$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft File: 1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft (raw, json) Hash identifier: 0qftImMTqvT+H0VxbYr4GmoWM9926gsY1uUtt9/+MzY= Subject key identifier: 9D:30:23:73:51:5C:F8:3F:BB:C5:80:9E:7E:3B:B8:AE:6C:C3:69:60 Authority key identifier: D6:80:BF:3A:79:6A:35:5B:12:5A:60:2C:74:66:B9:A5:6D:34:42:54 Certificate issuer: /CN=A91AAE16/serialNumber=D680BF3A796A355B125A602C7466B9A56D344254 Certificate serial: 0FD2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft Manifest number: 0FC9 Signing time: Fri 08 Aug 2025 17:42:12 +0000 Manifest this update: Fri 08 Aug 2025 17:42:12 +0000 Manifest next update: Fri 15 Aug 2025 17:42:12 +0000 Files and hashes: 1: 1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl (hash: LOV9wKbOMgQPNc530k5uNUFNh6sL/jIqAWRw2X3Gilg=) 2: 682B76C05BB211E9BF474F16C4F9AE02.roa (hash: vKLtsTjRDQmvaoDy2+JZ+X/edFfE0cROOj6FdGkYWZw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4050 (0xfd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAE16, serialNumber=D680BF3A796A355B125A602C7466B9A56D344254 Validity Not Before: Aug 8 17:42:12 2025 GMT Not After : Aug 15 17:42:12 2025 GMT Subject: CN=689636f4-32c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:59:73:04:61:08:9b:31:ed:60:44:0e:16:07: 78:91:c6:a0:37:2a:98:7b:de:62:f6:22:12:6a:93: 9d:d2:64:97:61:e7:9e:6f:0c:d7:5b:a0:5b:6b:2a: 65:62:d7:cc:27:8d:da:c9:12:64:c0:46:05:1a:15: d5:98:0c:97:64:6c:e0:24:f3:a1:f9:92:e5:b4:da: dd:70:8a:79:79:c1:c0:84:a8:2b:96:64:64:87:1b: ba:58:5c:6a:d8:3f:45:31:33:69:1d:e2:3c:08:9f: a1:30:fd:48:c9:46:8b:e3:71:87:b2:e7:65:77:55: a7:4b:1f:d9:7b:b4:70:71:51:28:4c:a6:79:9e:5d: ea:7c:35:43:62:2c:c1:47:1e:a6:7d:c6:33:7d:a3: 04:1e:89:1e:8e:b2:d4:9c:c0:20:bf:67:d0:db:92: 29:c1:d4:81:fd:84:70:59:73:87:33:7d:e8:b1:1e: 96:ae:f7:b9:27:df:a2:f3:02:55:9d:ba:1f:f8:82: 46:27:90:b1:d1:27:bc:b2:1b:65:05:73:f9:ba:6e: b7:08:cf:67:f1:05:8a:99:ed:be:10:a5:1c:84:ee: ed:3b:26:99:e3:e8:f7:df:13:b5:76:3f:78:84:1d: ed:a7:61:3b:16:c3:8b:e0:b2:9c:3e:ef:18:bf:5a: d4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:30:23:73:51:5C:F8:3F:BB:C5:80:9E:7E:3B:B8:AE:6C:C3:69:60 X509v3 Authority Key Identifier: keyid:D6:80:BF:3A:79:6A:35:5B:12:5A:60:2C:74:66:B9:A5:6D:34:42:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:79:67:96:14:fd:0a:dc:1e:4f:52:62:a7:ca:7e:75:e3:9d: 12:36:76:8a:3c:a0:95:53:d2:24:8b:4f:35:b8:be:fe:df:f5: 3c:19:76:f2:33:2d:e5:8b:86:02:53:43:35:f8:03:53:02:f0: c1:d4:df:1c:43:8c:e8:bb:22:63:88:84:6c:32:f5:bf:09:3e: 47:ed:2c:73:3b:c5:56:46:df:e6:f6:34:ba:53:aa:fb:9e:18: 18:05:97:e3:f6:a2:1e:9c:51:12:81:d2:15:71:35:fa:22:e7: 2f:1d:7d:4e:e2:ee:a9:46:1e:7d:b9:07:f5:fe:8e:6e:d3:41: 0f:8b:bc:c7:6d:5e:e2:9d:c5:33:11:1b:16:09:a5:fa:f2:71: 05:94:d1:8d:84:1f:6f:5f:89:e5:81:05:f8:42:47:06:44:dc: 47:ab:ea:3b:a3:78:c6:13:7a:3d:4e:64:a6:fd:c9:9b:23:ec: 1d:f4:c2:d3:8a:2f:b7:b3:62:3b:1f:3f:f7:c9:b1:36:e1:1c: c3:e6:2f:6d:34:85:31:63:3b:4c:c5:e7:18:1f:b8:d1:bb:fb: 43:00:86:75:08:c5:9f:76:d5:4d:18:31:86:b0:48:f9:bc:1a: 29:b1:7e:89:1b:44:f6:0e:15:fe:f3:c5:47:02:71:aa:a9:05: 2f:99:2a:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFMTYxMTAvBgNVBAUTKEQ2ODBCRjNBNzk2QTM1NUIxMjVBNjAyQzc0NjZCOUE1 NkQzNDQyNTQwHhcNMjUwODA4MTc0MjEyWhcNMjUwODE1MTc0MjEyWjAYMRYwFAYD VQQDEw02ODk2MzZmNC0zMmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7VlzBGEImzHtYEQOFgd4kcagNyqYe95i9iISapOd0mSXYeeebwzXW6Bbaypl YtfMJ43ayRJkwEYFGhXVmAyXZGzgJPOh+ZLltNrdcIp5ecHAhKgrlmRkhxu6WFxq 2D9FMTNpHeI8CJ+hMP1IyUaL43GHsudld1WnSx/Ze7RwcVEoTKZ5nl3qfDVDYizB Rx6mfcYzfaMEHokejrLUnMAgv2fQ25IpwdSB/YRwWXOHM33osR6Wrve5J9+i8wJV nbof+IJGJ5Cx0Se8shtlBXP5um63CM9n8QWKme2+EKUchO7tOyaZ4+j33xO1dj94 hB3tp2E7FsOL4LKcPu8Yv1rUHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ0wI3NR XPg/u8WAnn47uK5sw2lgMB8GA1UdIwQYMBaAFNaAvzp5ajVbElpgLHRmuaVtNEJU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUUxNi8wRUFDRjgyQzVC QjExMUU5OEIxMDNCMTNDNEY5QUUwMi8xb0NfT25scU5Wc1NXbUFzZEdhNXBXMDBR bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFvQ19PbmxxTlZzU1dtQXNkR2E1cFcwMFFsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUUxNi8wRUFDRjgyQzVCQjExMUU5OEIxMDNCMTNDNEY5QUUwMi8xb0NfT25scU5W c1NXbUFzZEdhNXBXMDBRbFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7eWeWFP0K3B5PUmKnyn51450SNnaKPKCVU9Iki081uL7+3/U8GXby My3li4YCU0M1+ANTAvDB1N8cQ4zouyJjiIRsMvW/CT5H7SxzO8VWRt/m9jS6U6r7 nhgYBZfj9qIenFESgdIVcTX6IucvHX1O4u6pRh59uQf1/o5u00EPi7zHbV7incUz ERsWCaX68nEFlNGNhB9vX4nlgQX4QkcGRNxHq+o7o3jGE3o9TmSm/cmbI+wd9MLT ii+3s2I7Hz/3ybE24RzD5i9tNIUxYztMxecYH7jRu/tDAIZ1CMWfdtVNGDGGsEj5 vBopsX6JG0T2DhX+88VHAnGqqQUvmSry -----END CERTIFICATE-----Generated at Sat Aug 9 15:09:51 2025 by rpki-client