$ rpki-client -vvf rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft File: rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft (raw, json) Hash identifier: VdfOOywW3XBamvL85X/spwPPsbhaGpVkv0tjUm5DU5E= Subject key identifier: 11:88:C3:44:00:85:B2:F0:46:9E:53:61:A5:7D:00:8D:AA:98:3F:4A Authority key identifier: AC:E2:C4:CC:B0:89:D2:1B:37:04:54:B0:0E:6B:59:3A:F2:88:62:F6 Certificate issuer: /CN=A91702B9/serialNumber=ACE2C4CCB089D21B370454B00E6B593AF28862F6 Certificate serial: 0367 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft Manifest number: 035E Signing time: Sat 23 Aug 2025 01:13:21 +0000 Manifest this update: Sat 23 Aug 2025 01:13:21 +0000 Manifest next update: Sat 30 Aug 2025 01:13:21 +0000 Files and hashes: 1: rOLEzLCJ0hs3BFSwDmtZOvKIYvY.crl (hash: 6Ga6KTNQYj1+v04SbnwjBZDCbe3duy5jmpmN/JPhSfY=) 2: FC159BECF4D911EFB4F5FC16C4F9AE02.roa (hash: SFUw1crOwEdM2KZGmzmI0Y/ekMkiUyOErHqNpQ3ZimY=) 3: A047A07AD56811EFB57A5D33C4F9AE02.roa (hash: hW5FiSV5239AbImQE/mYJwi40OATdFzGCdVUMZFhemo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.crl rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:13:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 871 (0x367) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91702B9, serialNumber=ACE2C4CCB089D21B370454B00E6B593AF28862F6 Validity Not Before: Aug 23 01:13:21 2025 GMT Not After : Aug 30 01:13:21 2025 GMT Subject: CN=68a915b1-6e96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b2:3c:b8:d1:58:3b:3c:37:38:4e:17:0d:f0: 38:06:21:86:07:82:4a:ea:4b:d7:0d:28:18:ed:11: c3:a5:4c:d3:81:0d:d8:bc:d3:d9:ae:64:b2:ab:d5: ac:61:88:8a:06:14:d4:4e:af:19:40:9e:e0:78:ba: e6:86:f6:27:c7:a1:b0:7a:fe:7a:67:43:2c:48:68: b8:23:2f:e7:7c:4c:9c:87:b0:76:98:cd:00:0f:d7: 2d:b8:66:bf:3b:a9:b3:31:8b:4a:e1:29:79:34:85: f0:6b:db:d9:85:de:cb:06:0a:5a:f4:e8:26:40:38: a6:0f:6a:fe:4b:e0:5e:c6:c5:2c:b3:b1:c9:eb:b2: 7f:b3:4b:0f:ce:25:75:55:a1:51:54:34:ad:25:21: 68:b8:6d:c4:fc:83:7d:7f:77:b1:c0:53:25:a8:a3: 2d:46:6f:21:fe:d0:0e:32:ee:7e:af:bb:1f:f6:5f: 84:50:fc:c6:43:12:b9:6f:04:7f:c7:60:34:8e:56: 0c:59:89:20:ca:e8:bb:8d:30:b2:2c:0d:6c:c5:35: 19:85:76:35:de:a8:26:19:14:ab:94:27:db:d7:dc: c5:f1:1b:8d:b5:6d:32:ce:18:f2:fe:5c:3c:53:ef: 14:8a:57:9d:84:81:05:bb:4b:81:97:be:ce:cc:78: ec:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:88:C3:44:00:85:B2:F0:46:9E:53:61:A5:7D:00:8D:AA:98:3F:4A X509v3 Authority Key Identifier: keyid:AC:E2:C4:CC:B0:89:D2:1B:37:04:54:B0:0E:6B:59:3A:F2:88:62:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:8c:a4:79:31:68:26:f5:39:1e:f4:77:79:d7:77:f6:a2:81: 2d:05:14:71:97:3e:44:c4:1a:36:69:64:87:b6:74:4b:0f:19: ab:c1:6c:7e:4a:d0:56:be:64:ca:71:fd:a7:38:86:66:ad:34: 29:a4:50:e9:20:49:7f:39:d9:1f:82:eb:28:aa:61:a5:27:e2: 9b:b6:64:34:d1:e3:19:11:07:da:5b:eb:20:54:1d:f4:97:74: 2c:26:16:53:cc:6e:c0:21:3e:0a:66:75:e9:97:9a:9f:f3:20: a5:b2:6d:67:71:07:7d:1a:08:5c:b6:2b:4c:67:26:53:ad:29: 96:69:2a:70:6c:66:ab:53:fe:93:3b:ef:c4:ad:eb:d8:81:f6: d4:04:bb:2d:c0:f0:d9:8e:41:17:ed:30:c7:8c:3f:8d:e0:18: e0:5c:dc:0f:87:67:0a:70:74:42:39:0e:2a:12:30:02:30:3f: 87:65:bd:60:f8:a0:64:a2:6f:df:52:68:3b:8c:ae:37:96:20: a8:5d:39:3e:62:21:62:81:2f:fa:5d:16:f9:3e:ec:ae:7e:28: 3f:a2:29:a2:b6:98:21:be:b8:57:68:66:4c:20:b3:90:71:85: bf:26:4e:32:3a:8e:42:63:0d:27:9a:dd:80:75:28:51:e9:75: 4f:73:66:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAyQjkxMTAvBgNVBAUTKEFDRTJDNENDQjA4OUQyMUIzNzA0NTRCMDBFNkI1OTNB RjI4ODYyRjYwHhcNMjUwODIzMDExMzIxWhcNMjUwODMwMDExMzIxWjAYMRYwFAYD VQQDEw02OGE5MTViMS02ZTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApbI8uNFYOzw3OE4XDfA4BiGGB4JK6kvXDSgY7RHDpUzTgQ3YvNPZrmSyq9Ws YYiKBhTUTq8ZQJ7geLrmhvYnx6Gwev56Z0MsSGi4Iy/nfEych7B2mM0AD9ctuGa/ O6mzMYtK4Sl5NIXwa9vZhd7LBgpa9OgmQDimD2r+S+BexsUss7HJ67J/s0sPziV1 VaFRVDStJSFouG3E/IN9f3exwFMlqKMtRm8h/tAOMu5+r7sf9l+EUPzGQxK5bwR/ x2A0jlYMWYkgyui7jTCyLA1sxTUZhXY13qgmGRSrlCfb19zF8RuNtW0yzhjy/lw8 U+8UiledhIEFu0uBl77OzHjsKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBGIw0QA hbLwRp5TYaV9AI2qmD9KMB8GA1UdIwQYMBaAFKzixMywidIbNwRUsA5rWTryiGL2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDJCOS8zQjcyRUU5MEM2 MDUxMUVDQUI3NEQ5NjJDNEY5QUUwMi9yT0xFekxDSjBoczNCRlN3RG10Wk92S0lZ dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JPTEV6TENKMGhzM0JGU3dEbXRaT3ZLSVl2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDJCOS8zQjcyRUU5MEM2MDUxMUVDQUI3NEQ5NjJDNEY5QUUwMi9yT0xFekxDSjBo czNCRlN3RG10Wk92S0lZdlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxjKR5MWgm9Tke9Hd513f2ooEtBRRxlz5ExBo2aWSHtnRLDxmrwWx+ StBWvmTKcf2nOIZmrTQppFDpIEl/OdkfgusoqmGlJ+KbtmQ00eMZEQfaW+sgVB30 l3QsJhZTzG7AIT4KZnXpl5qf8yClsm1ncQd9GghctitMZyZTrSmWaSpwbGarU/6T O+/ErevYgfbUBLstwPDZjkEX7TDHjD+N4BjgXNwPh2cKcHRCOQ4qEjACMD+HZb1g +KBkom/fUmg7jK43liCoXTk+YiFigS/6XRb5Puyufig/oimitpghvrhXaGZMILOQ cYW/Jk4yOo5CYw0nmt2AdShR6XVPc2YP -----END CERTIFICATE-----Generated at Sat Aug 23 19:35:16 2025 by rpki-client