$ rpki-client -vvf rpki.apnic.net/member_repository/A91B915D/7109EFC47DC911ECBBFB6F24C4F9AE02/o5jf1NOXXquW_TgDOWgkbkdeKLM.mft File: o5jf1NOXXquW_TgDOWgkbkdeKLM.mft (raw, json) Hash identifier: YEdVRG0GI5yPW9Gw2youbJywCm0cCySvXWKHENS7fVM= Subject key identifier: 6E:BB:D9:54:F8:2E:2A:98:06:91:77:EB:BF:7B:69:0D:77:5B:4D:92 Authority key identifier: A3:98:DF:D4:D3:97:5E:AB:96:FD:38:03:39:68:24:6E:47:5E:28:B3 Certificate issuer: /CN=A91B915D/serialNumber=A398DFD4D3975EAB96FD38033968246E475E28B3 Certificate serial: 0412 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5jf1NOXXquW_TgDOWgkbkdeKLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B915D/7109EFC47DC911ECBBFB6F24C4F9AE02/o5jf1NOXXquW_TgDOWgkbkdeKLM.mft Manifest number: 040D Signing time: Mon 11 Aug 2025 00:34:15 +0000 Manifest this update: Mon 11 Aug 2025 00:34:14 +0000 Manifest next update: Mon 18 Aug 2025 00:34:14 +0000 Files and hashes: 1: o5jf1NOXXquW_TgDOWgkbkdeKLM.crl (hash: wiBeOntiBIoTZh2ZaMlUFSinN9cbhXsNUUhYTM0BHv8=) 2: 8CA3BAEC7DCB11EC99806E25C4F9AE02.roa (hash: 7VcZosPp1uH1LHkRjpyCPhzaiPyFOlncH9YUjxzCpg4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B915D/7109EFC47DC911ECBBFB6F24C4F9AE02/o5jf1NOXXquW_TgDOWgkbkdeKLM.crl rsync://rpki.apnic.net/member_repository/A91B915D/7109EFC47DC911ECBBFB6F24C4F9AE02/o5jf1NOXXquW_TgDOWgkbkdeKLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5jf1NOXXquW_TgDOWgkbkdeKLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 00:34:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1042 (0x412) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B915D, serialNumber=A398DFD4D3975EAB96FD38033968246E475E28B3 Validity Not Before: Aug 11 00:34:14 2025 GMT Not After : Aug 18 00:34:14 2025 GMT Subject: CN=68993a86-be71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ea:3f:ed:fb:d0:63:e9:e5:24:44:1b:e5:36: 09:0b:35:61:a6:c2:97:4b:92:c3:45:8d:3d:b6:a3: 0b:03:42:9e:4e:34:d1:be:93:4f:9f:5b:33:30:b8: 5b:80:89:6d:4a:f8:83:5e:1c:1b:b4:d4:da:94:62: 2c:9f:e8:03:78:c7:26:ce:e4:73:83:18:db:c9:25: cc:05:54:84:62:2d:da:4f:03:97:64:47:e9:25:fe: 25:32:3e:a9:c1:27:ab:6f:03:88:dd:75:e9:0a:8e: 7d:0d:2c:40:54:d7:99:f1:2d:73:2a:46:f6:c8:64: 22:36:02:67:4a:ae:e2:09:ea:bc:c8:ae:67:df:1e: 46:5c:ad:e8:80:27:e8:8c:95:7d:64:cd:53:86:7c: 29:27:79:2b:34:26:2b:08:49:36:12:35:69:7c:d9: 95:49:4b:bc:56:9b:62:9c:14:d0:27:b0:e6:62:65: 67:a0:e2:64:72:60:db:3e:2d:cb:69:e3:ce:18:f2: eb:6c:1c:ae:53:15:65:3e:3c:3b:c6:68:fa:1a:c1: 2d:8d:21:07:cf:ab:28:b3:97:6b:cf:06:56:25:ac: be:16:c1:24:62:49:56:9d:dc:06:97:1e:46:7d:22: e6:c1:d3:fa:e9:80:70:36:c6:71:8e:1d:67:c5:3c: 2f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:BB:D9:54:F8:2E:2A:98:06:91:77:EB:BF:7B:69:0D:77:5B:4D:92 X509v3 Authority Key Identifier: keyid:A3:98:DF:D4:D3:97:5E:AB:96:FD:38:03:39:68:24:6E:47:5E:28:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B915D/7109EFC47DC911ECBBFB6F24C4F9AE02/o5jf1NOXXquW_TgDOWgkbkdeKLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5jf1NOXXquW_TgDOWgkbkdeKLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B915D/7109EFC47DC911ECBBFB6F24C4F9AE02/o5jf1NOXXquW_TgDOWgkbkdeKLM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:3a:e8:8b:c2:03:08:25:69:26:98:19:56:6f:88:51:9f:a5: 88:cc:c5:a6:9b:16:1a:84:fa:17:c2:c7:53:de:26:66:75:2a: a7:6d:40:b8:80:b8:ba:42:ba:fc:0b:64:c7:56:c8:00:48:f6: 3d:e8:c8:b3:c3:2f:b7:ae:8b:52:c5:b8:98:0f:77:11:fd:29: b6:95:3c:cc:2a:61:aa:76:b4:01:e9:4e:5f:c9:84:69:a6:47: 7b:f3:bb:bd:35:99:1e:0c:29:b9:5d:7a:cc:c6:23:7f:73:eb: f7:25:7d:72:6e:3f:d5:35:87:d6:5d:6f:cf:4c:7b:38:16:11: 9a:d4:8b:88:50:a2:a8:b6:0c:bf:72:ad:52:6a:33:c5:4b:34: 2e:a1:a7:36:bc:8b:ac:2b:1e:83:07:46:e3:e6:02:b2:2d:6f: e8:ec:5d:1d:f7:5d:7c:bb:a4:b6:63:0e:3c:a5:3a:1c:16:e2: 9d:df:9e:f5:5e:5b:87:93:fe:3a:2c:a2:0a:94:4c:3e:d9:5b: 2a:00:4c:9d:38:7d:98:90:89:76:71:6d:30:95:f3:eb:39:e7: 91:02:b5:4e:09:d3:b3:2a:e5:ee:7f:7c:c5:50:1d:6b:e8:ef: 32:fb:5d:39:2b:4e:c1:21:db:15:a2:ad:ca:f9:2d:59:d9:80: cf:4d:ea:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkxNUQxMTAvBgNVBAUTKEEzOThERkQ0RDM5NzVFQUI5NkZEMzgwMzM5NjgyNDZF NDc1RTI4QjMwHhcNMjUwODExMDAzNDE0WhcNMjUwODE4MDAzNDE0WjAYMRYwFAYD VQQDEw02ODk5M2E4Ni1iZTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvOo/7fvQY+nlJEQb5TYJCzVhpsKXS5LDRY09tqMLA0KeTjTRvpNPn1szMLhb gIltSviDXhwbtNTalGIsn+gDeMcmzuRzgxjbySXMBVSEYi3aTwOXZEfpJf4lMj6p wSerbwOI3XXpCo59DSxAVNeZ8S1zKkb2yGQiNgJnSq7iCeq8yK5n3x5GXK3ogCfo jJV9ZM1ThnwpJ3krNCYrCEk2EjVpfNmVSUu8VptinBTQJ7DmYmVnoOJkcmDbPi3L aePOGPLrbByuUxVlPjw7xmj6GsEtjSEHz6sos5drzwZWJay+FsEkYklWndwGlx5G fSLmwdP66YBwNsZxjh1nxTwvUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG672VT4 LiqYBpF36797aQ13W02SMB8GA1UdIwQYMBaAFKOY39TTl16rlv04AzloJG5HXiiz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTE1RC83MTA5RUZDNDdE QzkxMUVDQkJGQjZGMjRDNEY5QUUwMi9vNWpmMU5PWFhxdVdfVGdET1dna2JrZGVL TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL281amYxTk9YWHF1V19UZ0RPV2drYmtkZUtMTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTE1RC83MTA5RUZDNDdEQzkxMUVDQkJGQjZGMjRDNEY5QUUwMi9vNWpmMU5PWFhx dVdfVGdET1dna2JrZGVLTE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5OuiLwgMIJWkmmBlWb4hRn6WIzMWmmxYahPoXwsdT3iZmdSqnbUC4 gLi6Qrr8C2THVsgASPY96Mizwy+3rotSxbiYD3cR/Sm2lTzMKmGqdrQB6U5fyYRp pkd787u9NZkeDCm5XXrMxiN/c+v3JX1ybj/VNYfWXW/PTHs4FhGa1IuIUKKotgy/ cq1SajPFSzQuoac2vIusKx6DB0bj5gKyLW/o7F0d9118u6S2Yw48pTocFuKd3571 XluHk/46LKIKlEw+2VsqAEydOH2YkIl2cW0wlfPrOeeRArVOCdOzKuXuf3zFUB1r 6O8y+105K07BIdsVoq3K+S1Z2YDPTerb -----END CERTIFICATE-----Generated at Tue Aug 12 14:44:42 2025 by rpki-client