$ rpki-client -vvf rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft File: 3obmXuoeCzDk_Y2SRYft9XI9UH0.mft (raw, json) Hash identifier: l4DI5dkdP9ADf0pNPsxEK+plFxaA0E2iWWR8Be7GzYU= Subject key identifier: FD:0D:BA:84:65:7E:2C:61:5F:A7:28:1C:FD:81:6C:41:B5:43:2D:19 Authority key identifier: DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D Certificate issuer: /CN=A91E00A5/serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft Manifest number: A3 Signing time: Tue 05 Aug 2025 06:45:14 +0000 Manifest this update: Tue 05 Aug 2025 06:45:14 +0000 Manifest next update: Tue 12 Aug 2025 06:45:14 +0000 Files and hashes: 1: 3obmXuoeCzDk_Y2SRYft9XI9UH0.crl (hash: z/pLDpbyTBVi37J/KoITO60/Nv9S72iqzbemJwMyNB0=) 2: 1F63E4347ABC11EF9E53E753C4F9AE02.roa (hash: HKA4VosuvqKj93QksjNsBERDuKRgYc9/Nd6hWkYBCUw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 06:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E00A5, serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D Validity Not Before: Aug 5 06:45:14 2025 GMT Not After : Aug 12 06:45:14 2025 GMT Subject: CN=6891a87a-4a07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:57:e3:3a:8a:81:c3:07:7c:99:ca:ba:ac:19: 09:24:45:5e:c0:9b:41:d5:9c:ec:15:a6:ec:58:4f: 75:3e:df:81:d4:33:7e:ca:fe:d3:9a:03:3a:ec:34: 23:d8:d1:14:24:7e:d6:96:13:4c:de:b4:c5:9f:a4: 70:78:b0:fb:70:5f:e3:62:c1:1a:49:54:e8:70:6e: 23:84:15:25:f6:4f:7d:f1:89:21:31:17:a6:2a:77: 91:1a:86:4f:7c:1a:24:28:8d:58:78:cf:03:a3:25: 38:c3:25:b4:09:e4:4e:94:d6:8b:e1:f7:5b:af:13: c7:d5:04:f9:0a:18:75:74:ae:16:89:40:8d:93:4e: 86:88:22:9f:03:51:ed:f2:6d:25:32:01:14:41:10: 3f:96:d1:8a:3e:67:af:f6:45:d3:5e:54:87:3b:1d: 11:4e:fc:2e:e9:46:97:92:4f:7b:a0:b2:b5:47:7c: f2:5c:53:c0:be:e2:bd:75:d9:3f:27:b8:2a:59:53: 83:ee:24:32:99:5c:e0:e5:da:00:cc:3e:10:ac:b9: dc:24:75:79:36:82:6f:19:a3:26:da:0b:21:cf:8d: bb:0e:2c:04:6a:42:9c:76:50:5a:f8:74:14:d9:ff: 24:3a:58:28:b1:f4:3a:94:2c:a3:a0:07:37:7e:50: 43:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:0D:BA:84:65:7E:2C:61:5F:A7:28:1C:FD:81:6C:41:B5:43:2D:19 X509v3 Authority Key Identifier: keyid:DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:93:bb:4c:a2:e1:5f:46:e1:f5:7f:21:53:95:90:88:1d:f0: ce:e2:ae:3f:80:ac:55:6f:9c:ad:bd:ee:60:55:d8:d6:07:0c: 86:de:5a:4d:a2:a5:20:4c:cc:6f:ec:40:a5:0b:81:5b:3b:23: a8:59:b0:36:e9:e1:25:7e:84:a3:15:d4:16:06:4b:28:99:24: 04:db:d4:f8:42:f9:89:24:d6:2e:90:6e:6b:00:72:6c:1b:69: f7:75:a3:76:ea:b3:9a:e8:58:9c:9b:44:06:7a:4d:5b:23:90: 99:de:8c:6f:ec:3b:d3:4c:f8:de:45:79:4d:5e:04:1c:9a:eb: 3f:dc:13:7a:00:19:77:52:1a:44:02:72:0d:51:0d:cc:5f:e1: ab:0d:c6:fa:a2:92:14:65:c6:58:b5:1b:ae:c9:9f:30:5b:3c: bf:3c:2a:58:d5:d2:44:fd:8b:fb:9e:96:ff:af:90:34:c3:2e: 9b:67:0e:aa:dc:5b:1e:3c:db:1c:69:1b:61:8c:62:67:a7:f8: 89:87:58:19:83:74:75:a2:21:59:0b:fb:81:eb:e1:58:29:eb: 4a:e1:5a:87:22:15:23:2d:eb:c4:55:ee:cc:7e:19:fa:9b:65: fc:9b:98:48:e4:c4:41:15:79:45:01:7d:29:a3:8a:99:da:ae: cb:6b:5a:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAwQTUxMTAvBgNVBAUTKERFODZFNjVFRUExRTBCMzBFNEZEOEQ5MjQ1ODdFREY1 NzIzRDUwN0QwHhcNMjUwODA1MDY0NTE0WhcNMjUwODEyMDY0NTE0WjAYMRYwFAYD VQQDEw02ODkxYTg3YS00YTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtlfjOoqBwwd8mcq6rBkJJEVewJtB1ZzsFabsWE91Pt+B1DN+yv7TmgM67DQj 2NEUJH7WlhNM3rTFn6RweLD7cF/jYsEaSVTocG4jhBUl9k998YkhMRemKneRGoZP fBokKI1YeM8DoyU4wyW0CeROlNaL4fdbrxPH1QT5Chh1dK4WiUCNk06GiCKfA1Ht 8m0lMgEUQRA/ltGKPmev9kXTXlSHOx0RTvwu6UaXkk97oLK1R3zyXFPAvuK9ddk/ J7gqWVOD7iQymVzg5doAzD4QrLncJHV5NoJvGaMm2gshz427DiwEakKcdlBa+HQU 2f8kOlgosfQ6lCyjoAc3flBD1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP0NuoRl fixhX6coHP2BbEG1Qy0ZMB8GA1UdIwQYMBaAFN6G5l7qHgsw5P2NkkWH7fVyPVB9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDBBNS9BNjQ4M0EzQzdB QkIxMUVGOTM3OUFFNTJDNEY5QUUwMi8zb2JtWHVvZUN6RGtfWTJTUllmdDlYSTlV SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNvYm1YdW9lQ3pEa19ZMlNSWWZ0OVhJOVVIMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDBBNS9BNjQ4M0EzQzdBQkIxMUVGOTM3OUFFNTJDNEY5QUUwMi8zb2JtWHVvZUN6 RGtfWTJTUllmdDlYSTlVSDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtk7tMouFfRuH1fyFTlZCIHfDO4q4/gKxVb5ytve5gVdjWBwyG3lpN oqUgTMxv7EClC4FbOyOoWbA26eElfoSjFdQWBksomSQE29T4QvmJJNYukG5rAHJs G2n3daN26rOa6Ficm0QGek1bI5CZ3oxv7DvTTPjeRXlNXgQcmus/3BN6ABl3UhpE AnINUQ3MX+GrDcb6opIUZcZYtRuuyZ8wWzy/PCpY1dJE/Yv7npb/r5A0wy6bZw6q 3FsePNscaRthjGJnp/iJh1gZg3R1oiFZC/uB6+FYKetK4VqHIhUjLevEVe7Mfhn6 m2X8m5hI5MRBFXlFAX0po4qZ2q7La1p3 -----END CERTIFICATE-----Generated at Thu Aug 7 03:52:18 2025 by rpki-client