$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.mft File: oB0j94Ho_zU7GL0YgoTJrfzZ45Y.mft (raw, json) Hash identifier: VYoI1O78EXMAXDgB98UCZbyNNF4/OY0ru/xrHAa6gH0= Subject key identifier: 8D:86:33:F6:D8:17:9B:D7:04:4D:7C:B8:36:DE:93:29:D9:00:70:53 Authority key identifier: A0:1D:23:F7:81:E8:FF:35:3B:18:BD:18:82:84:C9:AD:FC:D9:E3:96 Certificate issuer: /CN=A91E0267/serialNumber=A01D23F781E8FF353B18BD188284C9ADFCD9E396 Certificate serial: 34B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.mft Manifest number: 34B2 Signing time: Fri 22 Aug 2025 14:53:55 +0000 Manifest this update: Fri 22 Aug 2025 14:53:55 +0000 Manifest next update: Fri 29 Aug 2025 14:53:55 +0000 Files and hashes: 1: oB0j94Ho_zU7GL0YgoTJrfzZ45Y.crl (hash: jefg4WJSADT/KTObiVFWIhi4lknP+g+/Au8ec8ZjRJw=) 2: 77C9E89A3CDC11EEBFA0475EC4F9AE02.roa (hash: e40Fx6yfX6nJRx1dMJZUnN8AeYmm3aJoH7MptW5kCWo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.crl rsync://rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13494 (0x34b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0267, serialNumber=A01D23F781E8FF353B18BD188284C9ADFCD9E396 Validity Not Before: Aug 22 14:53:55 2025 GMT Not After : Aug 29 14:53:55 2025 GMT Subject: CN=68a88483-b965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a0:ef:9f:b5:39:ea:f4:e8:f3:37:8f:fe:dd: 6f:b7:18:4d:95:46:a2:22:76:ad:77:3f:94:e2:d2: 74:12:b4:00:54:98:b2:39:6b:54:4c:15:86:16:f1: f3:95:81:12:fe:f5:dd:11:6b:47:f8:c9:ea:0e:0c: 73:b4:cb:ec:3d:1b:f4:2d:56:07:40:5b:8c:0f:8a: e9:97:e9:df:fc:e4:8d:90:b0:2a:f2:49:58:e5:0b: b9:8b:51:10:7d:ec:33:59:76:07:2b:a7:ff:35:06: 6d:ae:ca:b6:f7:f6:27:5b:14:64:48:5c:41:b3:e8: 0c:6a:af:4c:a6:97:5a:4b:ca:c1:39:4e:07:15:1d: b6:0b:e3:b4:3f:8a:7a:0a:d1:fe:ef:9e:27:b4:23: 11:ee:0c:6d:7c:77:9b:3a:7c:fa:26:9a:7b:58:be: 9d:19:46:33:fa:37:14:2f:b1:de:de:b8:6c:39:d2: 12:c6:fb:95:b4:c5:80:7f:e7:58:ac:b8:5c:7f:19: d1:ec:0a:84:5e:0d:21:d2:b1:f3:87:88:42:f0:88: bb:79:8a:65:05:40:d9:c7:bd:39:79:b0:15:f6:c1: b1:88:22:53:0a:e9:28:39:27:96:2a:6b:86:aa:4d: 5e:7d:27:9d:cb:f4:b6:8b:36:bd:f6:3d:27:8a:04: 06:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:86:33:F6:D8:17:9B:D7:04:4D:7C:B8:36:DE:93:29:D9:00:70:53 X509v3 Authority Key Identifier: keyid:A0:1D:23:F7:81:E8:FF:35:3B:18:BD:18:82:84:C9:AD:FC:D9:E3:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:36:0e:07:31:85:5c:72:88:ea:59:2f:db:cd:68:c4:95:c5: 0d:a8:8c:44:d7:c3:f8:5b:08:b1:47:df:10:55:08:b2:c5:c8: 2f:59:9c:aa:c5:2f:3d:94:76:da:7c:5d:40:0c:63:ca:66:b2: 20:63:b8:16:6b:32:bb:b2:a6:05:6c:82:37:37:7c:55:11:51: 8a:99:d2:44:af:4a:94:94:06:35:27:4d:9e:5f:a0:d6:7c:bd: da:65:1e:b5:42:1b:b5:7e:06:a5:9c:09:8e:26:8f:20:71:20: 02:ba:2b:10:ea:de:bb:25:4b:b0:9a:19:7b:ac:38:c5:0f:73: 1a:ea:59:eb:6a:24:fe:ba:0a:c1:3a:09:b6:e8:61:ee:c4:a1: 18:f5:98:b9:68:43:6d:ba:40:ce:19:96:f5:bd:79:34:66:10: e6:79:57:09:d8:96:83:0c:d6:08:2b:e8:c1:cf:8e:fc:db:73: 87:93:06:0b:e2:f9:e7:f8:c5:bd:e2:46:b8:19:0d:f2:72:7a: f3:47:59:29:3a:8a:52:23:62:a3:0b:b0:60:3b:84:d3:2b:cd: 11:3b:50:8b:d3:7e:e8:b4:bd:91:1a:df:3b:eb:e2:24:c0:c3: 91:b6:2f:78:d3:14:76:5c:f3:4e:70:48:6f:40:b6:5b:9f:70: 1a:a3:64:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAyNjcxMTAvBgNVBAUTKEEwMUQyM0Y3ODFFOEZGMzUzQjE4QkQxODgyODRDOUFE RkNEOUUzOTYwHhcNMjUwODIyMTQ1MzU1WhcNMjUwODI5MTQ1MzU1WjAYMRYwFAYD VQQDEw02OGE4ODQ4My1iOTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1qDvn7U56vTo8zeP/t1vtxhNlUaiInatdz+U4tJ0ErQAVJiyOWtUTBWGFvHz lYES/vXdEWtH+MnqDgxztMvsPRv0LVYHQFuMD4rpl+nf/OSNkLAq8klY5Qu5i1EQ fewzWXYHK6f/NQZtrsq29/YnWxRkSFxBs+gMaq9MppdaS8rBOU4HFR22C+O0P4p6 CtH+754ntCMR7gxtfHebOnz6Jpp7WL6dGUYz+jcUL7He3rhsOdISxvuVtMWAf+dY rLhcfxnR7AqEXg0h0rHzh4hC8Ii7eYplBUDZx705ebAV9sGxiCJTCukoOSeWKmuG qk1efSedy/S2iza99j0nigQGkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI2GM/bY F5vXBE18uDbekynZAHBTMB8GA1UdIwQYMBaAFKAdI/eB6P81Oxi9GIKEya382eOW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDI2Ny8xOTBFQUI1QzFE OTgxMUUyOUU2NUZGODEwOEIwMkNEMi9vQjBqOTRIb196VTdHTDBZZ29USnJmelo0 NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29CMGo5NEhvX3pVN0dMMFlnb1RKcmZ6WjQ1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDI2Ny8xOTBFQUI1QzFEOTgxMUUyOUU2NUZGODEwOEIwMkNEMi9vQjBqOTRIb196 VTdHTDBZZ29USnJmelo0NVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbNg4HMYVccojqWS/bzWjElcUNqIxE18P4WwixR98QVQiyxcgvWZyq xS89lHbafF1ADGPKZrIgY7gWazK7sqYFbII3N3xVEVGKmdJEr0qUlAY1J02eX6DW fL3aZR61Qhu1fgalnAmOJo8gcSACuisQ6t67JUuwmhl7rDjFD3Ma6lnraiT+ugrB Ogm26GHuxKEY9Zi5aENtukDOGZb1vXk0ZhDmeVcJ2JaDDNYIK+jBz47823OHkwYL 4vnn+MW94ka4GQ3ycnrzR1kpOopSI2KjC7BgO4TTK80RO1CL037otL2RGt876+Ik wMORti940xR2XPNOcEhvQLZbn3Aao2TH -----END CERTIFICATE-----Generated at Sat Aug 23 22:42:06 2025 by rpki-client