$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft File: oL2xs_Hk5wTrTU8s5f405lA3uUM.mft (raw, json) Hash identifier: 80rqGBiM4HBlSPREtvQ3KCE4aotI0dzYelIAo/3u0PI= Subject key identifier: 85:AA:D2:0B:21:66:38:2F:21:3B:A7:21:BD:5D:9D:A0:82:FD:A3:F9 Authority key identifier: A0:BD:B1:B3:F1:E4:E7:04:EB:4D:4F:2C:E5:FE:34:E6:50:37:B9:43 Certificate issuer: /CN=A91A5B83/serialNumber=A0BDB1B3F1E4E704EB4D4F2CE5FE34E65037B943 Certificate serial: 091F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft Manifest number: 0912 Signing time: Fri 22 Aug 2025 20:26:39 +0000 Manifest this update: Fri 22 Aug 2025 20:26:39 +0000 Manifest next update: Fri 29 Aug 2025 20:26:39 +0000 Files and hashes: 1: oL2xs_Hk5wTrTU8s5f405lA3uUM.crl (hash: iz1YFjhswV5J0nwqf7bCqf0Cvjqsyh5obRUp99fj8ok=) 2: 975BB0CE73AD11EDAD75DB7DC4F9AE02.roa (hash: jBS/1Hlfhun69e6e4ZHEVPi7ipp4H+jsjI8X7M9ZNQw=) 3: A21F0938C44B11EB8CF88F1EC4F9AE02.roa (hash: /W7jNuOZe0YfOd8yIagbqgnCN+PhgeGc0tSQIMsMPPI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.crl rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:26:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2335 (0x91f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5B83, serialNumber=A0BDB1B3F1E4E704EB4D4F2CE5FE34E65037B943 Validity Not Before: Aug 22 20:26:39 2025 GMT Not After : Aug 29 20:26:39 2025 GMT Subject: CN=68a8d27f-4d9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c2:6d:e6:6b:0a:67:b6:d0:9e:23:5d:4c:53: 83:cd:a9:8e:d6:00:8c:8d:13:ff:65:8c:b8:5f:00: 6e:b7:c7:dd:29:85:1a:d4:20:dd:63:aa:10:d3:ef: 09:a1:fc:9f:c1:8d:bb:90:ef:59:1e:16:ce:c4:11: 5a:16:bb:b4:46:7c:8c:18:49:b5:c2:b7:8d:a3:bf: 4e:55:80:34:41:a9:2d:09:d2:9f:ff:36:b4:23:1e: cb:89:fe:e0:ec:51:25:09:f2:27:e0:4f:2e:16:3d: 56:6e:89:46:76:2d:bf:40:89:25:9e:b0:eb:1c:27: 59:37:8c:6a:e9:ef:99:65:32:1d:db:06:0d:7a:80: 9d:52:e7:31:3c:5b:66:23:10:e0:2f:a4:f3:04:61: 81:a6:9c:50:95:c1:97:30:4e:9b:73:94:08:f9:c1: 9a:e0:c2:78:2d:88:4b:0a:9b:31:15:90:9d:9b:57: f6:ad:77:23:0a:61:a8:34:fd:02:b9:6c:f2:d2:ac: 9f:7c:42:3f:6b:7e:8f:8f:d0:ca:76:16:75:8a:a9: 21:37:0a:49:31:21:c1:91:1c:32:be:c7:64:ed:61: 7b:63:5d:2a:7c:24:48:17:0a:56:7f:31:01:9c:b5: a9:82:b3:e8:eb:34:08:bb:d6:78:36:92:21:1a:0e: 13:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:AA:D2:0B:21:66:38:2F:21:3B:A7:21:BD:5D:9D:A0:82:FD:A3:F9 X509v3 Authority Key Identifier: keyid:A0:BD:B1:B3:F1:E4:E7:04:EB:4D:4F:2C:E5:FE:34:E6:50:37:B9:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:fb:92:35:96:bb:41:26:51:57:95:39:93:40:03:f9:a7:5c: 93:d0:1f:5f:41:32:88:25:ab:f7:1c:3f:a8:7d:09:bf:54:a0: d4:e8:eb:df:31:81:13:83:30:94:f4:2f:f0:a6:70:b8:69:62: fd:b6:4f:dc:60:42:09:8e:93:39:8e:a4:03:f5:6f:7a:fc:cf: 7f:18:73:20:99:80:fb:9d:2a:28:1b:68:10:b8:ca:83:45:dd: ef:3b:16:b0:e0:40:23:74:19:18:d2:bf:9c:1b:1f:b6:57:cd: a3:c5:bc:07:c7:a2:85:d3:1f:df:25:09:ae:3f:d8:de:70:d9: be:05:99:a7:f7:d3:68:57:cc:82:61:25:34:8f:df:b1:ad:69: b0:38:a1:5f:82:e5:dd:9f:99:03:5b:a6:a9:9d:84:dd:ad:73: e9:79:41:34:1c:f3:0c:b8:ce:b3:ae:18:5d:47:a9:37:15:10: a4:60:37:2d:c4:aa:15:ce:0c:a9:46:4e:bd:23:b5:56:72:15: 1f:9a:f5:5a:76:db:7b:75:6f:13:50:8c:c9:32:38:04:01:3a: b3:87:55:89:76:e9:66:de:7c:e5:f0:bd:4f:18:6b:5c:ac:f1: 6c:72:46:39:4c:5e:28:0d:cf:e4:1d:e3:37:d7:6a:5e:e7:13: c8:6f:06:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVCODMxMTAvBgNVBAUTKEEwQkRCMUIzRjFFNEU3MDRFQjRENEYyQ0U1RkUzNEU2 NTAzN0I5NDMwHhcNMjUwODIyMjAyNjM5WhcNMjUwODI5MjAyNjM5WjAYMRYwFAYD VQQDEw02OGE4ZDI3Zi00ZDlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAusJt5msKZ7bQniNdTFODzamO1gCMjRP/ZYy4XwBut8fdKYUa1CDdY6oQ0+8J ofyfwY27kO9ZHhbOxBFaFru0RnyMGEm1wreNo79OVYA0QaktCdKf/za0Ix7Lif7g 7FElCfIn4E8uFj1WbolGdi2/QIklnrDrHCdZN4xq6e+ZZTId2wYNeoCdUucxPFtm IxDgL6TzBGGBppxQlcGXME6bc5QI+cGa4MJ4LYhLCpsxFZCdm1f2rXcjCmGoNP0C uWzy0qyffEI/a36Pj9DKdhZ1iqkhNwpJMSHBkRwyvsdk7WF7Y10qfCRIFwpWfzEB nLWpgrPo6zQIu9Z4NpIhGg4T/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIWq0gsh ZjgvITunIb1dnaCC/aP5MB8GA1UdIwQYMBaAFKC9sbPx5OcE601PLOX+NOZQN7lD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUI4My8wRjQ2Q0E4Q0FE QUYxMUVBODRDMDRFMTBDNEY5QUUwMi9vTDJ4c19IazV3VHJUVThzNWY0MDVsQTN1 VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29MMnhzX0hrNXdUclRVOHM1ZjQwNWxBM3VVTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUI4My8wRjQ2Q0E4Q0FEQUYxMUVBODRDMDRFMTBDNEY5QUUwMi9vTDJ4c19IazV3 VHJUVThzNWY0MDVsQTN1VU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBS+5I1lrtBJlFXlTmTQAP5p1yT0B9fQTKIJav3HD+ofQm/VKDU6Ovf MYETgzCU9C/wpnC4aWL9tk/cYEIJjpM5jqQD9W96/M9/GHMgmYD7nSooG2gQuMqD Rd3vOxaw4EAjdBkY0r+cGx+2V82jxbwHx6KF0x/fJQmuP9jecNm+BZmn99NoV8yC YSU0j9+xrWmwOKFfguXdn5kDW6apnYTdrXPpeUE0HPMMuM6zrhhdR6k3FRCkYDct xKoVzgypRk69I7VWchUfmvVadtt7dW8TUIzJMjgEATqzh1WJdulm3nzl8L1PGGtc rPFsckY5TF4oDc/kHeM312pe5xPIbwYM -----END CERTIFICATE-----Generated at Sun Aug 24 00:16:37 2025 by rpki-client