$ rpki-client -vvf rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft File: Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft (raw, json) Hash identifier: 3P93ItV/VWzRKdBiNsFVeFbrXXPxHbXzCdwWcnLNWrw= Subject key identifier: AF:D1:34:2D:C2:20:F6:38:3A:CE:7A:97:BF:99:ED:D3:D8:85:3A:89 Authority key identifier: 3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60 Certificate issuer: /CN=A91188EE/serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360 Certificate serial: 010C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft Manifest number: 0104 Signing time: Sat 23 Aug 2025 05:16:54 +0000 Manifest this update: Sat 23 Aug 2025 05:16:54 +0000 Manifest next update: Sat 30 Aug 2025 05:16:54 +0000 Files and hashes: 1: Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl (hash: jlqUOKAW6Pa5pPsXsyaoh/ETJsYyQUNK1buwZVvpQpM=) 2: 6313E67C8D5711EFB5214A3AC4F9AE02.roa (hash: H9y99bkQAenZ+5dQW/QgFhQvNtXIL5GTmQ8MEBG2Zlw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:16:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 268 (0x10c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91188EE, serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360 Validity Not Before: Aug 23 05:16:54 2025 GMT Not After : Aug 30 05:16:54 2025 GMT Subject: CN=68a94ec6-909b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:55:d2:67:01:43:a4:f4:aa:8f:15:10:b3:e8: a7:21:42:46:96:f0:93:77:75:dc:84:89:d3:cb:bd: 11:49:78:a2:36:4e:71:51:6f:14:a2:9f:3a:a1:5f: 24:30:da:f6:8b:58:29:58:88:92:c0:29:f5:03:b1: 7c:08:5e:94:94:3c:5e:42:c5:ff:51:88:c7:82:a4: b8:a7:8c:5c:54:6e:3e:1b:d1:56:5b:f8:1f:d5:e0: 65:a4:24:81:40:62:74:c2:27:ea:36:b9:e4:ed:d3: 71:85:ac:13:4b:bd:ab:f5:62:95:ee:61:49:dc:68: 1d:42:af:7d:08:2f:8c:f8:b4:0e:f8:b1:a1:da:58: 77:a4:7f:7b:3d:f2:dc:3b:8b:fc:10:3c:dd:42:75: 8c:d9:10:74:f6:72:25:96:24:8f:bf:00:10:07:74: db:0e:91:54:ee:f8:0e:a8:92:4a:aa:45:9a:4f:98: fc:83:de:37:18:a5:7f:fe:0f:09:09:c6:63:14:c0: 57:09:f0:35:96:b1:09:e2:c2:d0:71:fe:7e:3d:e4: 39:64:7b:0e:df:6a:54:82:14:e8:0b:9d:c1:4f:1c: 66:b1:12:1a:99:3d:25:5f:b0:08:b7:82:a8:c3:38: 9a:ad:1e:cb:80:02:1b:cc:dd:7f:98:0b:4d:8a:12: 12:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D1:34:2D:C2:20:F6:38:3A:CE:7A:97:BF:99:ED:D3:D8:85:3A:89 X509v3 Authority Key Identifier: keyid:3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:82:a6:52:4f:53:6d:48:12:e3:88:78:54:9c:16:68:bb:32: 83:43:d6:40:80:4e:c2:9d:83:88:91:64:7d:17:2d:7d:e2:55: 5e:9a:0f:d3:51:ba:8b:e3:3b:82:9c:3a:66:f1:a6:a0:1d:3f: d8:52:fc:7e:20:b1:bf:98:ac:53:57:01:cf:ef:69:bd:01:89: 07:4c:6a:c0:66:fe:c9:72:16:86:b6:34:a5:a6:73:ef:40:f0: c6:e5:cd:92:b1:cf:3b:3b:3c:71:3a:67:0b:05:69:cc:99:59: 29:94:08:68:39:12:aa:d9:9f:ee:06:d9:94:85:49:8f:f4:c3: 30:3f:41:11:a5:d3:01:92:1b:1d:12:e9:37:90:53:5f:f5:70: cc:c3:49:6f:63:77:76:17:65:78:88:da:87:65:37:87:3a:3d: f5:15:cf:c1:4c:a1:60:8e:ac:c8:84:1f:e9:4a:47:62:40:54: 7a:12:e7:b9:60:b7:cd:eb:89:49:78:47:57:a4:d2:95:7a:51: d0:e9:77:85:77:5a:58:ba:3c:50:36:5f:99:ed:db:e2:5d:5c: 67:5f:0f:36:95:17:fa:6f:b1:c6:8a:9d:23:cd:4d:fc:ce:9e: 1a:f8:07:ca:11:c4:51:22:c7:31:be:b1:28:bf:96:08:58:d7: e8:19:6c:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg4RUUxMTAvBgNVBAUTKDNBRURBODA0MDdENzdCQjUyODQ4QUJEOUY3MjU5QkQ4 MDdBNUQzNjAwHhcNMjUwODIzMDUxNjU0WhcNMjUwODMwMDUxNjU0WjAYMRYwFAYD VQQDEw02OGE5NGVjNi05MDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyFXSZwFDpPSqjxUQs+inIUJGlvCTd3XchInTy70RSXiiNk5xUW8Uop86oV8k MNr2i1gpWIiSwCn1A7F8CF6UlDxeQsX/UYjHgqS4p4xcVG4+G9FWW/gf1eBlpCSB QGJ0wifqNrnk7dNxhawTS72r9WKV7mFJ3GgdQq99CC+M+LQO+LGh2lh3pH97PfLc O4v8EDzdQnWM2RB09nIlliSPvwAQB3TbDpFU7vgOqJJKqkWaT5j8g943GKV//g8J CcZjFMBXCfA1lrEJ4sLQcf5+PeQ5ZHsO32pUghToC53BTxxmsRIamT0lX7AIt4Ko wziarR7LgAIbzN1/mAtNihIS5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK/RNC3C IPY4Os56l7+Z7dPYhTqJMB8GA1UdIwQYMBaAFDrtqAQH13u1KEir2fclm9gHpdNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODhFRS8zMjA5NzMxQUZC QUYxMUVFQTZCQzM5NTJDNEY5QUUwMi9PdTJvQkFmWGU3VW9TS3ZaOXlXYjJBZWww MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL091Mm9CQWZYZTdVb1NLdlo5eVdiMkFlbDAyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODhFRS8zMjA5NzMxQUZCQUYxMUVFQTZCQzM5NTJDNEY5QUUwMi9PdTJvQkFmWGU3 VW9TS3ZaOXlXYjJBZWwwMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDgqZST1NtSBLjiHhUnBZouzKDQ9ZAgE7CnYOIkWR9Fy194lVemg/T UbqL4zuCnDpm8aagHT/YUvx+ILG/mKxTVwHP72m9AYkHTGrAZv7JchaGtjSlpnPv QPDG5c2Ssc87OzxxOmcLBWnMmVkplAhoORKq2Z/uBtmUhUmP9MMwP0ERpdMBkhsd Euk3kFNf9XDMw0lvY3d2F2V4iNqHZTeHOj31Fc/BTKFgjqzIhB/pSkdiQFR6Eue5 YLfN64lJeEdXpNKVelHQ6XeFd1pYujxQNl+Z7dviXVxnXw82lRf6b7HGip0jzU38 zp4a+AfKEcRRIscxvrEov5YIWNfoGWx+ -----END CERTIFICATE-----Generated at Sun Aug 24 06:44:12 2025 by rpki-client