$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft File: oUUkHZgwrySnFWc1ElXsjn7VPv4.mft (raw, json) Hash identifier: cLUzne4b9xiMxd7ilkmFPN1ky/4VaxnbvsXocSpYRQA= Subject key identifier: 30:5C:55:CC:7E:5F:59:86:35:93:1C:42:EE:F1:FA:C0:A5:D1:09:FC Authority key identifier: A1:45:24:1D:98:30:AF:24:A7:15:67:35:12:55:EC:8E:7E:D5:3E:FE Certificate issuer: /CN=A91AC5BC/serialNumber=A145241D9830AF24A71567351255EC8E7ED53EFE Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft Manifest number: 1F Signing time: Mon 11 Aug 2025 08:17:12 +0000 Manifest this update: Mon 11 Aug 2025 08:17:12 +0000 Manifest next update: Mon 18 Aug 2025 08:17:12 +0000 Files and hashes: 1: oUUkHZgwrySnFWc1ElXsjn7VPv4.crl (hash: haU9xpmM56g4xAVsLrl2EdZ7hRAlydmNkj7mzaJldDM=) 2: C24679DC741211F0808A8240C4F9AE02.roa (hash: 0sz+kpmtwGElJIZS+dbC02B4JWfvDxu2J1QwiI80uIU=) 3: CA13AA3259F411F088DE4585C4F9AE02.roa (hash: sqfwCpzDKMYilQCPQK2oKMa05i/stBaHoGZSKtfH8BY=) 4: 90CF95CE66DD11F09FD37312C4F9AE02.roa (hash: BBZhX9HK3NBq65o9RCyGDdGBDo4hsR5Etdc6G3lRbjc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.crl rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 08:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC5BC, serialNumber=A145241D9830AF24A71567351255EC8E7ED53EFE Validity Not Before: Aug 11 08:17:12 2025 GMT Not After : Aug 18 08:17:12 2025 GMT Subject: CN=6899a708-5038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:91:5c:e7:d1:6b:0e:a4:80:62:9d:1a:76:fb: 27:51:e0:13:33:00:67:be:73:ef:2b:7a:69:cf:29: 18:26:66:3d:fa:98:15:11:b2:2e:22:bd:6e:64:f4: 88:04:df:ac:c5:6a:dd:f4:3b:17:83:26:36:47:ef: f0:9d:6f:f1:0a:c4:23:38:3c:6a:5f:09:f5:30:94: e3:3d:97:1b:15:ea:67:61:64:bb:4d:0a:4e:cd:0c: 8f:7a:a8:75:10:ba:35:c9:fa:12:a8:92:f9:7e:b6: fc:bb:c6:a3:76:5b:a0:79:87:94:a1:33:03:29:12: e7:66:bf:dc:39:32:b5:f4:b9:6b:8e:77:60:94:4c: ed:1b:d7:43:a3:d4:c4:f6:52:e3:6a:e0:7e:75:78: 17:ec:8e:9f:1a:dc:8a:0c:54:8e:05:2b:ca:f1:1d: 46:ab:b0:bb:4a:07:71:39:2d:3b:11:08:cc:7b:42: 21:5b:43:b7:ac:8e:9d:ff:dc:ba:62:0f:26:26:2d: 6a:63:9a:24:2e:4b:39:b4:6e:70:0e:da:30:84:b5: 87:f4:2b:40:42:c4:7b:10:5e:97:bb:8d:d4:a2:d1: 3d:96:98:1e:7c:9b:06:8d:89:d7:b7:f3:fa:47:33: 7a:d4:a7:ff:4b:eb:9b:7e:20:78:24:7c:56:83:52: 48:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:5C:55:CC:7E:5F:59:86:35:93:1C:42:EE:F1:FA:C0:A5:D1:09:FC X509v3 Authority Key Identifier: keyid:A1:45:24:1D:98:30:AF:24:A7:15:67:35:12:55:EC:8E:7E:D5:3E:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:26:d9:5e:92:a7:a8:9a:a1:72:e2:51:64:e4:a5:ff:46:a1: 26:2a:2f:6f:46:ca:3d:4f:a4:e0:2b:fd:3c:70:a2:30:4f:42: d3:2c:ca:e2:17:41:a9:b1:0f:74:75:4e:a5:9a:46:ff:80:24: 45:3b:f3:44:f4:91:27:a9:42:35:7e:fe:e6:de:b5:5b:c9:ab: 18:30:2d:a1:94:8b:29:17:f6:e4:0b:58:32:08:cd:bb:ba:1d: 79:70:7e:38:ce:26:e9:f6:08:55:06:ee:fc:2a:94:66:5f:e7: 16:29:ed:73:67:2d:d5:83:74:8d:b3:ba:30:b5:77:b3:7d:6a: 94:51:2f:49:5e:66:f9:65:fe:7f:37:84:30:d3:55:46:f2:99: 14:90:d2:5e:e8:13:f5:2e:f9:d0:c3:44:80:6f:ff:6b:cd:45: f7:b7:9e:c0:5f:a1:c5:72:e7:b7:c5:f1:4d:39:58:96:36:1a: 8d:58:37:2e:a2:cd:b6:c6:51:c5:d8:2b:7c:d8:8a:57:27:3e: 51:d0:61:53:f0:ec:68:ed:17:e2:6f:06:06:6a:78:f6:7d:ac: d5:a5:05:0f:83:34:f2:a3:14:22:1f:6d:a1:86:c2:82:65:d5: 4f:7d:58:9f:f7:41:0b:b7:03:c5:52:aa:72:4c:81:96:14:08: 12:a5:34:4b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QzVCQzExMC8GA1UEBRMoQTE0NTI0MUQ5ODMwQUYyNEE3MTU2NzM1MTI1NUVDOEU3 RUQ1M0VGRTAeFw0yNTA4MTEwODE3MTJaFw0yNTA4MTgwODE3MTJaMBgxFjAUBgNV BAMTDTY4OTlhNzA4LTUwMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgkVzn0WsOpIBinRp2+ydR4BMzAGe+c+8remnPKRgmZj36mBURsi4ivW5k9IgE 36zFat30OxeDJjZH7/Cdb/EKxCM4PGpfCfUwlOM9lxsV6mdhZLtNCk7NDI96qHUQ ujXJ+hKokvl+tvy7xqN2W6B5h5ShMwMpEudmv9w5MrX0uWuOd2CUTO0b10Oj1MT2 UuNq4H51eBfsjp8a3IoMVI4FK8rxHUarsLtKB3E5LTsRCMx7QiFbQ7esjp3/3Lpi DyYmLWpjmiQuSzm0bnAO2jCEtYf0K0BCxHsQXpe7jdSi0T2WmB58mwaNide38/pH M3rUp/9L65t+IHgkfFaDUkjBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMFxVzH5f WYY1kxxC7vH6wKXRCfwwHwYDVR0jBBgwFoAUoUUkHZgwrySnFWc1ElXsjn7VPv4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFDNUJDLzcxRTVEOEJFNTlG MjExRjBCNEZBRTk1RkM0RjlBRTAyL29VVWtIWmd3cnlTbkZXYzFFbFhzam43VlB2 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb1VVa0haZ3dyeVNuRldjMUVsWHNqbjdWUHY0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFD NUJDLzcxRTVEOEJFNTlGMjExRjBCNEZBRTk1RkM0RjlBRTAyL29VVWtIWmd3cnlT bkZXYzFFbFhzam43VlB2NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAM4m2V6Sp6iaoXLiUWTkpf9GoSYqL29Gyj1PpOAr/TxwojBPQtMsyuIX QamxD3R1TqWaRv+AJEU780T0kSepQjV+/ubetVvJqxgwLaGUiykX9uQLWDIIzbu6 HXlwfjjOJun2CFUG7vwqlGZf5xYp7XNnLdWDdI2zujC1d7N9apRRL0leZvll/n83 hDDTVUbymRSQ0l7oE/Uu+dDDRIBv/2vNRfe3nsBfocVy57fF8U05WJY2Go1YNy6i zbbGUcXYK3zYilcnPlHQYVPw7GjtF+JvBgZqePZ9rNWlBQ+DNPKjFCIfbaGGwoJl 1U99WJ/3QQu3A8VSqnJMgZYUCBKlNEs= -----END CERTIFICATE-----Generated at Tue Aug 12 18:57:50 2025 by rpki-client