$ rpki-client -vvf rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft File: 5o7RJO9le2eb0SpY-gNQFODf6Cc.mft (raw, json) Hash identifier: iLA4Qs5D+6me3ukq+QcIRCEF7D1D08Sok4dPH8B/KkE= Subject key identifier: 54:75:F6:66:31:77:E1:95:F8:0F:EE:6A:47:85:2D:03:C3:9D:17:EF Authority key identifier: E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27 Certificate issuer: /CN=A9191A09/serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827 Certificate serial: 0DF7 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft Manifest number: 0DE3 Signing time: Fri 22 Aug 2025 14:42:27 +0000 Manifest this update: Fri 22 Aug 2025 14:42:27 +0000 Manifest next update: Fri 29 Aug 2025 14:42:27 +0000 Files and hashes: 1: 5o7RJO9le2eb0SpY-gNQFODf6Cc.crl (hash: 0jJUNxavfnyQVp4WRBmBjqxKTYDIh+/6DDPck+IhyJc=) 2: 9C06E51EE37A11EA84A20810C4F9AE02.roa (hash: BIq27Hxj0ymd/MyK4xyxLJopPOW9viNW0+I2cxj8GdM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:42:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3575 (0xdf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191A09, serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827 Validity Not Before: Aug 22 14:42:27 2025 GMT Not After : Aug 29 14:42:27 2025 GMT Subject: CN=68a881d3-1584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cf:da:e4:d8:3a:06:e2:b9:aa:44:5a:f8:a5: b3:da:17:12:f8:36:e6:b0:89:1c:04:ea:50:16:04: 42:73:58:e7:73:f6:3a:6a:e5:fc:a5:b9:48:bd:2d: c6:0f:f6:fb:0e:b7:2f:10:f8:e8:ff:af:3c:b0:fc: 8a:a3:f5:98:3a:07:0d:9b:c0:15:9f:b9:df:2d:9b: 77:46:05:b1:99:5e:dc:6c:b4:1d:88:b6:7c:c1:ff: 70:af:cd:fa:b6:fe:38:cc:a0:81:07:bc:5b:96:2d: d5:f0:5f:63:8e:e5:a2:5c:4d:54:e0:bd:67:89:a2: 2a:57:48:69:da:41:5f:cd:55:ed:76:0f:8f:45:0b: 50:e1:67:ee:d6:10:e6:ee:7e:0d:c2:ca:48:87:8f: aa:71:9d:46:66:a1:03:98:2d:c7:f2:4e:67:61:1f: c4:4c:4c:8c:dd:18:06:60:a6:1e:d6:75:13:ac:e4: cd:9c:8a:cd:9f:2a:a2:10:ba:0d:cd:0b:2c:ae:ac: da:87:3f:55:6e:29:41:10:dd:fc:fc:9f:c9:26:5d: 8c:71:99:12:65:2c:fc:32:ee:15:92:85:ca:9c:e5: e3:74:0a:54:e1:3f:42:09:fb:8b:48:25:6d:9b:ea: 37:ed:17:15:40:00:fe:08:18:82:af:a1:7d:f9:b9: d1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:75:F6:66:31:77:E1:95:F8:0F:EE:6A:47:85:2D:03:C3:9D:17:EF X509v3 Authority Key Identifier: keyid:E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:a2:18:f2:60:e0:57:d0:5d:49:00:19:33:c2:33:59:84:36: 8f:af:9e:14:fa:5a:a9:3a:f8:4b:9c:d1:f8:8b:b2:99:eb:8e: c8:c1:47:40:d9:cd:75:89:27:e0:00:a3:d1:b4:20:08:e7:27: 7b:30:68:ac:3f:45:50:3b:d1:a4:99:da:59:2d:dc:87:cb:08: 24:fb:2c:21:10:51:6b:53:3a:6e:ed:7b:fd:68:43:dc:f4:4c: b5:f4:ec:54:9e:fd:b7:ec:8d:c0:c7:3a:50:02:29:39:2e:76: f3:2a:4c:fc:e8:42:49:7b:cb:df:a1:fc:3c:50:46:32:0b:f6: 84:13:3b:98:e2:ce:d8:15:35:ae:65:3e:54:c5:c2:88:e3:12: 61:40:2c:e6:82:7d:23:a6:eb:75:d3:f6:74:b5:53:0f:6b:ce: 18:c1:35:5f:98:1b:3b:78:2d:ea:a0:4a:a7:7f:2d:f0:4c:76: 04:c7:cb:78:a9:fe:e0:65:a1:58:47:6a:e6:8c:45:d4:6f:fe: 62:9f:b7:f3:07:ef:73:8e:64:5d:d8:c5:80:2f:55:2e:53:7c: a6:b2:c4:73:fe:41:d2:3b:60:cf:e4:f4:5f:6a:82:24:f2:50: 14:b3:dd:9f:2e:e2:2c:69:c1:88:0f:5a:79:0b:3f:ca:bd:51: d9:44:79:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFBMDkxMTAvBgNVBAUTKEU2OEVEMTI0RUY2NTdCNjc5QkQxMkE1OEZBMDM1MDE0 RTBERkU4MjcwHhcNMjUwODIyMTQ0MjI3WhcNMjUwODI5MTQ0MjI3WjAYMRYwFAYD VQQDEw02OGE4ODFkMy0xNTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyM/a5Ng6BuK5qkRa+KWz2hcS+DbmsIkcBOpQFgRCc1jnc/Y6auX8pblIvS3G D/b7DrcvEPjo/688sPyKo/WYOgcNm8AVn7nfLZt3RgWxmV7cbLQdiLZ8wf9wr836 tv44zKCBB7xbli3V8F9jjuWiXE1U4L1niaIqV0hp2kFfzVXtdg+PRQtQ4Wfu1hDm 7n4NwspIh4+qcZ1GZqEDmC3H8k5nYR/ETEyM3RgGYKYe1nUTrOTNnIrNnyqiELoN zQssrqzahz9VbilBEN38/J/JJl2McZkSZSz8Mu4VkoXKnOXjdApU4T9CCfuLSCVt m+o37RcVQAD+CBiCr6F9+bnRqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFR19mYx d+GV+A/uakeFLQPDnRfvMB8GA1UdIwQYMBaAFOaO0STvZXtnm9EqWPoDUBTg3+gn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUEwOS8zQzQxMkMzNkJG MzkxMUU5ODk3RDdDMkVDNEY5QUUwMi81bzdSSk85bGUyZWIwU3BZLWdOUUZPRGY2 Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzVvN1JKTzlsZTJlYjBTcFktZ05RRk9EZjZDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUEwOS8zQzQxMkMzNkJGMzkxMUU5ODk3RDdDMkVDNEY5QUUwMi81bzdSSk85bGUy ZWIwU3BZLWdOUUZPRGY2Q2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmohjyYOBX0F1JABkzwjNZhDaPr54U+lqpOvhLnNH4i7KZ647IwUdA 2c11iSfgAKPRtCAI5yd7MGisP0VQO9GkmdpZLdyHywgk+ywhEFFrUzpu7Xv9aEPc 9Ey19OxUnv237I3AxzpQAik5LnbzKkz86EJJe8vfofw8UEYyC/aEEzuY4s7YFTWu ZT5UxcKI4xJhQCzmgn0jput10/Z0tVMPa84YwTVfmBs7eC3qoEqnfy3wTHYEx8t4 qf7gZaFYR2rmjEXUb/5in7fzB+9zjmRd2MWAL1UuU3ymssRz/kHSO2DP5PRfaoIk 8lAUs92fLuIsacGID1p5Cz/KvVHZRHm2 -----END CERTIFICATE-----Generated at Sat Aug 23 21:16:10 2025 by rpki-client