$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft File: oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft (raw, json) Hash identifier: wDTMRfTEjqKuDwc1XiA/M7qskwjyppKOs0KTcjfI2pc= Subject key identifier: 31:3E:A1:3D:7E:0B:BA:9E:DE:60:11:7E:20:30:33:7B:41:A3:8F:CE Authority key identifier: A0:9C:A2:D3:1B:16:BF:A5:84:A7:58:C3:A7:D5:1F:AC:D2:15:1B:02 Certificate issuer: /CN=A91A4ED0/serialNumber=A09CA2D31B16BFA584A758C3A7D51FACD2151B02 Certificate serial: 0AC6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJyi0xsWv6WEp1jDp9UfrNIVGwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft Manifest number: 0ABC Signing time: Fri 08 Aug 2025 19:48:16 +0000 Manifest this update: Fri 08 Aug 2025 19:48:15 +0000 Manifest next update: Fri 15 Aug 2025 19:48:15 +0000 Files and hashes: 1: oJyi0xsWv6WEp1jDp9UfrNIVGwI.crl (hash: VK7smXFmdhp3HwePaZBJqH6E0kclTE7s+7R3ATVj2RU=) 2: 52F59E403B4111ECABFD2186C4F9AE02.roa (hash: iGeCqjea5TKx5w3j1RMFWZOzP6n/8IBkqpNhUcYz96Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.crl rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJyi0xsWv6WEp1jDp9UfrNIVGwI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2758 (0xac6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4ED0, serialNumber=A09CA2D31B16BFA584A758C3A7D51FACD2151B02 Validity Not Before: Aug 8 19:48:15 2025 GMT Not After : Aug 15 19:48:15 2025 GMT Subject: CN=6896547f-8d5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:35:44:b2:c9:30:a2:a1:fd:d2:e1:d2:c6:83: 88:ba:8e:eb:f1:e5:04:de:8a:9b:53:39:55:3f:fd: 6a:8f:be:f2:a6:83:aa:23:4c:33:4f:a7:5a:f3:60: f9:19:93:6b:38:6f:bf:f7:9b:c3:a0:df:9b:f6:90: 04:3a:1d:1a:a3:ba:46:ac:4f:b6:cd:ca:1e:ae:0a: b4:81:61:2e:30:b0:d3:be:54:25:33:c6:dc:21:e7: 7a:53:03:b2:04:1a:6a:a3:c0:c6:b6:1b:f2:28:02: 0a:f2:a7:dd:fa:fd:9c:06:e2:66:36:e9:b5:95:9d: c6:4b:60:4b:7a:87:45:25:b4:04:d2:7a:e0:4c:30: a9:7c:34:f5:2c:36:46:e1:3c:c1:ae:db:1b:13:82: 75:82:87:24:da:06:11:21:6b:8a:b7:4b:5c:57:c4: 2c:30:d9:e7:af:95:0b:6c:13:c3:cf:32:c4:a6:29: a0:fa:82:dd:5d:e9:01:82:d1:32:d3:27:d2:9e:00: a2:41:03:56:30:ef:f5:36:dc:8e:c5:dd:69:28:e6: d7:f4:2d:a9:5f:b1:38:57:22:4e:4c:96:91:77:fb: 81:54:31:d9:0b:30:92:e4:70:8e:0c:9a:e2:55:53: 85:13:9e:ea:e2:c0:1e:7e:9b:31:1b:0a:6c:de:fa: 0e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:3E:A1:3D:7E:0B:BA:9E:DE:60:11:7E:20:30:33:7B:41:A3:8F:CE X509v3 Authority Key Identifier: keyid:A0:9C:A2:D3:1B:16:BF:A5:84:A7:58:C3:A7:D5:1F:AC:D2:15:1B:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJyi0xsWv6WEp1jDp9UfrNIVGwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:9a:65:52:5a:46:ab:64:7e:6c:a1:3b:08:42:0b:d6:1d:af: 5d:e1:63:96:e3:2d:2f:a9:8b:ec:66:4b:0c:f2:ba:dc:b8:dc: 63:89:fb:8f:72:20:18:2f:95:e5:07:9e:2f:19:5d:9d:cf:70: c4:69:a2:3d:2d:25:d0:5a:6f:51:68:5f:e0:d7:7c:3c:43:fd: ce:f5:66:f2:13:9c:02:cf:2f:36:e2:88:88:0b:42:1b:30:36: 1e:d9:3a:af:12:7a:b3:43:bd:50:7d:eb:60:3d:b3:ae:cc:90: 7a:45:39:a4:e0:9b:5f:10:99:cf:f3:f1:25:0c:a3:1b:db:09: d2:c3:d3:8c:b0:81:9b:53:50:0b:dc:bc:7d:32:47:cc:a3:ac: 13:d9:36:83:81:ef:8f:cc:cc:bc:b5:5c:e3:14:9e:d8:d1:40: 90:95:57:a3:ce:24:e3:f2:df:38:1d:07:43:05:09:04:a4:e0: 0e:f2:8d:90:be:1e:0c:6b:30:d9:63:62:94:47:ec:3a:86:64: 67:e1:9c:5d:13:b4:78:cb:77:8d:9e:13:63:87:45:28:09:15: 48:04:e8:02:50:eb:f8:ab:5d:2d:3f:3c:f7:32:00:91:d8:ac: 3f:20:5f:b5:c0:48:d2:8d:78:6f:e6:49:56:2b:51:c4:b7:12: 21:87:91:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRFRDAxMTAvBgNVBAUTKEEwOUNBMkQzMUIxNkJGQTU4NEE3NThDM0E3RDUxRkFD RDIxNTFCMDIwHhcNMjUwODA4MTk0ODE1WhcNMjUwODE1MTk0ODE1WjAYMRYwFAYD VQQDEw02ODk2NTQ3Zi04ZDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwTVEsskwoqH90uHSxoOIuo7r8eUE3oqbUzlVP/1qj77ypoOqI0wzT6da82D5 GZNrOG+/95vDoN+b9pAEOh0ao7pGrE+2zcoergq0gWEuMLDTvlQlM8bcIed6UwOy BBpqo8DGthvyKAIK8qfd+v2cBuJmNum1lZ3GS2BLeodFJbQE0nrgTDCpfDT1LDZG 4TzBrtsbE4J1gock2gYRIWuKt0tcV8QsMNnnr5ULbBPDzzLEpimg+oLdXekBgtEy 0yfSngCiQQNWMO/1NtyOxd1pKObX9C2pX7E4VyJOTJaRd/uBVDHZCzCS5HCODJri VVOFE57q4sAefpsxGwps3voOPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDE+oT1+ C7qe3mARfiAwM3tBo4/OMB8GA1UdIwQYMBaAFKCcotMbFr+lhKdYw6fVH6zSFRsC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEVEMC85MkIzQ0Q1QTU4 Q0YxMUVBODVFODU5NERDNEY5QUUwMi9vSnlpMHhzV3Y2V0VwMWpEcDlVZnJOSVZH d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29KeWkweHNXdjZXRXAxakRwOVVmck5JVkd3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEVEMC85MkIzQ0Q1QTU4Q0YxMUVBODVFODU5NERDNEY5QUUwMi9vSnlpMHhzV3Y2 V0VwMWpEcDlVZnJOSVZHd0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATmmVSWkarZH5soTsIQgvWHa9d4WOW4y0vqYvsZksM8rrcuNxjifuP ciAYL5XlB54vGV2dz3DEaaI9LSXQWm9RaF/g13w8Q/3O9WbyE5wCzy824oiIC0Ib MDYe2TqvEnqzQ71QfetgPbOuzJB6RTmk4JtfEJnP8/ElDKMb2wnSw9OMsIGbU1AL 3Lx9MkfMo6wT2TaDge+PzMy8tVzjFJ7Y0UCQlVejziTj8t84HQdDBQkEpOAO8o2Q vh4MazDZY2KUR+w6hmRn4ZxdE7R4y3eNnhNjh0UoCRVIBOgCUOv4q10tPzz3MgCR 2Kw/IF+1wEjSjXhv5klWK1HEtxIhh5Ex -----END CERTIFICATE-----Generated at Sun Aug 10 16:02:14 2025 by rpki-client