$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft File: oNGf1mnyVeFici98GdiGS7Brc5k.mft (raw, json) Hash identifier: FiepJ/wkEScx1NHdIXX3P7IkXkZYXVV66ina9Kk6W3A= Subject key identifier: 8E:B7:F0:B1:77:7F:7D:79:89:B3:2D:85:18:DF:03:CC:46:9A:9C:76 Authority key identifier: A0:D1:9F:D6:69:F2:55:E1:62:72:2F:7C:19:D8:86:4B:B0:6B:73:99 Certificate issuer: /CN=A91DEC72/serialNumber=A0D19FD669F255E162722F7C19D8864BB06B7399 Certificate serial: 017D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNGf1mnyVeFici98GdiGS7Brc5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft Manifest number: 017C Signing time: Sat 23 Aug 2025 03:48:44 +0000 Manifest this update: Sat 23 Aug 2025 03:48:44 +0000 Manifest next update: Sat 30 Aug 2025 03:48:44 +0000 Files and hashes: 1: oNGf1mnyVeFici98GdiGS7Brc5k.crl (hash: ljtpmJ0E8MRp35qZv7gWNJigfiDPbIgeUzy3bd+SokU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.crl rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNGf1mnyVeFici98GdiGS7Brc5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:48:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 381 (0x17d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEC72, serialNumber=A0D19FD669F255E162722F7C19D8864BB06B7399 Validity Not Before: Aug 23 03:48:44 2025 GMT Not After : Aug 30 03:48:44 2025 GMT Subject: CN=68a93a1c-9cca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f6:10:0a:58:fd:47:f5:41:5e:14:da:66:82: 55:a2:07:d0:a0:d0:5d:e2:6c:96:47:48:d7:2c:be: c0:85:86:07:7c:b7:b4:62:cc:58:8a:08:7b:42:22: 06:5a:1f:f7:a5:8f:f3:80:c6:c3:b3:96:b1:92:f2: d3:7f:49:4d:8e:52:96:d1:7a:2f:7e:e6:ad:cd:8d: 2f:44:d9:43:34:37:3d:d4:a6:78:bb:e5:15:75:ec: 80:69:75:7f:c7:ba:bb:ef:bd:93:8d:2b:3b:66:71: c8:35:73:19:98:95:01:48:d2:5f:0e:86:cb:8a:86: 5a:d8:8e:aa:ce:48:24:66:68:68:df:ba:62:4e:8f: de:cc:27:c0:19:db:d7:6a:b6:78:26:50:52:f5:fe: 68:d8:5c:03:22:f0:68:50:26:58:8e:5e:2c:5b:16: 0c:db:cb:b1:04:71:0d:87:50:46:6a:8b:9f:35:62: f4:66:24:3b:4b:75:97:db:bc:63:d7:38:43:86:2d: 80:f4:34:8c:6e:50:61:1d:d5:d1:05:41:69:09:6f: 98:bf:52:a9:ca:72:eb:d7:30:d2:a5:b3:45:82:76: a0:ac:b6:92:af:51:92:2f:41:68:cb:81:c3:6a:c9: e4:bf:d2:9f:32:75:05:b6:fa:56:18:13:dd:c0:1d: aa:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B7:F0:B1:77:7F:7D:79:89:B3:2D:85:18:DF:03:CC:46:9A:9C:76 X509v3 Authority Key Identifier: keyid:A0:D1:9F:D6:69:F2:55:E1:62:72:2F:7C:19:D8:86:4B:B0:6B:73:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNGf1mnyVeFici98GdiGS7Brc5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:6b:08:02:d3:5d:ed:15:ec:84:2c:a8:47:ea:2d:fd:b2:e8: 60:12:b6:ed:0a:30:a3:17:cc:16:60:db:32:38:bc:4d:e0:77: f6:21:b3:6c:a4:92:6e:ad:e3:ff:33:df:08:8e:7d:91:e2:49: f6:14:81:94:68:d8:b0:bb:a8:3d:b1:4f:27:e4:e7:cb:50:d0: 6b:25:bb:df:57:a0:4a:a4:b2:68:fc:76:e5:74:53:0b:1c:f5: 94:19:36:16:12:ad:ca:ce:25:82:db:f6:be:97:e7:79:94:d2: f7:7c:bf:3c:09:d9:c9:09:18:8d:69:2e:fd:d8:fa:c7:67:ba: 18:db:fd:d8:9e:8a:cc:ff:a6:f9:f1:5a:75:d0:4a:76:27:f1: e4:77:5e:82:2a:24:7c:be:a0:4e:81:77:17:2b:d6:0b:9f:0f: 91:5b:2b:c5:c5:9a:83:90:91:52:aa:94:93:e5:f0:5d:29:77: 22:da:dc:5e:31:31:a3:18:b7:8a:2b:39:c1:2f:a3:13:42:9a: fe:38:37:97:83:82:e6:ca:81:6e:b3:68:72:0c:53:98:f0:4f: b8:a5:7e:bf:dd:29:c5:ae:db:0d:d2:22:cf:58:07:26:ed:f3: 37:e8:9e:f8:b1:a5:23:2c:e3:e5:a2:97:8f:cf:f7:87:15:4f: 20:89:8b:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVDNzIxMTAvBgNVBAUTKEEwRDE5RkQ2NjlGMjU1RTE2MjcyMkY3QzE5RDg4NjRC QjA2QjczOTkwHhcNMjUwODIzMDM0ODQ0WhcNMjUwODMwMDM0ODQ0WjAYMRYwFAYD VQQDEw02OGE5M2ExYy05Y2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyPYQClj9R/VBXhTaZoJVogfQoNBd4myWR0jXLL7AhYYHfLe0YsxYigh7QiIG Wh/3pY/zgMbDs5axkvLTf0lNjlKW0XovfuatzY0vRNlDNDc91KZ4u+UVdeyAaXV/ x7q7772TjSs7ZnHINXMZmJUBSNJfDobLioZa2I6qzkgkZmho37piTo/ezCfAGdvX arZ4JlBS9f5o2FwDIvBoUCZYjl4sWxYM28uxBHENh1BGaoufNWL0ZiQ7S3WX27xj 1zhDhi2A9DSMblBhHdXRBUFpCW+Yv1KpynLr1zDSpbNFgnagrLaSr1GSL0Foy4HD asnkv9KfMnUFtvpWGBPdwB2qewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI638LF3 f315ibMthRjfA8xGmpx2MB8GA1UdIwQYMBaAFKDRn9Zp8lXhYnIvfBnYhkuwa3OZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUM3Mi8zRjcxRkY4ODNC OTExMUVFQUM2MTdFNkFDNEY5QUUwMi9vTkdmMW1ueVZlRmljaTk4R2RpR1M3QnJj NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29OR2YxbW55VmVGaWNpOThHZGlHUzdCcmM1ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUM3Mi8zRjcxRkY4ODNCOTExMUVFQUM2MTdFNkFDNEY5QUUwMi9vTkdmMW1ueVZl RmljaTk4R2RpR1M3QnJjNWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASawgC013tFeyELKhH6i39suhgErbtCjCjF8wWYNsyOLxN4Hf2IbNs pJJureP/M98Ijn2R4kn2FIGUaNiwu6g9sU8n5OfLUNBrJbvfV6BKpLJo/HbldFML HPWUGTYWEq3KziWC2/a+l+d5lNL3fL88CdnJCRiNaS792PrHZ7oY2/3YnorM/6b5 8Vp10Ep2J/Hkd16CKiR8vqBOgXcXK9YLnw+RWyvFxZqDkJFSqpST5fBdKXci2txe MTGjGLeKKznBL6MTQpr+ODeXg4LmyoFus2hyDFOY8E+4pX6/3SnFrtsN0iLPWAcm 7fM36J74saUjLOPlopePz/eHFU8giYsJ -----END CERTIFICATE-----Generated at Sun Aug 24 00:04:39 2025 by rpki-client