$ rpki-client -vvf rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.mft File: oXkseNMOEHMKPERWHH5YIufxwvg.mft (raw, json) Hash identifier: VQXfXMVy/kEG4zz8QS7mBIsl99aKAEGD0nVmyYI54zI= Subject key identifier: C7:52:47:FB:60:2C:C5:CD:A1:11:2F:47:99:83:BD:E8:B8:A4:50:40 Authority key identifier: A1:79:2C:78:D3:0E:10:73:0A:3C:44:56:1C:7E:58:22:E7:F1:C2:F8 Certificate issuer: /CN=A91A093A/serialNumber=A1792C78D30E10730A3C44561C7E5822E7F1C2F8 Certificate serial: 0884 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXkseNMOEHMKPERWHH5YIufxwvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.mft Manifest number: 0878 Signing time: Fri 22 Aug 2025 20:45:56 +0000 Manifest this update: Fri 22 Aug 2025 20:45:56 +0000 Manifest next update: Fri 29 Aug 2025 20:45:56 +0000 Files and hashes: 1: oXkseNMOEHMKPERWHH5YIufxwvg.crl (hash: 0O1xsuOcDDNbJC+Xloga3JmqiYSM27PgqF+G38wtx70=) 2: 153A3AE86A9111EF905C3C37C4F9AE02.roa (hash: LYF+KadzZ69diyD5rWiKHJlYkwO/eA/Z250K04w+xPI=) 3: AA973CB86A8B11EFB0774B61C4F9AE02.roa (hash: +w6DPiK2iGC1sFd6+H0KMfGyjFvRHYPwKc/prnzBHkc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.crl rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXkseNMOEHMKPERWHH5YIufxwvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:45:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2180 (0x884) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A093A, serialNumber=A1792C78D30E10730A3C44561C7E5822E7F1C2F8 Validity Not Before: Aug 22 20:45:56 2025 GMT Not After : Aug 29 20:45:56 2025 GMT Subject: CN=68a8d704-59f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c1:12:fb:cb:21:98:9e:b7:4d:48:e7:f7:fd: 19:77:75:45:20:1b:ba:4b:f4:92:9b:d3:dc:0d:1e: 4f:f8:0f:22:e8:8f:17:23:77:ab:1a:2d:d0:d2:63: 28:ca:84:a3:6c:aa:35:34:7c:3f:23:a6:df:ac:cf: c3:02:04:e8:a2:c2:98:66:eb:9c:25:f7:2a:73:1b: 33:0e:87:42:ae:5c:c5:54:e3:e0:45:d6:b8:0f:1e: ba:7c:e4:08:6f:00:2d:de:04:74:65:b6:8c:0a:21: 16:dc:81:8b:ad:1e:3e:8e:9e:ee:71:1f:ed:31:38: d5:69:12:5a:95:cf:c1:bd:94:e0:53:1a:1a:73:64: 42:40:5d:0c:73:bd:91:e7:ec:b7:e3:d9:ad:a2:ca: 74:1c:25:8d:91:93:76:35:23:84:70:9c:53:69:9f: 25:ab:eb:7c:19:b4:1c:59:86:d9:59:73:8f:9e:36: 57:f6:ff:9d:19:42:c4:96:24:31:f1:23:ef:2b:7d: f4:da:e1:7c:3f:10:fa:7b:29:9d:df:e2:85:db:34: e0:a0:37:59:36:6d:21:a3:73:ca:9f:6b:86:d3:1a: de:30:3f:97:16:47:da:cf:07:f6:44:a0:9c:b3:7d: 80:c2:0c:6f:d7:7b:0d:1b:43:34:b0:a1:53:ea:50: f4:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:52:47:FB:60:2C:C5:CD:A1:11:2F:47:99:83:BD:E8:B8:A4:50:40 X509v3 Authority Key Identifier: keyid:A1:79:2C:78:D3:0E:10:73:0A:3C:44:56:1C:7E:58:22:E7:F1:C2:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXkseNMOEHMKPERWHH5YIufxwvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:cd:94:7b:a2:41:29:2a:e3:0a:8a:4c:b5:d5:0b:35:95:7c: 77:72:6f:0a:f9:87:60:c4:a9:c4:97:cc:64:94:a7:3d:09:b4: 54:ea:50:a2:32:85:63:61:44:f7:06:18:f7:63:dd:0f:63:0f: 51:d5:24:1d:42:98:af:ac:78:0f:31:7b:50:a4:47:5c:77:d4: b7:30:08:90:e1:e1:59:e6:2a:63:f3:6f:d9:b0:70:61:7c:84: ab:6e:e1:05:3d:48:94:95:25:4c:4b:56:3b:b1:c2:87:03:3f: 58:87:eb:16:c6:dd:dc:8e:c8:52:ef:eb:6b:a9:7f:e5:00:2f: 69:67:30:dd:3e:d1:57:df:46:b4:50:5e:2b:c8:dd:74:59:88: 5c:77:76:5e:bb:64:4f:2a:3d:ef:50:d5:9d:9c:10:30:86:ad: 8f:e1:2d:bc:04:25:d5:5a:5d:86:09:a1:84:86:7c:4e:fc:1b: 42:1f:ec:62:1a:80:99:f6:5c:88:43:06:3a:e8:8a:4c:f8:96: 3f:c0:1a:b0:a8:d6:5c:9b:95:2c:f4:5c:33:77:41:ef:e9:99: 5a:79:61:ea:7b:42:b1:ba:2f:96:f1:dc:88:24:9c:db:02:b0: 42:c6:1a:ef:c2:84:49:06:ef:d5:b5:ad:eb:80:d4:f3:1a:97: 11:aa:18:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA5M0ExMTAvBgNVBAUTKEExNzkyQzc4RDMwRTEwNzMwQTNDNDQ1NjFDN0U1ODIy RTdGMUMyRjgwHhcNMjUwODIyMjA0NTU2WhcNMjUwODI5MjA0NTU2WjAYMRYwFAYD VQQDEw02OGE4ZDcwNC01OWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAscES+8shmJ63TUjn9/0Zd3VFIBu6S/SSm9PcDR5P+A8i6I8XI3erGi3Q0mMo yoSjbKo1NHw/I6bfrM/DAgToosKYZuucJfcqcxszDodCrlzFVOPgRda4Dx66fOQI bwAt3gR0ZbaMCiEW3IGLrR4+jp7ucR/tMTjVaRJalc/BvZTgUxoac2RCQF0Mc72R 5+y349mtosp0HCWNkZN2NSOEcJxTaZ8lq+t8GbQcWYbZWXOPnjZX9v+dGULEliQx 8SPvK3302uF8PxD6eymd3+KF2zTgoDdZNm0ho3PKn2uG0xreMD+XFkfazwf2RKCc s32Awgxv13sNG0M0sKFT6lD0pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMdSR/tg LMXNoREvR5mDvei4pFBAMB8GA1UdIwQYMBaAFKF5LHjTDhBzCjxEVhx+WCLn8cL4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDkzQS9FQkEzNTMxRUNC RDgxMUVBODY3QUZCNEZDNEY5QUUwMi9vWGtzZU5NT0VITUtQRVJXSEg1WUl1Znh3 dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Ya3NlTk1PRUhNS1BFUldISDVZSXVmeHd2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDkzQS9FQkEzNTMxRUNCRDgxMUVBODY3QUZCNEZDNEY5QUUwMi9vWGtzZU5NT0VI TUtQRVJXSEg1WUl1Znh3dmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuzZR7okEpKuMKiky11Qs1lXx3cm8K+YdgxKnEl8xklKc9CbRU6lCi MoVjYUT3Bhj3Y90PYw9R1SQdQpivrHgPMXtQpEdcd9S3MAiQ4eFZ5ipj82/ZsHBh fISrbuEFPUiUlSVMS1Y7scKHAz9Yh+sWxt3cjshS7+trqX/lAC9pZzDdPtFX30a0 UF4ryN10WYhcd3Zeu2RPKj3vUNWdnBAwhq2P4S28BCXVWl2GCaGEhnxO/BtCH+xi GoCZ9lyIQwY66IpM+JY/wBqwqNZcm5Us9Fwzd0Hv6ZlaeWHqe0Kxui+W8dyIJJzb ArBCxhrvwoRJBu/Vta3rgNTzGpcRqhjG -----END CERTIFICATE-----Generated at Sun Aug 24 03:07:59 2025 by rpki-client