$ rpki-client -vvf rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft File: OIX50v0IYCg7VTgfHE9KWjoe7z8.mft (raw, json) Hash identifier: 3d9yQVPay1j67Jci/jMClbQM4jqDa/H6NoM4hNWL26s= Subject key identifier: F3:D1:C5:35:5F:56:F4:67:E8:CB:8A:7C:7D:FA:78:3E:6A:66:F0:43 Authority key identifier: 38:85:F9:D2:FD:08:60:28:3B:55:38:1F:1C:4F:4A:5A:3A:1E:EF:3F Certificate issuer: /CN=A91847C2/serialNumber=3885F9D2FD0860283B55381F1C4F4A5A3A1EEF3F Certificate serial: F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIX50v0IYCg7VTgfHE9KWjoe7z8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft Manifest number: F6 Signing time: Sat 23 Aug 2025 05:21:35 +0000 Manifest this update: Sat 23 Aug 2025 05:21:35 +0000 Manifest next update: Sat 30 Aug 2025 05:21:35 +0000 Files and hashes: 1: OIX50v0IYCg7VTgfHE9KWjoe7z8.crl (hash: enhUWZBLGfzfN5pWmWmyV2Xm6U0R2gzvPQ3sSQKpRd0=) 2: 744D8A1005EE11EF851FA42FC4F9AE02.roa (hash: g7/I1107TKCwjJnWd7arEQMGj8EBr7MRJOF1ZUaFXNI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.crl rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIX50v0IYCg7VTgfHE9KWjoe7z8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:21:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847C2, serialNumber=3885F9D2FD0860283B55381F1C4F4A5A3A1EEF3F Validity Not Before: Aug 23 05:21:35 2025 GMT Not After : Aug 30 05:21:35 2025 GMT Subject: CN=68a94fdf-b360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f0:5b:cc:b5:88:87:f7:16:34:78:e5:4e:a0: e9:1c:82:a7:d9:e6:06:df:41:5d:99:35:b1:32:c2: 62:c8:9c:d1:30:99:8e:14:66:da:96:e1:f3:6a:05: 5d:d4:6c:74:20:1a:57:c4:ff:cd:15:b3:32:a8:00: d0:44:24:94:c4:90:2b:4d:a0:6c:96:81:8f:fa:4c: 1e:d8:13:f1:51:0d:b2:06:d7:0a:09:3f:59:c7:0a: f5:e8:e2:9b:0f:f0:52:54:bf:10:10:cd:70:2e:93: e1:0c:60:84:3e:5f:c0:e8:25:9c:5a:cc:ec:46:70: 6e:6d:9d:a7:05:77:4b:5e:51:df:7b:3e:c3:68:91: aa:24:27:e1:4d:1d:41:25:fe:39:f1:04:28:fb:ab: 47:29:4b:dd:b3:22:aa:81:a7:03:0e:de:f0:02:38: 6a:fe:7b:38:83:07:a1:40:9b:58:23:ef:df:cc:10: bb:e8:24:11:6c:a4:f8:ba:6c:ba:bf:ec:56:ab:ff: 9a:53:d8:84:b0:38:4c:82:36:04:a0:45:70:81:b2: cc:26:85:2a:87:74:5b:92:de:92:18:4c:d9:fb:8d: 61:60:c6:7f:17:47:a5:fa:a5:12:d7:e4:d0:a8:a4: ec:59:e5:c2:dd:86:64:c9:a7:c5:18:2c:ee:65:9b: 2c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:D1:C5:35:5F:56:F4:67:E8:CB:8A:7C:7D:FA:78:3E:6A:66:F0:43 X509v3 Authority Key Identifier: keyid:38:85:F9:D2:FD:08:60:28:3B:55:38:1F:1C:4F:4A:5A:3A:1E:EF:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIX50v0IYCg7VTgfHE9KWjoe7z8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:d7:c1:fe:13:ce:e2:e0:60:7c:a0:bc:ac:94:d4:b3:52:58: 2a:22:87:2f:21:f7:85:87:18:0f:5d:56:7d:92:81:33:59:1d: 18:69:d0:7c:9c:8d:70:41:3f:36:a8:7a:2f:fa:d4:06:15:86: 11:ef:2e:ee:a6:74:6c:33:70:ec:b5:62:c1:8a:ac:8e:f7:7b: ec:b0:ae:c9:97:23:5a:f5:c0:00:03:7b:58:0b:8b:dd:29:be: 3c:d9:20:88:71:af:7e:12:3f:b4:51:2d:08:81:56:06:ab:b3: bd:c2:34:a9:9f:0c:b0:2c:b5:95:e4:91:51:2d:83:45:2e:ac: 11:b6:e5:7a:40:b0:35:f5:da:33:42:61:db:34:0c:60:ff:a7: 39:7e:34:97:84:10:3d:36:c9:08:83:19:14:68:8e:93:d5:1f: 9b:a8:81:4a:4b:70:94:99:36:23:5d:c6:92:a3:cb:40:db:ba: 81:4f:66:ba:29:41:f8:50:0e:0d:e6:c5:ee:1e:83:f0:1e:29: 72:ef:71:99:4f:9d:9b:2c:0a:01:24:f1:c2:af:ed:86:64:87: f5:0b:32:53:f9:9a:4b:ff:d1:9b:07:e3:a4:80:c3:01:b4:4e: f7:be:d5:2b:34:d9:db:53:d2:d7:38:34:4e:44:2a:2c:f6:d7: bf:8a:2b:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ3QzIxMTAvBgNVBAUTKDM4ODVGOUQyRkQwODYwMjgzQjU1MzgxRjFDNEY0QTVB M0ExRUVGM0YwHhcNMjUwODIzMDUyMTM1WhcNMjUwODMwMDUyMTM1WjAYMRYwFAYD VQQDEw02OGE5NGZkZi1iMzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArPBbzLWIh/cWNHjlTqDpHIKn2eYG30FdmTWxMsJiyJzRMJmOFGbaluHzagVd 1Gx0IBpXxP/NFbMyqADQRCSUxJArTaBsloGP+kwe2BPxUQ2yBtcKCT9Zxwr16OKb D/BSVL8QEM1wLpPhDGCEPl/A6CWcWszsRnBubZ2nBXdLXlHfez7DaJGqJCfhTR1B Jf458QQo+6tHKUvdsyKqgacDDt7wAjhq/ns4gwehQJtYI+/fzBC76CQRbKT4umy6 v+xWq/+aU9iEsDhMgjYEoEVwgbLMJoUqh3Rbkt6SGEzZ+41hYMZ/F0el+qUS1+TQ qKTsWeXC3YZkyafFGCzuZZssVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPPRxTVf VvRn6MuKfH36eD5qZvBDMB8GA1UdIwQYMBaAFDiF+dL9CGAoO1U4HxxPSlo6Hu8/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdDMi9COTJCRkFENDA1 RUIxMUVGOTU2QkQ2NDNDNEY5QUUwMi9PSVg1MHYwSVlDZzdWVGdmSEU5S1dqb2U3 ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09JWDUwdjBJWUNnN1ZUZ2ZIRTlLV2pvZTd6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDdDMi9COTJCRkFENDA1RUIxMUVGOTU2QkQ2NDNDNEY5QUUwMi9PSVg1MHYwSVlD ZzdWVGdmSEU5S1dqb2U3ejgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB318H+E87i4GB8oLyslNSzUlgqIocvIfeFhxgPXVZ9koEzWR0YadB8 nI1wQT82qHov+tQGFYYR7y7upnRsM3DstWLBiqyO93vssK7JlyNa9cAAA3tYC4vd Kb482SCIca9+Ej+0US0IgVYGq7O9wjSpnwywLLWV5JFRLYNFLqwRtuV6QLA19doz QmHbNAxg/6c5fjSXhBA9NskIgxkUaI6T1R+bqIFKS3CUmTYjXcaSo8tA27qBT2a6 KUH4UA4N5sXuHoPwHily73GZT52bLAoBJPHCr+2GZIf1CzJT+ZpL/9GbB+OkgMMB tE73vtUrNNnbU9LXODRORCos9te/iis/ -----END CERTIFICATE-----Generated at Sat Aug 23 16:23:22 2025 by rpki-client