$ rpki-client -vvf rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft File: OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft (raw, json) Hash identifier: fXsL/bbmsJ+zLeIpfesR/npiilG7IdLFza6/TCwzTHg= Subject key identifier: 1F:40:11:92:AB:B9:24:DA:BB:F9:2B:E3:AE:23:CC:B5:93:76:26:16 Authority key identifier: 39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38 Certificate issuer: /CN=A91613AB/serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838 Certificate serial: 0216 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft Manifest number: 020A Signing time: Sat 23 Aug 2025 02:28:23 +0000 Manifest this update: Sat 23 Aug 2025 02:28:22 +0000 Manifest next update: Sat 30 Aug 2025 02:28:22 +0000 Files and hashes: 1: OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl (hash: 0jY0a1Cp0ReUaQjOF3uglwSd/IMzy0q3ww4rXBUwwWU=) 2: 65AFE18C91DB11EFBC4C2A3EC4F9AE02.roa (hash: LqvEH1o9qv1Spv16C52zEqgMsWnx5LeCvM7wNncYwmQ=) 3: A50FD050DA7911EDB0D3866BC4F9AE02.roa (hash: sq3CtUxJWk/lwN1trxwIddBHXPOdGnUuNzRlPvsNflY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:28:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 534 (0x216) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91613AB, serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838 Validity Not Before: Aug 23 02:28:22 2025 GMT Not After : Aug 30 02:28:22 2025 GMT Subject: CN=68a92746-acf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e7:9c:d5:5b:cd:7b:8a:59:f4:2d:59:94:fd: 99:74:ee:0b:a7:51:ba:37:16:34:a9:41:ba:fa:5c: db:45:10:da:be:b0:13:1b:4b:f8:ec:8f:64:cc:96: 25:82:5c:2c:a0:e1:4a:6b:6d:49:66:67:68:77:12: e3:a5:b4:96:7e:10:1d:52:f1:53:0f:0c:59:35:19: cc:65:84:3e:71:1e:97:8b:aa:a8:df:7e:ea:eb:85: e7:bd:96:61:bf:10:57:6c:7e:f0:bb:48:61:0b:7f: 34:30:4e:f1:5f:16:d4:b5:a4:c4:dd:6f:13:5a:14: fe:58:aa:24:43:d3:5e:be:2d:11:50:44:f4:48:ef: db:cf:c0:16:87:40:ff:ec:25:c7:62:7c:e7:75:c6: 6e:0e:c8:ec:6b:40:43:cb:c3:67:76:44:9b:50:fa: 87:62:34:95:2a:25:f5:26:87:62:43:19:f2:62:2c: 2e:aa:0b:26:88:84:4a:c0:2f:e6:00:ae:a4:03:b6: a4:d4:45:db:1a:09:a9:d4:0f:ec:c6:81:fe:49:bb: 76:6d:98:ba:97:c0:61:25:22:97:66:c9:b3:84:2c: 15:1e:3a:e1:41:b9:8b:21:6b:0b:2a:07:d2:cb:e5: 47:be:58:be:e0:93:86:75:3d:51:8f:b3:d9:76:e0: bc:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:40:11:92:AB:B9:24:DA:BB:F9:2B:E3:AE:23:CC:B5:93:76:26:16 X509v3 Authority Key Identifier: keyid:39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:b8:8f:e0:cd:37:5a:da:a2:83:4c:e2:19:0e:97:8a:46:60: 6b:3c:40:b9:5a:e2:ce:34:52:0a:5f:51:33:4e:ac:4b:b3:e9: ef:1d:90:52:c0:34:58:1d:82:e8:dc:61:32:71:bc:c3:6e:75: 17:8b:e2:5e:63:ca:02:96:d4:fc:5c:ad:b9:fe:e6:db:bd:a9: 4b:89:11:e8:29:ba:d5:c3:89:2e:ff:98:c0:08:26:15:2d:5f: fe:5e:7f:57:b7:73:65:29:61:86:3c:0c:46:58:9f:45:8f:a4: 80:33:68:bb:ca:79:16:db:d6:2f:70:e4:25:60:35:c8:ba:61: 7e:c9:e3:bc:14:0b:86:ac:a2:c6:49:33:20:2a:d3:b7:1d:73: 2e:12:8d:6b:f2:d9:e3:88:39:22:c2:9c:d0:62:27:44:c7:fd: 15:d8:f7:34:de:ac:62:fd:8b:47:80:f6:3e:dd:24:08:27:70: 7c:db:56:7e:fa:66:a3:b7:37:e2:28:03:33:a8:49:11:69:4c: 4f:c8:8a:5f:cc:36:8b:a6:e9:39:c2:81:14:10:24:7f:a9:f0: 36:5c:31:d4:e2:d3:a1:54:2d:41:6c:26:a8:cb:7d:66:f1:da: 99:44:ab:4d:e7:4d:80:da:9a:dd:f1:32:ed:8b:5d:65:6a:54: 20:8d:ca:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEzQUIxMTAvBgNVBAUTKDM5MDFBRjRBOTNGRUZBQUVCODc5Q0M5RjU5OTRFNEU3 RjAxQUY4MzgwHhcNMjUwODIzMDIyODIyWhcNMjUwODMwMDIyODIyWjAYMRYwFAYD VQQDEw02OGE5Mjc0Ni1hY2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Oec1VvNe4pZ9C1ZlP2ZdO4Lp1G6NxY0qUG6+lzbRRDavrATG0v47I9kzJYl glwsoOFKa21JZmdodxLjpbSWfhAdUvFTDwxZNRnMZYQ+cR6Xi6qo337q64XnvZZh vxBXbH7wu0hhC380ME7xXxbUtaTE3W8TWhT+WKokQ9Nevi0RUET0SO/bz8AWh0D/ 7CXHYnzndcZuDsjsa0BDy8NndkSbUPqHYjSVKiX1JodiQxnyYiwuqgsmiIRKwC/m AK6kA7ak1EXbGgmp1A/sxoH+Sbt2bZi6l8BhJSKXZsmzhCwVHjrhQbmLIWsLKgfS y+VHvli+4JOGdT1Rj7PZduC8IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB9AEZKr uSTau/kr464jzLWTdiYWMB8GA1UdIwQYMBaAFDkBr0qT/vquuHnMn1mU5OfwGvg4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTNBQi85Q0Y3RUNEQTZG OEIxMUVEOEZBRTNDMTFDNEY5QUUwMi9PUUd2U3BQLS1xNjRlY3lmV1pUazVfQWEt RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09RR3ZTcFAtLXE2NGVjeWZXWlRrNV9BYS1EZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTNBQi85Q0Y3RUNEQTZGOEIxMUVEOEZBRTNDMTFDNEY5QUUwMi9PUUd2U3BQLS1x NjRlY3lmV1pUazVfQWEtRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAauI/gzTda2qKDTOIZDpeKRmBrPEC5WuLONFIKX1EzTqxLs+nvHZBS wDRYHYLo3GEycbzDbnUXi+JeY8oCltT8XK25/ubbvalLiRHoKbrVw4ku/5jACCYV LV/+Xn9Xt3NlKWGGPAxGWJ9Fj6SAM2i7ynkW29YvcOQlYDXIumF+yeO8FAuGrKLG STMgKtO3HXMuEo1r8tnjiDkiwpzQYidEx/0V2Pc03qxi/YtHgPY+3SQIJ3B821Z+ +majtzfiKAMzqEkRaUxPyIpfzDaLpuk5woEUECR/qfA2XDHU4tOhVC1BbCaoy31m 8dqZRKtN502A2prd8TLti11lalQgjcrW -----END CERTIFICATE-----Generated at Sat Aug 23 18:38:13 2025 by rpki-client