$ rpki-client -vvf rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft File: o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft (raw, json) Hash identifier: 8uSrexCKEolruUKMfmuIb7Wu+TJVbwhvS0N3YU/5WDE= Subject key identifier: 78:48:DA:BA:96:9F:B6:72:F2:22:5D:A2:94:17:C2:E1:B4:16:33:0B Authority key identifier: A3:47:1C:31:53:3B:88:D1:BF:8A:40:A3:2A:7D:DE:3B:A0:BB:1C:BF Certificate issuer: /CN=A91C913E/serialNumber=A3471C31533B88D1BF8A40A32A7DDE3BA0BB1CBF Certificate serial: 0359 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft Manifest number: 0352 Signing time: Sat 09 Aug 2025 01:32:23 +0000 Manifest this update: Sat 09 Aug 2025 01:32:22 +0000 Manifest next update: Sat 16 Aug 2025 01:32:22 +0000 Files and hashes: 1: o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl (hash: +6yaztjHBg7aaPuNtfkxJk+TFJAf7NR0JlO2jyhYmuU=) 2: 24578ECED56A11EFB764F716C4F9AE02.roa (hash: DhDV/fmV49KF53LCzY2iPFhFE+P1oeX1k0nYiQfDFpM=) 3: 1445557CC6C011EC9D09EF1DC4F9AE02.roa (hash: xTkFFGEwoSM0XslM057b0r3pWef291E2LlOQWfzYUXc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 857 (0x359) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C913E, serialNumber=A3471C31533B88D1BF8A40A32A7DDE3BA0BB1CBF Validity Not Before: Aug 9 01:32:22 2025 GMT Not After : Aug 16 01:32:22 2025 GMT Subject: CN=6896a527-532e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:de:54:a5:a1:15:de:1f:98:72:78:ad:eb:d3: 9e:37:e4:8e:91:64:4c:f0:16:23:66:5e:9d:4a:5a: 3a:d3:37:22:44:f9:dd:e5:2c:e4:02:b8:d8:19:8d: a7:cc:3f:2b:ab:5a:38:eb:a3:b3:70:77:cf:87:2b: 66:fa:93:d5:09:e7:ba:a1:2e:89:be:5b:ff:64:cf: df:2e:c5:26:d1:6b:b4:21:0f:af:d3:c4:f1:86:a6: 8a:9e:7d:5c:2f:a0:43:d0:ba:77:42:cd:dd:62:4a: 23:26:30:ac:48:ed:4a:eb:b2:bf:14:6e:df:5a:12: 29:77:92:15:6e:0a:41:19:6e:ab:27:73:f8:1e:f6: c7:06:e7:05:8a:83:a9:74:c0:67:aa:10:6d:80:f6: cc:2e:22:9a:32:e6:4a:06:a0:6b:83:a9:6d:bb:74: 30:cc:1a:5c:79:dc:2e:73:cb:49:87:d6:56:e8:88: 97:74:22:0f:b5:03:8a:ca:49:97:a5:b6:53:ab:9e: b6:66:a5:f9:aa:a8:db:1d:f4:6c:9d:9e:b3:8b:9d: b4:46:1d:2f:d2:7f:15:10:20:1d:9b:3c:1f:78:cb: 04:6d:23:fe:ca:b9:88:a4:86:dd:57:f8:70:16:90: cf:52:91:48:08:71:3e:6e:ea:c2:8c:c2:df:64:7f: 45:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:48:DA:BA:96:9F:B6:72:F2:22:5D:A2:94:17:C2:E1:B4:16:33:0B X509v3 Authority Key Identifier: keyid:A3:47:1C:31:53:3B:88:D1:BF:8A:40:A3:2A:7D:DE:3B:A0:BB:1C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:e5:e6:6d:da:11:2a:e9:b0:de:8e:c0:76:bf:3a:69:1f:a2: 50:18:5f:fe:87:d5:1a:ad:58:64:c2:2a:f0:d6:01:b1:5c:ed: dd:76:92:35:7a:c5:75:34:83:9a:aa:a3:bc:89:0f:97:6d:02: 2e:f3:03:27:e2:a7:4f:e1:42:5c:e1:49:ef:ef:86:34:c1:27: 78:4a:c9:26:73:bd:25:62:ae:7f:1c:2c:36:8c:77:4d:04:36: 0a:8e:67:e3:7e:4d:7d:d4:c1:5e:de:bc:66:fb:5f:2d:62:17: 9a:e4:45:c0:5e:c5:18:3f:a0:47:a9:13:60:bd:26:7a:05:de: 1a:0e:27:89:20:a8:c1:c3:0c:1e:5b:6d:18:27:ce:52:a3:da: 3f:49:2b:4a:9d:56:13:e8:3b:2f:0f:c1:ab:0e:09:42:1c:6e: 66:4e:97:20:f6:6a:09:54:8a:cf:53:47:17:d6:0a:ec:32:ae: 2b:83:dd:d9:77:b8:5c:9f:fd:05:51:14:d5:1c:58:31:72:f3: 4b:83:2b:28:6d:c6:fd:4a:ae:84:6d:05:3c:e2:d2:84:9b:0a: cf:75:03:5b:4e:a8:de:c4:06:63:48:de:78:41:1d:1d:10:7b: d4:21:2d:f6:6b:80:16:04:37:68:7a:19:83:6f:7b:b3:73:c4: cd:e4:84:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkxM0UxMTAvBgNVBAUTKEEzNDcxQzMxNTMzQjg4RDFCRjhBNDBBMzJBN0RERTNC QTBCQjFDQkYwHhcNMjUwODA5MDEzMjIyWhcNMjUwODE2MDEzMjIyWjAYMRYwFAYD VQQDEw02ODk2YTUyNy01MzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz95UpaEV3h+Ycnit69OeN+SOkWRM8BYjZl6dSlo60zciRPnd5SzkArjYGY2n zD8rq1o466OzcHfPhytm+pPVCee6oS6Jvlv/ZM/fLsUm0Wu0IQ+v08TxhqaKnn1c L6BD0Lp3Qs3dYkojJjCsSO1K67K/FG7fWhIpd5IVbgpBGW6rJ3P4HvbHBucFioOp dMBnqhBtgPbMLiKaMuZKBqBrg6ltu3QwzBpcedwuc8tJh9ZW6IiXdCIPtQOKykmX pbZTq562ZqX5qqjbHfRsnZ6zi520Rh0v0n8VECAdmzwfeMsEbSP+yrmIpIbdV/hw FpDPUpFICHE+burCjMLfZH9FBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHhI2rqW n7Zy8iJdopQXwuG0FjMLMB8GA1UdIwQYMBaAFKNHHDFTO4jRv4pAoyp93juguxy/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTEzRS9ERDA4OThGMEM2 QkQxMUVDODk2Mzc0MURDNEY5QUUwMi9vMGNjTVZNN2lOR19pa0NqS24zZU82QzdI TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28wY2NNVk03aU5HX2lrQ2pLbjNlTzZDN0hMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTEzRS9ERDA4OThGMEM2QkQxMUVDODk2Mzc0MURDNEY5QUUwMi9vMGNjTVZNN2lO R19pa0NqS24zZU82QzdITDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBb5eZt2hEq6bDejsB2vzppH6JQGF/+h9UarVhkwirw1gGxXO3ddpI1 esV1NIOaqqO8iQ+XbQIu8wMn4qdP4UJc4Unv74Y0wSd4Sskmc70lYq5/HCw2jHdN BDYKjmfjfk191MFe3rxm+18tYhea5EXAXsUYP6BHqRNgvSZ6Bd4aDieJIKjBwwwe W20YJ85So9o/SStKnVYT6DsvD8GrDglCHG5mTpcg9moJVIrPU0cX1grsMq4rg93Z d7hcn/0FURTVHFgxcvNLgysobcb9Sq6EbQU84tKEmwrPdQNbTqjexAZjSN54QR0d EHvUIS32a4AWBDdoehmDb3uzc8TN5IR/ -----END CERTIFICATE-----Generated at Sat Aug 9 22:50:21 2025 by rpki-client