$ rpki-client -vvf rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft File: OoeHHjuuZe3i8xuxrVxZu3p0q90.mft (raw, json) Hash identifier: rtRZHGrYPS0lNx1S7OKz1jgwMB2NHjQFgrf6tXenuGo= Subject key identifier: 41:70:5A:72:2C:FC:49:3E:BB:61:16:0E:20:05:8F:F3:87:1F:E9:96 Authority key identifier: 3A:87:87:1E:3B:AE:65:ED:E2:F3:1B:B1:AD:5C:59:BB:7A:74:AB:DD Certificate issuer: /CN=A91B87FC/serialNumber=3A87871E3BAE65EDE2F31BB1AD5C59BB7A74ABDD Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft Manifest number: A0 Signing time: Mon 11 Aug 2025 06:31:02 +0000 Manifest this update: Mon 11 Aug 2025 06:31:02 +0000 Manifest next update: Mon 18 Aug 2025 06:31:02 +0000 Files and hashes: 1: OoeHHjuuZe3i8xuxrVxZu3p0q90.crl (hash: Ga8hWKwOhT/V1UoZKByDn/UkcG0fdOKgDNj/cgwUMmI=) 2: 5E85AD042B1B11F0AE3E223BC4F9AE02.roa (hash: ehnqd1f3QowHKupxZCgtiZG9EfVwv3NoZQIQlB2w/i4=) 3: 64517A3886E311EFA2B33527C4F9AE02.roa (hash: a8PUztMZjKwlO5oAsBw+JL1gQU9NMI2G6jad/TSX5I0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.crl rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B87FC, serialNumber=3A87871E3BAE65EDE2F31BB1AD5C59BB7A74ABDD Validity Not Before: Aug 11 06:31:02 2025 GMT Not After : Aug 18 06:31:02 2025 GMT Subject: CN=68998e26-71ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ea:c0:94:0f:f4:e2:88:f8:ca:54:c3:61:a0: fe:5c:70:c6:1b:57:6d:bf:74:20:39:17:e9:37:1e: 07:2c:0a:90:d7:8a:49:26:6b:50:34:31:7c:f2:9c: e8:86:a6:c9:14:8b:f2:fe:51:a6:13:c0:02:e1:e6: 12:a6:2e:0c:20:c5:71:61:9b:5b:61:93:fe:4e:17: a3:60:97:ac:26:f9:a7:a8:f9:6e:7e:87:84:81:2e: a4:23:27:f2:8f:dd:12:0d:35:c5:b5:ba:ba:eb:ac: b0:aa:ad:ed:b9:5c:d9:82:2f:ab:aa:37:d9:51:21: e7:9c:0c:1e:ff:c8:2b:62:c9:5a:21:eb:33:23:24: 65:34:8f:be:9f:6e:83:cf:48:35:23:f2:ca:62:1b: dd:6c:73:c6:7a:14:05:ba:8f:e1:39:55:29:18:01: 23:dc:b5:04:96:1e:2b:a9:38:f3:02:e4:0b:d3:8f: b2:e1:a6:89:91:b2:3a:a9:b7:79:95:84:0d:71:7b: ae:73:21:da:e4:72:6a:9e:fb:25:93:fa:a5:0f:4d: ac:61:77:79:e3:1c:b7:d5:80:e3:6a:d2:a5:3b:3f: 43:4a:16:42:05:90:a1:f8:d6:a7:d3:f8:9c:ee:b3: 12:1c:cd:5f:24:a7:9c:5a:e4:c2:41:63:8d:e0:67: f4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:70:5A:72:2C:FC:49:3E:BB:61:16:0E:20:05:8F:F3:87:1F:E9:96 X509v3 Authority Key Identifier: keyid:3A:87:87:1E:3B:AE:65:ED:E2:F3:1B:B1:AD:5C:59:BB:7A:74:AB:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:fd:f2:28:fa:b6:e4:90:54:8c:7c:ce:af:27:7f:9d:50:ec: d4:64:c3:8e:f7:a9:b7:d1:31:3b:b1:77:7e:7d:8d:be:6f:03: fe:b5:88:32:70:a7:c0:23:b2:80:39:68:04:99:d6:9a:c9:02: 86:d4:ea:04:72:cf:aa:52:da:2f:dc:c7:27:67:d7:ab:7f:b9: 13:fa:11:be:05:f0:b1:3d:42:bb:68:0b:73:6c:b0:8a:31:70: 72:a0:31:59:bb:06:81:15:1e:19:e5:8c:ed:df:a3:f5:69:4a: 37:32:c9:3f:e2:1e:15:7a:f2:0d:4e:b6:94:83:76:3e:28:b0: eb:9f:0e:81:fe:2e:48:3b:c8:f0:bc:32:dc:48:7f:59:9c:10: 28:46:98:34:2f:a8:86:04:be:19:c6:8c:8c:6c:55:83:05:17: 6a:7d:fc:76:bd:b0:20:04:29:da:be:1c:e4:fa:28:d4:a4:c9: ba:8e:23:35:33:a9:c0:c9:85:fe:73:7a:c0:85:c5:12:19:15: 4e:a1:43:2b:67:cc:c0:d8:3a:f3:bc:47:da:f9:d1:f7:08:62: 82:3b:d3:9a:a8:fb:8c:fe:33:6d:37:34:53:a4:07:78:bf:47: b4:63:ad:2a:2e:5a:77:bb:2d:52:c1:e4:57:9f:8a:34:d4:7f: 16:7f:7e:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg3RkMxMTAvBgNVBAUTKDNBODc4NzFFM0JBRTY1RURFMkYzMUJCMUFENUM1OUJC N0E3NEFCREQwHhcNMjUwODExMDYzMTAyWhcNMjUwODE4MDYzMTAyWjAYMRYwFAYD VQQDEw02ODk5OGUyNi03MWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmurAlA/04oj4ylTDYaD+XHDGG1dtv3QgORfpNx4HLAqQ14pJJmtQNDF88pzo hqbJFIvy/lGmE8AC4eYSpi4MIMVxYZtbYZP+ThejYJesJvmnqPlufoeEgS6kIyfy j90SDTXFtbq666ywqq3tuVzZgi+rqjfZUSHnnAwe/8grYslaIeszIyRlNI++n26D z0g1I/LKYhvdbHPGehQFuo/hOVUpGAEj3LUElh4rqTjzAuQL04+y4aaJkbI6qbd5 lYQNcXuucyHa5HJqnvslk/qlD02sYXd54xy31YDjatKlOz9DShZCBZCh+Nan0/ic 7rMSHM1fJKecWuTCQWON4Gf0UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEFwWnIs /Ek+u2EWDiAFj/OHH+mWMB8GA1UdIwQYMBaAFDqHhx47rmXt4vMbsa1cWbt6dKvd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODdGQy8zOTc4RTMxNjg2 RTExMUVGOEY3NzNGODJDNEY5QUUwMi9Pb2VISGp1dVplM2k4eHV4clZ4WnUzcDBx OTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09vZUhIanV1WmUzaTh4dXhyVnhadTNwMHE5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODdGQy8zOTc4RTMxNjg2RTExMUVGOEY3NzNGODJDNEY5QUUwMi9Pb2VISGp1dVpl M2k4eHV4clZ4WnUzcDBxOTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDK/fIo+rbkkFSMfM6vJ3+dUOzUZMOO96m30TE7sXd+fY2+bwP+tYgy cKfAI7KAOWgEmdaayQKG1OoEcs+qUtov3McnZ9erf7kT+hG+BfCxPUK7aAtzbLCK MXByoDFZuwaBFR4Z5Yzt36P1aUo3Msk/4h4VevINTraUg3Y+KLDrnw6B/i5IO8jw vDLcSH9ZnBAoRpg0L6iGBL4ZxoyMbFWDBRdqffx2vbAgBCnavhzk+ijUpMm6jiM1 M6nAyYX+c3rAhcUSGRVOoUMrZ8zA2DrzvEfa+dH3CGKCO9OaqPuM/jNtNzRTpAd4 v0e0Y60qLlp3uy1SweRXn4o01H8Wf36C -----END CERTIFICATE-----Generated at Mon Aug 11 09:29:05 2025 by rpki-client