$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1B78/C8DF41AC145411F0B3B7C679C4F9AE02/oUDUgGrgz2DnP-FYvyQvOag60AU.mft File: oUDUgGrgz2DnP-FYvyQvOag60AU.mft (raw, json) Hash identifier: hLKe+T/pCmlHHc75we9wkRDFOZ2JTyHXcl9S/a9ZuhI= Subject key identifier: C1:22:C4:DF:51:15:3F:E0:E4:FD:A9:B1:96:77:D9:91:A7:7C:F0:9E Authority key identifier: A1:40:D4:80:6A:E0:CF:60:E7:3F:E1:58:BF:24:2F:39:A8:3A:D0:05 Certificate issuer: /CN=A91E1B78/serialNumber=A140D4806AE0CF60E73FE158BF242F39A83AD005 Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUDUgGrgz2DnP-FYvyQvOag60AU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1B78/C8DF41AC145411F0B3B7C679C4F9AE02/oUDUgGrgz2DnP-FYvyQvOag60AU.mft Manifest number: 44 Signing time: Mon 11 Aug 2025 07:46:00 +0000 Manifest this update: Mon 11 Aug 2025 07:46:00 +0000 Manifest next update: Mon 18 Aug 2025 07:46:00 +0000 Files and hashes: 1: oUDUgGrgz2DnP-FYvyQvOag60AU.crl (hash: 7MxlwHOSeuwE6qFdm1SBBHtvIiIOU2XO2oxVf7kjNic=) 2: 47131A44145511F082FDAA7AC4F9AE02.roa (hash: btGSbXlYPwUm6r4aT9dqMB2WqeFs4xBX2s74blUbTR4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1B78/C8DF41AC145411F0B3B7C679C4F9AE02/oUDUgGrgz2DnP-FYvyQvOag60AU.crl rsync://rpki.apnic.net/member_repository/A91E1B78/C8DF41AC145411F0B3B7C679C4F9AE02/oUDUgGrgz2DnP-FYvyQvOag60AU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUDUgGrgz2DnP-FYvyQvOag60AU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1B78, serialNumber=A140D4806AE0CF60E73FE158BF242F39A83AD005 Validity Not Before: Aug 11 07:46:00 2025 GMT Not After : Aug 18 07:46:00 2025 GMT Subject: CN=68999fb8-49f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3e:97:34:42:a4:16:16:25:cd:34:21:e8:ec: 89:02:90:16:10:78:1c:ab:24:4d:af:8e:c2:b0:71: f3:f1:28:50:10:85:57:51:f1:11:80:e7:59:41:8b: 54:f6:ec:12:1b:63:b0:29:2d:74:b2:b1:e7:64:9a: 4a:80:e5:e3:51:cb:1a:3a:77:69:01:4c:94:d3:b2: a2:84:42:b1:a5:d5:e9:20:c1:58:7d:a8:a5:b8:37: 3f:fb:97:09:63:40:9b:86:f3:ee:38:06:c4:48:c5: 82:57:4b:93:0f:35:21:56:f0:14:8f:c3:ea:b6:6a: 0d:b9:4b:72:a5:2a:86:b1:68:3a:72:74:af:db:19: 37:5c:de:c1:07:63:95:ea:0b:ca:83:de:66:c2:d2: de:0f:a1:f3:d8:6e:8b:bd:ed:fd:c0:ff:ea:75:52: 59:ec:67:53:38:b1:a2:5e:6b:7a:3d:1d:0c:f0:5d: 9f:ef:b0:f5:cd:14:4e:ed:ef:fb:23:dc:a6:12:cc: bd:cd:08:e2:a3:04:76:af:22:4c:2e:23:c5:a7:32: aa:9a:72:c5:80:60:73:65:f6:3c:a2:4b:65:8e:68: 3d:3e:e4:6b:22:4c:6d:6f:81:1f:1f:48:f7:96:57: 87:2d:44:26:d8:2f:d4:9b:c4:99:7d:80:9b:a6:16: 48:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:22:C4:DF:51:15:3F:E0:E4:FD:A9:B1:96:77:D9:91:A7:7C:F0:9E X509v3 Authority Key Identifier: keyid:A1:40:D4:80:6A:E0:CF:60:E7:3F:E1:58:BF:24:2F:39:A8:3A:D0:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1B78/C8DF41AC145411F0B3B7C679C4F9AE02/oUDUgGrgz2DnP-FYvyQvOag60AU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUDUgGrgz2DnP-FYvyQvOag60AU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1B78/C8DF41AC145411F0B3B7C679C4F9AE02/oUDUgGrgz2DnP-FYvyQvOag60AU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:65:59:8f:b1:86:7e:a7:9c:1a:44:bc:27:12:84:bc:47:d5: f9:c5:c3:d8:76:e6:fe:67:09:e2:9c:33:76:90:a9:2f:2e:51: 2f:bf:b2:68:1a:a4:67:e6:d3:ad:19:a0:66:94:3e:ac:52:fe: 4a:3d:cb:af:8f:5c:e2:d0:13:b5:f0:0c:2c:b5:a7:b8:d3:7f: d8:9d:13:39:e5:38:14:91:05:21:5c:3b:c4:d3:c8:4b:77:9c: 5b:76:e8:c5:c7:58:45:b1:a2:9f:db:90:06:e3:b7:ae:af:0d: 49:b7:c0:ba:6c:d8:5b:84:b4:3d:9d:3f:31:4d:07:6b:31:51: 12:43:b4:f5:9c:73:42:55:73:d4:b8:42:3d:b8:22:6b:da:51: 2a:53:ba:6b:62:06:00:f3:f4:18:87:fa:b5:c7:e2:80:30:64: 8b:4c:b0:5e:49:c5:62:9e:66:19:0c:3b:1e:2a:94:b8:08:b8: 2d:64:56:7c:ae:ac:12:6f:ea:62:cd:90:c2:b7:39:39:00:b2: 8c:f3:d8:9d:2c:38:9a:a2:50:1d:67:b3:db:5b:7c:51:f5:88: 2f:31:bd:41:c7:3a:67:b0:27:9c:f4:45:76:d2:b1:8f:9c:5e: 62:c4:e9:15:12:be:d0:97:ad:50:d7:51:75:d4:77:f2:a9:85: 71:46:05:ca -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MUI3ODExMC8GA1UEBRMoQTE0MEQ0ODA2QUUwQ0Y2MEU3M0ZFMTU4QkYyNDJGMzlB ODNBRDAwNTAeFw0yNTA4MTEwNzQ2MDBaFw0yNTA4MTgwNzQ2MDBaMBgxFjAUBgNV BAMTDTY4OTk5ZmI4LTQ5ZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDPpc0QqQWFiXNNCHo7IkCkBYQeByrJE2vjsKwcfPxKFAQhVdR8RGA51lBi1T2 7BIbY7ApLXSysedkmkqA5eNRyxo6d2kBTJTTsqKEQrGl1ekgwVh9qKW4Nz/7lwlj QJuG8+44BsRIxYJXS5MPNSFW8BSPw+q2ag25S3KlKoaxaDpydK/bGTdc3sEHY5Xq C8qD3mbC0t4PofPYbou97f3A/+p1UlnsZ1M4saJea3o9HQzwXZ/vsPXNFE7t7/sj 3KYSzL3NCOKjBHavIkwuI8WnMqqacsWAYHNl9jyiS2WOaD0+5GsiTG1vgR8fSPeW V4ctRCbYL9SbxJl9gJumFkjhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwSLE31EV P+Dk/amxlnfZkad88J4wHwYDVR0jBBgwFoAUoUDUgGrgz2DnP+FYvyQvOag60AUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxQjc4L0M4REY0MUFDMTQ1 NDExRjBCM0I3QzY3OUM0RjlBRTAyL29VRFVnR3JnejJEblAtRll2eVF2T2FnNjBB VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb1VEVWdHcmd6MkRuUC1GWXZ5UXZPYWc2MEFVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx Qjc4L0M4REY0MUFDMTQ1NDExRjBCM0I3QzY3OUM0RjlBRTAyL29VRFVnR3JnejJE blAtRll2eVF2T2FnNjBBVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAM5lWY+xhn6nnBpEvCcShLxH1fnFw9h25v5nCeKcM3aQqS8uUS+/smga pGfm060ZoGaUPqxS/ko9y6+PXOLQE7XwDCy1p7jTf9idEznlOBSRBSFcO8TTyEt3 nFt26MXHWEWxop/bkAbjt66vDUm3wLps2FuEtD2dPzFNB2sxURJDtPWcc0JVc9S4 Qj24ImvaUSpTumtiBgDz9BiH+rXH4oAwZItMsF5JxWKeZhkMOx4qlLgIuC1kVnyu rBJv6mLNkMK3OTkAsozz2J0sOJqiUB1ns9tbfFH1iC8xvUHHOmewJ5z0RXbSsY+c XmLE6RUSvtCXrVDXUXXUd/KphXFGBco= -----END CERTIFICATE-----Generated at Mon Aug 11 08:57:12 2025 by rpki-client