$ rpki-client -vvf rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft File: O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft (raw, json) Hash identifier: IytZdx9+pHTuESF+LUHM+EJv57eJFdoXxoUwmDjckN8= Subject key identifier: 66:91:6C:6E:E0:46:9F:B5:8E:CD:BA:B5:DE:E8:7F:CD:BD:D0:D1:A7 Authority key identifier: 3B:B0:51:A7:DA:BA:68:7F:E3:A5:61:E3:8F:47:B9:50:46:7C:57:1E Certificate issuer: /CN=A9194CBE/serialNumber=3BB051A7DABA687FE3A561E38F47B950467C571E Certificate serial: 0794 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft Manifest number: 0788 Signing time: Fri 22 Aug 2025 21:38:57 +0000 Manifest this update: Fri 22 Aug 2025 21:38:57 +0000 Manifest next update: Fri 29 Aug 2025 21:38:57 +0000 Files and hashes: 1: O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.crl (hash: dXwERmkEzMPt9bezHFPy/F/FLh6BEI4bBO4JOTbkWnY=) 2: C329F1CE2AB611EDB5BBD62BC4F9AE02.roa (hash: KbjbjWfa/W/SeFQrbonVtHmtNH6PFYaGP9XG75HjJGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.crl rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:38:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1940 (0x794) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194CBE, serialNumber=3BB051A7DABA687FE3A561E38F47B950467C571E Validity Not Before: Aug 22 21:38:57 2025 GMT Not After : Aug 29 21:38:57 2025 GMT Subject: CN=68a8e371-f66e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e4:b4:2e:c9:fb:1b:95:20:1b:38:f7:b7:85: 2d:4b:93:6d:59:fc:89:5f:ab:94:e8:ad:5d:51:a4: 04:fb:c7:dd:07:f4:d9:5b:59:e1:8a:5a:1c:02:06: 1f:06:af:61:fa:bf:2d:95:b5:a7:ac:00:17:29:a9: 8e:80:3c:99:9c:a2:cc:66:99:97:44:2f:09:8d:6b: e5:ab:64:06:99:f8:b6:14:7c:ac:66:68:3a:16:06: 3e:42:0e:4f:74:46:ca:bd:c5:54:44:e4:c7:a9:c6: c0:30:af:25:5f:2a:90:27:d9:db:c7:ad:ae:fd:b8: 45:6e:73:b7:20:e0:cd:7c:c9:e8:85:ad:94:d1:88: fc:85:02:f9:93:70:f5:b2:00:f2:fd:4e:65:7b:4c: 5a:6d:b4:de:0b:09:b8:a1:39:d7:d2:81:2d:a0:66: bc:fd:b8:1b:84:39:4d:c2:83:50:1d:c2:18:8e:78: e8:d2:05:51:ec:7e:22:9d:4a:7d:fc:31:a0:d4:cc: 37:8e:b3:d6:c6:38:66:3b:da:10:53:29:24:89:d9: bd:e8:c2:f1:9e:cf:ef:4f:69:d6:dc:74:83:92:e2: bb:12:71:92:79:a7:68:d5:04:dc:37:01:13:48:1d: e2:a2:aa:e2:3b:f1:12:dc:18:5e:b8:35:b0:1d:f9: b1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:91:6C:6E:E0:46:9F:B5:8E:CD:BA:B5:DE:E8:7F:CD:BD:D0:D1:A7 X509v3 Authority Key Identifier: keyid:3B:B0:51:A7:DA:BA:68:7F:E3:A5:61:E3:8F:47:B9:50:46:7C:57:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:c8:7e:2a:ff:11:0b:ba:24:a4:4f:17:b6:64:74:d3:c8:ed: 4e:fd:e3:d0:31:3e:fb:33:a9:55:58:74:ef:a1:e2:3c:9d:46: 86:8d:3e:d2:4b:94:91:03:95:6c:a7:32:5c:a7:85:e3:17:a1: 3b:3d:9d:19:f4:16:dc:47:18:c0:cd:3e:6e:2c:d1:1c:86:7a: b3:29:b7:f9:87:93:d3:55:ca:79:25:cf:51:7b:9b:21:e5:45: 3a:ce:b9:05:6d:0c:01:63:e3:ef:57:0f:c5:02:e8:97:23:9b: d3:f8:7d:79:05:71:27:8e:82:5e:51:b7:2c:a2:e0:f1:23:ce: 46:fc:05:99:27:54:f6:52:91:7c:24:e5:70:48:6f:d2:b0:ad: c4:84:13:35:6b:6a:96:22:bf:9c:7a:b2:d2:8f:d5:e8:90:69: b3:60:42:39:8e:5e:cc:60:b7:d7:01:e5:f9:b5:7c:8e:9c:be: c5:5d:fb:68:58:d0:a3:76:ca:64:e3:3d:5a:4d:d1:c3:9f:ca: b1:25:b5:bb:94:51:b0:be:bc:45:9c:79:a9:90:04:ec:b7:e8: d0:66:56:2b:30:7e:d0:5e:ae:7c:fe:86:59:00:1f:be:95:8c: ac:b6:c7:ff:1c:d3:5f:ed:f2:fd:f3:5a:9d:17:e8:be:5a:ee: 56:53:65:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRDQkUxMTAvBgNVBAUTKDNCQjA1MUE3REFCQTY4N0ZFM0E1NjFFMzhGNDdCOTUw NDY3QzU3MUUwHhcNMjUwODIyMjEzODU3WhcNMjUwODI5MjEzODU3WjAYMRYwFAYD VQQDEw02OGE4ZTM3MS1mNjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1+S0Lsn7G5UgGzj3t4UtS5NtWfyJX6uU6K1dUaQE+8fdB/TZW1nhilocAgYf Bq9h+r8tlbWnrAAXKamOgDyZnKLMZpmXRC8JjWvlq2QGmfi2FHysZmg6FgY+Qg5P dEbKvcVUROTHqcbAMK8lXyqQJ9nbx62u/bhFbnO3IODNfMnoha2U0Yj8hQL5k3D1 sgDy/U5le0xabbTeCwm4oTnX0oEtoGa8/bgbhDlNwoNQHcIYjnjo0gVR7H4inUp9 /DGg1Mw3jrPWxjhmO9oQUykkidm96MLxns/vT2nW3HSDkuK7EnGSeado1QTcNwET SB3ioqriO/ES3BheuDWwHfmxoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGaRbG7g Rp+1js26td7of8290NGnMB8GA1UdIwQYMBaAFDuwUafaumh/46Vh449HuVBGfFce MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NENCRS8wNjdGNDcyMDIz MzAxMUVCQkE4Qzc3NEJDNEY5QUUwMi9PN0JScDlxNmFIX2pwV0hqajBlNVVFWjhW eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL083QlJwOXE2YUhfanBXSGpqMGU1VUVaOFZ4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NENCRS8wNjdGNDcyMDIzMzAxMUVCQkE4Qzc3NEJDNEY5QUUwMi9PN0JScDlxNmFI X2pwV0hqajBlNVVFWjhWeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZyH4q/xELuiSkTxe2ZHTTyO1O/ePQMT77M6lVWHTvoeI8nUaGjT7S S5SRA5VspzJcp4XjF6E7PZ0Z9BbcRxjAzT5uLNEchnqzKbf5h5PTVcp5Jc9Re5sh 5UU6zrkFbQwBY+PvVw/FAuiXI5vT+H15BXEnjoJeUbcsouDxI85G/AWZJ1T2UpF8 JOVwSG/SsK3EhBM1a2qWIr+cerLSj9XokGmzYEI5jl7MYLfXAeX5tXyOnL7FXfto WNCjdspk4z1aTdHDn8qxJbW7lFGwvrxFnHmpkATst+jQZlYrMH7QXq58/oZZAB++ lYystsf/HNNf7fL981qdF+i+Wu5WU2W/ -----END CERTIFICATE-----Generated at Sun Aug 24 07:15:07 2025 by rpki-client