$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft File: OYVAYLL1jUyRnGTapLfrHwzfaDA.mft (raw, json) Hash identifier: OL+my3y+GAi7FCe4qy8nQYBv8lynwuGXlw3karXUjQA= Subject key identifier: 0C:CE:D5:B4:4A:C8:9E:B9:F1:7E:B7:FA:D4:99:77:F7:7C:B4:08:EC Authority key identifier: 39:85:40:60:B2:F5:8D:4C:91:9C:64:DA:A4:B7:EB:1F:0C:DF:68:30 Certificate issuer: /CN=A91A1A51/serialNumber=39854060B2F58D4C919C64DAA4B7EB1F0CDF6830 Certificate serial: 0374 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYVAYLL1jUyRnGTapLfrHwzfaDA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft Manifest number: 0374 Signing time: Sat 23 Aug 2025 01:06:41 +0000 Manifest this update: Sat 23 Aug 2025 01:06:40 +0000 Manifest next update: Sat 30 Aug 2025 01:06:40 +0000 Files and hashes: 1: OYVAYLL1jUyRnGTapLfrHwzfaDA.crl (hash: md75fscd18bU2q3/ZkouGf6a+DVPcgU1h3vszH0DnlY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.crl rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYVAYLL1jUyRnGTapLfrHwzfaDA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:06:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 884 (0x374) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1A51, serialNumber=39854060B2F58D4C919C64DAA4B7EB1F0CDF6830 Validity Not Before: Aug 23 01:06:40 2025 GMT Not After : Aug 30 01:06:40 2025 GMT Subject: CN=68a91421-f564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:61:13:4b:a1:f4:88:0c:9c:40:05:b5:d1:ae: 5b:0b:d6:d9:11:70:2c:fc:e3:4c:14:7f:31:61:59: 46:34:a2:b3:94:08:d8:db:ba:c7:26:d6:4a:9b:31: d8:e5:e7:a5:2b:f2:09:13:0e:2c:ad:7a:79:a6:e5: b5:96:9c:21:d4:10:91:9a:2c:3b:ce:e6:ab:30:b1: 18:36:44:2a:74:c4:da:cf:ae:06:b6:b3:cb:1f:15: 47:5b:18:c6:d6:3f:40:38:cb:85:da:06:e6:64:ce: cc:27:21:ef:65:c4:6b:f7:fc:ba:16:32:98:b2:14: 47:60:2c:4a:9a:0a:91:47:b2:5f:2b:0c:6b:19:81: e0:86:61:3d:e8:8a:32:f8:2e:92:53:74:e5:6b:1c: 22:dd:89:e8:f5:9f:f9:98:65:4c:ff:c8:e9:5e:a3: 71:7d:77:8a:37:40:4f:4f:3b:a1:60:ac:e3:81:da: 49:35:5a:09:ba:9e:07:36:81:0d:33:cb:73:e1:cc: 50:76:bc:ef:7b:ca:c2:e1:78:53:08:18:7c:83:9e: a9:38:f5:4c:24:25:ac:ba:51:d5:8b:80:c5:48:f9: 7e:c5:b5:0f:ac:6e:b6:06:78:38:d5:e1:3d:7c:60: 5f:ca:60:91:aa:c4:e1:57:08:4a:21:09:ef:1c:a0: d3:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:CE:D5:B4:4A:C8:9E:B9:F1:7E:B7:FA:D4:99:77:F7:7C:B4:08:EC X509v3 Authority Key Identifier: keyid:39:85:40:60:B2:F5:8D:4C:91:9C:64:DA:A4:B7:EB:1F:0C:DF:68:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYVAYLL1jUyRnGTapLfrHwzfaDA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:79:1d:dc:58:ae:c9:ed:1a:04:a8:7b:86:63:0a:31:31:e9: a2:00:a0:21:d3:93:2d:bc:05:d3:1b:a9:c7:21:5b:a8:45:a5: b2:92:a1:95:2f:56:e5:03:19:96:4f:02:0a:56:40:70:ff:24: b0:76:78:85:a1:59:e9:19:7b:8a:6c:a3:e7:08:4e:9b:a0:47: dd:c3:6b:c9:01:ad:30:d5:dd:c3:fd:26:9a:95:9a:9a:e6:f2: 14:0a:6c:88:cf:51:27:9a:98:27:cc:1a:90:3b:83:f9:f5:98: 16:cc:cc:6a:76:aa:f4:55:77:9c:99:73:31:0b:4e:15:85:d7: 7f:15:f7:fa:60:60:2a:e7:de:c1:72:9d:ef:c4:0f:a1:e4:bb: 5f:b8:32:e9:d4:e3:cd:58:46:40:16:c4:f8:71:f0:29:85:59: d5:7e:64:23:3e:33:bb:f2:77:43:73:e3:d0:dc:1f:20:9e:f7: 0d:01:60:af:44:60:2f:61:e0:cf:ef:c3:76:24:84:77:37:3b: 7c:5f:65:8d:6a:c2:76:56:d7:9f:91:f6:c0:1c:c3:6b:cf:a7: d2:45:8a:b1:33:24:76:f3:c0:49:b7:33:7d:f8:7a:db:e1:7a: 94:ca:26:7f:9a:d4:f2:fa:d1:d3:59:91:66:fc:c5:42:ee:e7: 0f:54:45:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFBNTExMTAvBgNVBAUTKDM5ODU0MDYwQjJGNThENEM5MTlDNjREQUE0QjdFQjFG MENERjY4MzAwHhcNMjUwODIzMDEwNjQwWhcNMjUwODMwMDEwNjQwWjAYMRYwFAYD VQQDEw02OGE5MTQyMS1mNTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuWETS6H0iAycQAW10a5bC9bZEXAs/ONMFH8xYVlGNKKzlAjY27rHJtZKmzHY 5eelK/IJEw4srXp5puW1lpwh1BCRmiw7zuarMLEYNkQqdMTaz64GtrPLHxVHWxjG 1j9AOMuF2gbmZM7MJyHvZcRr9/y6FjKYshRHYCxKmgqRR7JfKwxrGYHghmE96Ioy +C6SU3Tlaxwi3Yno9Z/5mGVM/8jpXqNxfXeKN0BPTzuhYKzjgdpJNVoJup4HNoEN M8tz4cxQdrzve8rC4XhTCBh8g56pOPVMJCWsulHVi4DFSPl+xbUPrG62Bng41eE9 fGBfymCRqsThVwhKIQnvHKDTdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAzO1bRK yJ658X63+tSZd/d8tAjsMB8GA1UdIwQYMBaAFDmFQGCy9Y1MkZxk2qS36x8M32gw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUE1MS9BRjY5MEY2MEI5 MjAxMUVDOTkxNTY3NEZDNEY5QUUwMi9PWVZBWUxMMWpVeVJuR1RhcExmckh3emZh REEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09ZVkFZTEwxalV5Um5HVGFwTGZySHd6ZmFEQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUE1MS9BRjY5MEY2MEI5MjAxMUVDOTkxNTY3NEZDNEY5QUUwMi9PWVZBWUxMMWpV eVJuR1RhcExmckh3emZhREEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCeR3cWK7J7RoEqHuGYwoxMemiAKAh05MtvAXTG6nHIVuoRaWykqGV L1blAxmWTwIKVkBw/ySwdniFoVnpGXuKbKPnCE6boEfdw2vJAa0w1d3D/SaalZqa 5vIUCmyIz1EnmpgnzBqQO4P59ZgWzMxqdqr0VXecmXMxC04Vhdd/Fff6YGAq597B cp3vxA+h5LtfuDLp1OPNWEZAFsT4cfAphVnVfmQjPjO78ndDc+PQ3B8gnvcNAWCv RGAvYeDP78N2JIR3Nzt8X2WNasJ2VtefkfbAHMNrz6fSRYqxMyR288BJtzN9+Hrb 4XqUyiZ/mtTy+tHTWZFm/MVC7ucPVEVn -----END CERTIFICATE-----Generated at Sat Aug 23 21:00:21 2025 by rpki-client