$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.mft File: O6SMSvsA9zNCJMBRU6rG8mhoQ7c.mft (raw, json) Hash identifier: SxFqwfylFm1Q74e2oMBU0gxGQnbJg3K4gqK+WneJLkE= Subject key identifier: D4:14:BE:36:6C:42:5A:E5:40:E7:7A:98:EF:4D:94:B3:78:3F:A0:F9 Authority key identifier: 3B:A4:8C:4A:FB:00:F7:33:42:24:C0:51:53:AA:C6:F2:68:68:43:B7 Certificate issuer: /CN=A91AB92D/serialNumber=3BA48C4AFB00F7334224C05153AAC6F2686843B7 Certificate serial: 011C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.mft Manifest number: 011C Signing time: Sat 23 Aug 2025 02:57:42 +0000 Manifest this update: Sat 23 Aug 2025 02:57:41 +0000 Manifest next update: Sat 30 Aug 2025 02:57:41 +0000 Files and hashes: 1: O6SMSvsA9zNCJMBRU6rG8mhoQ7c.crl (hash: 9RjEYAAqeNsXqaAeFOkiUTP8MBAtRwdLo7WxQA+KS6w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.crl rsync://rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:57:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 284 (0x11c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB92D, serialNumber=3BA48C4AFB00F7334224C05153AAC6F2686843B7 Validity Not Before: Aug 23 02:57:41 2025 GMT Not After : Aug 30 02:57:41 2025 GMT Subject: CN=68a92e25-3e3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3f:b4:e8:46:d9:13:82:3f:bd:02:35:5b:08: fd:cf:8f:2c:5e:36:e8:97:3d:ad:66:c4:f7:d7:ed: 41:9d:99:36:3e:41:e9:ee:c3:4a:30:b3:c5:04:76: 0f:31:a6:8f:8f:ee:6a:8a:15:06:c6:35:5d:69:ad: 57:0c:fb:cd:1e:98:9d:0a:2d:1d:bd:d1:c1:29:f8: 6f:bc:a0:5e:52:7f:5e:5b:b5:2a:08:66:42:77:c8: 1e:d3:d1:1b:9a:f3:48:69:8d:04:4a:8b:49:da:20: da:af:e3:62:bc:8a:f4:ff:1e:33:0c:39:c6:8d:36: ed:6d:d7:3c:24:07:16:98:62:99:93:8e:a7:66:a7: 6c:85:c4:0a:7c:93:c8:44:a4:c4:19:f2:20:f1:14: d9:3c:57:db:f0:3b:22:35:30:ee:fe:e1:e2:be:c3: c5:21:3a:e1:ac:8c:2d:83:c1:b1:18:bd:95:da:fc: 29:fc:72:9e:36:f3:b1:0c:46:67:01:dc:45:a9:94: 0a:4e:32:c5:25:c8:3f:6c:7c:15:d4:60:53:dd:f4: e4:36:7f:f9:4e:e2:1c:b2:7a:44:8f:41:78:6c:8e: 3c:26:71:63:ee:ae:74:2b:83:32:70:46:48:6b:ca: 33:be:f1:c1:32:d6:dc:ef:f2:e4:b2:58:f7:5a:a1: 9a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:14:BE:36:6C:42:5A:E5:40:E7:7A:98:EF:4D:94:B3:78:3F:A0:F9 X509v3 Authority Key Identifier: keyid:3B:A4:8C:4A:FB:00:F7:33:42:24:C0:51:53:AA:C6:F2:68:68:43:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:7a:f8:17:9d:ba:dc:a0:12:8c:66:2e:4a:81:03:ff:84:ec: d8:6d:09:cf:81:65:18:a7:70:81:68:bd:e4:e9:56:6a:55:ed: f8:ab:99:b0:d6:c8:4f:e6:f6:8d:f7:0a:c9:7b:4f:f0:e6:3a: 50:a7:a1:7f:38:ef:1a:a5:e6:57:4d:07:89:78:b0:35:dd:fe: e6:e0:2b:8e:d7:ca:40:4b:ab:f9:72:08:2d:c7:3e:fb:b2:c0: e6:a6:38:e0:a6:09:04:98:2e:36:02:cc:7a:48:f6:7d:23:54: ba:b9:43:59:11:67:08:38:a6:48:d2:0d:d0:0c:1a:87:f4:85: a8:8c:e1:52:e6:a3:54:99:42:d3:6e:f1:ab:d0:db:80:16:51: 20:f9:41:d0:ca:46:31:b9:0b:f6:76:df:d7:f0:2f:5a:82:08: 07:93:21:47:c2:81:e7:e4:65:56:0c:b3:7d:e0:b9:47:16:dc: 04:8b:80:ef:df:2f:e2:a6:c3:49:f7:24:0f:8a:94:79:ae:b9: 68:b4:d4:af:eb:56:9a:79:91:4a:e1:f6:4a:66:8e:36:db:a1: 10:01:54:2c:1b:9a:71:b9:ed:62:3e:c4:c1:0d:36:18:ac:d4: 75:4f:2e:5e:b5:54:9f:7c:6f:2a:21:38:65:12:b6:ca:b9:21: f7:53:59:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI5MkQxMTAvBgNVBAUTKDNCQTQ4QzRBRkIwMEY3MzM0MjI0QzA1MTUzQUFDNkYy Njg2ODQzQjcwHhcNMjUwODIzMDI1NzQxWhcNMjUwODMwMDI1NzQxWjAYMRYwFAYD VQQDEw02OGE5MmUyNS0zZTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0T+06EbZE4I/vQI1Wwj9z48sXjbolz2tZsT31+1BnZk2PkHp7sNKMLPFBHYP MaaPj+5qihUGxjVdaa1XDPvNHpidCi0dvdHBKfhvvKBeUn9eW7UqCGZCd8ge09Eb mvNIaY0ESotJ2iDar+NivIr0/x4zDDnGjTbtbdc8JAcWmGKZk46nZqdshcQKfJPI RKTEGfIg8RTZPFfb8DsiNTDu/uHivsPFITrhrIwtg8GxGL2V2vwp/HKeNvOxDEZn AdxFqZQKTjLFJcg/bHwV1GBT3fTkNn/5TuIcsnpEj0F4bI48JnFj7q50K4MycEZI a8ozvvHBMtbc7/Lkslj3WqGaQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNQUvjZs QlrlQOd6mO9NlLN4P6D5MB8GA1UdIwQYMBaAFDukjEr7APczQiTAUVOqxvJoaEO3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjkyRC84MEI4MTcxQUNF RDExMUVFOEJGNjRCNzNDNEY5QUUwMi9PNlNNU3ZzQTl6TkNKTUJSVTZyRzhtaG9R N2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL082U01TdnNBOXpOQ0pNQlJVNnJHOG1ob1E3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjkyRC84MEI4MTcxQUNFRDExMUVFOEJGNjRCNzNDNEY5QUUwMi9PNlNNU3ZzQTl6 TkNKTUJSVTZyRzhtaG9RN2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQevgXnbrcoBKMZi5KgQP/hOzYbQnPgWUYp3CBaL3k6VZqVe34q5mw 1shP5vaN9wrJe0/w5jpQp6F/OO8apeZXTQeJeLA13f7m4CuO18pAS6v5cggtxz77 ssDmpjjgpgkEmC42Asx6SPZ9I1S6uUNZEWcIOKZI0g3QDBqH9IWojOFS5qNUmULT bvGr0NuAFlEg+UHQykYxuQv2dt/X8C9agggHkyFHwoHn5GVWDLN94LlHFtwEi4Dv 3y/ipsNJ9yQPipR5rrlotNSv61aaeZFK4fZKZo4226EQAVQsG5pxue1iPsTBDTYY rNR1Ty5etVSffG8qIThlErbKuSH3U1ke -----END CERTIFICATE-----Generated at Sat Aug 23 14:31:11 2025 by rpki-client