$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft File: A-8OOQoxXl88RhsKcrIYvuIj4A4.mft (raw, json) Hash identifier: JbXjyL2TToq+6J/p1RkKXyUYE17E5k5GvYIutDmxtVI= Subject key identifier: 47:3F:D1:BC:CC:5E:C0:59:30:45:63:0F:00:4B:1D:3F:FC:BA:81:64 Authority key identifier: 03:EF:0E:39:0A:31:5E:5F:3C:46:1B:0A:72:B2:18:BE:E2:23:E0:0E Certificate issuer: /CN=A91A0FC0/serialNumber=03EF0E390A315E5F3C461B0A72B218BEE223E00E Certificate serial: F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A-8OOQoxXl88RhsKcrIYvuIj4A4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft Manifest number: 04B9 Signing time: Sat 09 Aug 2025 01:07:33 +0000 Manifest this update: Sat 09 Aug 2025 01:07:33 +0000 Manifest next update: Sat 16 Aug 2025 01:07:33 +0000 Files and hashes: 1: A-8OOQoxXl88RhsKcrIYvuIj4A4.crl (hash: QReRz1VAkiMvgxLfZELB4NVASA5D7ROoWCSzdXNS2pU=) 2: 9190CF9E2E7811EFB7206224C4F9AE02.roa (hash: h88YKkcazjRoHLRQFSfgpu+Eo1A4vft9VL2aQVc7RoU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.crl rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A-8OOQoxXl88RhsKcrIYvuIj4A4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 240 (0xf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0FC0, serialNumber=03EF0E390A315E5F3C461B0A72B218BEE223E00E Validity Not Before: Aug 9 01:07:33 2025 GMT Not After : Aug 16 01:07:33 2025 GMT Subject: CN=68969f55-397a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:80:73:1d:b3:ce:4f:3d:bd:7d:39:c4:e6:b1: 20:de:be:72:54:f7:7f:ce:27:17:38:80:86:35:4b: 8f:a8:a2:bf:ce:b8:fc:95:0b:04:d1:62:d9:50:40: db:23:54:38:ea:77:50:18:25:81:f5:5d:f7:52:84: 44:39:0b:98:6a:f2:62:1e:a2:6d:3f:85:b5:80:a0: d2:43:d3:6e:a1:ae:cd:28:fb:c6:4c:77:53:4e:ae: f9:da:1d:53:a2:a4:64:12:5a:00:a7:dc:cc:cd:e9: 9a:fc:f8:61:b6:6d:c9:57:b2:a3:e1:7f:86:c1:10: 75:45:e3:9d:b6:d3:35:11:a2:76:03:11:40:c7:f3: 54:98:04:c9:e3:3f:2f:87:03:d0:52:7b:44:89:dc: d4:58:8a:49:5c:35:2f:4d:69:13:67:90:da:a0:90: 8b:75:a9:59:16:b4:9f:6b:82:14:36:57:f0:7b:f4: c4:24:30:fb:f4:17:21:6c:31:cb:31:d0:74:ae:fb: 2c:54:1d:ab:d1:37:1a:e2:73:1f:36:32:9d:6d:29: a1:d8:e5:cd:09:49:4d:e2:d1:09:dd:b6:2e:13:0b: e3:8e:13:9e:35:53:99:40:48:1a:07:a8:e5:aa:6b: 73:d4:9c:6d:a2:c4:6b:3b:93:69:33:88:40:e3:f8: 72:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:3F:D1:BC:CC:5E:C0:59:30:45:63:0F:00:4B:1D:3F:FC:BA:81:64 X509v3 Authority Key Identifier: keyid:03:EF:0E:39:0A:31:5E:5F:3C:46:1B:0A:72:B2:18:BE:E2:23:E0:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A-8OOQoxXl88RhsKcrIYvuIj4A4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:f7:a0:a3:f8:99:e2:a4:0a:92:07:f6:8d:48:11:73:69:18: 67:ba:5a:57:79:54:01:42:f9:23:40:2a:cf:40:c6:49:56:40: bd:65:42:d4:2a:6c:5c:96:46:8b:56:32:52:a6:e4:5a:da:d3: 1f:0a:ff:df:f8:94:04:e7:32:17:f5:aa:9e:12:b5:26:41:6e: d8:29:fe:a5:6b:20:dd:15:7e:f9:a2:cd:e6:fe:91:58:4c:18: 2f:f6:8e:f5:91:6f:7f:28:96:fe:2a:52:8b:3d:ec:29:65:56: 30:53:6e:49:67:c8:ab:ac:71:b2:39:87:55:85:d7:c6:e1:1a: b0:e8:43:89:43:1f:b1:d1:30:5c:42:06:a4:bc:22:c9:3e:ce: bb:34:da:37:b5:49:3b:23:39:71:14:78:c8:6d:de:09:4c:c7: 7d:4d:16:04:2d:72:c8:f8:86:c5:b1:66:d1:a7:36:48:c8:0f: c5:30:5c:81:87:43:c1:21:6c:af:a9:23:40:38:c4:a0:ce:06: 62:02:5c:7e:6e:b3:7c:01:9b:ca:a2:90:bb:29:2b:7a:f9:6c: 0c:12:08:10:ef:81:fe:29:65:07:25:07:ec:ae:40:ec:d8:96: 6a:dd:de:2a:c3:e7:92:c6:b2:a3:38:1c:be:ed:35:3a:ed:98: ca:22:6d:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBGQzAxMTAvBgNVBAUTKDAzRUYwRTM5MEEzMTVFNUYzQzQ2MUIwQTcyQjIxOEJF RTIyM0UwMEUwHhcNMjUwODA5MDEwNzMzWhcNMjUwODE2MDEwNzMzWjAYMRYwFAYD VQQDEw02ODk2OWY1NS0zOTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9YBzHbPOTz29fTnE5rEg3r5yVPd/zicXOICGNUuPqKK/zrj8lQsE0WLZUEDb I1Q46ndQGCWB9V33UoREOQuYavJiHqJtP4W1gKDSQ9Nuoa7NKPvGTHdTTq752h1T oqRkEloAp9zMzema/Phhtm3JV7Kj4X+GwRB1ReOdttM1EaJ2AxFAx/NUmATJ4z8v hwPQUntEidzUWIpJXDUvTWkTZ5DaoJCLdalZFrSfa4IUNlfwe/TEJDD79BchbDHL MdB0rvssVB2r0Tca4nMfNjKdbSmh2OXNCUlN4tEJ3bYuEwvjjhOeNVOZQEgaB6jl qmtz1JxtosRrO5NpM4hA4/hykwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEc/0bzM XsBZMEVjDwBLHT/8uoFkMB8GA1UdIwQYMBaAFAPvDjkKMV5fPEYbCnKyGL7iI+AO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEZDMC9DREUwOTg3Njk1 NzgxMUVDQTMyQ0NGNTVDNEY5QUUwMi9BLThPT1FveFhsODhSaHNLY3JJWXZ1SWo0 QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EtOE9PUW94WGw4OFJoc0tjcklZdnVJajRBNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEZDMC9DREUwOTg3Njk1NzgxMUVDQTMyQ0NGNTVDNEY5QUUwMi9BLThPT1FveFhs ODhSaHNLY3JJWXZ1SWo0QTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB196Cj+JnipAqSB/aNSBFzaRhnulpXeVQBQvkjQCrPQMZJVkC9ZULU KmxclkaLVjJSpuRa2tMfCv/f+JQE5zIX9aqeErUmQW7YKf6layDdFX75os3m/pFY TBgv9o71kW9/KJb+KlKLPewpZVYwU25JZ8irrHGyOYdVhdfG4Rqw6EOJQx+x0TBc QgakvCLJPs67NNo3tUk7IzlxFHjIbd4JTMd9TRYELXLI+IbFsWbRpzZIyA/FMFyB h0PBIWyvqSNAOMSgzgZiAlx+brN8AZvKopC7KSt6+WwMEggQ74H+KWUHJQfsrkDs 2JZq3d4qw+eSxrKjOBy+7TU67ZjKIm3B -----END CERTIFICATE-----Generated at Sat Aug 9 14:23:18 2025 by rpki-client