$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.mft File: O407UYT_W0gbWw5ZsLIpzAbWCR4.mft (raw, json) Hash identifier: VbBlOJxMat4bOZh/6HYb2n75dmRB17m8TMpvF3OC/xo= Subject key identifier: F7:61:09:F3:20:A3:07:2F:FF:FE:E0:12:03:8C:10:D8:33:42:99:DC Authority key identifier: 3B:8D:3B:51:84:FF:5B:48:1B:5B:0E:59:B0:B2:29:CC:06:D6:09:1E Certificate issuer: /CN=A91EA944/serialNumber=3B8D3B5184FF5B481B5B0E59B0B229CC06D6091E Certificate serial: 1090 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O407UYT_W0gbWw5ZsLIpzAbWCR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.mft Manifest number: 1087 Signing time: Fri 22 Aug 2025 17:28:56 +0000 Manifest this update: Fri 22 Aug 2025 17:28:56 +0000 Manifest next update: Fri 29 Aug 2025 17:28:56 +0000 Files and hashes: 1: O407UYT_W0gbWw5ZsLIpzAbWCR4.crl (hash: gl5lSFy0UgUAQ8259qgsj0GWtuQ4GyFtLzdARiyuvP4=) 2: E3272FE036B911E99F4D9A5CC4F9AE02.roa (hash: zsPveXQ2Zd6a9Te4YhLc43ZEsJlTYYnv+fpeJR8IN2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.crl rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O407UYT_W0gbWw5ZsLIpzAbWCR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:28:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4240 (0x1090) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA944, serialNumber=3B8D3B5184FF5B481B5B0E59B0B229CC06D6091E Validity Not Before: Aug 22 17:28:56 2025 GMT Not After : Aug 29 17:28:56 2025 GMT Subject: CN=68a8a8d8-3f41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:93:ce:99:ce:57:6a:34:8d:29:a1:bb:1f:50: 2f:84:bb:5f:16:d4:86:cb:2a:c4:ee:90:de:b1:85: 5f:b2:23:3c:4f:df:94:5d:69:24:d5:21:4b:e2:bc: b0:b0:dc:9a:28:b5:63:3b:7f:93:3c:7a:c8:b8:c4: 54:e5:3d:69:d6:97:a3:f4:1e:5e:b3:51:30:7b:c8: e5:52:8d:87:f3:7b:aa:4e:e1:1a:e1:2b:85:6c:72: 89:13:12:06:72:1d:58:83:b4:ca:e6:45:12:af:bf: 3e:70:8a:22:04:35:c6:08:ab:ea:01:01:98:a9:73: 7b:3d:3c:9d:0e:bb:83:e8:37:0b:21:34:0a:d1:36: ac:94:16:7e:dd:23:f9:97:cd:2f:44:68:2f:7f:57: 02:a8:da:9b:64:9d:df:49:40:db:e4:70:a0:c6:2b: ca:f9:5e:5b:36:d5:d7:c4:34:46:89:da:8c:04:12: dd:b3:e1:7e:c2:ba:52:21:02:df:72:18:27:45:08: 8a:d8:d0:bd:89:51:ed:ae:c5:c4:96:b5:65:99:2e: 1a:07:bd:99:bd:8e:e9:95:c9:eb:bf:8c:bf:1b:ab: 75:b1:91:f4:a4:14:11:9a:70:d1:88:3d:c5:30:3e: 0a:fb:6d:d8:dc:cc:aa:c7:08:55:68:9d:e3:1c:4b: bf:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:61:09:F3:20:A3:07:2F:FF:FE:E0:12:03:8C:10:D8:33:42:99:DC X509v3 Authority Key Identifier: keyid:3B:8D:3B:51:84:FF:5B:48:1B:5B:0E:59:B0:B2:29:CC:06:D6:09:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O407UYT_W0gbWw5ZsLIpzAbWCR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:25:8c:4c:ed:a5:f5:09:57:69:36:8f:ac:a6:9f:d5:11:0f: 08:4e:2c:c3:7c:ae:05:5e:39:26:0d:0c:45:d7:12:b3:63:5c: b1:7d:53:2a:4d:d3:9c:1d:93:db:2c:21:3c:09:c8:d5:e1:30: 61:ac:5e:bd:76:4c:2d:32:fb:39:22:95:e7:19:9e:06:57:0c: aa:93:e7:ae:46:9c:f5:01:27:e5:7c:52:c6:c9:d7:19:bf:fd: 5a:b9:e5:df:5d:1f:62:73:50:76:ad:33:b6:33:ab:bc:f0:79: a4:99:f6:08:f0:5e:19:d2:0b:07:a9:91:6d:1c:c5:da:7b:dd: cf:3e:12:79:b6:d9:94:ab:a8:48:56:d4:0a:b1:59:01:98:b2: 99:dc:c9:75:6b:f7:65:f7:ec:f4:ae:79:e5:27:fe:3b:ce:73: ce:0e:7e:3a:4a:00:3f:57:25:49:e7:83:1f:87:c7:9c:03:8d: 4d:99:74:5f:db:a6:a7:27:11:b9:fb:ea:eb:cb:cb:84:ff:77: 90:76:7d:b5:fc:8e:5a:bc:34:39:ee:1b:79:19:a8:5d:28:01: 77:46:ff:b4:0a:1b:f0:e0:07:0a:ff:86:7f:b5:e7:a1:ea:ac: 51:4a:0b:0d:c1:f5:b8:7c:dd:ec:25:66:f6:58:08:50:15:e3: 65:b3:ad:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5NDQxMTAvBgNVBAUTKDNCOEQzQjUxODRGRjVCNDgxQjVCMEU1OUIwQjIyOUND MDZENjA5MUUwHhcNMjUwODIyMTcyODU2WhcNMjUwODI5MTcyODU2WjAYMRYwFAYD VQQDEw02OGE4YThkOC0zZjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzJPOmc5XajSNKaG7H1AvhLtfFtSGyyrE7pDesYVfsiM8T9+UXWkk1SFL4ryw sNyaKLVjO3+TPHrIuMRU5T1p1pej9B5es1Ewe8jlUo2H83uqTuEa4SuFbHKJExIG ch1Yg7TK5kUSr78+cIoiBDXGCKvqAQGYqXN7PTydDruD6DcLITQK0TaslBZ+3SP5 l80vRGgvf1cCqNqbZJ3fSUDb5HCgxivK+V5bNtXXxDRGidqMBBLds+F+wrpSIQLf chgnRQiK2NC9iVHtrsXElrVlmS4aB72ZvY7plcnrv4y/G6t1sZH0pBQRmnDRiD3F MD4K+23Y3MyqxwhVaJ3jHEu/MwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPdhCfMg owcv//7gEgOMENgzQpncMB8GA1UdIwQYMBaAFDuNO1GE/1tIG1sOWbCyKcwG1gke MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTk0NC83OTZDOUQ3NDM2 QjkxMUU5OTg0Qjc2NUNDNEY5QUUwMi9PNDA3VVlUX1cwZ2JXdzVac0xJcHpBYldD UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL080MDdVWVRfVzBnYld3NVpzTElwekFiV0NSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTk0NC83OTZDOUQ3NDM2QjkxMUU5OTg0Qjc2NUNDNEY5QUUwMi9PNDA3VVlUX1cw Z2JXdzVac0xJcHpBYldDUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkJYxM7aX1CVdpNo+spp/VEQ8ITizDfK4FXjkmDQxF1xKzY1yxfVMq TdOcHZPbLCE8CcjV4TBhrF69dkwtMvs5IpXnGZ4GVwyqk+euRpz1ASflfFLGydcZ v/1aueXfXR9ic1B2rTO2M6u88HmkmfYI8F4Z0gsHqZFtHMXae93PPhJ5ttmUq6hI VtQKsVkBmLKZ3Ml1a/dl9+z0rnnlJ/47znPODn46SgA/VyVJ54Mfh8ecA41NmXRf 26anJxG5++rry8uE/3eQdn21/I5avDQ57ht5GahdKAF3Rv+0Chvw4AcK/4Z/teeh 6qxRSgsNwfW4fN3sJWb2WAhQFeNls62g -----END CERTIFICATE-----Generated at Sat Aug 23 20:37:46 2025 by rpki-client