$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft File: OU6gholcbxfZNlSKMiOLgs95KU0.mft (raw, json) Hash identifier: RQGGtWdpu1WtOJXh3arAvdimcp44HOOuqLPz0IB6FEs= Subject key identifier: 34:F0:E7:7B:18:80:98:A5:50:93:58:82:2C:46:F9:5F:1D:10:E7:A9 Authority key identifier: 39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D Certificate issuer: /CN=A91AAE16/serialNumber=394EA086895C6F17D936548A32238B82CF79294D Certificate serial: 0FE5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft Manifest number: 0FD6 Signing time: Fri 22 Aug 2025 17:37:22 +0000 Manifest this update: Fri 22 Aug 2025 17:37:22 +0000 Manifest next update: Fri 29 Aug 2025 17:37:22 +0000 Files and hashes: 1: OU6gholcbxfZNlSKMiOLgs95KU0.crl (hash: 3Vznl7lyALSUgWxhMnfxLd51+VbrRS/X2fp+FNKtnkk=) 2: 68DA14E65BB211E9BF474F16C4F9AE02.roa (hash: +yhzJzGn+WxW2d4EtUHBstgfBIaoIoaYoJwg0N+/u2I=) 3: B2409F28DF9311EEBF6BC36DC4F9AE02.roa (hash: bOx/MaRmXB38ne/1h1RZYscRhBFAXmNorXwlc1KE7w8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.crl rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:37:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4069 (0xfe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAE16, serialNumber=394EA086895C6F17D936548A32238B82CF79294D Validity Not Before: Aug 22 17:37:22 2025 GMT Not After : Aug 29 17:37:22 2025 GMT Subject: CN=68a8aad2-af6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:17:e4:87:c4:67:b2:d6:8f:e3:5f:ef:9e:f8: 0d:f2:61:de:58:b8:ce:a7:2c:a6:a2:50:b6:0d:77: 7b:8c:87:df:7a:30:8f:5d:19:60:70:c8:ec:2a:1e: 6c:f2:e6:6f:c6:26:ab:3a:10:8b:df:a1:05:11:38: 6d:20:ab:f3:39:12:5a:e4:62:3d:af:da:d3:5e:cc: 2d:f9:9d:1e:21:cd:4c:29:f3:e7:97:17:4e:15:17: d8:4b:2f:cf:61:31:b0:7b:43:04:c4:e5:a0:b9:5e: 86:95:55:2d:3e:74:11:43:93:60:aa:b4:45:62:b4: d1:89:66:75:66:0c:03:9f:4c:90:de:2a:b3:f9:54: 00:44:75:8a:41:5b:bc:47:6f:87:e0:bc:1d:52:94: 4b:26:e8:28:97:26:6b:3e:96:4d:c1:8f:f0:95:df: e8:71:f4:f1:3d:30:ad:b0:ea:9f:99:af:c8:1e:61: b0:25:e8:8d:e2:30:79:59:79:17:58:24:0f:64:0c: 9b:09:ca:85:76:b9:e0:5e:f7:41:30:69:e4:49:54: bc:e6:3f:fb:2b:89:c3:18:19:8b:1b:2f:82:7c:f7: 65:bb:ab:1d:51:82:03:04:b9:2c:68:1b:42:e6:7a: 16:6f:e2:03:62:a1:3a:a7:69:cc:0f:c2:23:0c:c1: 97:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F0:E7:7B:18:80:98:A5:50:93:58:82:2C:46:F9:5F:1D:10:E7:A9 X509v3 Authority Key Identifier: keyid:39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:c6:e4:cb:a8:2a:ff:50:0c:d5:e0:63:ca:ff:9b:90:17:a4: bd:d3:24:5e:f7:97:8a:b8:dd:42:cc:a3:78:6e:b6:0e:5e:23: 2a:d6:5d:fe:b5:ed:a1:65:b6:ae:be:2e:0a:38:cf:81:21:31: 23:f4:c0:1c:9c:72:93:3e:99:f5:27:84:ca:2c:ad:5c:76:b7: 5a:64:7e:20:9b:d7:00:50:48:20:9b:01:e0:60:52:c0:f9:b5: 79:af:c0:9f:c1:c8:e2:20:56:76:c8:b9:46:10:47:9d:c1:de: 93:1f:4c:87:d5:a9:43:00:14:e0:43:06:0b:95:59:35:d3:0f: c2:28:c6:85:34:75:d4:c0:9e:cc:84:43:ca:50:3c:66:22:21: 5d:bb:ca:4d:3a:43:ce:a6:67:1f:96:b6:a5:fb:b4:0d:1a:65: 45:43:0c:29:4e:f7:5c:72:6a:a9:1e:1b:01:3d:0a:23:d0:82: 39:e8:4d:56:d4:1d:2a:38:3e:59:15:02:15:27:95:d0:1c:d8: 1a:30:cb:f5:94:ab:5f:93:ab:6f:a7:79:53:19:b0:c3:9c:3f: 87:af:a9:ca:0e:95:6a:d5:a5:35:44:48:ab:91:a9:74:80:a7: df:be:4e:d9:65:f7:01:b3:4c:18:3e:1c:4b:ad:0d:94:00:b4: a7:92:c8:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD+UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFMTYxMTAvBgNVBAUTKDM5NEVBMDg2ODk1QzZGMTdEOTM2NTQ4QTMyMjM4Qjgy Q0Y3OTI5NEQwHhcNMjUwODIyMTczNzIyWhcNMjUwODI5MTczNzIyWjAYMRYwFAYD VQQDEw02OGE4YWFkMi1hZjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxRfkh8RnstaP41/vnvgN8mHeWLjOpyymolC2DXd7jIffejCPXRlgcMjsKh5s 8uZvxiarOhCL36EFEThtIKvzORJa5GI9r9rTXswt+Z0eIc1MKfPnlxdOFRfYSy/P YTGwe0MExOWguV6GlVUtPnQRQ5NgqrRFYrTRiWZ1ZgwDn0yQ3iqz+VQARHWKQVu8 R2+H4LwdUpRLJugolyZrPpZNwY/wld/ocfTxPTCtsOqfma/IHmGwJeiN4jB5WXkX WCQPZAybCcqFdrngXvdBMGnkSVS85j/7K4nDGBmLGy+CfPdlu6sdUYIDBLksaBtC 5noWb+IDYqE6p2nMD8IjDMGX4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDTw53sY gJilUJNYgixG+V8dEOepMB8GA1UdIwQYMBaAFDlOoIaJXG8X2TZUijIji4LPeSlN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUUxNi8xNzQ4ODU1MDVC QjExMUU5OEIxMDNCMTNDNEY5QUUwMi9PVTZnaG9sY2J4ZlpObFNLTWlPTGdzOTVL VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09VNmdob2xjYnhmWk5sU0tNaU9MZ3M5NUtVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUUxNi8xNzQ4ODU1MDVCQjExMUU5OEIxMDNCMTNDNEY5QUUwMi9PVTZnaG9sY2J4 ZlpObFNLTWlPTGdzOTVLVTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCxuTLqCr/UAzV4GPK/5uQF6S90yRe95eKuN1CzKN4brYOXiMq1l3+ te2hZbauvi4KOM+BITEj9MAcnHKTPpn1J4TKLK1cdrdaZH4gm9cAUEggmwHgYFLA +bV5r8CfwcjiIFZ2yLlGEEedwd6TH0yH1alDABTgQwYLlVk10w/CKMaFNHXUwJ7M hEPKUDxmIiFdu8pNOkPOpmcflral+7QNGmVFQwwpTvdccmqpHhsBPQoj0II56E1W 1B0qOD5ZFQIVJ5XQHNgaMMv1lKtfk6tvp3lTGbDDnD+Hr6nKDpVq1aU1REirkal0 gKffvk7ZZfcBs0wYPhxLrQ2UALSnksj/ -----END CERTIFICATE-----Generated at Sun Aug 24 07:02:54 2025 by rpki-client