$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD4DF/310D3542399311EFA08D2E1BC4F9AE02/o222tflxI3VeVEH6xWqmu6BbCAo.mft File: o222tflxI3VeVEH6xWqmu6BbCAo.mft (raw, json) Hash identifier: flVgtmzJjuv82iwcQ7vpFHerD+crj7hXvexZqPsW6QM= Subject key identifier: E1:13:1F:38:F3:09:35:23:14:DF:6F:25:AF:41:21:B2:2C:8E:C3:46 Authority key identifier: A3:6D:B6:B5:F9:71:23:75:5E:54:41:FA:C5:6A:A6:BB:A0:5B:08:0A Certificate issuer: /CN=A91BD4DF/serialNumber=A36DB6B5F97123755E5441FAC56AA6BBA05B080A Certificate serial: DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o222tflxI3VeVEH6xWqmu6BbCAo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD4DF/310D3542399311EFA08D2E1BC4F9AE02/o222tflxI3VeVEH6xWqmu6BbCAo.mft Manifest number: D9 Signing time: Sat 23 Aug 2025 05:44:43 +0000 Manifest this update: Sat 23 Aug 2025 05:44:42 +0000 Manifest next update: Sat 30 Aug 2025 05:44:42 +0000 Files and hashes: 1: o222tflxI3VeVEH6xWqmu6BbCAo.crl (hash: Q6mu5mB6cN4j6M0YH1f8mEosKG9oVqpRtem4WioFEYU=) 2: 4136642C39AA11EF933F9583C4F9AE02.roa (hash: +fFDWaDnFu7mpfAvBElCeG8uNXNIs5iwZjBDkX/SJz0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD4DF/310D3542399311EFA08D2E1BC4F9AE02/o222tflxI3VeVEH6xWqmu6BbCAo.crl rsync://rpki.apnic.net/member_repository/A91BD4DF/310D3542399311EFA08D2E1BC4F9AE02/o222tflxI3VeVEH6xWqmu6BbCAo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o222tflxI3VeVEH6xWqmu6BbCAo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:44:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD4DF, serialNumber=A36DB6B5F97123755E5441FAC56AA6BBA05B080A Validity Not Before: Aug 23 05:44:42 2025 GMT Not After : Aug 30 05:44:42 2025 GMT Subject: CN=68a9554b-161f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:36:6a:e4:33:52:65:38:45:ca:66:be:ff:be: 87:35:7f:c5:66:4d:aa:e3:39:55:39:2c:bb:22:b2: 07:f6:d8:92:43:a7:eb:88:0e:ec:5b:18:8b:b5:0b: 0f:91:33:8d:d0:31:29:93:a2:bf:6c:f4:c7:6c:81: 98:32:a4:f5:3b:bc:06:00:b5:2c:25:07:cf:f8:a0: 96:57:3c:73:c9:49:2f:bd:3a:ad:1b:ea:1b:b5:78: 0c:78:e4:74:6a:60:c7:12:06:9a:e7:79:36:35:7f: e7:1f:bb:4c:9e:d6:c0:a9:e9:cd:95:05:9d:95:5a: 38:9e:fd:ff:b1:9c:fb:fa:ca:40:32:fb:94:2f:8e: 82:70:3d:fc:35:39:04:3b:36:30:98:49:3a:51:a4: 9a:62:7f:ac:2c:4d:9a:45:71:a6:5d:1d:16:2d:48: bd:04:f2:37:c7:ea:c0:d4:b9:e9:dd:8d:7b:31:46: 1c:df:37:0b:10:e7:8e:3b:9f:d6:c2:76:65:d3:6e: 67:ca:2d:e3:ac:b3:f0:21:c4:5d:9d:e5:6e:2d:41: 6e:ee:ca:e5:73:ed:8f:e1:f7:22:d7:d6:81:18:9b: f3:a2:c0:02:d3:bf:49:55:d9:3d:e9:f7:6c:48:78: eb:07:09:71:cc:47:10:39:54:64:9b:a3:81:8b:cb: be:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:13:1F:38:F3:09:35:23:14:DF:6F:25:AF:41:21:B2:2C:8E:C3:46 X509v3 Authority Key Identifier: keyid:A3:6D:B6:B5:F9:71:23:75:5E:54:41:FA:C5:6A:A6:BB:A0:5B:08:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD4DF/310D3542399311EFA08D2E1BC4F9AE02/o222tflxI3VeVEH6xWqmu6BbCAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o222tflxI3VeVEH6xWqmu6BbCAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD4DF/310D3542399311EFA08D2E1BC4F9AE02/o222tflxI3VeVEH6xWqmu6BbCAo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:36:5f:e4:d2:cf:db:02:dc:1c:9c:32:8a:47:72:fd:d3:06: ab:96:1b:47:7b:59:2c:73:ad:31:06:3a:7f:56:32:4c:71:f1: 23:96:8a:c1:98:82:1c:0c:b3:13:8a:12:b3:07:9a:cc:04:55: 1c:a9:6e:89:14:6a:fa:3e:78:3f:85:90:90:bf:d1:a3:32:59: 74:12:e6:06:1c:cd:36:b2:79:a8:c9:2f:35:38:09:1d:24:c5: ec:80:f1:40:a8:4c:11:82:a1:af:ce:0e:fc:12:a2:49:4c:f2: 69:37:4d:d7:67:ea:65:80:d3:ca:93:52:99:11:86:da:62:97: 36:81:2a:a1:08:6a:30:91:69:83:83:41:e3:04:70:63:b3:4e: 27:02:3b:47:48:43:bb:1b:c7:92:4e:a3:5c:b1:44:e7:be:c3: 75:03:78:7d:9c:cc:2a:04:f5:dc:54:ae:68:2b:4c:50:8e:03: 3f:34:2a:cd:02:cf:c3:05:ae:2e:f2:3a:4a:f9:08:50:f7:ef: 5f:e3:03:71:38:47:81:7b:03:e2:1d:09:56:a8:b6:ef:04:38: 4d:d0:bb:29:d6:b0:0a:43:12:04:5f:72:89:3c:b9:0f:6a:1e: 78:18:cd:dc:9e:54:05:7a:67:71:2a:6c:e0:bc:62:43:1b:78: 97:c4:f1:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ0REYxMTAvBgNVBAUTKEEzNkRCNkI1Rjk3MTIzNzU1RTU0NDFGQUM1NkFBNkJC QTA1QjA4MEEwHhcNMjUwODIzMDU0NDQyWhcNMjUwODMwMDU0NDQyWjAYMRYwFAYD VQQDEw02OGE5NTU0Yi0xNjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7jZq5DNSZThFyma+/76HNX/FZk2q4zlVOSy7IrIH9tiSQ6friA7sWxiLtQsP kTON0DEpk6K/bPTHbIGYMqT1O7wGALUsJQfP+KCWVzxzyUkvvTqtG+obtXgMeOR0 amDHEgaa53k2NX/nH7tMntbAqenNlQWdlVo4nv3/sZz7+spAMvuUL46CcD38NTkE OzYwmEk6UaSaYn+sLE2aRXGmXR0WLUi9BPI3x+rA1Lnp3Y17MUYc3zcLEOeOO5/W wnZl025nyi3jrLPwIcRdneVuLUFu7srlc+2P4fci19aBGJvzosAC079JVdk96fds SHjrBwlxzEcQOVRkm6OBi8u+YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOETHzjz CTUjFN9vJa9BIbIsjsNGMB8GA1UdIwQYMBaAFKNttrX5cSN1XlRB+sVqprugWwgK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDRERi8zMTBEMzU0MjM5 OTMxMUVGQTA4RDJFMUJDNEY5QUUwMi9vMjIydGZseEkzVmVWRUg2eFdxbXU2QmJD QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28yMjJ0Zmx4STNWZVZFSDZ4V3FtdTZCYkNBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDRERi8zMTBEMzU0MjM5OTMxMUVGQTA4RDJFMUJDNEY5QUUwMi9vMjIydGZseEkz VmVWRUg2eFdxbXU2QmJDQW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMNl/k0s/bAtwcnDKKR3L90warlhtHe1ksc60xBjp/VjJMcfEjlorB mIIcDLMTihKzB5rMBFUcqW6JFGr6Png/hZCQv9GjMll0EuYGHM02snmoyS81OAkd JMXsgPFAqEwRgqGvzg78EqJJTPJpN03XZ+plgNPKk1KZEYbaYpc2gSqhCGowkWmD g0HjBHBjs04nAjtHSEO7G8eSTqNcsUTnvsN1A3h9nMwqBPXcVK5oK0xQjgM/NCrN As/DBa4u8jpK+QhQ9+9f4wNxOEeBewPiHQlWqLbvBDhN0Lsp1rAKQxIEX3KJPLkP ah54GM3cnlQFemdxKmzgvGJDG3iXxPHW -----END CERTIFICATE-----Generated at Sat Aug 23 22:20:09 2025 by rpki-client