$ rpki-client -vvf rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft File: o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft (raw, json) Hash identifier: BoNirxLAn7yqgLs1FpRfM5S8cgeB8DJ3hKo0PIBBfiQ= Subject key identifier: 36:24:FE:A4:7C:CD:F5:3B:DB:3C:A7:F6:11:E8:8E:DA:78:93:6D:35 Authority key identifier: A3:EB:7C:43:50:63:BC:54:D3:57:3D:81:DB:DC:18:73:98:76:63:E0 Certificate issuer: /CN=A91C77BD/serialNumber=A3EB7C435063BC54D3573D81DBDC1873987663E0 Certificate serial: 219D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft Manifest number: 2194 Signing time: Fri 22 Aug 2025 15:57:24 +0000 Manifest this update: Fri 22 Aug 2025 15:57:23 +0000 Manifest next update: Fri 29 Aug 2025 15:57:23 +0000 Files and hashes: 1: o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl (hash: bQb58Q5cPQiTOy3+TnyZMiMxWRXiLmI3YwOmuTvqVDY=) 2: A257A95EA9DC11E9AA03780DC4F9AE02.roa (hash: Kqxe3AlQssfHaUaGQ94xh+g433EOzW+NAhxS/kOyvHs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8605 (0x219d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C77BD, serialNumber=A3EB7C435063BC54D3573D81DBDC1873987663E0 Validity Not Before: Aug 22 15:57:23 2025 GMT Not After : Aug 29 15:57:23 2025 GMT Subject: CN=68a89364-ef88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:43:dc:fe:c1:3d:25:3b:ef:d0:20:4c:4d:18: fb:52:db:3e:db:6f:49:a4:0c:b0:f5:ed:c7:ba:ea: a7:54:1b:e2:03:7f:e3:d1:f3:78:a5:59:15:d5:b2: b8:92:b2:54:e6:44:09:96:77:21:68:11:1d:6d:85: 3e:f8:c1:62:fa:88:10:2f:3b:dd:c4:be:c1:4b:d1: 3f:f5:96:29:53:dd:40:b2:9e:0f:03:fe:ca:3a:2a: 81:39:d3:89:a2:61:ab:c0:8e:b6:5a:29:c9:dd:72: 20:05:f1:6c:84:ff:4a:9d:14:24:4b:9d:17:4f:69: 1e:fd:91:52:26:b4:86:02:01:e1:f9:8d:9c:bf:b8: 05:d0:cc:da:78:21:44:7c:df:02:09:72:7d:fd:36: 1a:a9:e2:f8:7f:64:d6:49:e7:be:cc:b4:1b:10:cc: ec:fe:53:e9:6d:fc:de:3b:27:41:02:ce:58:36:ae: 4e:e5:19:a0:5c:2e:4c:e6:45:6b:9b:01:dd:fb:47: a2:c8:8e:26:bb:6a:67:ca:c3:16:a3:de:d6:9d:81: 5e:21:78:f6:29:a5:b7:58:34:0a:3c:66:f5:ec:88: 6e:cb:2c:41:ac:21:92:29:f1:c1:bb:62:60:48:ce: 00:ab:04:01:ca:5a:d3:76:58:4a:6e:c8:23:f3:6f: 58:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:24:FE:A4:7C:CD:F5:3B:DB:3C:A7:F6:11:E8:8E:DA:78:93:6D:35 X509v3 Authority Key Identifier: keyid:A3:EB:7C:43:50:63:BC:54:D3:57:3D:81:DB:DC:18:73:98:76:63:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:6d:88:8d:a4:c2:ad:f6:3e:5d:07:ae:b3:3f:23:db:8f:dd: 78:ae:e5:96:2a:63:21:c5:bc:8f:6a:6f:15:fd:1d:c2:19:c5: 33:a0:13:a9:7f:49:fd:3a:24:73:db:0e:33:87:ce:f7:8b:c7: 1a:60:7c:88:0f:6f:04:e3:99:f9:32:97:67:01:3f:34:1c:ae: 35:42:01:da:87:cc:fe:2b:5c:fb:40:b1:68:99:e2:bd:82:c9: 2e:4a:df:cd:d8:9b:77:14:24:b1:8f:ee:5a:ec:a6:1e:0d:0e: ed:9a:d9:60:6a:64:b1:d0:ab:a5:91:8e:bb:9e:0d:09:29:10: 1c:43:90:7f:16:ac:d1:dc:b6:70:48:cd:5c:14:6c:f1:44:db: cc:e2:87:7e:60:e4:a3:36:92:eb:5e:dd:fa:06:ec:4b:37:c0: 72:de:0e:95:8e:cb:2b:2c:1a:02:07:56:d2:fb:2d:0c:50:79: ae:1a:7b:00:a8:2b:c3:73:cd:69:06:86:9f:50:6f:66:b6:59: 45:9d:c6:79:d7:44:47:43:97:d9:72:13:0c:fb:24:24:01:ec: 43:f5:7d:5b:06:a4:96:55:0f:13:2f:ff:20:1f:05:f2:dd:ce: 6d:22:3c:39:80:4b:8f:ba:a7:1e:fd:df:ef:46:e3:bd:bf:ff: a8:5b:73:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc3QkQxMTAvBgNVBAUTKEEzRUI3QzQzNTA2M0JDNTREMzU3M0Q4MURCREMxODcz OTg3NjYzRTAwHhcNMjUwODIyMTU1NzIzWhcNMjUwODI5MTU1NzIzWjAYMRYwFAYD VQQDEw02OGE4OTM2NC1lZjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtEPc/sE9JTvv0CBMTRj7Uts+229JpAyw9e3HuuqnVBviA3/j0fN4pVkV1bK4 krJU5kQJlnchaBEdbYU++MFi+ogQLzvdxL7BS9E/9ZYpU91Asp4PA/7KOiqBOdOJ omGrwI62WinJ3XIgBfFshP9KnRQkS50XT2ke/ZFSJrSGAgHh+Y2cv7gF0MzaeCFE fN8CCXJ9/TYaqeL4f2TWSee+zLQbEMzs/lPpbfzeOydBAs5YNq5O5RmgXC5M5kVr mwHd+0eiyI4mu2pnysMWo97WnYFeIXj2KaW3WDQKPGb17IhuyyxBrCGSKfHBu2Jg SM4AqwQBylrTdlhKbsgj829Y4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDYk/qR8 zfU72zyn9hHojtp4k201MB8GA1UdIwQYMBaAFKPrfENQY7xU01c9gdvcGHOYdmPg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzdCRC8zODkzNzE5OERG NDAxMUU1ODIzMjczNEFDNEY5QUUwMi9vLXQ4UTFCanZGVFRWejJCMjl3WWM1aDJZ LUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28tdDhRMUJqdkZUVFZ6MkIyOXdZYzVoMlktQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzdCRC8zODkzNzE5OERGNDAxMUU1ODIzMjczNEFDNEY5QUUwMi9vLXQ4UTFCanZG VFRWejJCMjl3WWM1aDJZLUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9bYiNpMKt9j5dB66zPyPbj914ruWWKmMhxbyPam8V/R3CGcUzoBOp f0n9OiRz2w4zh873i8caYHyID28E45n5MpdnAT80HK41QgHah8z+K1z7QLFomeK9 gskuSt/N2Jt3FCSxj+5a7KYeDQ7tmtlgamSx0KulkY67ng0JKRAcQ5B/FqzR3LZw SM1cFGzxRNvM4od+YOSjNpLrXt36BuxLN8By3g6VjssrLBoCB1bS+y0MUHmuGnsA qCvDc81pBoafUG9mtllFncZ510RHQ5fZchMM+yQkAexD9X1bBqSWVQ8TL/8gHwXy 3c5tIjw5gEuPuqce/d/vRuO9v/+oW3Pj -----END CERTIFICATE-----Generated at Sun Aug 24 09:39:57 2025 by rpki-client