$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft File: OopqLuXcCfyqgv8BjwnBr4S0EZY.mft (raw, json) Hash identifier: uaPic8SohgxnXv4CEBM8e1Vp+ggfu2ioMvmSzDggATI= Subject key identifier: 73:8F:C3:05:50:32:93:AE:C0:48:8D:71:00:70:BA:A4:65:76:1D:DA Authority key identifier: 3A:8A:6A:2E:E5:DC:09:FC:AA:82:FF:01:8F:09:C1:AF:84:B4:11:96 Certificate issuer: /CN=A91CCCDD/serialNumber=3A8A6A2EE5DC09FCAA82FF018F09C1AF84B41196 Certificate serial: 01E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft Manifest number: 01E3 Signing time: Mon 11 Aug 2025 03:10:45 +0000 Manifest this update: Mon 11 Aug 2025 03:10:45 +0000 Manifest next update: Mon 18 Aug 2025 03:10:45 +0000 Files and hashes: 1: OopqLuXcCfyqgv8BjwnBr4S0EZY.crl (hash: 58YWqC1qgmR+XgOZ2tP5fbS85RK2LouEtSb48AZz6l4=) 2: F77C1438964111EDAAB8E74AC4F9AE02.roa (hash: 4yRhL9kVMGnZbWA+LNDehvbTaP/J/shZ+9q9XJ0iuQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.crl rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 488 (0x1e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCCDD, serialNumber=3A8A6A2EE5DC09FCAA82FF018F09C1AF84B41196 Validity Not Before: Aug 11 03:10:45 2025 GMT Not After : Aug 18 03:10:45 2025 GMT Subject: CN=68995f35-e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a4:01:ab:7a:54:a3:18:a5:6f:fa:b7:cb:90: 07:19:7d:86:1b:4c:52:cc:da:78:63:03:9a:62:2a: 8a:e2:b7:f5:bb:49:b2:3b:ef:1e:f1:b3:73:bd:4b: 94:ed:f8:e4:db:95:11:41:8e:73:a6:bd:10:c1:22: bb:d7:3e:37:60:4f:f8:a0:01:6e:91:2a:9b:ec:f3: 85:66:8b:de:e9:e9:be:59:4f:17:9f:aa:f7:20:29: 90:1c:8c:b2:8e:6b:08:5b:66:81:ea:b2:70:46:0c: 50:4d:24:99:2f:f5:f9:92:3d:91:55:8f:ed:f8:c8: 83:47:b2:f2:e7:53:d3:af:eb:3c:e8:6d:f6:0b:7d: 7f:4f:4e:94:34:35:79:d5:8a:89:b2:4d:24:6c:8f: 20:9f:75:3b:10:e5:02:cb:a2:97:87:d6:0e:75:5f: 15:3d:c7:51:a9:ad:8f:f5:f3:6d:c3:d0:88:79:59: c0:45:0c:15:f6:8a:4f:0d:6c:0a:37:ed:0c:eb:44: 90:ae:64:ec:d5:4d:82:37:e3:8b:27:41:51:8a:8d: 72:57:2c:13:fd:95:28:bd:67:92:fb:35:36:e0:2c: fb:2c:de:6f:dd:f0:c6:fb:c1:84:41:8f:d1:78:ff: 90:32:27:3b:af:f9:33:fa:5e:8e:31:9a:cb:77:87: d9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:8F:C3:05:50:32:93:AE:C0:48:8D:71:00:70:BA:A4:65:76:1D:DA X509v3 Authority Key Identifier: keyid:3A:8A:6A:2E:E5:DC:09:FC:AA:82:FF:01:8F:09:C1:AF:84:B4:11:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:e1:07:f5:8e:02:f0:90:c5:26:9b:3a:08:1c:84:7d:43:a3: 25:5d:d8:b6:f6:c0:b6:8c:81:45:74:cb:96:a2:23:4a:29:c5: 49:f2:30:b8:df:ab:36:25:8a:64:a0:d7:b0:6a:ec:e6:1e:13: de:ac:5e:fe:d4:33:33:d7:0f:be:08:b6:99:f3:8b:e7:f3:89: ef:86:fa:b5:13:15:f7:69:e7:c6:de:91:40:c6:01:91:7a:db: 59:f9:d5:81:24:0b:e0:66:71:a4:36:f2:0e:49:15:1b:15:3a: 95:e7:20:12:c3:83:7d:73:5f:7e:c6:fa:61:50:24:8b:ec:98: 58:c3:1e:3f:dc:f8:3c:b3:c9:e8:09:65:e5:bf:5b:d7:7a:f0: d4:4e:3c:bc:0d:35:84:2d:ce:1c:2d:7a:b4:d0:20:7b:fb:ce: 70:f3:4a:32:62:24:72:ad:1d:7d:7b:d9:9e:ee:96:45:36:fe: 9d:b8:3d:02:8d:7c:ff:91:81:53:59:a2:a9:da:4c:db:fa:55: 2e:7e:ad:c0:85:6f:14:af:ca:68:eb:89:0d:ed:47:6e:fc:20: cb:77:3d:89:5f:17:6e:2c:f1:4c:7a:6e:79:08:e5:36:c2:e1: 3c:2e:ff:93:65:59:62:f7:da:19:b8:ca:92:f0:d1:dd:b0:88: da:b9:a4:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NDREQxMTAvBgNVBAUTKDNBOEE2QTJFRTVEQzA5RkNBQTgyRkYwMThGMDlDMUFG ODRCNDExOTYwHhcNMjUwODExMDMxMDQ1WhcNMjUwODE4MDMxMDQ1WjAYMRYwFAYD VQQDEw02ODk5NWYzNS1lMGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuqQBq3pUoxilb/q3y5AHGX2GG0xSzNp4YwOaYiqK4rf1u0myO+8e8bNzvUuU 7fjk25URQY5zpr0QwSK71z43YE/4oAFukSqb7POFZove6em+WU8Xn6r3ICmQHIyy jmsIW2aB6rJwRgxQTSSZL/X5kj2RVY/t+MiDR7Ly51PTr+s86G32C31/T06UNDV5 1YqJsk0kbI8gn3U7EOUCy6KXh9YOdV8VPcdRqa2P9fNtw9CIeVnARQwV9opPDWwK N+0M60SQrmTs1U2CN+OLJ0FRio1yVywT/ZUovWeS+zU24Cz7LN5v3fDG+8GEQY/R eP+QMic7r/kz+l6OMZrLd4fZzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHOPwwVQ MpOuwEiNcQBwuqRldh3aMB8GA1UdIwQYMBaAFDqKai7l3An8qoL/AY8Jwa+EtBGW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0NERC9GM0JCRTc2RTk2 M0QxMUVEQkUzRkQwMUFDNEY5QUUwMi9Pb3BxTHVYY0NmeXFndjhCanduQnI0UzBF WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09vcHFMdVhjQ2Z5cWd2OEJqd25CcjRTMEVaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0NERC9GM0JCRTc2RTk2M0QxMUVEQkUzRkQwMUFDNEY5QUUwMi9Pb3BxTHVYY0Nm eXFndjhCanduQnI0UzBFWlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAr4Qf1jgLwkMUmmzoIHIR9Q6MlXdi29sC2jIFFdMuWoiNKKcVJ8jC4 36s2JYpkoNewauzmHhPerF7+1DMz1w++CLaZ84vn84nvhvq1ExX3aefG3pFAxgGR ettZ+dWBJAvgZnGkNvIOSRUbFTqV5yASw4N9c19+xvphUCSL7JhYwx4/3Pg8s8no CWXlv1vXevDUTjy8DTWELc4cLXq00CB7+85w80oyYiRyrR19e9me7pZFNv6duD0C jXz/kYFTWaKp2kzb+lUufq3AhW8Ur8po64kN7Udu/CDLdz2JXxduLPFMem55COU2 wuE8Lv+TZVli99oZuMqS8NHdsIjauaRA -----END CERTIFICATE-----Generated at Mon Aug 11 04:19:58 2025 by rpki-client