$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft File: cOo3wZMr00-ztIWaNIMaEOYR0PY.mft (raw, json) Hash identifier: 6TXqkm5zaggqjsRr0C0ZP1ZbY9nlnjAzbx00XNDEVEc= Subject key identifier: 26:68:78:57:B3:E6:B5:1F:06:68:99:9B:E6:C4:4E:37:E9:6D:54:9D Authority key identifier: 70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6 Certificate issuer: /CN=A91BA1BF/serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6 Certificate serial: 0154 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft Manifest number: 0150 Signing time: Mon 11 Aug 2025 04:19:30 +0000 Manifest this update: Mon 11 Aug 2025 04:19:29 +0000 Manifest next update: Mon 18 Aug 2025 04:19:29 +0000 Files and hashes: 1: cOo3wZMr00-ztIWaNIMaEOYR0PY.crl (hash: kmfEtXg3ivtOBvRbCZMBM3qE45WpYoMuw0VEbH1Ex84=) 2: BC630BAE84FC11EE9887345FC4F9AE02.roa (hash: E3DVtUK4PKLNRTNWPdaED3S506iNVROikAhxbftKIaQ=) 3: 7C58D40872CD11EE81C60650C4F9AE02.roa (hash: hhVy8VlS8PQRYDzu0z2SFqVi4xOaWLt/VFPzg2LCqTM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 340 (0x154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA1BF, serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6 Validity Not Before: Aug 11 04:19:29 2025 GMT Not After : Aug 18 04:19:29 2025 GMT Subject: CN=68996f51-3c15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:18:d5:a5:dc:53:61:a7:61:04:76:8d:2e:e4: 08:0b:90:7f:37:c3:83:4c:23:77:f0:56:98:c3:db: 4d:0d:89:07:05:15:9f:a2:2b:bc:cb:60:1f:c2:35: f3:0f:34:3c:5c:88:29:3d:86:8a:a8:eb:42:b6:10: f0:2f:55:d7:ff:cf:8f:ef:25:93:94:4c:79:0b:37: 2c:ac:00:0d:55:22:1f:70:11:ae:b4:bc:a9:b3:32: 86:6f:e6:76:78:39:87:e0:44:af:11:26:ce:f6:a0: 37:dd:fc:f6:03:d3:e1:b2:9c:a6:1a:4d:00:1a:37: 76:c7:af:6b:d8:09:84:d7:ab:8f:cd:7f:54:c0:61: e9:89:c2:e0:c9:d6:5a:be:1d:c9:96:eb:74:0a:ff: d7:04:8e:2c:65:00:46:9a:2a:7e:f7:6a:f9:44:68: 4c:0f:06:b4:03:8d:48:1d:2c:15:01:73:95:91:63: dc:a7:f3:cb:95:65:f4:c8:d9:82:97:e4:7c:9b:8e: 3a:a3:a6:00:1c:32:54:c8:a6:cd:cb:b0:3f:a6:8f: e1:34:2d:62:bf:45:2b:88:a7:78:73:81:7c:b4:a4: e2:02:0c:1f:3b:4c:f8:18:f9:41:c8:e1:e2:95:d9: d5:71:d3:4e:a1:d5:ea:19:97:3d:29:88:18:b8:5b: da:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:68:78:57:B3:E6:B5:1F:06:68:99:9B:E6:C4:4E:37:E9:6D:54:9D X509v3 Authority Key Identifier: keyid:70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:bc:ef:fa:d7:86:e4:96:b8:47:6f:ef:96:7f:03:d7:6d:7a: c1:0a:58:78:dd:79:e4:c7:24:0b:ed:73:d1:00:b7:a8:50:82: 9c:ab:74:f2:12:84:6b:ce:4b:66:8a:99:12:8e:e3:b2:49:c6: 78:b7:ae:03:55:33:10:65:a0:21:1a:12:98:c4:ed:a7:a2:d7: 21:da:4f:d2:83:3e:d4:fb:59:78:c4:11:6a:a7:3d:d7:70:9c: 13:61:ce:6b:9c:a3:28:c4:13:47:b7:f9:15:f0:90:3c:56:da: d6:f6:9c:0d:c2:03:29:7b:e3:ff:71:dc:0f:63:36:59:25:e9: 1c:3f:8d:ec:2c:d5:94:bb:fd:c0:e1:42:9c:65:60:ef:2f:c5: 7f:2d:81:76:3d:7e:00:db:e4:fb:ab:59:fa:c8:66:87:50:31: fd:1d:28:76:28:9d:77:15:08:09:7d:48:85:71:cb:e8:8b:65: 79:66:fa:7e:10:bb:30:40:95:eb:0a:b2:a1:7f:1b:6c:22:f7: 90:68:68:29:9c:02:01:d0:86:6e:c3:22:5d:13:f2:b9:1f:e1: 0d:58:5e:84:98:f2:5c:99:55:e1:45:d9:ac:fa:e2:0a:54:d1: 9b:f1:c9:db:57:31:47:59:89:91:1a:03:4b:9e:d3:15:12:34: 99:79:4b:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkExQkYxMTAvBgNVBAUTKDcwRUEzN0MxOTMyQkQzNEZCM0I0ODU5QTM0ODMxQTEw RTYxMUQwRjYwHhcNMjUwODExMDQxOTI5WhcNMjUwODE4MDQxOTI5WjAYMRYwFAYD VQQDEw02ODk5NmY1MS0zYzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8BjVpdxTYadhBHaNLuQIC5B/N8ODTCN38FaYw9tNDYkHBRWfoiu8y2AfwjXz DzQ8XIgpPYaKqOtCthDwL1XX/8+P7yWTlEx5CzcsrAANVSIfcBGutLypszKGb+Z2 eDmH4ESvESbO9qA33fz2A9PhspymGk0AGjd2x69r2AmE16uPzX9UwGHpicLgydZa vh3Jlut0Cv/XBI4sZQBGmip+92r5RGhMDwa0A41IHSwVAXOVkWPcp/PLlWX0yNmC l+R8m446o6YAHDJUyKbNy7A/po/hNC1iv0UriKd4c4F8tKTiAgwfO0z4GPlByOHi ldnVcdNOodXqGZc9KYgYuFvadQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCZoeFez 5rUfBmiZm+bETjfpbVSdMB8GA1UdIwQYMBaAFHDqN8GTK9NPs7SFmjSDGhDmEdD2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTFCRi84NEUxMEE0Mjcy Q0MxMUVFQjc5NDVBNERDNEY5QUUwMi9jT28zd1pNcjAwLXp0SVdhTklNYUVPWVIw UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NPbzN3Wk1yMDAtenRJV2FOSU1hRU9ZUjBQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTFCRi84NEUxMEE0MjcyQ0MxMUVFQjc5NDVBNERDNEY5QUUwMi9jT28zd1pNcjAw LXp0SVdhTklNYUVPWVIwUFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGvO/614bklrhHb++WfwPXbXrBClh43XnkxyQL7XPRALeoUIKcq3Ty EoRrzktmipkSjuOyScZ4t64DVTMQZaAhGhKYxO2notch2k/Sgz7U+1l4xBFqpz3X cJwTYc5rnKMoxBNHt/kV8JA8VtrW9pwNwgMpe+P/cdwPYzZZJekcP43sLNWUu/3A 4UKcZWDvL8V/LYF2PX4A2+T7q1n6yGaHUDH9HSh2KJ13FQgJfUiFccvoi2V5Zvp+ ELswQJXrCrKhfxtsIveQaGgpnAIB0IZuwyJdE/K5H+ENWF6EmPJcmVXhRdms+uIK VNGb8cnbVzFHWYmRGgNLntMVEjSZeUta -----END CERTIFICATE-----Generated at Mon Aug 11 13:14:16 2025 by rpki-client