$ rpki-client -vvf rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft File: OS824KRQBTw9xm0uOJThDKcz3aY.mft (raw, json) Hash identifier: kSNBm+5X3qUNcjesD+o1l+xxz/p5kN3d7XS0PnEj4o0= Subject key identifier: 74:B2:36:98:6C:CE:A6:6E:19:08:E8:85:70:3B:F4:3B:C8:46:2C:E8 Authority key identifier: 39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6 Certificate issuer: /CN=A91C326F/serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6 Certificate serial: 071E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft Manifest number: 06F8 Signing time: Fri 22 Aug 2025 22:10:05 +0000 Manifest this update: Fri 22 Aug 2025 22:10:04 +0000 Manifest next update: Fri 29 Aug 2025 22:10:04 +0000 Files and hashes: 1: OS824KRQBTw9xm0uOJThDKcz3aY.crl (hash: zxcT9nMWoJY/ayQC3sCfmqKtfq0EP02RC5QRJPckiQE=) 2: DE6E8CA8257F11F0823F9E46C4F9AE02.roa (hash: jUyUfVKqSzdQ1Jiv0y+K/4ZOmbxn+iVK0WY87xliBD0=) 3: B9CCEC5A72E411ED833AE326C4F9AE02.roa (hash: 7STuNNvyySdvKLv0ZARurOGrWZyKElkT0Pp3fy6yFYY=) 4: B8D1689472E411ED833AE326C4F9AE02.roa (hash: JSwTLZ+Ks+XHKVTbFIphlZkac86sl1CWT662kq+fPJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:10:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1822 (0x71e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C326F, serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6 Validity Not Before: Aug 22 22:10:04 2025 GMT Not After : Aug 29 22:10:04 2025 GMT Subject: CN=68a8eabc-466e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:50:a0:29:4e:e6:9f:fb:db:e1:f9:e1:11:a2: 9e:99:97:4d:19:bc:5f:bf:92:7f:aa:b6:ed:f0:4f: 62:a5:01:cd:c2:36:63:b0:e1:2d:82:05:ca:31:c3: 6a:4a:2e:ff:f8:6a:94:e2:3a:e4:a7:8e:a8:60:9f: 8e:f2:5c:2b:38:54:cf:1d:3d:8c:4d:89:01:ed:55: 6c:0b:6c:c4:57:68:dd:19:74:68:4e:04:5b:b1:e0: 25:4d:f6:42:84:ec:7a:9f:c9:4b:ac:63:e2:f2:55: a5:43:b6:e3:d7:1f:0b:8a:f2:0e:44:92:ee:26:51: 01:ad:74:dc:c1:31:bf:47:c4:27:2f:28:66:b0:70: 11:b5:14:4e:71:62:91:7d:be:ab:78:74:c6:f9:d9: 8d:e2:8f:37:8f:a7:01:18:c6:ff:f4:41:92:c8:4d: 90:d8:96:c4:e1:7f:2e:68:b5:5b:d0:ef:bc:a5:bf: 5b:5c:7b:37:5b:05:6f:96:01:29:52:ee:80:69:a4: 09:ce:5a:e8:91:4f:92:74:75:38:b9:1f:9d:ee:5c: 35:d3:69:ea:05:48:76:76:83:d8:f2:cb:0c:ee:00: 70:c3:2a:89:ab:fe:64:aa:c9:88:f1:7d:07:d8:30: 8c:b0:49:1c:ae:67:d3:69:2f:a1:32:5e:ca:99:f4: bf:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B2:36:98:6C:CE:A6:6E:19:08:E8:85:70:3B:F4:3B:C8:46:2C:E8 X509v3 Authority Key Identifier: keyid:39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:6d:48:1c:62:5e:7e:9a:4f:64:e9:2c:11:6f:50:23:9a:4d: 22:a1:3c:5d:f6:ba:3f:25:a4:65:ee:b0:a8:d8:19:ec:67:cb: 74:bd:9c:6d:38:9a:16:a1:13:62:79:65:b7:a7:70:93:bc:6f: b9:c5:2e:d2:8a:c6:2f:82:3e:94:0a:d6:c7:61:31:87:d5:d0: ec:67:e4:c6:b9:af:b3:78:44:33:b6:24:65:ce:9b:80:df:93: 62:58:34:21:15:08:35:a3:91:ee:7e:6e:a9:00:6c:ea:d5:63: 67:b4:45:4c:6a:95:aa:fb:40:aa:90:08:1c:fd:6c:cc:57:cb: 92:4f:71:b8:aa:63:27:7f:36:0a:4b:f2:f9:20:5b:01:24:17: 7a:54:73:97:f3:6e:ab:4b:04:36:89:c4:1f:74:28:f4:ac:76: f3:c3:d5:67:81:a8:39:33:d8:0c:7c:e8:fb:91:c0:a7:88:c6: 0c:50:b7:bd:73:05:e2:7a:67:a9:db:77:7c:7e:f2:4e:d1:06: cb:56:48:fc:28:7c:66:b4:05:67:22:de:2c:bb:5f:7a:01:3c: a8:30:c8:82:5c:de:8f:f1:1f:f0:74:73:f6:e8:3e:46:62:64: 2c:2b:d5:a3:64:d1:72:b4:c4:45:67:9e:13:c4:85:a1:b8:0d: 4b:65:86:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBx4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMyNkYxMTAvBgNVBAUTKDM5MkYzNkUwQTQ1MDA1M0MzREM2NkQyRTM4OTRFMTBD QTczM0REQTYwHhcNMjUwODIyMjIxMDA0WhcNMjUwODI5MjIxMDA0WjAYMRYwFAYD VQQDEw02OGE4ZWFiYy00NjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFCgKU7mn/vb4fnhEaKemZdNGbxfv5J/qrbt8E9ipQHNwjZjsOEtggXKMcNq Si7/+GqU4jrkp46oYJ+O8lwrOFTPHT2MTYkB7VVsC2zEV2jdGXRoTgRbseAlTfZC hOx6n8lLrGPi8lWlQ7bj1x8LivIORJLuJlEBrXTcwTG/R8QnLyhmsHARtRROcWKR fb6reHTG+dmN4o83j6cBGMb/9EGSyE2Q2JbE4X8uaLVb0O+8pb9bXHs3WwVvlgEp Uu6AaaQJzlrokU+SdHU4uR+d7lw102nqBUh2doPY8ssM7gBwwyqJq/5kqsmI8X0H 2DCMsEkcrmfTaS+hMl7KmfS/1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHSyNphs zqZuGQjohXA79DvIRizoMB8GA1UdIwQYMBaAFDkvNuCkUAU8PcZtLjiU4QynM92m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzI2Ri83ODY2RjUzMDVG QzcxMUVCOEE2OTIwMkVDNEY5QUUwMi9PUzgyNEtSUUJUdzl4bTB1T0pUaERLY3oz YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09TODI0S1JRQlR3OXhtMHVPSlRoREtjejNhWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzI2Ri83ODY2RjUzMDVGQzcxMUVCOEE2OTIwMkVDNEY5QUUwMi9PUzgyNEtSUUJU dzl4bTB1T0pUaERLY3ozYVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8bUgcYl5+mk9k6SwRb1Ajmk0ioTxd9ro/JaRl7rCo2BnsZ8t0vZxt OJoWoRNieWW3p3CTvG+5xS7SisYvgj6UCtbHYTGH1dDsZ+TGua+zeEQztiRlzpuA 35NiWDQhFQg1o5Hufm6pAGzq1WNntEVMapWq+0CqkAgc/WzMV8uST3G4qmMnfzYK S/L5IFsBJBd6VHOX826rSwQ2icQfdCj0rHbzw9Vngag5M9gMfOj7kcCniMYMULe9 cwXiemep23d8fvJO0QbLVkj8KHxmtAVnIt4su196ATyoMMiCXN6P8R/wdHP26D5G YmQsK9WjZNFytMRFZ54TxIWhuA1LZYbU -----END CERTIFICATE-----Generated at Sat Aug 23 19:26:42 2025 by rpki-client