuhm6hUDUguh+ac/KqpDD6MDoE+AXf5CaOjRfjMCK zl2U7tg/fLUva1ykFiyf3CVR6h5g8IQUgfIND5m3Vop2ySJoKcrmFxEXQHCl0T0E cyNvMbeC64OTPUZKxMsuO3h3QcyisotCL/YFLwNQ0Xi2++QGPPvJ03Zm0UBM9MQC WIHM9Efg5AWnZw3HlszsiDnYxD5ksmlItVhRMhkJQGP6eT5/r6gK4oSUpcxuzQv4 JgDPrVqKin9COd2QO5PuayQ5Nhw+QXERetxKhxzklMSYtAnp/C1l4l0V2LzhdvNj 6bDvYQppdw60F/0kFS3laPiJUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLOI8Pdx OnPkbkYKjaZZTGtMRvbuMB8GA1UdIwQYMBaAFFPjjx2yWnae0vTjWtv36sSCxhGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDlERi8wNEI3Q0Y3NEY3 M0ExMUVBODE1QTEzMTZDNEY5QUUwMi9VLU9QSGJKYWRwN1M5T05hMl9mcXhJTEdF YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UtT1BIYkphZHA3UzlPTmEyX2ZxeElMR0VhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDlERi8wNEI3Q0Y3NEY3M0ExMUVBODE1QTEzMTZDNEY5QUUwMi9VLU9QSGJKYWRw N1M5T05hMl9mcXhJTEdFYVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBe6NNERBYLHhJznxZ8Ye00MDNMJhst6B/2ezCJNKbwyz+TCLM79r4L tvZmPcMVeXa1aGyhGveZRlbtnFIu4zcZDm5B3IF3p7BIWam4vS+NDtV4/USZ1XBM M+h5W317Apjv8HenToyFmDw3J3JvX754bSBwnGDn5HPFPPxX5Xx4G7UfFzRcW1ma KZ7C2uX1HMyLerfpHCMn2ze4q0WkawuvsNCobcRS7RglVcyLcOWX9OGWKl5I9qMe fPCWsZFf78qpvKC0aTWz6wmwWtCZfYxAogQ4fXRCgYKCtGz4Kw7Tg9V1aVmsjjeF FyteuiJiKNZgk5wt9LNvWhO9OmqOPfN2 -----END CERTIFICATE-----Generated at Mon Aug 11 04:15:25 2025 by rpki-client