$ rpki-client -vvf rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.mft File: oLpGLyn4JaQCCWoyzXT3ooy8_uE.mft (raw, json) Hash identifier: zfETPGMByW3u7hFICAIhZvgmCtdEig2Sv6Obp7Flgfc= Subject key identifier: DC:58:F3:ED:F5:6E:8C:75:E3:6A:59:CA:D3:15:96:B1:E2:F8:DA:43 Authority key identifier: A0:BA:46:2F:29:F8:25:A4:02:09:6A:32:CD:74:F7:A2:8C:BC:FE:E1 Certificate issuer: /CN=A91E43F6/serialNumber=A0BA462F29F825A402096A32CD74F7A28CBCFEE1 Certificate serial: 0604 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oLpGLyn4JaQCCWoyzXT3ooy8_uE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.mft Manifest number: 05FF Signing time: Fri 22 Aug 2025 23:03:30 +0000 Manifest this update: Fri 22 Aug 2025 23:03:29 +0000 Manifest next update: Fri 29 Aug 2025 23:03:29 +0000 Files and hashes: 1: oLpGLyn4JaQCCWoyzXT3ooy8_uE.crl (hash: xMGba3w7QpUKDL+Ecv+sQ8laFqZcKhwCBoSfpfXzHyM=) 2: 27560994BA0611EB8B424C22C4F9AE02.roa (hash: pqRxueuRQ9Xk1G5bNOlc+yk8F/47WS7KRa617CuzluU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.crl rsync://rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oLpGLyn4JaQCCWoyzXT3ooy8_uE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1540 (0x604) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E43F6, serialNumber=A0BA462F29F825A402096A32CD74F7A28CBCFEE1 Validity Not Before: Aug 22 23:03:29 2025 GMT Not After : Aug 29 23:03:29 2025 GMT Subject: CN=68a8f742-716c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:40:b1:06:35:3a:b3:6b:a2:7f:9e:39:82:06: 97:7e:9c:7c:6a:4a:12:c0:f1:17:5a:6d:b3:3a:bd: 9c:b4:eb:93:e4:fd:13:af:dd:cb:70:8b:82:f1:04: d2:5b:40:ca:9b:37:82:66:c6:c6:23:4d:47:ec:e6: 99:11:cd:89:96:1b:bc:6d:0a:cb:fb:88:a6:5e:ad: 3f:14:02:5f:7b:ac:2f:65:b1:93:a5:0f:82:ff:fb: c5:4c:55:86:d9:bc:81:31:92:09:3d:64:19:6c:bb: a6:bd:db:22:fc:45:38:f9:98:33:48:44:47:cc:2b: 38:c2:28:e7:81:6a:93:39:fb:65:b1:e4:4f:5b:cf: d1:47:db:31:ea:97:bc:81:b3:89:f5:18:f6:0b:07: c3:33:eb:ff:d8:74:4f:78:24:6f:b2:b4:97:e7:7e: 10:14:9e:f9:4b:5f:42:25:e5:45:70:45:13:17:6b: cb:8b:59:d0:af:fc:48:bc:72:99:7c:fc:e6:17:05: 41:fb:14:ed:02:e0:f9:2d:51:4f:dc:0e:e1:f4:d6: da:9a:e4:2c:15:2d:a0:85:25:0a:d2:a5:a2:78:42: fa:f5:8b:b5:4d:bc:01:13:a6:9c:c1:1e:3f:7d:00: 9b:d8:62:29:c4:b5:19:0b:f8:ef:6c:a7:d5:23:e0: 9b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:58:F3:ED:F5:6E:8C:75:E3:6A:59:CA:D3:15:96:B1:E2:F8:DA:43 X509v3 Authority Key Identifier: keyid:A0:BA:46:2F:29:F8:25:A4:02:09:6A:32:CD:74:F7:A2:8C:BC:FE:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oLpGLyn4JaQCCWoyzXT3ooy8_uE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:fe:60:1e:0c:21:fa:47:3a:84:8d:16:42:92:c1:05:b4:87: 59:a6:f0:96:f5:d0:fa:e9:78:d5:c7:b5:c3:46:e0:a0:fd:ba: 9d:5d:90:91:10:34:28:53:91:b7:82:d6:dc:20:22:7e:e8:98: 11:8e:7c:1b:80:66:b9:77:51:e5:24:08:d2:b6:6b:fd:72:bd: e4:a4:78:4f:15:55:2a:7a:6e:ef:56:c0:b8:68:77:31:a1:9e: fc:44:62:e6:4f:c8:d8:72:d4:66:b1:e2:9a:02:2c:0b:7a:f7: 55:1f:1c:b9:54:70:f2:db:b1:98:e6:35:2f:07:cf:ab:f2:7b: 24:87:d8:17:ec:6a:d9:4d:7c:8b:77:04:90:eb:1a:0f:57:29: 48:db:09:8a:03:fd:46:4f:bb:88:a5:50:c6:6f:1b:c1:0f:35: 66:bb:9c:d1:8d:8e:35:00:1e:fa:11:ca:f2:f0:d7:25:7f:8c: 1c:2c:8c:49:f7:16:e6:2e:02:d5:46:2b:6b:bc:4d:5e:e0:60: d5:e3:d5:19:68:fa:c6:c3:21:d5:84:d0:e7:a6:9e:d2:89:5c: a1:53:ca:d0:bb:48:25:0a:f7:43:13:f5:65:84:49:8b:e6:1c: 36:ca:9b:a1:15:29:eb:36:99:40:0d:5a:70:71:15:36:44:23: 50:3b:48:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQzRjYxMTAvBgNVBAUTKEEwQkE0NjJGMjlGODI1QTQwMjA5NkEzMkNENzRGN0Ey OENCQ0ZFRTEwHhcNMjUwODIyMjMwMzI5WhcNMjUwODI5MjMwMzI5WjAYMRYwFAYD VQQDEw02OGE4Zjc0Mi03MTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu0CxBjU6s2uif545ggaXfpx8akoSwPEXWm2zOr2ctOuT5P0Tr93LcIuC8QTS W0DKmzeCZsbGI01H7OaZEc2Jlhu8bQrL+4imXq0/FAJfe6wvZbGTpQ+C//vFTFWG 2byBMZIJPWQZbLumvdsi/EU4+ZgzSERHzCs4wijngWqTOftlseRPW8/RR9sx6pe8 gbOJ9Rj2CwfDM+v/2HRPeCRvsrSX534QFJ75S19CJeVFcEUTF2vLi1nQr/xIvHKZ fPzmFwVB+xTtAuD5LVFP3A7h9NbamuQsFS2ghSUK0qWieEL69Yu1TbwBE6acwR4/ fQCb2GIpxLUZC/jvbKfVI+CbnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNxY8+31 box142pZytMVlrHi+NpDMB8GA1UdIwQYMBaAFKC6Ri8p+CWkAglqMs1096KMvP7h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDNGNi8yRDJGMjE4NkJB MDQxMUVCOTdGNUI0MUZDNEY5QUUwMi9vTHBHTHluNEphUUNDV295elhUM29veThf dUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29McEdMeW40SmFRQ0NXb3l6WFQzb295OF91RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDNGNi8yRDJGMjE4NkJBMDQxMUVCOTdGNUI0MUZDNEY5QUUwMi9vTHBHTHluNEph UUNDV295elhUM29veThfdUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBi/mAeDCH6RzqEjRZCksEFtIdZpvCW9dD66XjVx7XDRuCg/bqdXZCR EDQoU5G3gtbcICJ+6JgRjnwbgGa5d1HlJAjStmv9cr3kpHhPFVUqem7vVsC4aHcx oZ78RGLmT8jYctRmseKaAiwLevdVHxy5VHDy27GY5jUvB8+r8nskh9gX7GrZTXyL dwSQ6xoPVylI2wmKA/1GT7uIpVDGbxvBDzVmu5zRjY41AB76Ecry8Nclf4wcLIxJ 9xbmLgLVRitrvE1e4GDV49UZaPrGwyHVhNDnpp7SiVyhU8rQu0glCvdDE/VlhEmL 5hw2ypuhFSnrNplADVpwcRU2RCNQO0ir -----END CERTIFICATE-----Generated at Sat Aug 23 18:43:48 2025 by rpki-client