$ rpki-client -vvf rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.mft File: 9ouGJos33oELlo2481f3c-mDv20.mft (raw, json) Hash identifier: lVFa0c5aAtHGhl9TRghIVdgT1Xo7ATIlpj+hgXjkc6Q= Subject key identifier: B4:91:73:05:AE:2F:B5:29:F7:15:B8:24:1C:98:17:68:E9:86:B2:32 Authority key identifier: F6:8B:86:26:8B:37:DE:81:0B:96:8D:B8:F3:57:F7:73:E9:83:BF:6D Certificate issuer: /CN=A91755F6/serialNumber=F68B86268B37DE810B968DB8F357F773E983BF6D Certificate serial: 0AB2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ouGJos33oELlo2481f3c-mDv20.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.mft Manifest number: 0AA2 Signing time: Fri 22 Aug 2025 19:40:24 +0000 Manifest this update: Fri 22 Aug 2025 19:40:23 +0000 Manifest next update: Fri 29 Aug 2025 19:40:23 +0000 Files and hashes: 1: 9ouGJos33oELlo2481f3c-mDv20.crl (hash: KB5lzzWw5vwEgPSEXLkIrba5bQhLgLcy4hcQPpFhboM=) 2: B47A0CDA660F11EB8A1DB351C4F9AE02.roa (hash: hPcGjX6pod1mQjVuO2fta8f52KKrIcQ5XI+2+yM8wXY=) 3: B5A31A8E660F11EB8A1DB351C4F9AE02.roa (hash: FEaiMi5+ZViFMZcOI+52QVvWi5kkjXKoDrc8FS7/m2Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.crl rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ouGJos33oELlo2481f3c-mDv20.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:40:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2738 (0xab2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91755F6, serialNumber=F68B86268B37DE810B968DB8F357F773E983BF6D Validity Not Before: Aug 22 19:40:23 2025 GMT Not After : Aug 29 19:40:23 2025 GMT Subject: CN=68a8c7a8-46f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:13:26:dc:7b:eb:f8:96:90:d6:7a:c3:95:f7: 70:f5:31:34:a8:c1:eb:14:b5:32:b9:fc:ca:6b:57: 78:24:c5:9a:18:48:25:d3:2d:4b:0e:76:c3:17:dd: ed:a3:b0:34:1d:09:ad:a0:f2:6d:31:81:5b:3a:d1: 5a:fc:d2:31:c8:6d:2d:dc:09:8e:5b:d2:da:f4:4f: 7f:da:90:66:e3:a6:f5:de:18:e1:78:21:3e:65:f1: 50:8a:bf:35:0f:0d:66:ff:43:b3:b5:66:2c:bf:d0: 5b:01:26:02:9a:81:3b:06:32:49:29:f9:d0:d2:e4: 43:2f:61:73:f5:27:16:2d:2b:36:36:de:e7:f7:5f: 5f:39:db:f8:25:9d:6b:85:59:d4:3f:a4:6a:b9:e7: 4a:55:d6:9c:a8:57:b9:c2:0e:70:33:cf:cc:27:02: 68:61:cc:17:9d:9b:7e:75:28:08:2a:fe:9b:ae:eb: 87:14:18:aa:ff:4b:3d:f4:cf:d2:d4:3a:23:1d:6f: da:a8:0f:b9:1a:c7:32:e0:f6:8c:5f:63:20:a6:e3: fe:22:3a:02:f6:3e:d7:a3:85:ed:d7:f9:67:61:9a: 7f:a2:d6:00:cd:87:47:d4:07:7c:4e:f4:85:bd:70: e9:0a:5d:ee:bb:24:95:8e:4b:0f:e3:a1:6b:c8:2b: c6:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:91:73:05:AE:2F:B5:29:F7:15:B8:24:1C:98:17:68:E9:86:B2:32 X509v3 Authority Key Identifier: keyid:F6:8B:86:26:8B:37:DE:81:0B:96:8D:B8:F3:57:F7:73:E9:83:BF:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ouGJos33oELlo2481f3c-mDv20.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:26:5e:56:9e:85:dc:07:0b:ed:a1:a4:71:ac:96:70:73:13: de:2a:bb:75:d2:b5:c6:4e:87:56:c1:54:67:af:75:af:7d:d0: 3b:de:94:5e:a2:49:97:6b:37:80:d7:77:d5:61:1e:0e:d6:25: db:1f:5a:dc:c0:a1:73:39:85:cd:ce:10:c1:d3:81:fc:41:a6: 87:0c:84:ed:0f:02:1c:6c:13:93:95:54:12:29:35:6e:21:58: 00:b5:36:45:ad:cb:16:5b:84:7b:70:da:c0:0b:35:2c:53:6a: d2:7e:c4:39:b9:d5:d9:5a:af:84:50:52:2d:2c:32:15:a3:ac: 49:2b:eb:b0:1e:6c:9f:f0:29:4d:0d:b1:8d:02:8c:4e:78:a5: 6f:8b:dc:d0:51:8b:dd:b7:12:15:05:fe:79:04:71:4a:90:23: 11:36:20:ed:3b:4c:5b:a6:a8:46:bd:cb:ac:9f:e9:d9:08:48: 15:67:31:e4:c3:d7:1d:f4:56:20:e1:e5:7a:76:5f:12:e0:58: 20:a9:50:62:2d:76:7e:b3:c8:2c:61:37:3f:39:b3:81:fc:19: ff:f7:82:75:0a:08:07:05:2a:01:ba:95:a6:ba:8e:b7:79:b0: 2a:60:dc:bd:2e:49:69:69:29:bd:2f:42:bb:9d:68:90:8d:9a: 2a:2d:08:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU1RjYxMTAvBgNVBAUTKEY2OEI4NjI2OEIzN0RFODEwQjk2OERCOEYzNTdGNzcz RTk4M0JGNkQwHhcNMjUwODIyMTk0MDIzWhcNMjUwODI5MTk0MDIzWjAYMRYwFAYD VQQDEw02OGE4YzdhOC00NmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvhMm3Hvr+JaQ1nrDlfdw9TE0qMHrFLUyufzKa1d4JMWaGEgl0y1LDnbDF93t o7A0HQmtoPJtMYFbOtFa/NIxyG0t3AmOW9La9E9/2pBm46b13hjheCE+ZfFQir81 Dw1m/0OztWYsv9BbASYCmoE7BjJJKfnQ0uRDL2Fz9ScWLSs2Nt7n919fOdv4JZ1r hVnUP6RquedKVdacqFe5wg5wM8/MJwJoYcwXnZt+dSgIKv6bruuHFBiq/0s99M/S 1DojHW/aqA+5Gscy4PaMX2MgpuP+IjoC9j7Xo4Xt1/lnYZp/otYAzYdH1Ad8TvSF vXDpCl3uuySVjksP46FryCvGCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLSRcwWu L7Up9xW4JByYF2jphrIyMB8GA1UdIwQYMBaAFPaLhiaLN96BC5aNuPNX93Ppg79t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTVGNi9ENjlFQUFCMjVG NjQxMUVBOUNBQTNBNjRDNEY5QUUwMi85b3VHSm9zMzNvRUxsbzI0ODFmM2MtbUR2 MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlvdUdKb3MzM29FTGxvMjQ4MWYzYy1tRHYyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTVGNi9ENjlFQUFCMjVGNjQxMUVBOUNBQTNBNjRDNEY5QUUwMi85b3VHSm9zMzNv RUxsbzI0ODFmM2MtbUR2MjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkJl5WnoXcBwvtoaRxrJZwcxPeKrt10rXGTodWwVRnr3WvfdA73pRe okmXazeA13fVYR4O1iXbH1rcwKFzOYXNzhDB04H8QaaHDITtDwIcbBOTlVQSKTVu IVgAtTZFrcsWW4R7cNrACzUsU2rSfsQ5udXZWq+EUFItLDIVo6xJK+uwHmyf8ClN DbGNAoxOeKVvi9zQUYvdtxIVBf55BHFKkCMRNiDtO0xbpqhGvcusn+nZCEgVZzHk w9cd9FYg4eV6dl8S4FggqVBiLXZ+s8gsYTc/ObOB/Bn/94J1CggHBSoBupWmuo63 ebAqYNy9LklpaSm9L0K7nWiQjZoqLQhy -----END CERTIFICATE-----Generated at Sun Aug 24 00:04:33 2025 by rpki-client