$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft File: 40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft (raw, json) Hash identifier: l6RPiUpl27L4zIKXAziZHDqZuXaT8G+lM+wWniR6hn0= Subject key identifier: B3:CA:7E:48:55:70:25:7E:87:FA:68:00:70:26:2A:37:1E:4A:EA:EB Authority key identifier: E3:43:84:05:47:64:02:A3:AA:8F:98:7C:3A:FA:06:90:D9:6E:D4:74 Certificate issuer: /CN=A91E9406/serialNumber=E3438405476402A3AA8F987C3AFA0690D96ED474 Certificate serial: 028E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OEBUdkAqOqj5h8OvoGkNlu1HQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft Manifest number: 0289 Signing time: Sat 23 Aug 2025 01:54:08 +0000 Manifest this update: Sat 23 Aug 2025 01:54:07 +0000 Manifest next update: Sat 30 Aug 2025 01:54:07 +0000 Files and hashes: 1: 40OEBUdkAqOqj5h8OvoGkNlu1HQ.crl (hash: 34pu4gDVucKTXK/4UUSMWS4Q3Fw7afM4BTSBKVt7lwI=) 2: F76D8A5C170D11EDA7EC2F87C4F9AE02.roa (hash: bEQWXluQGkjHtzXhhM0LUOXQhLNvUEvMyEXkpICCpAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.crl rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OEBUdkAqOqj5h8OvoGkNlu1HQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:54:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 654 (0x28e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9406, serialNumber=E3438405476402A3AA8F987C3AFA0690D96ED474 Validity Not Before: Aug 23 01:54:07 2025 GMT Not After : Aug 30 01:54:07 2025 GMT Subject: CN=68a91f40-acb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4b:f5:a9:7b:8c:e8:80:5f:0c:9d:ed:03:c7: cf:1a:37:f4:b5:77:a7:3c:b2:54:1f:dd:49:31:99: a8:ef:87:e9:69:42:de:40:9b:75:4a:15:0e:31:6b: b8:81:6f:2d:19:80:75:9f:b2:f1:fe:e4:bc:a2:70: 6f:22:72:dd:28:ce:65:35:9a:77:ba:4f:a2:d3:9b: 6f:25:39:4e:b4:88:6b:dd:91:51:31:ab:ee:3f:cb: 2e:89:26:4f:4d:6a:d4:e3:d3:0d:92:0a:e5:d2:9a: eb:08:63:86:6b:6b:e0:23:f8:8a:cb:64:9c:1f:46: 43:af:64:fe:70:6b:d5:8f:35:85:2a:ca:d9:8e:19: 17:fe:fd:7a:69:39:b4:6e:97:60:b3:c2:48:d3:f9: 76:d1:a0:c0:f0:e3:46:b3:98:df:26:01:b3:22:62: e6:ea:c3:35:28:57:5a:e6:bb:7e:fb:93:5d:f7:55: 66:26:10:26:c3:f7:fb:c0:62:30:a0:b4:98:82:77: bb:e0:28:c2:d9:aa:6a:19:dd:c3:32:a6:80:a6:7b: 16:57:60:7c:c7:9c:8e:45:5e:dc:a7:b9:04:ab:0d: dc:eb:10:a4:8f:a7:a1:53:b5:d8:37:7d:5d:53:41: 0e:8a:60:8f:33:7e:39:33:43:1a:0b:a7:97:0a:30: 45:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:CA:7E:48:55:70:25:7E:87:FA:68:00:70:26:2A:37:1E:4A:EA:EB X509v3 Authority Key Identifier: keyid:E3:43:84:05:47:64:02:A3:AA:8F:98:7C:3A:FA:06:90:D9:6E:D4:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OEBUdkAqOqj5h8OvoGkNlu1HQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:90:a6:e4:eb:46:5d:6c:91:78:51:55:11:2a:ba:4f:08:40: fb:9f:01:48:34:2b:e6:dd:3d:20:aa:9a:9a:ef:52:92:0e:ce: 73:71:61:96:4f:22:0d:5c:fb:4d:00:e3:74:6f:0a:04:2b:cc: b6:9a:13:d2:85:29:a0:10:4d:1a:38:8a:32:ad:11:5d:7a:77: 5d:80:88:56:68:83:01:5a:a1:5b:2a:aa:a9:ec:10:54:ab:f7: 74:c1:66:38:f5:96:c9:b3:51:d7:ac:c4:61:a4:5d:bc:b0:dd: 59:18:72:06:7e:a1:c8:50:6e:e1:4b:54:4c:63:f0:68:04:7c: fb:2c:11:6a:45:62:96:fc:9f:76:99:d1:ed:c4:0d:99:c7:56: 20:9a:92:36:0b:a1:8d:9a:dd:d7:bc:c3:5f:6a:62:a5:e8:6c: c2:56:5b:01:2a:fb:c0:15:1b:f4:70:be:69:09:a2:54:43:c3: eb:7c:78:d9:16:ff:4a:dc:88:cb:19:af:49:de:75:89:86:f8: c9:75:4a:ec:85:0e:9a:20:dd:be:d0:3b:dc:99:34:9c:c3:4b: 4e:41:4c:cf:99:0a:9f:d7:ff:e8:11:17:be:77:33:28:4e:0d: cb:cc:b7:e9:25:b0:f0:7c:13:9d:db:79:f5:6f:33:ad:66:c2: 0d:dc:99:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk0MDYxMTAvBgNVBAUTKEUzNDM4NDA1NDc2NDAyQTNBQThGOTg3QzNBRkEwNjkw RDk2RUQ0NzQwHhcNMjUwODIzMDE1NDA3WhcNMjUwODMwMDE1NDA3WjAYMRYwFAYD VQQDEw02OGE5MWY0MC1hY2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqkv1qXuM6IBfDJ3tA8fPGjf0tXenPLJUH91JMZmo74fpaULeQJt1ShUOMWu4 gW8tGYB1n7Lx/uS8onBvInLdKM5lNZp3uk+i05tvJTlOtIhr3ZFRMavuP8suiSZP TWrU49MNkgrl0prrCGOGa2vgI/iKy2ScH0ZDr2T+cGvVjzWFKsrZjhkX/v16aTm0 bpdgs8JI0/l20aDA8ONGs5jfJgGzImLm6sM1KFda5rt++5Nd91VmJhAmw/f7wGIw oLSYgne74CjC2apqGd3DMqaApnsWV2B8x5yORV7cp7kEqw3c6xCkj6ehU7XYN31d U0EOimCPM345M0MaC6eXCjBFlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLPKfkhV cCV+h/poAHAmKjceSurrMB8GA1UdIwQYMBaAFONDhAVHZAKjqo+YfDr6BpDZbtR0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTQwNi85ODY4QTlGMDE3 MDkxMUVEQjZGODA4NjhDNEY5QUUwMi80ME9FQlVka0FxT3FqNWg4T3ZvR2tObHUx SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQwT0VCVWRrQXFPcWo1aDhPdm9Ha05sdTFIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTQwNi85ODY4QTlGMDE3MDkxMUVEQjZGODA4NjhDNEY5QUUwMi80ME9FQlVka0Fx T3FqNWg4T3ZvR2tObHUxSFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCckKbk60ZdbJF4UVURKrpPCED7nwFINCvm3T0gqpqa71KSDs5zcWGW TyINXPtNAON0bwoEK8y2mhPShSmgEE0aOIoyrRFdenddgIhWaIMBWqFbKqqp7BBU q/d0wWY49ZbJs1HXrMRhpF28sN1ZGHIGfqHIUG7hS1RMY/BoBHz7LBFqRWKW/J92 mdHtxA2Zx1YgmpI2C6GNmt3XvMNfamKl6GzCVlsBKvvAFRv0cL5pCaJUQ8PrfHjZ Fv9K3IjLGa9J3nWJhvjJdUrshQ6aIN2+0DvcmTScw0tOQUzPmQqf1//oERe+dzMo Tg3LzLfpJbDwfBOd23n1bzOtZsIN3Jk5 -----END CERTIFICATE-----Generated at Sun Aug 24 00:13:24 2025 by rpki-client