$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft File: oYXAxXSCnF_NcURUSeU0za70E5Y.mft (raw, json) Hash identifier: I0nqBnHVm5cPsTBxjuMq20NezlzyoHoLxH0bZRwW+gw= Subject key identifier: 3A:D1:1E:0E:54:00:5D:6E:21:DD:23:D4:C0:46:7D:BE:4A:2D:ED:80 Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96 Certificate issuer: /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396 Certificate serial: 034F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft Manifest number: 0307 Signing time: Sat 09 Aug 2025 01:57:27 +0000 Manifest this update: Sat 09 Aug 2025 01:57:26 +0000 Manifest next update: Sat 16 Aug 2025 01:57:26 +0000 Files and hashes: 1: oYXAxXSCnF_NcURUSeU0za70E5Y.crl (hash: k4P99VkkxXEQcRy2hIzheWnUJB36LSSaFRum/X4RE9Y=) 2: 212691F85C8A11F09D065A67C4F9AE02.roa (hash: iyDMS6tOGnY0vV2tRBpkImtDJt2yb1m8IIZ76sEjG28=) 3: AF5AD402224711F0B0CDB07DC4F9AE02.roa (hash: Rd9F0rhnVp5Iq5KfDW7kM6BcAp4B6e5cA4C+HDxhcWk=) 4: 2D153A4648B711F0B6D4592EC4F9AE02.roa (hash: 2idrkUiE1glbbdM/t25K//0O3gKsqe5+guvE9Yfyva4=) 5: 1C8BEF04E24511EF96354978C4F9AE02.roa (hash: emdOoNHeNPd2I/1TXnCpTax46mU70PVq1qcXN4YL9To=) 6: A3571FDE47EC11EFB51C3666C4F9AE02.roa (hash: oa1DI9U4A4Nx6Hk3PHDp1mXpYhzRJyPS5jmqfG2Om0Y=) 7: B111111288B411EF80480527C4F9AE02.roa (hash: qLIDrHWS/i6A8fwW8H8k+xkymy4Akbi61wq5s13V2Ww=) 8: 205AD1805C8A11F09D065A67C4F9AE02.roa (hash: /HSo5jxbj7peidwO9alg4qXB6CLHjHvT7Exk5bMgxFc=) 9: CD90ED68057211F0B6E2301BC4F9AE02.roa (hash: DFlr8Tn/hG96eJuSS2hv0WiijRfajfy1iDPzEugU79I=) 10: D8885778736E11F09285BB57C4F9AE02.roa (hash: kWy/MHRch8VxHGm3EaH/i/2JFapmHcdFJkSNEBAgbk0=) 11: EE235A42736E11F09E7CF457C4F9AE02.roa (hash: LrODa4UTwGwep9R4xvDIfrpYcTvSHvqSkIcijnpsmZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 847 (0x34f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4E32, serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396 Validity Not Before: Aug 9 01:57:26 2025 GMT Not After : Aug 16 01:57:26 2025 GMT Subject: CN=6896ab07-f7ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:95:dc:80:69:7b:40:d5:fe:10:2b:9d:bc:04: 0f:33:d4:34:ef:d7:ed:09:66:47:5e:92:b1:5e:f9: 7c:38:6b:61:09:2e:5b:a2:00:3b:e8:0f:4e:ab:18: 95:ec:1a:c3:1e:40:27:60:72:5a:91:9f:be:9c:31: a5:a3:f1:d9:49:6b:f7:c4:ff:60:ed:8c:bf:74:0e: c7:39:75:d4:32:f5:5a:94:dc:7b:48:75:8a:e2:63: 6e:5d:ed:73:b8:65:c2:d8:8e:3d:51:3c:5e:ca:94: af:01:dd:2a:44:63:3a:9c:19:4d:e6:79:0e:9c:5c: a5:7d:6b:d6:2b:10:5d:c1:5e:93:b1:83:a3:12:77: ff:96:d6:4e:ba:fd:71:86:3c:b5:fa:0d:eb:36:2c: f0:de:cf:7a:b1:f4:ef:34:83:bb:e4:fd:6c:9f:a4: 03:f0:5b:21:61:9b:50:ef:56:13:22:95:d5:d3:58: b5:03:8a:b7:e5:d3:5d:97:45:a7:b8:cf:81:7c:cf: 27:21:fc:27:f6:f3:f3:a4:10:8c:09:4f:ed:9f:26: 0c:41:bb:c3:8a:6a:43:62:48:da:ba:57:a5:88:2e: c4:b9:a5:24:ed:a0:6f:b6:73:31:28:09:80:ad:f7: fc:c3:c2:a6:27:79:b4:ae:47:74:61:53:5f:52:67: b9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D1:1E:0E:54:00:5D:6E:21:DD:23:D4:C0:46:7D:BE:4A:2D:ED:80 X509v3 Authority Key Identifier: keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:27:1c:d5:6e:f9:83:a1:ba:c1:30:d1:65:28:05:b4:54:99: 3a:3c:e0:43:25:a1:fc:63:5f:ce:57:e9:32:9c:aa:50:ae:78: 15:72:ca:29:21:69:34:3e:39:a4:41:67:03:06:25:29:a4:13: 1a:72:e9:59:4d:e7:5e:71:bc:67:39:ba:a2:9d:fd:6b:75:cd: ea:f2:24:91:6f:a6:aa:8b:93:7b:c9:9a:f0:94:6c:17:b0:03: 00:b1:1a:a0:9f:67:89:49:d7:28:85:c6:95:3b:d2:b3:be:e4: 1c:88:c6:f0:05:2e:bf:5d:ac:5e:c3:60:ac:86:db:cc:24:74: 1a:11:c1:9c:71:b4:a6:dd:12:c3:7e:6f:84:f4:bb:2f:38:8a: 85:00:8f:59:c7:98:cf:8b:75:80:c4:0c:6c:73:d8:2c:f3:29: 2d:43:24:f3:dd:92:7e:8f:94:f3:ff:ce:fb:ce:c9:ec:45:10: 6e:f0:63:a7:c0:b3:cc:e5:b8:52:d7:05:7d:3e:72:c6:21:65: 83:19:77:f1:dd:77:98:19:f3:6f:3f:96:92:73:ff:d7:02:db: 16:9c:a7:ad:d9:1f:d2:21:2e:48:1a:64:85:e1:bb:7d:cf:45: db:98:e2:3d:5f:88:08:4f:83:9e:b4:2f:32:4c:5d:75:d2:bd: b3:9a:a3:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA08wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFMzIxMTAvBgNVBAUTKEExODVDMEM1NzQ4MjlDNUZDRDcxNDQ1NDQ5RTUzNENE QUVGNDEzOTYwHhcNMjUwODA5MDE1NzI2WhcNMjUwODE2MDE1NzI2WjAYMRYwFAYD VQQDEw02ODk2YWIwNy1mN2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0pXcgGl7QNX+ECudvAQPM9Q079ftCWZHXpKxXvl8OGthCS5bogA76A9OqxiV 7BrDHkAnYHJakZ++nDGlo/HZSWv3xP9g7Yy/dA7HOXXUMvValNx7SHWK4mNuXe1z uGXC2I49UTxeypSvAd0qRGM6nBlN5nkOnFylfWvWKxBdwV6TsYOjEnf/ltZOuv1x hjy1+g3rNizw3s96sfTvNIO75P1sn6QD8FshYZtQ71YTIpXV01i1A4q35dNdl0Wn uM+BfM8nIfwn9vPzpBCMCU/tnyYMQbvDimpDYkjauleliC7EuaUk7aBvtnMxKAmA rff8w8KmJ3m0rkd0YVNfUme5owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDrRHg5U AF1uId0j1MBGfb5KLe2AMB8GA1UdIwQYMBaAFKGFwMV0gpxfzXFEVEnlNM2u9BOW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEUzMi83MjA5NTlGQzAx QzAxMUVEQkQ3QzZGNThDNEY5QUUwMi9vWVhBeFhTQ25GX05jVVJVU2VVMHphNzBF NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29ZWEF4WFNDbkZfTmNVUlVTZVUwemE3MEU1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEUzMi83MjA5NTlGQzAxQzAxMUVEQkQ3QzZGNThDNEY5QUUwMi9vWVhBeFhTQ25G X05jVVJVU2VVMHphNzBFNVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQJxzVbvmDobrBMNFlKAW0VJk6POBDJaH8Y1/OV+kynKpQrngVcsop IWk0PjmkQWcDBiUppBMaculZTedecbxnObqinf1rdc3q8iSRb6aqi5N7yZrwlGwX sAMAsRqgn2eJSdcohcaVO9KzvuQciMbwBS6/Xaxew2CshtvMJHQaEcGccbSm3RLD fm+E9LsvOIqFAI9Zx5jPi3WAxAxsc9gs8yktQyTz3ZJ+j5Tz/877zsnsRRBu8GOn wLPM5bhS1wV9PnLGIWWDGXfx3XeYGfNvP5aSc//XAtsWnKet2R/SIS5IGmSF4bt9 z0XbmOI9X4gIT4OetC8yTF110r2zmqM6 -----END CERTIFICATE-----Generated at Sun Aug 10 18:31:19 2025 by rpki-client