$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft File: OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft (raw, json) Hash identifier: eDxzXkmHw4WiHbxwNWNAnv5FVcfGZboaApd3pBMZ/kQ= Subject key identifier: CF:0A:AC:55:21:22:74:DE:F3:C4:37:A7:48:58:E1:1D:96:D9:DD:5D Authority key identifier: 39:D1:D5:95:54:18:91:35:30:94:58:36:18:D6:CC:07:9C:83:0C:E1 Certificate issuer: /CN=A9110C7C/serialNumber=39D1D595541891353094583618D6CC079C830CE1 Certificate serial: 1ECB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdHVlVQYkTUwlFg2GNbMB5yDDOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft Manifest number: 1EBF Signing time: Fri 22 Aug 2025 16:05:59 +0000 Manifest this update: Fri 22 Aug 2025 16:05:59 +0000 Manifest next update: Fri 29 Aug 2025 16:05:59 +0000 Files and hashes: 1: OdHVlVQYkTUwlFg2GNbMB5yDDOE.crl (hash: ExGOYAEVmzhRIV0ISwHrbTpKziBc/34bhxfzQ3hdWLQ=) 2: BFF7726E6EF711E69FBC340BC4F9AE02.roa (hash: W0ZWmGkhW06fRZVPw8jscLCIBobXeY3y+SwBDvJ1Z0s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.crl rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdHVlVQYkTUwlFg2GNbMB5yDDOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:05:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7883 (0x1ecb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110C7C, serialNumber=39D1D595541891353094583618D6CC079C830CE1 Validity Not Before: Aug 22 16:05:59 2025 GMT Not After : Aug 29 16:05:59 2025 GMT Subject: CN=68a89567-4e2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:bf:4f:44:f9:ea:f4:1c:2f:b6:be:16:8c:fe: 10:77:3a:34:5c:ed:6a:40:12:9e:d4:69:a4:4f:c9: 64:dd:a5:d4:7d:c1:03:72:ef:53:63:72:94:d0:75: 50:4a:99:2b:bc:a1:8c:40:bb:5b:f1:13:76:17:b3: 56:54:00:ad:76:b7:5e:17:73:43:e3:6a:25:e6:f3: 8d:5d:11:b1:f0:67:2d:1a:8d:bd:65:14:ca:e2:3c: 84:89:18:e6:88:de:2d:2b:ea:e7:1c:9d:00:1a:88: 9c:77:39:b5:93:b6:13:c1:14:85:43:36:87:8f:ce: 22:f0:b4:42:2f:d0:ae:d9:4d:d0:9a:a5:b8:3d:0d: 91:a8:94:0a:3f:f4:46:ad:a1:30:89:47:4a:68:7a: 32:d3:a8:04:6c:3f:ce:be:7c:ce:d2:48:9d:ea:69: 1d:e3:94:49:76:5f:60:08:2c:54:5f:f4:90:dd:1d: c8:34:22:53:dc:93:45:ac:34:91:04:22:74:f2:c6: 18:e6:44:e1:ee:73:a4:74:78:39:e4:85:ea:06:ea: ee:e5:8a:ab:63:f8:44:6e:6d:3c:b5:58:80:b6:15: f3:7e:d2:95:bd:bb:44:e8:7f:aa:b7:39:d0:53:1a: 13:f2:fc:ce:20:cd:75:8c:6a:ba:76:c6:4c:0e:8c: 07:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:0A:AC:55:21:22:74:DE:F3:C4:37:A7:48:58:E1:1D:96:D9:DD:5D X509v3 Authority Key Identifier: keyid:39:D1:D5:95:54:18:91:35:30:94:58:36:18:D6:CC:07:9C:83:0C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdHVlVQYkTUwlFg2GNbMB5yDDOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:ac:b3:f7:9d:35:f0:37:1c:16:f6:ec:2c:4b:5a:b8:7a:41: e2:0c:d7:44:df:07:41:25:bc:24:86:2c:af:4d:66:f3:fa:96: 1b:14:f1:bf:dc:74:c3:94:bb:a9:e7:ea:9d:41:a7:2b:b3:d1: 07:45:97:9d:f1:cf:8a:a9:49:e2:28:02:d3:fa:46:ca:89:bc: d7:df:27:2c:8d:5d:52:01:66:3e:39:44:31:95:19:3e:d5:94: 59:a8:be:7d:ae:de:8a:0f:69:28:d8:99:19:f4:0e:c2:1c:f7: 16:be:02:04:bb:b4:a8:ee:df:8b:93:1a:ee:a9:54:34:61:93: f0:38:af:64:a7:68:7b:8f:1e:e2:0a:b6:75:1d:8a:a2:8d:1c: 45:dd:8e:cb:ce:2a:42:fe:ae:23:ca:c5:9d:24:2c:98:21:9b: c7:f3:fe:08:54:65:61:0e:2b:fe:26:e3:00:1f:9e:2c:2e:a4: 43:e7:30:73:67:f4:7a:1c:8d:26:f0:74:23:47:ac:82:67:42: 6e:48:43:b9:b5:37:59:44:99:e6:6e:a6:ee:93:8e:1a:04:c9: bc:5f:f3:b2:3e:2e:59:2c:8a:df:11:86:52:3e:68:1a:b3:87: 87:28:ea:0a:e4:fe:17:23:20:64:e8:bd:2a:78:1b:68:fe:68: b5:4c:91:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHsswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBDN0MxMTAvBgNVBAUTKDM5RDFENTk1NTQxODkxMzUzMDk0NTgzNjE4RDZDQzA3 OUM4MzBDRTEwHhcNMjUwODIyMTYwNTU5WhcNMjUwODI5MTYwNTU5WjAYMRYwFAYD VQQDEw02OGE4OTU2Ny00ZTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxr9PRPnq9Bwvtr4WjP4Qdzo0XO1qQBKe1GmkT8lk3aXUfcEDcu9TY3KU0HVQ SpkrvKGMQLtb8RN2F7NWVACtdrdeF3ND42ol5vONXRGx8GctGo29ZRTK4jyEiRjm iN4tK+rnHJ0AGoicdzm1k7YTwRSFQzaHj84i8LRCL9Cu2U3QmqW4PQ2RqJQKP/RG raEwiUdKaHoy06gEbD/OvnzO0kid6mkd45RJdl9gCCxUX/SQ3R3INCJT3JNFrDSR BCJ08sYY5kTh7nOkdHg55IXqBuru5YqrY/hEbm08tViAthXzftKVvbtE6H+qtznQ UxoT8vzOIM11jGq6dsZMDowH4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM8KrFUh InTe88Q3p0hY4R2W2d1dMB8GA1UdIwQYMBaAFDnR1ZVUGJE1MJRYNhjWzAecgwzh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEM3Qy8yOUY3QTA0MDZF RjcxMUU2OUUzMjY3MEFDNEY5QUUwMi9PZEhWbFZRWWtUVXdsRmcyR05iTUI1eURE T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09kSFZsVlFZa1RVd2xGZzJHTmJNQjV5RERPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEM3Qy8yOUY3QTA0MDZFRjcxMUU2OUUzMjY3MEFDNEY5QUUwMi9PZEhWbFZRWWtU VXdsRmcyR05iTUI1eURET0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/rLP3nTXwNxwW9uwsS1q4ekHiDNdE3wdBJbwkhiyvTWbz+pYbFPG/ 3HTDlLup5+qdQacrs9EHRZed8c+KqUniKALT+kbKibzX3ycsjV1SAWY+OUQxlRk+ 1ZRZqL59rt6KD2ko2JkZ9A7CHPcWvgIEu7So7t+LkxruqVQ0YZPwOK9kp2h7jx7i CrZ1HYqijRxF3Y7LzipC/q4jysWdJCyYIZvH8/4IVGVhDiv+JuMAH54sLqRD5zBz Z/R6HI0m8HQjR6yCZ0JuSEO5tTdZRJnmbqbuk44aBMm8X/OyPi5ZLIrfEYZSPmga s4eHKOoK5P4XIyBk6L0qeBto/mi1TJGP -----END CERTIFICATE-----Generated at Sat Aug 23 17:18:27 2025 by rpki-client