$ rpki-client -vvf rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.mft File: OLX3py9k7NJYhfi0dYUC4j2oOLs.mft (raw, json) Hash identifier: y42mBDDjwZQ7JQWreIPa9YUeBC1hStgGjyeBVgn+TE4= Subject key identifier: 33:2E:34:CB:91:6D:65:3C:24:DC:7C:1A:36:E5:C1:D1:40:C4:82:B0 Authority key identifier: 38:B5:F7:A7:2F:64:EC:D2:58:85:F8:B4:75:85:02:E2:3D:A8:38:BB Certificate issuer: /CN=A912C039/serialNumber=38B5F7A72F64ECD25885F8B4758502E23DA838BB Certificate serial: 0A4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OLX3py9k7NJYhfi0dYUC4j2oOLs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.mft Manifest number: 0A39 Signing time: Fri 22 Aug 2025 19:54:50 +0000 Manifest this update: Fri 22 Aug 2025 19:54:49 +0000 Manifest next update: Fri 29 Aug 2025 19:54:49 +0000 Files and hashes: 1: OLX3py9k7NJYhfi0dYUC4j2oOLs.crl (hash: Tli0pSrh6/CJEuKrvuKxgicd2xavR4ZewAhDob83RJw=) 2: 2E53CDEC139C11EF8D2CFD84C4F9AE02.roa (hash: +OxVgsTFeHXtInD93OSVx4VoDwnGKpFnWPCaCB5ImQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.crl rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OLX3py9k7NJYhfi0dYUC4j2oOLs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2638 (0xa4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C039, serialNumber=38B5F7A72F64ECD25885F8B4758502E23DA838BB Validity Not Before: Aug 22 19:54:49 2025 GMT Not After : Aug 29 19:54:49 2025 GMT Subject: CN=68a8cb09-bf49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:38:71:91:1f:85:4a:d7:6b:86:9a:58:52:5a: 55:1c:ad:d1:a4:e4:42:6d:44:37:3d:f2:b1:4e:c3: 97:e7:a5:14:6c:11:ce:d4:81:ec:98:dd:5c:17:a3: 3e:d0:b8:f2:3d:c7:78:ba:aa:f8:40:e1:fe:cf:6b: 2f:77:1f:50:29:15:df:21:20:8f:4a:0b:76:83:f1: b8:71:72:cf:42:a4:97:bd:c8:a6:35:91:79:48:d8: 90:b9:71:60:b0:8c:32:91:5a:b0:e8:2b:f3:6f:a5: 6f:8c:73:ce:84:19:c9:86:d1:37:4b:54:6b:0b:65: 75:07:d1:47:25:33:3d:02:05:d3:c3:a6:d1:81:f1: 2e:ca:db:9b:3d:8e:01:e5:c4:2c:77:a0:91:e9:0c: 4b:07:b8:ba:cd:1a:94:92:94:e7:60:71:5d:06:06: 70:93:45:ff:2b:c1:6f:ea:56:1e:c1:bf:ea:d9:c0: 00:cf:b3:56:40:46:b7:41:8b:ee:59:70:3f:24:50: 05:92:de:4d:cc:26:f1:1f:c5:3c:78:8f:12:c8:95: 8c:87:6f:bb:13:d8:f4:18:ff:65:aa:d9:9e:36:4b: ab:ec:7f:4b:5b:0b:aa:5c:e6:d2:74:f2:8c:cc:ae: 8b:09:b2:e6:31:7f:d6:1e:84:6d:a8:a0:6c:6b:91: 27:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:2E:34:CB:91:6D:65:3C:24:DC:7C:1A:36:E5:C1:D1:40:C4:82:B0 X509v3 Authority Key Identifier: keyid:38:B5:F7:A7:2F:64:EC:D2:58:85:F8:B4:75:85:02:E2:3D:A8:38:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OLX3py9k7NJYhfi0dYUC4j2oOLs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:f1:18:12:19:30:ce:a5:ba:0b:de:06:a8:a4:6a:59:fc:3f: b0:a5:41:57:b1:b8:65:ca:4a:0b:d4:56:34:45:4a:d5:63:31: 69:1e:31:82:70:c7:da:cf:23:ae:c6:c3:8d:30:84:b6:99:8e: 1d:38:f0:f8:b0:68:a9:62:b1:6f:a0:29:3b:1d:36:fe:7f:b6: 2b:9d:20:c5:85:3d:b8:38:6c:15:14:14:48:30:13:f3:95:dd: 7a:5a:c1:6b:42:ad:85:58:86:36:f0:13:41:ef:83:99:1d:31: f0:f0:8c:ef:f4:41:94:20:43:1a:14:b5:49:ce:30:8c:3f:f1: 21:2e:56:82:5b:b5:32:3a:d3:76:41:fd:a6:39:d2:99:0f:a4: 78:e8:d1:7d:35:2f:10:8e:36:f5:bf:c1:4a:7b:e4:92:0c:53: a9:ca:9f:b0:57:72:f0:df:1b:7a:2d:a8:cc:5b:8b:60:37:81: f0:53:1f:f8:ea:5d:98:d8:24:c1:76:96:f4:5f:67:a5:a7:6d: 0e:e3:99:87:72:34:2f:52:01:65:79:9c:9b:cb:29:ab:e4:ab: 0e:89:7b:83:b2:20:86:bd:14:77:0b:b4:a8:69:da:e0:73:f6: 34:a1:a7:9b:ea:ec:44:d3:f6:77:ef:bc:7f:4c:02:2a:02:85: 32:ba:72:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMwMzkxMTAvBgNVBAUTKDM4QjVGN0E3MkY2NEVDRDI1ODg1RjhCNDc1ODUwMkUy M0RBODM4QkIwHhcNMjUwODIyMTk1NDQ5WhcNMjUwODI5MTk1NDQ5WjAYMRYwFAYD VQQDEw02OGE4Y2IwOS1iZjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ThxkR+FStdrhppYUlpVHK3RpORCbUQ3PfKxTsOX56UUbBHO1IHsmN1cF6M+ 0LjyPcd4uqr4QOH+z2svdx9QKRXfISCPSgt2g/G4cXLPQqSXvcimNZF5SNiQuXFg sIwykVqw6Cvzb6VvjHPOhBnJhtE3S1RrC2V1B9FHJTM9AgXTw6bRgfEuytubPY4B 5cQsd6CR6QxLB7i6zRqUkpTnYHFdBgZwk0X/K8Fv6lYewb/q2cAAz7NWQEa3QYvu WXA/JFAFkt5NzCbxH8U8eI8SyJWMh2+7E9j0GP9lqtmeNkur7H9LWwuqXObSdPKM zK6LCbLmMX/WHoRtqKBsa5En2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDMuNMuR bWU8JNx8GjblwdFAxIKwMB8GA1UdIwQYMBaAFDi196cvZOzSWIX4tHWFAuI9qDi7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzAzOS9DMjVEMDJGRTc4 OUQxMUVBQkRBNkYwNUZDNEY5QUUwMi9PTFgzcHk5azdOSlloZmkwZFlVQzRqMm9P THMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09MWDNweTlrN05KWWhmaTBkWVVDNGoyb09Mcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzAzOS9DMjVEMDJGRTc4OUQxMUVBQkRBNkYwNUZDNEY5QUUwMi9PTFgzcHk5azdO SlloZmkwZFlVQzRqMm9PTHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAY8RgSGTDOpboL3gaopGpZ/D+wpUFXsbhlykoL1FY0RUrVYzFpHjGC cMfazyOuxsONMIS2mY4dOPD4sGipYrFvoCk7HTb+f7YrnSDFhT24OGwVFBRIMBPz ld16WsFrQq2FWIY28BNB74OZHTHw8Izv9EGUIEMaFLVJzjCMP/EhLlaCW7UyOtN2 Qf2mOdKZD6R46NF9NS8Qjjb1v8FKe+SSDFOpyp+wV3Lw3xt6LajMW4tgN4HwUx/4 6l2Y2CTBdpb0X2elp20O45mHcjQvUgFleZybyymr5KsOiXuDsiCGvRR3C7Soadrg c/Y0oaeb6uxE0/Z377x/TAIqAoUyunJq -----END CERTIFICATE-----Generated at Sat Aug 23 22:34:56 2025 by rpki-client