$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft File: kROhaGm30B54nuCf4m5q-jfPPkc.mft (raw, json) Hash identifier: inkWCuHcU8U12N3GNSylyHzPk0auh0LPn2XoJre6UZ0= Subject key identifier: BC:2B:C0:E1:87:46:A8:28:02:AB:DA:E4:BE:FD:B4:74:FF:02:96:54 Authority key identifier: 91:13:A1:68:69:B7:D0:1E:78:9E:E0:9F:E2:6E:6A:FA:37:CF:3E:47 Certificate issuer: /CN=A91E3814/serialNumber=9113A16869B7D01E789EE09FE26E6AFA37CF3E47 Certificate serial: 046F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft Manifest number: 0465 Signing time: Sat 09 Aug 2025 00:41:51 +0000 Manifest this update: Sat 09 Aug 2025 00:41:50 +0000 Manifest next update: Sat 16 Aug 2025 00:41:50 +0000 Files and hashes: 1: kROhaGm30B54nuCf4m5q-jfPPkc.crl (hash: 4zgLWpssGbL0aAP05TEz+5nVviyXUx9WUTqWZlJdCLc=) 2: 8628E1BA210611F082BE7E10C4F9AE02.roa (hash: wGvigc7YwHG59J2rGqwJ7WYeY96T+112b/PUTqhl/lE=) 3: 2F74D644ABC711EF9CD3CE81C4F9AE02.roa (hash: wmmIaxLCg5K0uFc5rnys8oy6i0z0O/e/VdhovEca3nw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.crl rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1135 (0x46f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3814, serialNumber=9113A16869B7D01E789EE09FE26E6AFA37CF3E47 Validity Not Before: Aug 9 00:41:50 2025 GMT Not After : Aug 16 00:41:50 2025 GMT Subject: CN=6896994f-0ca5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b4:94:44:fd:23:ba:29:71:90:b4:82:14:67: 4f:de:28:6f:d1:82:78:c8:b9:e1:ca:a7:21:fb:20: 90:27:56:95:03:48:0b:a7:47:6e:66:5b:10:59:3c: cd:1a:c9:9b:30:e9:17:66:c4:a2:d0:30:a2:7e:5f: b5:d9:33:16:c8:09:1e:39:8b:e2:25:c9:19:f2:07: 61:75:65:dc:9b:32:34:c8:0f:ab:db:aa:f8:2f:48: e7:54:2e:80:ac:53:29:1d:78:1c:4b:7a:77:a1:70: 3d:ae:6f:ef:75:5f:86:7e:e3:61:48:b6:a7:b1:f1: 48:2d:ce:81:a5:c9:ca:b9:72:dd:a6:f0:05:56:4d: e7:91:6a:80:aa:5e:8a:a3:e5:38:c7:8e:2d:92:d0: a4:88:7c:9e:60:9d:86:a7:06:2b:6e:f7:bf:7b:c6: 8a:4c:4a:c4:f9:3a:15:1b:46:f8:8c:0f:9c:67:42: bf:c9:c5:a4:0a:7c:1d:ee:46:78:e7:d8:b7:8e:78: 70:ce:58:74:6e:80:92:a9:bd:61:af:e0:d3:78:5f: e7:96:b7:80:77:55:f5:3f:82:5f:75:b4:db:b3:c8: 92:b0:ad:e7:9b:d6:c2:ac:73:1a:db:ed:6c:84:22: 52:e9:67:00:65:30:19:80:ec:05:35:b2:c3:41:a0: ce:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:2B:C0:E1:87:46:A8:28:02:AB:DA:E4:BE:FD:B4:74:FF:02:96:54 X509v3 Authority Key Identifier: keyid:91:13:A1:68:69:B7:D0:1E:78:9E:E0:9F:E2:6E:6A:FA:37:CF:3E:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:b0:d1:c3:57:01:e8:ec:f7:db:1d:27:7e:f6:c3:13:b7:66: f9:7b:91:a2:0c:2c:af:c4:78:e1:65:5c:1f:54:8f:4a:9a:e4: 10:f4:55:31:ff:c9:6c:7b:ab:6a:db:26:56:13:d7:89:b5:c9: 20:f7:d0:5d:08:bd:42:da:c7:73:e2:0b:cd:05:d7:d9:e1:bc: 34:1a:3e:ef:c3:10:06:70:b4:a7:fd:af:c9:e6:2c:ef:29:e1: 8c:4e:26:81:4a:d2:a6:43:b5:28:0a:9a:aa:7b:46:70:3b:43: 91:f7:3e:12:03:63:d2:77:fe:7a:40:f0:2c:89:10:c7:17:95: 59:cc:31:d2:97:84:42:a2:3d:7e:11:5c:11:32:51:f4:ad:51: 08:8b:44:6b:9f:08:65:55:51:9f:e0:6c:d2:ca:77:23:96:04: df:a6:30:f7:4c:f6:66:c0:de:ac:63:d9:5b:95:a4:04:a7:e6: 25:8b:8d:69:81:bc:b4:f0:31:37:1f:fe:1c:e3:80:bc:56:2c: 96:82:cb:18:a9:03:46:59:d9:bc:be:23:2b:4a:e0:2b:63:0e: 96:d5:15:61:19:ec:92:8a:5b:e8:8c:a4:22:2a:ad:ce:60:5a: 45:34:00:6d:3c:0a:09:44:34:f3:01:07:8f:a6:cc:df:84:be: db:24:3c:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM4MTQxMTAvBgNVBAUTKDkxMTNBMTY4NjlCN0QwMUU3ODlFRTA5RkUyNkU2QUZB MzdDRjNFNDcwHhcNMjUwODA5MDA0MTUwWhcNMjUwODE2MDA0MTUwWjAYMRYwFAYD VQQDEw02ODk2OTk0Zi0wY2E1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo7SURP0juilxkLSCFGdP3ihv0YJ4yLnhyqch+yCQJ1aVA0gLp0duZlsQWTzN GsmbMOkXZsSi0DCifl+12TMWyAkeOYviJckZ8gdhdWXcmzI0yA+r26r4L0jnVC6A rFMpHXgcS3p3oXA9rm/vdV+GfuNhSLansfFILc6BpcnKuXLdpvAFVk3nkWqAql6K o+U4x44tktCkiHyeYJ2GpwYrbve/e8aKTErE+ToVG0b4jA+cZ0K/ycWkCnwd7kZ4 59i3jnhwzlh0boCSqb1hr+DTeF/nlreAd1X1P4JfdbTbs8iSsK3nm9bCrHMa2+1s hCJS6WcAZTAZgOwFNbLDQaDO8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLwrwOGH RqgoAqva5L79tHT/ApZUMB8GA1UdIwQYMBaAFJEToWhpt9AeeJ7gn+Juavo3zz5H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzgxNC8yNTQyQjQyMjVE NzExMUVDOTkwODkxNERDNEY5QUUwMi9rUk9oYUdtMzBCNTRudUNmNG01cS1qZlBQ a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tST2hhR20zMEI1NG51Q2Y0bTVxLWpmUFBrYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzgxNC8yNTQyQjQyMjVENzExMUVDOTkwODkxNERDNEY5QUUwMi9rUk9oYUdtMzBC NTRudUNmNG01cS1qZlBQa2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVsNHDVwHo7PfbHSd+9sMTt2b5e5GiDCyvxHjhZVwfVI9KmuQQ9FUx /8lse6tq2yZWE9eJtckg99BdCL1C2sdz4gvNBdfZ4bw0Gj7vwxAGcLSn/a/J5izv KeGMTiaBStKmQ7UoCpqqe0ZwO0OR9z4SA2PSd/56QPAsiRDHF5VZzDHSl4RCoj1+ EVwRMlH0rVEIi0RrnwhlVVGf4GzSyncjlgTfpjD3TPZmwN6sY9lblaQEp+Yli41p gby08DE3H/4c44C8ViyWgssYqQNGWdm8viMrSuArYw6W1RVhGeySilvojKQiKq3O YFpFNABtPAoJRDTzAQePpszfhL7bJDzX -----END CERTIFICATE-----Generated at Sun Aug 10 05:38:59 2025 by rpki-client