$ rpki-client -vvf rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.mft File: owBvXZI9TJzDuBs4ocpnEnR9RAY.mft (raw, json) Hash identifier: UgmQZpL99GyE4ce6ZQee1dEd8CsSyKMOOInyeowf79w= Subject key identifier: D0:6D:A4:57:DD:8F:21:83:67:61:08:26:3E:FA:7B:F6:0E:B0:15:A0 Authority key identifier: A3:00:6F:5D:92:3D:4C:9C:C3:B8:1B:38:A1:CA:67:12:74:7D:44:06 Certificate issuer: /CN=A91185B8/serialNumber=A3006F5D923D4C9CC3B81B38A1CA6712747D4406 Certificate serial: 01CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owBvXZI9TJzDuBs4ocpnEnR9RAY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.mft Manifest number: 01CC Signing time: Sat 23 Aug 2025 02:58:33 +0000 Manifest this update: Sat 23 Aug 2025 02:58:32 +0000 Manifest next update: Sat 30 Aug 2025 02:58:32 +0000 Files and hashes: 1: owBvXZI9TJzDuBs4ocpnEnR9RAY.crl (hash: xWwaPMQUXuzsbFgjeoJdSYidXSM0qlhE6B1bVCTMgOg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.crl rsync://rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owBvXZI9TJzDuBs4ocpnEnR9RAY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:58:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 461 (0x1cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91185B8, serialNumber=A3006F5D923D4C9CC3B81B38A1CA6712747D4406 Validity Not Before: Aug 23 02:58:32 2025 GMT Not After : Aug 30 02:58:32 2025 GMT Subject: CN=68a92e58-47d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b4:e2:5f:be:d6:88:48:38:53:97:be:46:32: 15:5e:ef:38:82:9e:6e:cf:e2:1d:9c:d7:27:8f:32: 02:d1:d9:96:52:4b:00:2f:bf:73:8c:fd:e4:1f:3e: 89:35:61:96:4d:a9:24:3f:12:19:1a:79:f2:e0:d3: 55:9a:97:3f:57:44:32:db:8a:7c:cc:31:16:f1:8a: 59:aa:ed:13:35:db:c3:ff:2b:39:e7:3e:ff:3f:41: f9:23:a7:5a:e7:0a:72:b0:af:2f:f1:a5:f4:96:8a: 7f:12:fb:09:7b:67:85:c8:eb:99:bf:c4:dc:22:d3: ca:f5:99:03:ab:3d:d4:9b:80:ed:25:68:e9:20:76: 9f:4d:e4:3f:5c:04:0e:ba:28:c1:26:f7:87:4b:93: 5e:9d:11:61:e9:49:cd:ea:89:9c:69:9d:23:43:03: 85:68:17:c2:50:78:61:19:7d:1f:33:02:f5:81:fc: 4b:7d:cd:84:3e:12:b2:9d:64:1f:d9:bc:ab:00:9b: 30:fc:6d:01:f6:f7:2f:04:f4:ce:cc:d2:27:cb:cb: 0b:99:a4:a5:5d:03:f9:bf:5f:bd:60:33:11:27:02: 12:d4:4a:6b:b8:28:6e:90:8d:e2:76:b9:e2:51:28: e6:95:41:f9:c0:0c:5f:1f:92:41:2b:f1:9d:63:38: e2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:6D:A4:57:DD:8F:21:83:67:61:08:26:3E:FA:7B:F6:0E:B0:15:A0 X509v3 Authority Key Identifier: keyid:A3:00:6F:5D:92:3D:4C:9C:C3:B8:1B:38:A1:CA:67:12:74:7D:44:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owBvXZI9TJzDuBs4ocpnEnR9RAY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:39:65:f5:15:86:35:d2:1e:12:3f:0b:f9:f6:7e:07:48:85: 96:39:2d:0d:b5:62:9f:56:f8:3e:91:96:6a:39:55:af:60:88: 70:83:eb:5e:22:e9:00:e9:3a:35:0f:0b:ba:a4:1b:8c:de:ff: 68:32:80:e9:41:10:ae:24:3b:b4:9f:f6:ce:b5:0c:c4:25:7e: b8:30:ab:b0:f4:67:c2:a7:7c:ad:53:77:d5:2b:f4:94:12:a8: 47:bc:5f:22:a8:6c:fe:2c:70:c1:ab:44:2e:f1:de:56:69:aa: d4:e5:65:bc:29:3f:23:86:d3:17:f4:99:72:fe:6a:c4:cd:b6: 66:25:8c:dd:64:78:9f:0e:57:1c:3d:fb:77:be:0b:13:a2:ca: 0b:a6:b8:10:b5:bf:b9:c9:91:6d:49:5c:00:c5:f2:ab:a4:a7: 5a:f7:18:6e:d0:df:07:25:42:cb:e1:be:ac:ec:2e:40:7c:1f: c3:77:3f:ad:5c:33:d9:73:3f:53:27:ed:04:b4:90:3b:c5:23: 98:ed:a5:9e:d6:7b:51:24:51:23:70:d4:4f:b1:dc:21:2c:c2: da:53:af:0b:06:09:6a:a2:ce:0f:66:d9:1b:7d:1f:49:ed:c4: 99:19:19:78:90:93:fc:88:4e:88:0e:73:dc:2b:55:b2:8d:c6: 1c:22:bb:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg1QjgxMTAvBgNVBAUTKEEzMDA2RjVEOTIzRDRDOUNDM0I4MUIzOEExQ0E2NzEy NzQ3RDQ0MDYwHhcNMjUwODIzMDI1ODMyWhcNMjUwODMwMDI1ODMyWjAYMRYwFAYD VQQDEw02OGE5MmU1OC00N2Q3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3bTiX77WiEg4U5e+RjIVXu84gp5uz+IdnNcnjzIC0dmWUksAL79zjP3kHz6J NWGWTakkPxIZGnny4NNVmpc/V0Qy24p8zDEW8YpZqu0TNdvD/ys55z7/P0H5I6da 5wpysK8v8aX0lop/EvsJe2eFyOuZv8TcItPK9ZkDqz3Um4DtJWjpIHafTeQ/XAQO uijBJveHS5NenRFh6UnN6omcaZ0jQwOFaBfCUHhhGX0fMwL1gfxLfc2EPhKynWQf 2byrAJsw/G0B9vcvBPTOzNIny8sLmaSlXQP5v1+9YDMRJwIS1EpruChukI3idrni USjmlUH5wAxfH5JBK/GdYzjiyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNBtpFfd jyGDZ2EIJj76e/YOsBWgMB8GA1UdIwQYMBaAFKMAb12SPUycw7gbOKHKZxJ0fUQG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODVCOC9EOUJGNDM5NEJF MzExMUVEQjRGRjdEMzRDNEY5QUUwMi9vd0J2WFpJOVRKekR1QnM0b2NwbkVuUjlS QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL293QnZYWkk5VEp6RHVCczRvY3BuRW5SOVJBWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODVCOC9EOUJGNDM5NEJFMzExMUVEQjRGRjdEMzRDNEY5QUUwMi9vd0J2WFpJOVRK ekR1QnM0b2NwbkVuUjlSQVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAROWX1FYY10h4SPwv59n4HSIWWOS0NtWKfVvg+kZZqOVWvYIhwg+te IukA6To1Dwu6pBuM3v9oMoDpQRCuJDu0n/bOtQzEJX64MKuw9GfCp3ytU3fVK/SU EqhHvF8iqGz+LHDBq0Qu8d5WaarU5WW8KT8jhtMX9Jly/mrEzbZmJYzdZHifDlcc Pft3vgsTosoLprgQtb+5yZFtSVwAxfKrpKda9xhu0N8HJULL4b6s7C5AfB/Ddz+t XDPZcz9TJ+0EtJA7xSOY7aWe1ntRJFEjcNRPsdwhLMLaU68LBglqos4PZtkbfR9J 7cSZGRl4kJP8iE6IDnPcK1WyjcYcIrt1 -----END CERTIFICATE-----Generated at Sat Aug 23 17:21:10 2025 by rpki-client