$ rpki-client -vvf rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft File: OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft (raw, json) Hash identifier: iNP1vsYbLC1rK3pvJ7sefxFSxXrpFMK94rx6v2lkwG8= Subject key identifier: A0:78:17:9A:32:5A:A1:84:29:DD:C5:C9:46:47:87:D2:34:85:DD:63 Authority key identifier: 3A:5C:08:13:C0:FE:D0:A8:3B:3D:D0:1B:7A:5A:E1:A1:30:82:70:28 Certificate issuer: /CN=A91592B3/serialNumber=3A5C0813C0FED0A83B3DD01B7A5AE1A130827028 Certificate serial: 244C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft Manifest number: 2436 Signing time: Fri 22 Aug 2025 15:50:47 +0000 Manifest this update: Fri 22 Aug 2025 15:50:47 +0000 Manifest next update: Fri 29 Aug 2025 15:50:47 +0000 Files and hashes: 1: OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl (hash: O09K2PaXQh9A/WxKO9lrOViEPhnF2NwdPFVEVUq2yKk=) 2: 9876A6C025B211ECB5356475C4F9AE02.roa (hash: DNBT8zhDN25f9UDGQ5nfWBA6s2lB80HUpbXVqjHmAQM=) 3: D8D3FB6414F111F08EE5E32DC4F9AE02.roa (hash: tOvAiPhxRE202cumPZpJeSLK5i3uUM9dNppjhBHTGzA=) 4: 54EE8F7615FE11ECAF541012C4F9AE02.roa (hash: IA4iHCGoqRIo6kbssAA01N8/wPFo68lHVDwSEc9PASs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:50:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9292 (0x244c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91592B3, serialNumber=3A5C0813C0FED0A83B3DD01B7A5AE1A130827028 Validity Not Before: Aug 22 15:50:47 2025 GMT Not After : Aug 29 15:50:47 2025 GMT Subject: CN=68a891d7-cb91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f0:73:4e:09:99:96:e1:29:00:61:af:14:7c: 76:5f:0c:26:20:56:bf:12:a1:c2:53:21:fb:e5:6f: f8:13:d1:76:76:81:67:6e:e8:18:c1:c7:96:a1:c8: 4b:bb:2b:fc:27:5d:59:e2:26:43:98:44:80:88:09: 9d:d9:87:5f:93:ad:48:d8:65:ca:8b:54:e3:b4:5a: d3:91:b3:f5:1e:05:8a:b3:be:bc:75:02:71:e2:df: bf:ab:76:aa:45:d3:f8:bc:94:78:3b:d9:cd:6c:02: 19:23:ce:ef:b7:16:3d:1e:b7:6b:b0:00:1e:18:07: 93:de:da:52:d0:79:a5:ad:7a:91:0b:ee:75:ae:1e: a2:c2:89:6c:7f:a7:b4:b0:93:03:80:96:0a:15:ba: f6:fe:23:03:66:2d:2e:c3:66:80:b9:eb:1b:4c:fb: 37:4b:14:61:25:86:0e:9f:61:f2:14:d5:36:09:88: 74:65:6f:aa:01:9c:40:95:0c:96:68:de:da:0f:1e: bb:9f:4a:3b:45:b0:32:62:2e:1a:16:33:fd:31:c7: 1d:87:03:36:70:dc:05:82:b6:67:7c:34:c9:ca:77: 01:56:2f:d1:96:40:3d:82:54:30:e3:40:85:77:2d: 0f:f8:19:8e:50:10:45:84:1f:41:38:39:68:aa:4a: 7e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:78:17:9A:32:5A:A1:84:29:DD:C5:C9:46:47:87:D2:34:85:DD:63 X509v3 Authority Key Identifier: keyid:3A:5C:08:13:C0:FE:D0:A8:3B:3D:D0:1B:7A:5A:E1:A1:30:82:70:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:af:5e:6d:71:dc:f7:75:70:fe:af:d4:05:6d:23:f1:b2:08: c3:08:e0:8e:ec:e8:69:ef:c7:74:bd:51:bb:74:66:f8:22:6f: ea:52:89:b3:dd:18:35:76:64:ec:1f:cb:12:22:9c:07:6b:d7: 33:e1:4e:80:65:30:ad:06:d2:46:bc:e4:40:69:5f:48:74:68: 3e:e4:30:90:82:e4:60:0e:ea:64:81:2a:f4:41:92:53:9f:90: 13:47:54:b3:8e:f7:cd:b8:70:0c:56:c9:26:53:5c:64:98:54: 28:49:22:1c:da:7c:cb:7f:6e:50:f9:9c:cc:e0:c1:7b:c0:18: 08:c9:3e:b1:d9:46:3a:35:c9:85:9a:a1:9d:f5:41:1c:e7:65: 08:3f:e7:1d:a1:de:c6:8d:95:aa:3a:b7:a2:81:be:b2:9a:81: a3:08:ec:33:26:ae:b6:23:71:bb:62:25:36:d8:da:8e:16:de: 37:06:4f:38:70:ea:e3:ef:1b:ab:e1:a5:2b:1b:74:18:f9:d4: ca:f0:52:db:46:63:87:c3:b1:51:d7:fb:02:d0:89:29:66:1a: 5f:14:8e:c8:d0:80:a4:d1:c8:d8:90:6f:7c:b2:6f:a9:d0:70: f7:d1:a6:30:29:a0:d3:31:1c:c3:22:9c:68:bb:1a:4e:f0:c2: 34:e4:51:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkyQjMxMTAvBgNVBAUTKDNBNUMwODEzQzBGRUQwQTgzQjNERDAxQjdBNUFFMUEx MzA4MjcwMjgwHhcNMjUwODIyMTU1MDQ3WhcNMjUwODI5MTU1MDQ3WjAYMRYwFAYD VQQDEw02OGE4OTFkNy1jYjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxPBzTgmZluEpAGGvFHx2XwwmIFa/EqHCUyH75W/4E9F2doFnbugYwceWochL uyv8J11Z4iZDmESAiAmd2Ydfk61I2GXKi1TjtFrTkbP1HgWKs768dQJx4t+/q3aq RdP4vJR4O9nNbAIZI87vtxY9HrdrsAAeGAeT3tpS0HmlrXqRC+51rh6iwolsf6e0 sJMDgJYKFbr2/iMDZi0uw2aAuesbTPs3SxRhJYYOn2HyFNU2CYh0ZW+qAZxAlQyW aN7aDx67n0o7RbAyYi4aFjP9MccdhwM2cNwFgrZnfDTJyncBVi/RlkA9glQw40CF dy0P+BmOUBBFhB9BODloqkp+IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKB4F5oy WqGEKd3FyUZHh9I0hd1jMB8GA1UdIwQYMBaAFDpcCBPA/tCoOz3QG3pa4aEwgnAo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTJCMy84OTE3RkIyQTVE MEUxMUU1QjNCRUFENTdDNEY5QUUwMi9PbHdJRThELTBLZzdQZEFiZWxyaG9UQ0Nj Q2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09sd0lFOEQtMEtnN1BkQWJlbHJob1RDQ2NDZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTJCMy84OTE3RkIyQTVEMEUxMUU1QjNCRUFENTdDNEY5QUUwMi9PbHdJRThELTBL ZzdQZEFiZWxyaG9UQ0NjQ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpr15tcdz3dXD+r9QFbSPxsgjDCOCO7Ohp78d0vVG7dGb4Im/qUomz 3Rg1dmTsH8sSIpwHa9cz4U6AZTCtBtJGvORAaV9IdGg+5DCQguRgDupkgSr0QZJT n5ATR1SzjvfNuHAMVskmU1xkmFQoSSIc2nzLf25Q+ZzM4MF7wBgIyT6x2UY6NcmF mqGd9UEc52UIP+cdod7GjZWqOreigb6ymoGjCOwzJq62I3G7YiU22NqOFt43Bk84 cOrj7xur4aUrG3QY+dTK8FLbRmOHw7FR1/sC0IkpZhpfFI7I0ICk0cjYkG98sm+p 0HD30aYwKaDTMRzDIpxouxpO8MI05FGb -----END CERTIFICATE-----Generated at Sat Aug 23 10:54:44 2025 by rpki-client