$ rpki-client -vvf rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.mft File: oPnraYHccqJ4sYUomQbB4RwLNfE.mft (raw, json) Hash identifier: NGaufWWsJJrgWsyDgcVD1g4sTqEiM+IXjZOUuZD6j2M= Subject key identifier: 92:CB:E6:BC:7D:90:88:93:40:F3:92:E4:D7:60:91:D8:65:46:5E:5D Authority key identifier: A0:F9:EB:69:81:DC:72:A2:78:B1:85:28:99:06:C1:E1:1C:0B:35:F1 Certificate issuer: /CN=A91A05A0/serialNumber=A0F9EB6981DC72A278B185289906C1E11C0B35F1 Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPnraYHccqJ4sYUomQbB4RwLNfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.mft Manifest number: 2F Signing time: Sat 09 Aug 2025 08:10:55 +0000 Manifest this update: Sat 09 Aug 2025 08:10:55 +0000 Manifest next update: Sat 16 Aug 2025 08:10:55 +0000 Files and hashes: 1: oPnraYHccqJ4sYUomQbB4RwLNfE.crl (hash: nudSwTQl32JWLDZtv7IW2Thsu8Y/bAcQmft1HQZ72sA=) 2: 25E96E4C2F6511F0A4430347C4F9AE02.roa (hash: YjLtFlGgcNbwn9rRIgf5MeQrG8tFe9vr3RMokUM4ipM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.crl rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPnraYHccqJ4sYUomQbB4RwLNfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A05A0, serialNumber=A0F9EB6981DC72A278B185289906C1E11C0B35F1 Validity Not Before: Aug 9 08:10:55 2025 GMT Not After : Aug 16 08:10:55 2025 GMT Subject: CN=6897028f-484d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:94:d1:c3:3c:d1:59:fd:97:b2:77:7c:6f:93: b8:6d:cc:f9:fd:80:c2:d7:d3:dd:9b:8f:ef:8f:83: 78:73:81:3c:fc:73:8d:6f:b4:90:47:ab:68:ab:6a: e6:3e:db:1a:47:54:59:6b:1e:36:88:d5:e0:08:63: df:6d:d7:63:0e:e5:08:73:d7:8b:13:1e:d3:73:cc: 80:e1:dc:94:63:82:6c:c5:ed:e2:01:93:7d:b3:1d: 5d:6c:59:ba:ca:57:3b:1f:0b:5c:6f:be:d4:56:c1: 3a:3b:90:5c:50:cd:cd:d8:8b:c8:8e:ea:eb:3f:f7: 0f:93:45:bc:80:2d:5d:d7:09:f0:b3:c2:d6:30:c6: 95:b0:56:59:f5:6c:e4:af:26:10:6d:5a:72:e7:ea: 35:fb:28:0f:82:9c:69:0d:66:1e:28:35:54:4a:c6: eb:65:a7:03:b9:da:4e:07:79:10:b3:d5:36:15:1a: b5:89:50:da:39:4a:50:66:97:2e:9d:41:4c:49:64: 5e:23:fc:f5:9d:4f:ca:63:56:39:d8:2e:94:04:99: 90:3a:cf:b3:a5:e9:17:41:b9:66:c5:1d:50:dd:e8: 91:b8:9c:47:30:cc:74:c6:02:29:06:e2:b8:6b:6b: 08:ac:30:15:c3:b8:dc:e4:69:0f:fa:a8:40:b3:f0: 57:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:CB:E6:BC:7D:90:88:93:40:F3:92:E4:D7:60:91:D8:65:46:5E:5D X509v3 Authority Key Identifier: keyid:A0:F9:EB:69:81:DC:72:A2:78:B1:85:28:99:06:C1:E1:1C:0B:35:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPnraYHccqJ4sYUomQbB4RwLNfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:9c:9b:32:78:d7:77:e9:20:6b:4f:67:8f:2f:7b:bb:49:0b: 6a:45:3c:68:21:48:6f:84:89:aa:c2:a9:bc:b0:0d:e9:f9:09: 97:99:e9:13:d2:2f:c8:a1:fd:34:c9:02:5a:e4:48:09:50:c2: 3d:16:aa:80:6d:0d:8a:3d:3e:ff:c0:30:5b:91:39:ba:11:d3: c9:db:4c:60:d7:ea:1e:cd:6d:ee:1a:6f:e5:52:fd:20:d8:36: a1:85:9f:62:21:9b:aa:62:d8:4d:99:e3:b8:13:1c:65:d4:a2: d8:4e:d6:24:9a:c5:c9:fd:50:72:7c:ff:3e:11:c3:01:29:5d: 7f:ef:bc:b8:0e:58:72:65:58:d2:bc:46:45:1d:97:a5:64:6e: d5:b9:7c:7d:9c:1c:fd:63:62:5b:30:0c:74:79:6c:41:68:d1: 34:80:48:f0:82:da:af:1f:23:46:79:96:b0:bf:17:be:01:a9: 52:0f:41:92:80:e3:37:1c:7e:b8:6d:e1:8c:48:29:5e:08:c5: 4c:fc:f4:d6:97:c2:fe:38:47:89:12:b5:65:70:d0:a9:c8:9e: 70:74:57:8f:e9:cd:23:e1:05:5f:2b:55:7b:ca:d9:94:c6:4b: f1:55:33:44:04:31:d4:5b:04:67:89:80:e6:00:36:ad:d4:0d: ee:d9:74:df -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MDVBMDExMC8GA1UEBRMoQTBGOUVCNjk4MURDNzJBMjc4QjE4NTI4OTkwNkMxRTEx QzBCMzVGMTAeFw0yNTA4MDkwODEwNTVaFw0yNTA4MTYwODEwNTVaMBgxFjAUBgNV BAMTDTY4OTcwMjhmLTQ4NGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDtlNHDPNFZ/Zeyd3xvk7htzPn9gMLX092bj++Pg3hzgTz8c41vtJBHq2irauY+ 2xpHVFlrHjaI1eAIY99t12MO5Qhz14sTHtNzzIDh3JRjgmzF7eIBk32zHV1sWbrK VzsfC1xvvtRWwTo7kFxQzc3Yi8iO6us/9w+TRbyALV3XCfCzwtYwxpWwVln1bOSv JhBtWnLn6jX7KA+CnGkNZh4oNVRKxutlpwO52k4HeRCz1TYVGrWJUNo5SlBmly6d QUxJZF4j/PWdT8pjVjnYLpQEmZA6z7Ol6RdBuWbFHVDd6JG4nEcwzHTGAikG4rhr awisMBXDuNzkaQ/6qECz8Fe1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUksvmvH2Q iJNA85Lk12CR2GVGXl0wHwYDVR0jBBgwFoAUoPnraYHccqJ4sYUomQbB4RwLNfEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEwNUEwLzlDNTM3MTc4MkY2 NDExRjBCNEYyQTI0NUM0RjlBRTAyL29QbnJhWUhjY3FKNHNZVW9tUWJCNFJ3TE5m RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb1BucmFZSGNjcUo0c1lVb21RYkI0UndMTmZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEw NUEwLzlDNTM3MTc4MkY2NDExRjBCNEYyQTI0NUM0RjlBRTAyL29QbnJhWUhjY3FK NHNZVW9tUWJCNFJ3TE5mRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAucmzJ413fpIGtPZ48ve7tJC2pFPGghSG+EiarCqbywDen5CZeZ6RPS L8ih/TTJAlrkSAlQwj0WqoBtDYo9Pv/AMFuROboR08nbTGDX6h7Nbe4ab+VS/SDY NqGFn2Ihm6pi2E2Z47gTHGXUothO1iSaxcn9UHJ8/z4RwwEpXX/vvLgOWHJlWNK8 RkUdl6VkbtW5fH2cHP1jYlswDHR5bEFo0TSASPCC2q8fI0Z5lrC/F74BqVIPQZKA 4zccfrht4YxIKV4IxUz89NaXwv44R4kStWVw0KnInnB0V4/pzSPhBV8rVXvK2ZTG S/FVM0QEMdRbBGeJgOYANq3UDe7ZdN8= -----END CERTIFICATE-----Generated at Sun Aug 10 18:48:29 2025 by rpki-client