$ rpki-client -vvf rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.mft File: oXkseNMOEHMKPERWHH5YIufxwvg.mft (raw, json) Hash identifier: /jLTJf8Mu7AmAZRxGJ7xlS5puqs273AmvWs+yx4vvvs= Subject key identifier: D0:D4:59:4C:26:3B:D1:9E:26:A6:39:A1:92:B6:1F:A2:01:03:47:B2 Authority key identifier: A1:79:2C:78:D3:0E:10:73:0A:3C:44:56:1C:7E:58:22:E7:F1:C2:F8 Certificate issuer: /CN=A91A093A/serialNumber=A1792C78D30E10730A3C44561C7E5822E7F1C2F8 Certificate serial: 087E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXkseNMOEHMKPERWHH5YIufxwvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.mft Manifest number: 0872 Signing time: Sun 10 Aug 2025 20:39:44 +0000 Manifest this update: Sun 10 Aug 2025 20:39:44 +0000 Manifest next update: Sun 17 Aug 2025 20:39:44 +0000 Files and hashes: 1: oXkseNMOEHMKPERWHH5YIufxwvg.crl (hash: gIiMYod9DwVR8AVFkZLkRLSJkM/m1mj9JtzNwMXORW4=) 2: 153A3AE86A9111EF905C3C37C4F9AE02.roa (hash: LYF+KadzZ69diyD5rWiKHJlYkwO/eA/Z250K04w+xPI=) 3: AA973CB86A8B11EFB0774B61C4F9AE02.roa (hash: +w6DPiK2iGC1sFd6+H0KMfGyjFvRHYPwKc/prnzBHkc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.crl rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXkseNMOEHMKPERWHH5YIufxwvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2174 (0x87e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A093A, serialNumber=A1792C78D30E10730A3C44561C7E5822E7F1C2F8 Validity Not Before: Aug 10 20:39:44 2025 GMT Not After : Aug 17 20:39:44 2025 GMT Subject: CN=68990390-d60e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a4:13:8c:56:ac:22:0b:a4:c8:8f:15:95:ab: 0d:a8:8e:5a:b4:a8:d3:ca:4f:39:a4:20:94:80:08: 18:ff:bf:3e:be:49:d6:f5:04:e6:3f:a3:93:60:32: 5f:25:59:05:98:c3:f6:bd:91:42:c0:71:c8:bd:05: 01:53:66:00:b7:dc:f4:de:ff:c1:26:3a:5b:b1:1c: ea:5f:6d:76:e6:ce:77:7e:0f:ff:2f:0b:82:d7:cc: 94:63:94:99:1e:24:6a:e3:bd:3d:b0:32:46:89:8e: b1:10:06:f1:03:52:5f:02:61:f3:0e:3d:3a:0a:95: af:7f:2c:77:66:40:39:b6:53:18:ab:79:c8:85:59: 37:38:a4:3a:8e:37:7c:b6:8d:51:f5:57:36:04:8f: 46:8c:ea:6f:5f:04:44:e7:5c:b3:04:8a:1e:37:b4: 06:34:8a:ec:de:fd:d7:a5:b3:81:f6:2b:96:5b:46: 04:63:19:5d:b1:07:40:7a:22:f8:ff:f4:ad:45:ea: 6a:0d:25:38:8a:8f:75:8d:fe:cd:38:c8:ab:0d:74: 96:2b:e0:55:c3:eb:23:09:5b:db:8b:4e:f3:42:61: 40:4e:85:57:44:ec:63:31:c3:1f:3b:30:96:1e:0e: c6:bd:ba:40:0e:5d:21:b1:a8:74:df:6b:2d:cf:bb: 4c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:D4:59:4C:26:3B:D1:9E:26:A6:39:A1:92:B6:1F:A2:01:03:47:B2 X509v3 Authority Key Identifier: keyid:A1:79:2C:78:D3:0E:10:73:0A:3C:44:56:1C:7E:58:22:E7:F1:C2:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXkseNMOEHMKPERWHH5YIufxwvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:82:69:a9:0e:45:33:10:e5:f9:5f:fc:74:f8:27:85:f1:49: 88:43:c5:77:8c:16:67:d7:df:a3:6b:2b:a8:ca:1c:fd:bb:f1: 49:76:00:0a:d3:71:cd:ad:d2:1d:1f:2e:ae:96:44:b3:f8:8e: 01:f1:8e:3a:c5:cc:bc:0c:0d:79:d9:38:17:52:da:a2:65:52: e2:40:f1:15:5e:af:08:65:aa:86:e8:74:1e:82:e8:2e:ec:9d: 99:4b:1c:91:fc:10:35:c0:1c:58:e1:b1:9c:d8:1c:90:12:9b: d7:83:1c:b9:1d:e7:24:34:f8:7b:e2:4c:e4:a2:cf:21:94:2d: ee:e8:ac:ab:5a:5c:a2:b8:66:9d:44:46:0b:8a:86:9b:d3:6f: 2c:25:a4:92:4b:fe:df:f2:49:f3:24:35:f2:ab:67:2b:83:61: 28:00:3b:df:24:67:60:61:e4:7d:ec:18:2c:04:40:29:41:43: b4:1c:6e:a6:11:ac:62:5a:9c:6b:5f:f2:ec:4f:fe:50:83:1e: 32:2a:86:ed:6d:cf:ee:2b:71:d2:62:df:91:3b:b5:66:e5:ba: 89:3c:8b:d9:9c:33:0b:5f:1a:45:a5:7f:6b:a4:c9:18:6d:86: 7f:04:e0:aa:5f:3c:09:ee:2a:37:de:05:0d:06:93:1c:ab:d1: 55:7f:8d:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA5M0ExMTAvBgNVBAUTKEExNzkyQzc4RDMwRTEwNzMwQTNDNDQ1NjFDN0U1ODIy RTdGMUMyRjgwHhcNMjUwODEwMjAzOTQ0WhcNMjUwODE3MjAzOTQ0WjAYMRYwFAYD VQQDEw02ODk5MDM5MC1kNjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoqQTjFasIgukyI8VlasNqI5atKjTyk85pCCUgAgY/78+vknW9QTmP6OTYDJf JVkFmMP2vZFCwHHIvQUBU2YAt9z03v/BJjpbsRzqX2125s53fg//LwuC18yUY5SZ HiRq4709sDJGiY6xEAbxA1JfAmHzDj06CpWvfyx3ZkA5tlMYq3nIhVk3OKQ6jjd8 to1R9Vc2BI9GjOpvXwRE51yzBIoeN7QGNIrs3v3XpbOB9iuWW0YEYxldsQdAeiL4 //StRepqDSU4io91jf7NOMirDXSWK+BVw+sjCVvbi07zQmFAToVXROxjMcMfOzCW Hg7GvbpADl0hsah032stz7tMeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNDUWUwm O9GeJqY5oZK2H6IBA0eyMB8GA1UdIwQYMBaAFKF5LHjTDhBzCjxEVhx+WCLn8cL4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDkzQS9FQkEzNTMxRUNC RDgxMUVBODY3QUZCNEZDNEY5QUUwMi9vWGtzZU5NT0VITUtQRVJXSEg1WUl1Znh3 dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Ya3NlTk1PRUhNS1BFUldISDVZSXVmeHd2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDkzQS9FQkEzNTMxRUNCRDgxMUVBODY3QUZCNEZDNEY5QUUwMi9vWGtzZU5NT0VI TUtQRVJXSEg1WUl1Znh3dmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDMgmmpDkUzEOX5X/x0+CeF8UmIQ8V3jBZn19+jayuoyhz9u/FJdgAK 03HNrdIdHy6ulkSz+I4B8Y46xcy8DA152TgXUtqiZVLiQPEVXq8IZaqG6HQegugu 7J2ZSxyR/BA1wBxY4bGc2ByQEpvXgxy5HeckNPh74kzkos8hlC3u6KyrWlyiuGad REYLioab028sJaSSS/7f8knzJDXyq2crg2EoADvfJGdgYeR97BgsBEApQUO0HG6m EaxiWpxrX/LsT/5Qgx4yKobtbc/uK3HSYt+RO7Vm5bqJPIvZnDMLXxpFpX9rpMkY bYZ/BOCqXzwJ7io33gUNBpMcq9FVf41+ -----END CERTIFICATE-----Generated at Mon Aug 11 09:58:58 2025 by rpki-client