$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.mft File: uOlsag2VSKKgQMvnGZdFun2x7Sg.mft (raw, json) Hash identifier: XCioxzdXZeD4jvj8FwIz1EmOss1NyHgczZWcJrMrIFk= Subject key identifier: 2E:1F:71:DD:2E:D1:89:A9:AC:5B:C4:F5:A1:60:84:A0:51:3D:04:01 Authority key identifier: B8:E9:6C:6A:0D:95:48:A2:A0:40:CB:E7:19:97:45:BA:7D:B1:ED:28 Certificate issuer: /CN=A91B2D29/serialNumber=B8E96C6A0D9548A2A040CBE7199745BA7DB1ED28 Certificate serial: 09DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOlsag2VSKKgQMvnGZdFun2x7Sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.mft Manifest number: 46FA Signing time: Fri 22 Aug 2025 15:50:40 +0000 Manifest this update: Fri 22 Aug 2025 15:50:39 +0000 Manifest next update: Fri 29 Aug 2025 15:50:39 +0000 Files and hashes: 1: uOlsag2VSKKgQMvnGZdFun2x7Sg.crl (hash: lBemZkGP0Gjj2h0rb2ObQLBUKLeZ1gfxQgpugUk2CH4=) 2: 7CEC1452E17E11ECAB421316C4F9AE02.roa (hash: HQMuxFH+p0cd5TxCsDJ5OnEAYnLT5yZN5O7uVIpfgdA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.crl rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOlsag2VSKKgQMvnGZdFun2x7Sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:50:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2525 (0x9dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D29, serialNumber=B8E96C6A0D9548A2A040CBE7199745BA7DB1ED28 Validity Not Before: Aug 22 15:50:39 2025 GMT Not After : Aug 29 15:50:39 2025 GMT Subject: CN=68a891cf-5a2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:91:e8:bc:80:70:fb:d4:92:f7:d5:be:dc:13: 67:14:ce:d1:47:e0:e2:d3:2e:22:75:4c:37:90:f6: 91:d4:9f:dc:ef:d0:fa:1c:23:96:56:39:5d:61:93: 2d:ae:15:1e:35:e6:48:d3:c7:af:5e:42:84:ad:0f: d1:1b:2e:42:24:46:7b:0e:07:95:09:58:2b:c6:23: 81:dd:fb:62:6f:04:cf:af:8b:21:47:71:43:3b:e4: ba:6e:7f:c6:07:2f:13:b0:9f:13:a3:10:ce:13:0a: 10:bf:c5:60:c0:54:8c:8c:3c:05:f7:44:31:03:30: ed:c8:27:db:08:e1:0e:6f:a8:6b:32:9f:e5:ab:49: 0a:47:55:37:6f:dc:59:46:a9:cb:f7:cd:d2:fd:24: 71:76:07:b9:63:3c:95:c5:d3:82:e3:3f:6c:4a:d4: cb:63:fd:b9:3a:e4:19:f2:51:6b:50:b3:c9:8e:7d: c1:c4:6a:92:bf:e0:b4:08:f2:84:5b:51:d2:3f:f4: 58:1c:4b:1b:f5:07:e1:b7:21:d4:d6:07:84:fc:f3: f7:ae:0d:92:c1:84:22:f9:e1:a3:4e:6c:d3:e5:3c: b1:f9:7f:af:0c:de:89:13:58:73:66:09:2c:bb:59: 0b:62:4b:e4:4c:f7:a4:da:4e:74:e3:c4:4f:70:d2: 9a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:1F:71:DD:2E:D1:89:A9:AC:5B:C4:F5:A1:60:84:A0:51:3D:04:01 X509v3 Authority Key Identifier: keyid:B8:E9:6C:6A:0D:95:48:A2:A0:40:CB:E7:19:97:45:BA:7D:B1:ED:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOlsag2VSKKgQMvnGZdFun2x7Sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:ab:ac:2d:0e:0c:c6:cc:7c:76:71:cc:e5:97:8f:04:e5:82: 3d:ba:69:f2:0a:28:d4:c5:65:b5:f9:ed:72:68:aa:0d:fb:80: 4d:6d:86:99:48:13:c8:12:46:76:3d:21:e2:7e:14:cc:02:86: cd:a0:a1:89:b8:a0:78:20:02:f4:f2:02:81:2b:b3:07:57:55: 21:5d:9a:4e:d4:fa:c8:aa:fd:07:e6:0e:e9:d6:b9:9b:8b:92: f7:01:3e:68:cc:a1:bf:38:f1:58:68:83:91:5a:fb:12:4d:14: 81:f2:b0:df:26:97:ed:89:ed:5b:97:37:1f:00:0e:36:ee:75: 49:f3:32:fb:92:39:1c:81:c5:23:07:4e:6b:90:89:b3:aa:1b: 22:c2:7c:2c:c7:be:9e:bb:ec:23:0a:09:73:bc:24:ca:5e:b6: 96:ec:d6:ca:dd:a8:f1:8c:92:6e:c3:8a:41:ce:3a:d9:25:f3: db:94:16:12:5f:86:bc:76:63:95:7e:e7:65:82:3a:19:9e:f2: 71:c9:10:3b:6f:66:de:ee:2a:53:91:d5:ac:dc:28:27:81:c6: 56:b0:08:9d:98:d8:a7:d9:51:29:7a:f2:d6:2c:a2:0d:72:bd: 2f:b1:2f:6c:f8:57:04:53:5f:39:5e:7b:aa:56:21:8f:a8:80: c4:2b:07:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJEMjkxMTAvBgNVBAUTKEI4RTk2QzZBMEQ5NTQ4QTJBMDQwQ0JFNzE5OTc0NUJB N0RCMUVEMjgwHhcNMjUwODIyMTU1MDM5WhcNMjUwODI5MTU1MDM5WjAYMRYwFAYD VQQDEw02OGE4OTFjZi01YTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApZHovIBw+9SS99W+3BNnFM7RR+Di0y4idUw3kPaR1J/c79D6HCOWVjldYZMt rhUeNeZI08evXkKErQ/RGy5CJEZ7DgeVCVgrxiOB3ftibwTPr4shR3FDO+S6bn/G By8TsJ8ToxDOEwoQv8VgwFSMjDwF90QxAzDtyCfbCOEOb6hrMp/lq0kKR1U3b9xZ RqnL983S/SRxdge5YzyVxdOC4z9sStTLY/25OuQZ8lFrULPJjn3BxGqSv+C0CPKE W1HSP/RYHEsb9QfhtyHU1geE/PP3rg2SwYQi+eGjTmzT5Tyx+X+vDN6JE1hzZgks u1kLYkvkTPek2k5048RPcNKa7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC4fcd0u 0YmprFvE9aFghKBRPQQBMB8GA1UdIwQYMBaAFLjpbGoNlUiioEDL5xmXRbp9se0o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkQyOS9GNzFFNzE2NjU1 MjExMUU1QURCMjA5MkFDNEY5QUUwMi91T2xzYWcyVlNLS2dRTXZuR1pkRnVuMng3 U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VPbHNhZzJWU0tLZ1FNdm5HWmRGdW4yeDdTZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkQyOS9GNzFFNzE2NjU1MjExMUU1QURCMjA5MkFDNEY5QUUwMi91T2xzYWcyVlNL S2dRTXZuR1pkRnVuMng3U2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3q6wtDgzGzHx2cczll48E5YI9umnyCijUxWW1+e1yaKoN+4BNbYaZ SBPIEkZ2PSHifhTMAobNoKGJuKB4IAL08gKBK7MHV1UhXZpO1PrIqv0H5g7p1rmb i5L3AT5ozKG/OPFYaIORWvsSTRSB8rDfJpftie1blzcfAA427nVJ8zL7kjkcgcUj B05rkImzqhsiwnwsx76eu+wjCglzvCTKXraW7NbK3ajxjJJuw4pBzjrZJfPblBYS X4a8dmOVfudlgjoZnvJxyRA7b2be7ipTkdWs3CgngcZWsAidmNin2VEpevLWLKIN cr0vsS9s+FcEU185XnuqViGPqIDEKwcP -----END CERTIFICATE-----Generated at Sat Aug 23 17:47:12 2025 by rpki-client