$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft File: 3oqNpw4WUAnRQNn2JFJNxNR51eg.mft (raw, json) Hash identifier: 8MlYbQ9jYeUr7a/vAuCHlmJi6wBa7LjXjhfXTgbHqDY= Subject key identifier: 11:6F:E1:A2:91:6A:64:9F:F8:0C:14:A6:B8:5B:E1:43:62:8F:3A:B2 Authority key identifier: DE:8A:8D:A7:0E:16:50:09:D1:40:D9:F6:24:52:4D:C4:D4:79:D5:E8 Certificate issuer: /CN=A91DA13E/serialNumber=DE8A8DA70E165009D140D9F624524DC4D479D5E8 Certificate serial: 07EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft Manifest number: 07D7 Signing time: Wed 06 Aug 2025 21:31:29 +0000 Manifest this update: Wed 06 Aug 2025 21:31:29 +0000 Manifest next update: Wed 13 Aug 2025 21:31:29 +0000 Files and hashes: 1: 3oqNpw4WUAnRQNn2JFJNxNR51eg.crl (hash: 8jyWdoM79rKs8Xjo+B/A17FZCu39JfMPwERoAJqVuIo=) 2: 29D6DCB2849211EE8F9C5870C4F9AE02.roa (hash: Rw6zEr6DY5Vp9Hj5tF7TI5Kq9ScA3GH+aMoga9/kLfs=) 3: B9A51B1AFA4F11EDB82FCB1FC4F9AE02.roa (hash: 5YYK0YKoDCpaklYir4k5rIBA5wPjwgrEAbtRskRmQT8=) 4: 298965AC06B611EBBBFD6B2CC4F9AE02.roa (hash: TH9JF4+CN1WO9NYgkx1yWi97+W1C48OFIwRdTh3Mt1Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.crl rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 21:31:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2030 (0x7ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA13E, serialNumber=DE8A8DA70E165009D140D9F624524DC4D479D5E8 Validity Not Before: Aug 6 21:31:29 2025 GMT Not After : Aug 13 21:31:29 2025 GMT Subject: CN=6893c9b1-baf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5d:83:16:69:41:5d:24:9f:5d:4c:8d:da:df: c6:9c:1c:35:ef:40:1a:c5:8f:f5:27:2a:5f:cb:6e: 17:8d:57:61:f7:03:a9:36:6a:7b:31:f4:c7:94:14: 2b:97:f7:52:27:96:ee:c3:3e:20:b9:51:98:2c:0a: f0:d4:93:e2:b2:bc:33:5d:a8:6c:22:24:1d:1b:cb: 56:ad:3f:40:0a:c0:62:42:78:1c:d7:bb:87:88:09: 1e:24:63:f5:b9:63:2b:a7:05:d2:fc:ea:a2:01:99: 2f:77:bb:0c:2a:df:a4:45:3a:e4:b9:2b:02:d6:c0: a9:2e:45:01:ea:f6:f4:e6:a3:32:80:67:9d:a0:a3: 18:5e:d0:47:99:58:68:11:bc:c5:c7:b2:ab:e2:02: 62:9b:f1:89:17:8b:32:83:0a:53:92:5a:73:56:a9: 27:52:ba:54:d0:5e:ad:da:7f:0f:78:02:b9:28:3a: a5:c7:94:fb:83:24:79:8c:75:99:2e:98:1a:41:ca: 89:3e:06:79:9f:7c:e1:53:0a:1a:be:96:11:bb:93: 7f:53:06:0f:8f:6f:0d:ea:40:d9:01:0f:ff:aa:70: d1:f9:8c:45:55:92:b5:0c:d3:c3:ef:62:9a:08:cf: f8:d6:34:e2:55:77:3b:34:f3:b6:2b:84:31:47:71: 53:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:6F:E1:A2:91:6A:64:9F:F8:0C:14:A6:B8:5B:E1:43:62:8F:3A:B2 X509v3 Authority Key Identifier: keyid:DE:8A:8D:A7:0E:16:50:09:D1:40:D9:F6:24:52:4D:C4:D4:79:D5:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:87:60:7b:e2:3c:a1:ff:5f:b2:46:60:7b:43:14:39:9b:47: 5f:7c:51:51:a6:d4:34:e4:96:99:40:d0:5b:00:ff:f8:ca:bf: 95:99:ff:4f:79:58:98:21:6d:f9:e7:e3:86:e9:d6:64:d4:7b: c3:a6:5b:b4:b7:1d:e0:d8:5b:d5:d7:fa:94:3e:ac:8d:8f:3e: 3b:dd:c5:1a:12:f2:63:5c:4b:fc:31:96:e2:fd:f7:a7:5e:33: 64:12:c3:14:76:5e:d2:29:6a:2e:c3:c4:f3:c8:64:b3:a6:17: 2c:4b:c0:7a:82:c2:71:cc:78:17:71:37:71:74:f1:32:7d:fe: f1:40:c0:0c:9f:ea:b2:19:47:2c:27:0e:63:97:ae:d5:c9:29: 57:74:5f:f3:23:cd:80:93:7d:25:5e:ab:29:fe:c5:62:c4:39: 9e:9e:1d:e4:1c:e9:9a:f9:14:ff:df:38:68:d6:6a:a4:85:a5: bc:88:a9:6d:97:9a:62:19:bc:a7:17:0e:46:2e:65:63:df:39: 90:0d:61:47:e4:85:fe:20:43:c6:42:5c:61:1e:50:57:59:0c: 63:d2:81:cf:e5:a4:c2:52:22:94:b0:47:f5:eb:a2:98:d5:0d: 7a:67:3f:b3:3d:f5:e8:34:d1:f3:99:d6:d7:ba:91:5a:9f:f8: e6:75:4e:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REExM0UxMTAvBgNVBAUTKERFOEE4REE3MEUxNjUwMDlEMTQwRDlGNjI0NTI0REM0 RDQ3OUQ1RTgwHhcNMjUwODA2MjEzMTI5WhcNMjUwODEzMjEzMTI5WjAYMRYwFAYD VQQDEw02ODkzYzliMS1iYWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAql2DFmlBXSSfXUyN2t/GnBw170AaxY/1Jypfy24XjVdh9wOpNmp7MfTHlBQr l/dSJ5buwz4guVGYLArw1JPisrwzXahsIiQdG8tWrT9ACsBiQngc17uHiAkeJGP1 uWMrpwXS/OqiAZkvd7sMKt+kRTrkuSsC1sCpLkUB6vb05qMygGedoKMYXtBHmVho EbzFx7Kr4gJim/GJF4sygwpTklpzVqknUrpU0F6t2n8PeAK5KDqlx5T7gyR5jHWZ LpgaQcqJPgZ5n3zhUwoavpYRu5N/UwYPj28N6kDZAQ//qnDR+YxFVZK1DNPD72Ka CM/41jTiVXc7NPO2K4QxR3FTIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBFv4aKR amSf+AwUprhb4UNijzqyMB8GA1UdIwQYMBaAFN6KjacOFlAJ0UDZ9iRSTcTUedXo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTEzRS81NEQ2QTUwRTA2 QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi8zb3FOcHc0V1VBblJRTm4ySkZKTnhOUjUx ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNvcU5wdzRXVUFuUlFObjJKRkpOeE5SNTFlZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTEzRS81NEQ2QTUwRTA2QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi8zb3FOcHc0V1VB blJRTm4ySkZKTnhOUjUxZWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwh2B74jyh/1+yRmB7QxQ5m0dffFFRptQ05JaZQNBbAP/4yr+Vmf9P eViYIW355+OG6dZk1HvDplu0tx3g2FvV1/qUPqyNjz473cUaEvJjXEv8MZbi/fen XjNkEsMUdl7SKWouw8TzyGSzphcsS8B6gsJxzHgXcTdxdPEyff7xQMAMn+qyGUcs Jw5jl67VySlXdF/zI82Ak30lXqsp/sVixDmenh3kHOma+RT/3zho1mqkhaW8iKlt l5piGbynFw5GLmVj3zmQDWFH5IX+IEPGQlxhHlBXWQxj0oHP5aTCUiKUsEf166KY 1Q16Zz+zPfXoNNHzmdbXupFan/jmdU7x -----END CERTIFICATE-----Generated at Fri Aug 8 10:18:26 2025 by rpki-client