$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft File: oE50OtMfT4PwncXS9-9Pq-HvaHs.mft (raw, json) Hash identifier: TVrD5cBDafwz+91MoDaYR1o9vT7rk7T+keaj93jsOvc= Subject key identifier: 49:B3:22:72:73:3B:EA:D7:89:51:DF:2D:B5:28:93:38:7F:B6:83:EA Authority key identifier: A0:4E:74:3A:D3:1F:4F:83:F0:9D:C5:D2:F7:EF:4F:AB:E1:EF:68:7B Certificate issuer: /CN=A91E0EF8/serialNumber=A04E743AD31F4F83F09DC5D2F7EF4FABE1EF687B Certificate serial: 05ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft Manifest number: 05D3 Signing time: Fri 08 Aug 2025 23:30:12 +0000 Manifest this update: Fri 08 Aug 2025 23:30:12 +0000 Manifest next update: Fri 15 Aug 2025 23:30:12 +0000 Files and hashes: 1: oE50OtMfT4PwncXS9-9Pq-HvaHs.crl (hash: LfmT1jbGcjM7S1giNhDHpnlR6BgZ7nLW1WXtfAIDcMg=) 2: 2F581CEA33F311EEABFC7410C4F9AE02.roa (hash: weFEOxrVQ1R73fykzCNyC6/gZBqdWvZXSpKP3W9J0hQ=) 3: 180DF9BE93C711EDB3D8A867C4F9AE02.roa (hash: SoMp5duXOAwol503IxpDfQSWDWEVUuEjZp2f9lzEdw8=) 4: 1767CE4A93C711EDB3D8A867C4F9AE02.roa (hash: MXR9v07MaUgaUp2EpRPUYi0YWE/byXOzVwu5NXbaWsg=) 5: 16A4DFE893C711EDB3D8A867C4F9AE02.roa (hash: vWRcSTu3hKVKTzFiY2NVAPZ7PA6+HMwNwvKyVpnCyx8=) 6: 1614034C93C711EDB3D8A867C4F9AE02.roa (hash: ywF33ZMJOUcpgMUIi20lZlpyg8JGMBrKC6zMJ/6wuTs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.crl rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1517 (0x5ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0EF8, serialNumber=A04E743AD31F4F83F09DC5D2F7EF4FABE1EF687B Validity Not Before: Aug 8 23:30:12 2025 GMT Not After : Aug 15 23:30:12 2025 GMT Subject: CN=68968884-52a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:26:af:8e:03:34:49:36:24:32:f1:f0:58:62: 52:85:f7:d4:8a:7d:b8:12:b8:08:57:41:39:7b:60: 90:1e:76:c5:70:00:69:80:6b:f0:81:ba:b9:6c:36: fb:56:28:ca:b2:f0:c7:c1:93:d0:c8:b2:b2:e4:c5: bf:90:e7:d1:6d:46:1b:a6:da:d3:6e:d6:26:00:b4: 44:d1:3e:7f:fb:e0:34:f3:3e:9c:47:cf:f9:f5:54: e3:8f:d0:dc:2b:b5:61:24:32:26:eb:18:7e:77:21: bb:be:98:19:67:87:60:4f:82:64:9e:c1:dc:0c:0b: c5:13:03:5e:87:cf:48:c6:9c:61:5c:c9:06:1a:e0: d8:6a:ed:68:0b:06:5e:4f:2d:14:32:fc:b5:b5:16: c6:b5:8a:bd:93:68:7b:bf:0c:3b:70:0a:48:27:55: 1d:ea:13:66:b0:e4:88:63:c6:66:ff:d0:78:b1:d4: 60:c1:d1:b6:b1:c5:df:e9:b2:1c:19:9a:76:2b:be: 54:2b:49:d1:09:54:fe:4e:52:a8:0d:7f:bd:b5:95: 50:a1:20:ca:d7:70:e8:2c:1e:df:c1:5c:22:6b:4a: a4:8c:01:f9:46:b2:80:0a:4a:94:67:ff:34:25:29: 74:e8:34:22:84:fc:8e:69:3e:06:e4:d1:04:f8:78: 38:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B3:22:72:73:3B:EA:D7:89:51:DF:2D:B5:28:93:38:7F:B6:83:EA X509v3 Authority Key Identifier: keyid:A0:4E:74:3A:D3:1F:4F:83:F0:9D:C5:D2:F7:EF:4F:AB:E1:EF:68:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:a0:71:cb:fa:17:b3:7a:6d:e5:e3:13:34:88:6f:ed:e2:62: 70:4b:79:76:34:90:7e:28:19:59:3d:54:86:28:21:fb:8a:d5: b5:9d:78:e7:38:ae:12:e4:2b:1a:c8:10:8d:4b:87:84:2a:d1: ad:33:3f:a7:d7:43:a5:e1:c3:10:13:4c:0e:7e:67:3e:a3:40: 3e:f7:b7:ca:3b:d1:23:8a:15:5c:3f:d3:82:dd:88:bc:7c:0e: 75:54:6e:36:2a:d9:3e:1c:7b:cc:72:df:b7:6e:44:24:de:3b: 5e:73:c3:ba:47:35:a6:34:e8:ce:60:b4:3e:6f:77:af:29:4e: 2e:3e:79:2b:68:64:2c:76:c1:2b:15:0a:2a:13:87:57:ff:97: 6f:92:cf:bf:1d:16:08:2e:6d:a2:8c:47:4f:04:2a:6f:58:3a: cd:cd:33:3d:c3:8f:8c:e9:7e:01:23:e7:fd:75:7b:ae:70:38: 43:9d:6a:d4:64:a3:db:96:ca:9d:95:49:84:fe:2a:de:20:e0: 34:85:54:6a:ea:b8:b2:ac:6b:4d:5d:14:60:8b:d9:1b:5d:cf: c2:6d:46:03:0b:ef:b5:9a:38:d0:e7:0f:16:e2:c2:27:e9:1c: 52:0f:c5:6f:54:05:90:eb:9b:5b:52:8e:79:1a:4c:f6:37:bf: ae:a4:de:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBFRjgxMTAvBgNVBAUTKEEwNEU3NDNBRDMxRjRGODNGMDlEQzVEMkY3RUY0RkFC RTFFRjY4N0IwHhcNMjUwODA4MjMzMDEyWhcNMjUwODE1MjMzMDEyWjAYMRYwFAYD VQQDEw02ODk2ODg4NC01MmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqiavjgM0STYkMvHwWGJShffUin24ErgIV0E5e2CQHnbFcABpgGvwgbq5bDb7 VijKsvDHwZPQyLKy5MW/kOfRbUYbptrTbtYmALRE0T5/++A08z6cR8/59VTjj9Dc K7VhJDIm6xh+dyG7vpgZZ4dgT4JknsHcDAvFEwNeh89IxpxhXMkGGuDYau1oCwZe Ty0UMvy1tRbGtYq9k2h7vww7cApIJ1Ud6hNmsOSIY8Zm/9B4sdRgwdG2scXf6bIc GZp2K75UK0nRCVT+TlKoDX+9tZVQoSDK13DoLB7fwVwia0qkjAH5RrKACkqUZ/80 JSl06DQihPyOaT4G5NEE+Hg4pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEmzInJz O+rXiVHfLbUokzh/toPqMB8GA1UdIwQYMBaAFKBOdDrTH0+D8J3F0vfvT6vh72h7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEVGOC9DOTM4RDEwNkNC NTQxMUVCQTNEMzZDNUJDNEY5QUUwMi9vRTUwT3RNZlQ0UHduY1hTOS05UHEtSHZh SHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29FNTBPdE1mVDRQd25jWFM5LTlQcS1IdmFIcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEVGOC9DOTM4RDEwNkNCNTQxMUVCQTNEMzZDNUJDNEY5QUUwMi9vRTUwT3RNZlQ0 UHduY1hTOS05UHEtSHZhSHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQoHHL+hezem3l4xM0iG/t4mJwS3l2NJB+KBlZPVSGKCH7itW1nXjn OK4S5CsayBCNS4eEKtGtMz+n10Ol4cMQE0wOfmc+o0A+97fKO9EjihVcP9OC3Yi8 fA51VG42Ktk+HHvMct+3bkQk3jtec8O6RzWmNOjOYLQ+b3evKU4uPnkraGQsdsEr FQoqE4dX/5dvks+/HRYILm2ijEdPBCpvWDrNzTM9w4+M6X4BI+f9dXuucDhDnWrU ZKPblsqdlUmE/ireIOA0hVRq6riyrGtNXRRgi9kbXc/CbUYDC++1mjjQ5w8W4sIn 6RxSD8VvVAWQ65tbUo55Gkz2N7+upN4h -----END CERTIFICATE-----Generated at Sat Aug 9 15:17:59 2025 by rpki-client