$ rpki-client -vvf rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft File: oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft (raw, json) Hash identifier: U5E6v+zYqRWVkzQEOiJsHzKooynU4PZBT0VwJfC5QP0= Subject key identifier: 8A:D5:F3:F1:C7:C5:63:AA:4A:2B:79:83:40:58:4A:1D:07:6F:C1:57 Authority key identifier: A2:24:36:84:22:3D:2C:25:C6:AF:17:6A:5F:02:FA:02:B2:4F:68:0B Certificate issuer: /CN=A91E953B/serialNumber=A2243684223D2C25C6AF176A5F02FA02B24F680B Certificate serial: 0154 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft Manifest number: 0152 Signing time: Thu 07 Aug 2025 04:37:55 +0000 Manifest this update: Thu 07 Aug 2025 04:37:55 +0000 Manifest next update: Thu 14 Aug 2025 04:37:55 +0000 Files and hashes: 1: oiQ2hCI9LCXGrxdqXwL6ArJPaAs.crl (hash: JWglSI8AWvyZg9M4oaApr66xNtZdCo1UAiQDh134CDA=) 2: 12E1FD886C9C11EE9F3C5653C4F9AE02.roa (hash: QQ5QrwGTURdTMG/7o8+lIRwrf/ztbEh4ekM9cA/bz/4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.crl rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 04:37:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 340 (0x154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E953B, serialNumber=A2243684223D2C25C6AF176A5F02FA02B24F680B Validity Not Before: Aug 7 04:37:55 2025 GMT Not After : Aug 14 04:37:55 2025 GMT Subject: CN=68942da3-0270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3d:a8:00:94:10:d0:6c:9f:65:96:7c:93:7d: 6f:9e:4b:7e:9c:9c:20:80:82:42:2d:bf:8c:6b:95: c8:22:28:c0:8a:ed:e2:d4:50:14:57:7a:04:2b:04: 97:b9:26:89:78:26:6f:84:b6:83:5c:a9:53:f5:c7: dd:d0:d6:e9:f3:8c:3b:bc:9b:a3:18:49:82:dd:8f: bb:c7:c5:58:ba:9b:67:ee:20:6e:a6:0a:11:08:0d: fc:4f:00:cf:0a:43:92:95:74:16:c9:4c:65:c5:64: aa:32:7d:99:93:1a:b8:67:21:66:2d:3b:3e:5e:4b: 01:77:2a:4b:b9:0b:e1:84:9e:72:05:a5:6d:dc:8e: 1a:b1:62:f6:b9:b4:29:df:95:2e:56:12:89:21:f3: 3b:13:23:33:0c:32:70:be:44:2a:57:d2:a9:94:6b: 58:5d:0a:53:04:2d:16:a8:66:c8:58:8a:d4:9d:58: 02:89:75:dd:13:a0:15:53:fa:43:8d:59:00:b5:b7: 25:f6:4d:38:47:31:e3:55:85:7b:fd:69:81:26:44: db:74:38:15:78:a5:74:c4:56:97:ae:d2:6f:84:eb: 35:62:d5:d7:f5:07:88:98:15:6d:bc:69:86:13:98: 49:06:1c:a5:dd:14:b6:5c:29:77:9b:48:b7:55:03: af:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:D5:F3:F1:C7:C5:63:AA:4A:2B:79:83:40:58:4A:1D:07:6F:C1:57 X509v3 Authority Key Identifier: keyid:A2:24:36:84:22:3D:2C:25:C6:AF:17:6A:5F:02:FA:02:B2:4F:68:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:53:df:1c:b7:94:29:05:d4:8b:8c:87:c5:6a:f8:6d:01:4e: ca:2d:ec:45:c9:66:42:a3:2e:e2:b5:4d:ec:65:cb:57:1f:a7: d7:9d:ba:78:98:b0:04:20:71:06:0c:8c:ac:25:09:10:5c:45: 6e:97:e0:55:67:60:85:68:ff:a0:0f:9b:e5:45:5f:a5:0a:96: 76:ac:19:7f:80:72:cf:7b:f6:e2:fb:66:61:68:4b:61:6d:0c: bb:1d:68:4b:0c:6e:fd:9a:4d:0c:a8:6a:9c:ba:60:19:5e:0d: a6:fc:de:23:7c:eb:7d:1b:7c:c7:82:ae:ad:ea:6f:09:fa:fe: df:90:4f:c0:56:0c:a8:ef:f9:9c:57:1d:54:ba:e5:fd:15:1c: 3d:ad:90:79:ce:20:4b:a1:2e:02:2a:1c:60:c8:e4:71:eb:7a: bb:3e:ae:8c:c1:c5:13:72:be:6e:bb:94:76:6d:fd:4d:bb:94: 4f:c1:28:89:a4:ba:91:0c:74:d5:41:b2:5e:25:d5:f7:3d:f5: ba:1a:16:a4:47:c7:5b:22:1f:97:ef:28:51:ef:b1:2b:cc:4d: b5:91:30:8b:b6:71:4b:7c:39:3a:ce:dc:eb:b6:0a:77:53:c4: 8b:61:ca:da:d4:2d:cb:69:d7:06:f5:69:6a:88:56:e8:15:c5: 35:49:84:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk1M0IxMTAvBgNVBAUTKEEyMjQzNjg0MjIzRDJDMjVDNkFGMTc2QTVGMDJGQTAy QjI0RjY4MEIwHhcNMjUwODA3MDQzNzU1WhcNMjUwODE0MDQzNzU1WjAYMRYwFAYD VQQDEw02ODk0MmRhMy0wMjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzj2oAJQQ0GyfZZZ8k31vnkt+nJwggIJCLb+Ma5XIIijAiu3i1FAUV3oEKwSX uSaJeCZvhLaDXKlT9cfd0Nbp84w7vJujGEmC3Y+7x8VYuptn7iBupgoRCA38TwDP CkOSlXQWyUxlxWSqMn2Zkxq4ZyFmLTs+XksBdypLuQvhhJ5yBaVt3I4asWL2ubQp 35UuVhKJIfM7EyMzDDJwvkQqV9KplGtYXQpTBC0WqGbIWIrUnVgCiXXdE6AVU/pD jVkAtbcl9k04RzHjVYV7/WmBJkTbdDgVeKV0xFaXrtJvhOs1YtXX9QeImBVtvGmG E5hJBhyl3RS2XCl3m0i3VQOvXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIrV8/HH xWOqSit5g0BYSh0Hb8FXMB8GA1UdIwQYMBaAFKIkNoQiPSwlxq8Xal8C+gKyT2gL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTUzQi9DOEQwMzkyMjZD OUExMUVFODVCRkRGNEZDNEY5QUUwMi9vaVEyaENJOUxDWEdyeGRxWHdMNkFySlBh QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29pUTJoQ0k5TENYR3J4ZHFYd0w2QXJKUGFBcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTUzQi9DOEQwMzkyMjZDOUExMUVFODVCRkRGNEZDNEY5QUUwMi9vaVEyaENJOUxD WEdyeGRxWHdMNkFySlBhQXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwU98ct5QpBdSLjIfFavhtAU7KLexFyWZCoy7itU3sZctXH6fXnbp4 mLAEIHEGDIysJQkQXEVul+BVZ2CFaP+gD5vlRV+lCpZ2rBl/gHLPe/bi+2ZhaEth bQy7HWhLDG79mk0MqGqcumAZXg2m/N4jfOt9G3zHgq6t6m8J+v7fkE/AVgyo7/mc Vx1UuuX9FRw9rZB5ziBLoS4CKhxgyORx63q7Pq6MwcUTcr5uu5R2bf1Nu5RPwSiJ pLqRDHTVQbJeJdX3PfW6GhakR8dbIh+X7yhR77ErzE21kTCLtnFLfDk6ztzrtgp3 U8SLYcra1C3LadcG9WlqiFboFcU1SYRD -----END CERTIFICATE-----Generated at Thu Aug 7 07:16:14 2025 by rpki-client