$ rpki-client -vvf rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft File: O2jmA9GPVutmXvcukmQF8MEL4-c.mft (raw, json) Hash identifier: Q88iPE62QP1VwBdqSN2jenLhP2hTC4fbtSDaB3KBW2Q= Subject key identifier: 15:F3:16:EB:6E:1D:C7:85:19:E9:32:DD:2F:B3:69:1E:E3:8D:EF:49 Authority key identifier: 3B:68:E6:03:D1:8F:56:EB:66:5E:F7:2E:92:64:05:F0:C1:0B:E3:E7 Certificate issuer: /CN=A912D1D1/serialNumber=3B68E603D18F56EB665EF72E926405F0C10BE3E7 Certificate serial: 08AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft Manifest number: 08A6 Signing time: Fri 22 Aug 2025 20:39:51 +0000 Manifest this update: Fri 22 Aug 2025 20:39:50 +0000 Manifest next update: Fri 29 Aug 2025 20:39:50 +0000 Files and hashes: 1: O2jmA9GPVutmXvcukmQF8MEL4-c.crl (hash: opXOEZlZND8D5AJPoUHp9fIUzSpBS71YwuWfjSsAu3g=) 2: 30CB037EC18E11EA8BF4FB68C4F9AE02.roa (hash: HuFcFo9LZ7JGKc3MlbHoCX/MB3ZM5ld8AKunwUGftyc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.crl rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:39:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2221 (0x8ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D1D1, serialNumber=3B68E603D18F56EB665EF72E926405F0C10BE3E7 Validity Not Before: Aug 22 20:39:50 2025 GMT Not After : Aug 29 20:39:50 2025 GMT Subject: CN=68a8d596-1c3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:24:aa:9b:38:da:eb:fa:15:78:69:f5:66:b9: 77:8c:4d:66:40:94:84:5e:c6:e6:72:38:1d:2c:24: b6:52:93:76:47:1e:0e:d8:1a:3c:26:e8:76:38:d3: 60:31:b8:ca:7f:9c:1b:13:d6:14:f2:ef:f3:03:68: d7:69:66:d6:a6:8a:ea:44:45:fd:e8:77:22:33:84: db:23:a0:f3:07:5e:47:6f:1f:66:eb:fa:c0:c5:e6: a5:b2:5e:8d:1d:79:32:1c:75:c2:cd:1f:11:18:56: 81:d6:e1:b2:fa:20:6c:98:8c:b8:1b:3f:dc:88:d4: e4:90:9b:39:98:8b:03:14:e7:1c:24:64:1e:04:d3: 1a:48:12:67:23:85:74:53:0c:e7:85:b0:49:90:33: 38:12:08:c7:a8:d1:03:9c:05:ac:26:09:38:b3:de: 6e:e0:60:84:61:dd:3a:86:c1:e4:c9:03:39:f0:57: 9e:cc:78:90:78:57:3c:69:c8:2c:68:76:6a:df:2e: 4a:21:eb:7d:52:ac:ca:42:0b:68:bd:94:de:4b:7f: 92:19:85:9c:0d:15:71:9d:d8:73:49:c4:6b:2b:b0: 8e:84:94:0d:f8:e0:05:4f:89:9c:9c:c4:37:2e:d6: 26:90:eb:62:31:36:65:f4:6f:91:a6:f3:80:65:39: 41:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:F3:16:EB:6E:1D:C7:85:19:E9:32:DD:2F:B3:69:1E:E3:8D:EF:49 X509v3 Authority Key Identifier: keyid:3B:68:E6:03:D1:8F:56:EB:66:5E:F7:2E:92:64:05:F0:C1:0B:E3:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:15:a3:f1:a4:e2:d9:77:fe:47:1f:34:33:e3:ca:d7:25:2c: 45:28:de:de:c1:88:d9:c0:a5:a3:87:87:ad:3b:97:69:ac:7d: 9c:0e:dc:86:08:bd:21:69:4d:39:e8:db:7d:a1:e9:02:0f:45: 1c:2a:c1:82:16:dd:3a:26:11:c9:b5:bc:cc:48:c1:cd:9c:6d: 58:24:5b:05:28:c5:f3:73:06:81:d6:25:7d:78:49:9a:5a:8f: 01:72:f5:83:93:43:b4:05:ca:3c:49:42:9b:2b:3c:d5:67:9f: 04:a6:65:19:3b:f3:9d:c1:e6:c6:61:dd:2f:64:ad:22:4e:4c: 1c:08:72:13:35:61:1a:76:7e:7f:ed:46:e8:92:d5:ea:b2:46: 18:e1:01:69:30:e2:bc:46:31:c1:b9:c9:74:38:1c:2b:21:80: 1b:0c:30:54:49:ea:ce:cb:cf:8e:22:42:95:20:41:9e:3d:c9: 18:c1:78:2f:84:a0:bc:5e:4d:1c:78:27:bd:c8:b2:80:b6:e1: 28:01:a2:a8:48:01:bc:9a:2e:d3:29:84:f5:df:5f:32:31:f4: 64:dc:8c:9c:7d:5d:1f:44:cd:38:0a:4b:7a:b2:85:2d:75:3b: 8d:55:f2:55:ab:f4:15:59:80:f7:82:74:87:28:06:d1:72:b3: 81:b8:32:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQxRDExMTAvBgNVBAUTKDNCNjhFNjAzRDE4RjU2RUI2NjVFRjcyRTkyNjQwNUYw QzEwQkUzRTcwHhcNMjUwODIyMjAzOTUwWhcNMjUwODI5MjAzOTUwWjAYMRYwFAYD VQQDEw02OGE4ZDU5Ni0xYzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApiSqmzja6/oVeGn1Zrl3jE1mQJSEXsbmcjgdLCS2UpN2Rx4O2Bo8Juh2ONNg MbjKf5wbE9YU8u/zA2jXaWbWporqREX96HciM4TbI6DzB15Hbx9m6/rAxealsl6N HXkyHHXCzR8RGFaB1uGy+iBsmIy4Gz/ciNTkkJs5mIsDFOccJGQeBNMaSBJnI4V0 UwznhbBJkDM4EgjHqNEDnAWsJgk4s95u4GCEYd06hsHkyQM58FeezHiQeFc8acgs aHZq3y5KIet9UqzKQgtovZTeS3+SGYWcDRVxndhzScRrK7COhJQN+OAFT4mcnMQ3 LtYmkOtiMTZl9G+RpvOAZTlBFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBXzFutu HceFGeky3S+zaR7jje9JMB8GA1UdIwQYMBaAFDto5gPRj1brZl73LpJkBfDBC+Pn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDFEMS9DMTYwMDZGQ0Mx OEMxMUVBOEYzNjQxNjZDNEY5QUUwMi9PMmptQTlHUFZ1dG1YdmN1a21RRjhNRUw0 LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL08yam1BOUdQVnV0bVh2Y3VrbVFGOE1FTDQtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDFEMS9DMTYwMDZGQ0MxOEMxMUVBOEYzNjQxNjZDNEY5QUUwMi9PMmptQTlHUFZ1 dG1YdmN1a21RRjhNRUw0LWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwFaPxpOLZd/5HHzQz48rXJSxFKN7ewYjZwKWjh4etO5dprH2cDtyG CL0haU056Nt9oekCD0UcKsGCFt06JhHJtbzMSMHNnG1YJFsFKMXzcwaB1iV9eEma Wo8BcvWDk0O0Bco8SUKbKzzVZ58EpmUZO/OdwebGYd0vZK0iTkwcCHITNWEadn5/ 7UboktXqskYY4QFpMOK8RjHBucl0OBwrIYAbDDBUSerOy8+OIkKVIEGePckYwXgv hKC8Xk0ceCe9yLKAtuEoAaKoSAG8mi7TKYT1318yMfRk3IycfV0fRM04Ckt6soUt dTuNVfJVq/QVWYD3gnSHKAbRcrOBuDJm -----END CERTIFICATE-----Generated at Sun Aug 24 06:06:35 2025 by rpki-client