$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.mft File: O0eqDQMgkZXwVVxgreMpTy03oqE.mft (raw, json) Hash identifier: hLWMzlcc9ND/XyWc3LOghJa6GF4XxsNattkf9mSyPYc= Subject key identifier: E8:37:4F:D0:AF:76:AE:95:8B:F8:D9:0E:2E:C1:30:17:75:62:21:9F Authority key identifier: 3B:47:AA:0D:03:20:91:95:F0:55:5C:60:AD:E3:29:4F:2D:37:A2:A1 Certificate issuer: /CN=A91A3873/serialNumber=3B47AA0D03209195F0555C60ADE3294F2D37A2A1 Certificate serial: 02D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0eqDQMgkZXwVVxgreMpTy03oqE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.mft Manifest number: 02D3 Signing time: Sat 23 Aug 2025 01:37:40 +0000 Manifest this update: Sat 23 Aug 2025 01:37:39 +0000 Manifest next update: Sat 30 Aug 2025 01:37:39 +0000 Files and hashes: 1: O0eqDQMgkZXwVVxgreMpTy03oqE.crl (hash: xgaZEzD48ikqjPqcKNmC/rA1UDKNxMdlt1kTpBDVGAU=) 2: C78C216A070211EDB5178252C4F9AE02.roa (hash: SRhZlpn7+MBKLxOuK/LxQ3OpeiTq/ZO5FLcjac1mcNc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.crl rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0eqDQMgkZXwVVxgreMpTy03oqE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:37:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 729 (0x2d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3873, serialNumber=3B47AA0D03209195F0555C60ADE3294F2D37A2A1 Validity Not Before: Aug 23 01:37:39 2025 GMT Not After : Aug 30 01:37:39 2025 GMT Subject: CN=68a91b64-3ce9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:34:44:0b:23:82:a7:11:9b:dd:3d:22:ac:bd: 91:02:67:c7:3a:33:83:fd:d0:ae:09:23:5b:e5:65: 07:fb:f9:e5:a7:1d:ee:60:7d:b7:14:8d:51:b6:f2: 7c:f8:94:e6:4c:f3:ee:98:35:22:68:42:5c:cc:59: cd:92:a3:f7:42:21:5a:32:8b:01:5d:8f:3e:aa:07: 83:ad:1b:20:10:56:b5:53:1b:04:82:9b:d2:41:01: 7f:4e:3a:6a:5e:f2:da:a9:74:3e:26:79:11:ff:71: 52:0e:d7:03:81:a5:42:c2:ca:72:ef:09:22:c8:78: 0f:73:82:19:41:86:c2:95:3b:d2:3c:17:20:3a:5c: 5f:cf:de:b8:90:8a:e0:5a:4a:08:8c:39:83:e7:5a: 5f:c8:71:b3:92:93:14:f7:10:ec:de:e7:36:27:e7: a5:5e:e4:1d:e1:e8:eb:70:b0:76:7f:a5:dd:c7:04: 71:e3:74:16:70:0b:f5:ee:40:02:82:25:1a:97:d7: bf:db:09:53:a0:8e:e2:4b:f4:1a:f1:9c:d4:cc:4a: c3:72:1a:63:dd:00:37:0a:60:dc:f0:38:c6:3d:b6: 7d:50:20:50:93:d7:a1:15:81:e4:b5:3e:89:bb:0a: 74:e4:0e:51:12:9a:9b:40:21:d4:5b:b0:c6:56:ac: 59:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:37:4F:D0:AF:76:AE:95:8B:F8:D9:0E:2E:C1:30:17:75:62:21:9F X509v3 Authority Key Identifier: keyid:3B:47:AA:0D:03:20:91:95:F0:55:5C:60:AD:E3:29:4F:2D:37:A2:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0eqDQMgkZXwVVxgreMpTy03oqE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:2f:5b:f1:37:24:39:95:fb:ef:33:f3:14:37:37:c7:aa:a9: e4:26:0d:e9:6a:9b:c8:fb:cb:37:4e:1e:07:27:bb:2f:1a:55: c0:a5:62:5d:2e:72:e9:89:95:df:20:2a:6b:93:3c:3e:d8:4c: a1:cd:58:9c:a4:a6:7b:98:ec:b7:b8:87:3c:f6:08:6e:40:ce: 9c:bd:9a:f3:14:18:d4:ba:65:61:7c:af:2d:35:72:03:e7:66: 2f:56:a1:bd:2b:59:e7:a2:7d:f5:75:7a:eb:f4:20:e0:42:3e: b2:ad:ab:74:ef:13:90:b6:58:51:03:07:97:81:16:ef:54:fe: 67:d5:cd:ea:72:e0:97:dd:57:97:b5:b0:ff:62:8f:30:b3:d3: 75:9a:08:5a:d2:95:07:f1:89:a7:49:b9:99:5f:45:c1:6a:b5: f2:88:ba:00:18:04:6b:22:45:89:38:5d:18:e8:6a:69:55:24: f7:25:55:ab:60:af:c9:8e:d4:1b:de:68:19:c7:74:b1:9e:b7: ef:0e:c8:fd:0a:55:d8:c5:40:7f:74:87:e1:1d:72:0d:29:71: a0:59:9b:f4:ef:56:af:ca:80:91:cd:f1:0e:a2:41:66:50:27: 37:03:49:ea:e7:07:c7:32:00:34:da:60:79:dd:c3:9a:eb:db: a4:d1:be:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM4NzMxMTAvBgNVBAUTKDNCNDdBQTBEMDMyMDkxOTVGMDU1NUM2MEFERTMyOTRG MkQzN0EyQTEwHhcNMjUwODIzMDEzNzM5WhcNMjUwODMwMDEzNzM5WjAYMRYwFAYD VQQDEw02OGE5MWI2NC0zY2U5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0DRECyOCpxGb3T0irL2RAmfHOjOD/dCuCSNb5WUH+/nlpx3uYH23FI1RtvJ8 +JTmTPPumDUiaEJczFnNkqP3QiFaMosBXY8+qgeDrRsgEFa1UxsEgpvSQQF/Tjpq XvLaqXQ+JnkR/3FSDtcDgaVCwspy7wkiyHgPc4IZQYbClTvSPBcgOlxfz964kIrg WkoIjDmD51pfyHGzkpMU9xDs3uc2J+elXuQd4ejrcLB2f6XdxwRx43QWcAv17kAC giUal9e/2wlToI7iS/Qa8ZzUzErDchpj3QA3CmDc8DjGPbZ9UCBQk9ehFYHktT6J uwp05A5REpqbQCHUW7DGVqxZywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOg3T9Cv dq6Vi/jZDi7BMBd1YiGfMB8GA1UdIwQYMBaAFDtHqg0DIJGV8FVcYK3jKU8tN6Kh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzg3My8xMTJFQzE5NkZE QjgxMUVDOEUzODY5MTNDNEY5QUUwMi9PMGVxRFFNZ2taWHdWVnhncmVNcFR5MDNv cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL08wZXFEUU1na1pYd1ZWeGdyZU1wVHkwM29xRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Mzg3My8xMTJFQzE5NkZEQjgxMUVDOEUzODY5MTNDNEY5QUUwMi9PMGVxRFFNZ2ta WHdWVnhncmVNcFR5MDNvcUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdL1vxNyQ5lfvvM/MUNzfHqqnkJg3papvI+8s3Th4HJ7svGlXApWJd LnLpiZXfICprkzw+2EyhzVicpKZ7mOy3uIc89ghuQM6cvZrzFBjUumVhfK8tNXID 52YvVqG9K1nnon31dXrr9CDgQj6yrat07xOQtlhRAweXgRbvVP5n1c3qcuCX3VeX tbD/Yo8ws9N1mgha0pUH8YmnSbmZX0XBarXyiLoAGARrIkWJOF0Y6GppVST3JVWr YK/JjtQb3mgZx3SxnrfvDsj9ClXYxUB/dIfhHXINKXGgWZv071avyoCRzfEOokFm UCc3A0nq5wfHMgA02mB53cOa69uk0b6H -----END CERTIFICATE-----Generated at Sun Aug 24 00:45:10 2025 by rpki-client