$ rpki-client -vvf rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft File: OSQdwqlJIur_mC2bQID4vkD3tr0.mft (raw, json) Hash identifier: d+bujdmXAnEEEL7QSWX6cM/q2kmZCp4mIaHPklIIk3w= Subject key identifier: 01:97:17:14:01:24:1B:44:43:45:C2:57:A6:E2:66:57:94:78:7E:B8 Authority key identifier: 39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD Certificate issuer: /CN=A91E17F3/serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft Manifest number: 58 Signing time: Sat 23 Aug 2025 07:29:08 +0000 Manifest this update: Sat 23 Aug 2025 07:29:07 +0000 Manifest next update: Sat 30 Aug 2025 07:29:07 +0000 Files and hashes: 1: OSQdwqlJIur_mC2bQID4vkD3tr0.crl (hash: xL39kK96svcNXrs0tE2FqCMc/zmhReYpALkhd6ysTtA=) 2: B0C47BF26CFE11F09B124778C4F9AE02.roa (hash: n88ojmtdqrdiflLIe0+SBb0jpSl3tXT/vbn9UpYcLtE=) 3: 7B3E74A6025011F096E34819C4F9AE02.roa (hash: WR0rb26sSd7NNnmbaBSVENCtgD1Go/mwg9p/vOPLcpI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:29:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E17F3, serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD Validity Not Before: Aug 23 07:29:07 2025 GMT Not After : Aug 30 07:29:07 2025 GMT Subject: CN=68a96dc4-f5e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:08:68:71:e3:df:c1:86:fb:2f:5a:4c:34:8e: 12:8b:27:3f:1c:b6:6e:4d:73:41:5e:e4:6a:ab:6c: 65:e7:09:b0:07:44:37:aa:a8:04:2a:9f:39:c9:c3: 08:1b:87:11:b1:51:eb:4d:7f:ee:67:03:6e:87:ed: a3:60:a9:bd:da:0e:81:a0:06:a3:80:b0:34:5a:ec: 2f:c6:d5:fc:3f:a4:37:cc:13:59:c2:54:8b:01:9b: c3:91:8f:b2:23:57:46:5d:f1:63:06:8a:45:6a:b4: 2a:65:25:04:ad:5f:b3:29:44:b5:e3:59:2c:ac:0c: 75:fb:46:c0:46:52:d8:b6:f6:d1:f9:28:b9:f2:e2: d0:57:b2:99:ef:32:4e:98:da:de:98:a6:09:54:19: 10:6b:59:e5:be:89:da:e4:99:cb:91:d4:e4:09:94: 67:5a:f7:39:ea:f7:de:4f:06:a2:ef:4e:bf:33:2d: 67:cd:8a:48:2f:38:57:a7:6e:52:2c:d6:c9:94:bb: 01:de:27:6f:b6:57:82:a0:07:ac:c7:d3:dc:d7:1b: bb:33:20:02:96:79:7a:53:79:f1:9b:ab:66:fa:a7: 1a:ab:93:1e:b3:70:3d:57:25:eb:5b:7e:54:f9:15: 9c:a5:d4:9d:86:28:b6:76:4b:50:f2:59:6f:ad:ec: 4c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:97:17:14:01:24:1B:44:43:45:C2:57:A6:E2:66:57:94:78:7E:B8 X509v3 Authority Key Identifier: keyid:39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:ea:0f:5f:e7:c8:ae:9b:29:79:1f:4c:99:dc:07:39:1b:fc: 73:85:73:85:63:26:0e:c5:d6:da:48:10:f9:ac:42:2f:59:70: 38:40:77:7c:ad:8f:64:fd:56:5f:d0:96:0c:5f:3a:bf:f9:8f: 1c:91:ec:b7:13:c0:8a:31:8a:8f:5b:d4:ba:74:47:d3:0b:24: f8:8b:29:3a:08:d0:96:42:31:83:c1:26:b8:38:c5:1b:93:67: 29:3b:74:84:ed:be:83:24:65:4b:e0:d8:e8:0d:71:db:de:aa: 23:02:4d:98:6c:ad:93:a3:0b:ce:09:d0:56:4b:34:2d:ef:59: ac:66:c1:75:96:a0:ca:06:0d:b0:14:5f:00:ad:af:9c:e0:83: 48:8f:05:bc:2d:a8:a0:e7:21:36:5e:47:4c:0a:3e:db:53:fb: 0c:f7:78:bb:d3:9b:c9:be:8c:1b:69:76:aa:0a:52:9d:5a:26: 6a:80:be:ce:6c:13:26:57:ce:2b:80:58:2c:1e:4a:4f:1a:b9: 58:ec:50:30:e5:40:92:bd:dd:cd:63:af:1a:be:db:62:d7:f8: 6f:8c:7f:1c:fd:ad:5a:ca:84:b7:23:b2:7c:28:84:2f:1c:28: 8b:ad:ad:ee:4e:22:50:4f:46:a0:ba:39:c3:87:b9:7a:2e:2b: d0:53:b1:48 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MTdGMzExMC8GA1UEBRMoMzkyNDFEQzJBOTQ5MjJFQUZGOTgyRDlCNDA4MEY4QkU0 MEY3QjZCRDAeFw0yNTA4MjMwNzI5MDdaFw0yNTA4MzAwNzI5MDdaMBgxFjAUBgNV BAMTDTY4YTk2ZGM0LWY1ZTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDACGhx49/BhvsvWkw0jhKLJz8ctm5Nc0Fe5GqrbGXnCbAHRDeqqAQqnznJwwgb hxGxUetNf+5nA26H7aNgqb3aDoGgBqOAsDRa7C/G1fw/pDfME1nCVIsBm8ORj7Ij V0Zd8WMGikVqtCplJQStX7MpRLXjWSysDHX7RsBGUti29tH5KLny4tBXspnvMk6Y 2t6YpglUGRBrWeW+idrkmcuR1OQJlGda9znq995PBqLvTr8zLWfNikgvOFenblIs 1smUuwHeJ2+2V4KgB6zH09zXG7szIAKWeXpTefGbq2b6pxqrkx6zcD1XJetbflT5 FZyl1J2GKLZ2S1DyWW+t7EwZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAZcXFAEk G0RDRcJXpuJmV5R4frgwHwYDVR0jBBgwFoAUOSQdwqlJIur/mC2bQID4vkD3tr0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxN0YzLzlBOUZCOEYyRkZF QzExRUZCRjU1QkI2RkM0RjlBRTAyL09TUWR3cWxKSXVyX21DMmJRSUQ0dmtEM3Ry MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT1NRZHdxbEpJdXJfbUMyYlFJRDR2a0QzdHIwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx N0YzLzlBOUZCOEYyRkZFQzExRUZCRjU1QkI2RkM0RjlBRTAyL09TUWR3cWxKSXVy X21DMmJRSUQ0dmtEM3RyMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAITqD1/nyK6bKXkfTJncBzkb/HOFc4VjJg7F1tpIEPmsQi9ZcDhAd3yt j2T9Vl/QlgxfOr/5jxyR7LcTwIoxio9b1Lp0R9MLJPiLKToI0JZCMYPBJrg4xRuT Zyk7dITtvoMkZUvg2OgNcdveqiMCTZhsrZOjC84J0FZLNC3vWaxmwXWWoMoGDbAU XwCtr5zgg0iPBbwtqKDnITZeR0wKPttT+wz3eLvTm8m+jBtpdqoKUp1aJmqAvs5s EyZXziuAWCweSk8auVjsUDDlQJK93c1jrxq+22LX+G+Mfxz9rVrKhLcjsnwohC8c KIutre5OIlBPRqC6OcOHuXouK9BTsUg= -----END CERTIFICATE-----Generated at Sat Aug 23 21:04:30 2025 by rpki-client