$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/owQJVBg5BUscPhXRmD19vYp9ZII.mft File: owQJVBg5BUscPhXRmD19vYp9ZII.mft (raw, json) Hash identifier: WXb4sn8PXNhGBNF5lOBs09mJrKd5CDLCkRFQib20aRs= Subject key identifier: C7:41:8F:C4:54:B0:F3:8E:89:4D:7C:2A:8C:68:BB:3C:1E:B6:9D:12 Authority key identifier: A3:04:09:54:18:39:05:4B:1C:3E:15:D1:98:3D:7D:BD:8A:7D:64:82 Certificate issuer: /CN=A91D9E03/serialNumber=A30409541839054B1C3E15D1983D7DBD8A7D6482 Certificate serial: 03C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owQJVBg5BUscPhXRmD19vYp9ZII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/owQJVBg5BUscPhXRmD19vYp9ZII.mft Manifest number: 03C2 Signing time: Sat 23 Aug 2025 00:53:21 +0000 Manifest this update: Sat 23 Aug 2025 00:53:20 +0000 Manifest next update: Sat 30 Aug 2025 00:53:20 +0000 Files and hashes: 1: owQJVBg5BUscPhXRmD19vYp9ZII.crl (hash: 37V/NcdThH6e3xjZsIoGaAxxfCVfuZ6xSBVuDXpPCG8=) 2: 521DCED89C5911EC97E58855C4F9AE02.roa (hash: K/6Sxmjn7Y9RMsh3D/CkcDPEvNJggoP2DR+Gq8xtxL8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/owQJVBg5BUscPhXRmD19vYp9ZII.crl rsync://rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/owQJVBg5BUscPhXRmD19vYp9ZII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owQJVBg5BUscPhXRmD19vYp9ZII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:53:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 966 (0x3c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9E03, serialNumber=A30409541839054B1C3E15D1983D7DBD8A7D6482 Validity Not Before: Aug 23 00:53:20 2025 GMT Not After : Aug 30 00:53:20 2025 GMT Subject: CN=68a91100-0f59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:22:5e:35:cb:d8:b2:54:b6:f4:f9:3b:4d:66: 62:ea:a1:4c:c7:df:9f:5a:21:4c:61:8e:a8:25:44: 72:f2:f4:94:8f:d1:a0:f2:e6:5b:8f:53:dd:3f:d0: d3:b4:c9:12:ff:f6:e9:2e:e5:95:85:35:32:5c:18: f3:f6:25:2c:15:26:15:16:67:6f:a0:a8:ca:3e:29: 7d:92:6a:c0:3c:24:ee:9e:25:9b:fe:90:32:5d:66: 9c:bc:d6:3a:71:9b:08:97:57:6e:1f:21:2f:e4:d9: 36:53:8c:a0:05:5a:d1:fd:42:25:9d:e3:f5:7b:dc: e6:02:29:76:92:ee:28:04:37:e2:e7:c2:ae:7d:c8: 4b:80:aa:bd:da:95:0e:09:2c:9c:ff:e7:c3:23:98: 58:d1:00:80:8d:40:26:1f:9f:f7:1c:be:39:b3:2e: d6:8a:9f:a5:a5:df:db:41:2f:b8:ff:08:d7:4a:81: 3f:a3:7e:cf:06:06:04:8c:4a:24:98:ad:a8:48:4a: 89:7d:22:38:94:cf:eb:ff:6d:e4:60:a7:fe:3f:51: c3:06:df:b2:cf:3e:e0:11:41:f0:0c:e4:e0:65:2a: ba:d6:dc:b1:a8:e7:d7:eb:f7:c6:e0:07:8a:aa:a9: 8a:e4:6d:e3:9f:37:e9:fa:90:c4:eb:1d:c7:03:db: 68:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:41:8F:C4:54:B0:F3:8E:89:4D:7C:2A:8C:68:BB:3C:1E:B6:9D:12 X509v3 Authority Key Identifier: keyid:A3:04:09:54:18:39:05:4B:1C:3E:15:D1:98:3D:7D:BD:8A:7D:64:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/owQJVBg5BUscPhXRmD19vYp9ZII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owQJVBg5BUscPhXRmD19vYp9ZII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/owQJVBg5BUscPhXRmD19vYp9ZII.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:b1:e0:8e:0a:8e:e4:24:59:21:c3:99:19:4f:f4:19:94:f0: 31:9e:8e:61:54:25:1a:dc:3a:82:e9:f3:21:f8:d1:94:5a:b5: 85:e7:5c:1a:c4:70:80:73:10:d0:40:a8:a9:ed:11:7a:8c:ee: e1:f0:bd:e9:83:52:fc:c9:7c:80:ee:75:a9:04:ae:28:e6:9d: 90:19:02:b8:47:22:bc:a1:aa:ee:d5:ec:be:43:2f:82:82:7f: ed:8c:90:cb:bb:8a:3c:b3:08:7e:8a:0c:c9:08:8d:29:a5:15: 07:86:52:31:14:35:8d:8d:2b:34:ab:06:30:fd:07:57:c1:c5: 8b:61:89:4d:e0:26:5e:e5:35:18:c6:a0:76:f4:df:08:b7:a5: 78:38:b7:58:ef:5b:ac:68:7f:f6:23:b2:25:83:1b:c2:f4:64: 4a:44:85:1a:61:22:07:bf:a5:c2:17:5d:34:dc:99:82:42:e1: 82:09:8a:2d:dd:2d:0a:13:1e:83:12:9f:ca:7a:55:36:d7:6b: 01:f3:fa:cd:2c:45:92:56:25:06:97:fd:14:a6:57:fa:f9:ed: f6:bf:09:6f:32:83:12:ad:ac:cd:f2:72:76:42:16:60:19:84: e0:9c:51:ac:4a:fd:c9:be:f1:4a:90:95:90:b1:86:f5:f3:22: 48:0f:4f:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlFMDMxMTAvBgNVBAUTKEEzMDQwOTU0MTgzOTA1NEIxQzNFMTVEMTk4M0Q3REJE OEE3RDY0ODIwHhcNMjUwODIzMDA1MzIwWhcNMjUwODMwMDA1MzIwWjAYMRYwFAYD VQQDEw02OGE5MTEwMC0wZjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0iJeNcvYslS29Pk7TWZi6qFMx9+fWiFMYY6oJURy8vSUj9Gg8uZbj1PdP9DT tMkS//bpLuWVhTUyXBjz9iUsFSYVFmdvoKjKPil9kmrAPCTuniWb/pAyXWacvNY6 cZsIl1duHyEv5Nk2U4ygBVrR/UIlneP1e9zmAil2ku4oBDfi58KufchLgKq92pUO CSyc/+fDI5hY0QCAjUAmH5/3HL45sy7Wip+lpd/bQS+4/wjXSoE/o37PBgYEjEok mK2oSEqJfSI4lM/r/23kYKf+P1HDBt+yzz7gEUHwDOTgZSq61tyxqOfX6/fG4AeK qqmK5G3jnzfp+pDE6x3HA9toywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMdBj8RU sPOOiU18Koxouzwetp0SMB8GA1UdIwQYMBaAFKMECVQYOQVLHD4V0Zg9fb2KfWSC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUUwMy85OTZBN0U4ODlD NTYxMUVDQkRFRTA1NTNDNEY5QUUwMi9vd1FKVkJnNUJVc2NQaFhSbUQxOXZZcDla SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL293UUpWQmc1QlVzY1BoWFJtRDE5dllwOVpJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUUwMy85OTZBN0U4ODlDNTYxMUVDQkRFRTA1NTNDNEY5QUUwMi9vd1FKVkJnNUJV c2NQaFhSbUQxOXZZcDlaSUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHseCOCo7kJFkhw5kZT/QZlPAxno5hVCUa3DqC6fMh+NGUWrWF51wa xHCAcxDQQKip7RF6jO7h8L3pg1L8yXyA7nWpBK4o5p2QGQK4RyK8oaru1ey+Qy+C gn/tjJDLu4o8swh+igzJCI0ppRUHhlIxFDWNjSs0qwYw/QdXwcWLYYlN4CZe5TUY xqB29N8It6V4OLdY71usaH/2I7IlgxvC9GRKRIUaYSIHv6XCF1003JmCQuGCCYot 3S0KEx6DEp/KelU212sB8/rNLEWSViUGl/0Uplf6+e32vwlvMoMSrazN8nJ2QhZg GYTgnFGsSv3JvvFKkJWQsYb18yJID0+7 -----END CERTIFICATE-----Generated at Sat Aug 23 13:50:24 2025 by rpki-client