$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft File: 2OL6sVCi_VePZ-GbApZTmzdSyak.mft (raw, json) Hash identifier: dZFOdyPq5wZRlyLYFluKawpw95hPM/dz+3XdHhc8rQ0= Subject key identifier: 9D:D6:9A:DC:22:03:8F:35:71:11:BB:54:11:79:21:F1:CC:C3:43:2B Authority key identifier: D8:E2:FA:B1:50:A2:FD:57:8F:67:E1:9B:02:96:53:9B:37:52:C9:A9 Certificate issuer: /CN=A91EC225/serialNumber=D8E2FAB150A2FD578F67E19B0296539B3752C9A9 Certificate serial: 0ED8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2OL6sVCi_VePZ-GbApZTmzdSyak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft Manifest number: 0ECE Signing time: Fri 22 Aug 2025 17:46:20 +0000 Manifest this update: Fri 22 Aug 2025 17:46:19 +0000 Manifest next update: Fri 29 Aug 2025 17:46:19 +0000 Files and hashes: 1: 2OL6sVCi_VePZ-GbApZTmzdSyak.crl (hash: lCFbWFviISH55biMx0dw0IrPKR0hd1t0yw62FMzzHRU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.crl rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2OL6sVCi_VePZ-GbApZTmzdSyak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:46:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3800 (0xed8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC225, serialNumber=D8E2FAB150A2FD578F67E19B0296539B3752C9A9 Validity Not Before: Aug 22 17:46:19 2025 GMT Not After : Aug 29 17:46:19 2025 GMT Subject: CN=68a8acec-4777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:25:45:8c:e4:f7:4d:c3:9b:66:c0:f0:86:d2: 7d:0c:eb:44:56:c0:6c:2b:4d:a5:f3:d2:f5:dd:ae: bf:93:8d:82:30:cf:3b:07:b1:7b:d1:2d:d9:4c:b9: a4:ed:e3:02:31:85:eb:32:bf:f7:0e:67:e1:18:6c: fb:c2:0b:c5:3e:b8:3f:13:58:8c:cc:45:19:0f:17: 53:5f:2f:4c:34:1b:0a:07:df:0e:3c:b3:f2:23:c2: f6:c3:d3:eb:3e:e9:68:9c:63:fb:0b:3d:c5:bd:db: 14:b0:43:c0:66:93:0b:52:dd:13:71:28:dc:62:dd: 25:50:c1:93:1d:cb:82:5e:d8:e0:9b:ab:a4:e3:df: cf:17:42:01:c0:2a:40:7f:3b:c4:0e:97:bd:ab:b8: fe:32:1b:87:7b:9f:6d:e7:03:f0:85:ec:6e:ee:17: 74:8a:2f:d6:b1:55:38:8d:8d:7d:63:8c:55:f7:45: 30:3a:b1:74:48:c8:99:cf:2c:5a:5c:06:7b:28:62: 92:be:f5:1a:3c:3f:ef:06:cb:11:54:66:76:c6:dd: aa:f2:73:4a:0b:80:8e:c6:8d:cd:01:39:59:ff:7a: 7b:06:2c:ce:53:62:83:42:78:c1:6c:45:f5:9f:69: 2c:3c:c7:9e:7b:57:de:0b:8e:e1:2c:a8:c2:db:2a: e1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:D6:9A:DC:22:03:8F:35:71:11:BB:54:11:79:21:F1:CC:C3:43:2B X509v3 Authority Key Identifier: keyid:D8:E2:FA:B1:50:A2:FD:57:8F:67:E1:9B:02:96:53:9B:37:52:C9:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2OL6sVCi_VePZ-GbApZTmzdSyak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:05:90:a0:74:4c:bf:8e:2c:f4:1d:33:fc:b3:f1:e7:54:de: 96:ba:e0:f8:bb:88:3e:05:e8:6c:9f:e0:c4:8b:3f:77:be:74: 13:28:8d:9c:28:ca:9c:bc:53:c7:60:04:8d:16:93:66:f9:8e: 20:0d:75:35:56:05:8c:45:40:f7:73:94:a9:de:c5:72:5e:ea: b5:80:01:cd:07:62:14:a1:86:b5:c5:ee:6e:f4:15:b2:2b:9b: 06:d5:b5:43:b7:21:ff:dd:f7:ec:60:13:46:a1:66:c1:84:bf: c3:40:b4:1e:ab:a2:ec:e4:cd:fa:0c:55:cc:30:63:ea:d4:aa: 6a:f8:b3:71:de:50:b7:0f:34:98:42:87:bb:76:11:96:e1:b7: 11:b7:97:b7:1b:9d:ca:16:36:1a:61:45:13:87:5f:f7:3f:df: 5f:12:7f:09:01:c1:25:04:d6:3f:ce:20:13:2e:f1:9d:ce:36: 13:dc:66:27:c0:aa:ee:65:ce:65:01:c7:99:32:26:0c:1a:42: 0d:5e:61:a6:2b:08:29:a3:f4:5d:04:1b:62:09:d3:94:55:de: 48:77:61:4e:c5:f7:6a:69:8a:7b:09:b4:9a:32:e4:56:6f:13: 76:15:20:b4:95:4b:0f:68:25:c5:3d:36:0c:a1:cf:10:32:4c: 96:1a:18:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUMyMjUxMTAvBgNVBAUTKEQ4RTJGQUIxNTBBMkZENTc4RjY3RTE5QjAyOTY1MzlC Mzc1MkM5QTkwHhcNMjUwODIyMTc0NjE5WhcNMjUwODI5MTc0NjE5WjAYMRYwFAYD VQQDEw02OGE4YWNlYy00Nzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5yVFjOT3TcObZsDwhtJ9DOtEVsBsK02l89L13a6/k42CMM87B7F70S3ZTLmk 7eMCMYXrMr/3DmfhGGz7wgvFPrg/E1iMzEUZDxdTXy9MNBsKB98OPLPyI8L2w9Pr PulonGP7Cz3FvdsUsEPAZpMLUt0TcSjcYt0lUMGTHcuCXtjgm6uk49/PF0IBwCpA fzvEDpe9q7j+MhuHe59t5wPwhexu7hd0ii/WsVU4jY19Y4xV90UwOrF0SMiZzyxa XAZ7KGKSvvUaPD/vBssRVGZ2xt2q8nNKC4COxo3NATlZ/3p7BizOU2KDQnjBbEX1 n2ksPMeee1feC47hLKjC2yrhYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ3Wmtwi A481cRG7VBF5IfHMw0MrMB8GA1UdIwQYMBaAFNji+rFQov1Xj2fhmwKWU5s3Usmp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzIyNS80OTlGREY5MDhF NTUxMUU5ODBEMDlBNDJDNEY5QUUwMi8yT0w2c1ZDaV9WZVBaLUdiQXBaVG16ZFN5 YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJPTDZzVkNpX1ZlUFotR2JBcFpUbXpkU3lhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzIyNS80OTlGREY5MDhFNTUxMUU5ODBEMDlBNDJDNEY5QUUwMi8yT0w2c1ZDaV9W ZVBaLUdiQXBaVG16ZFN5YWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHBZCgdEy/jiz0HTP8s/HnVN6WuuD4u4g+Behsn+DEiz93vnQTKI2c KMqcvFPHYASNFpNm+Y4gDXU1VgWMRUD3c5Sp3sVyXuq1gAHNB2IUoYa1xe5u9BWy K5sG1bVDtyH/3ffsYBNGoWbBhL/DQLQeq6Ls5M36DFXMMGPq1Kpq+LNx3lC3DzSY Qoe7dhGW4bcRt5e3G53KFjYaYUUTh1/3P99fEn8JAcElBNY/ziATLvGdzjYT3GYn wKruZc5lAceZMiYMGkINXmGmKwgpo/RdBBtiCdOUVd5Id2FOxfdqaYp7CbSaMuRW bxN2FSC0lUsPaCXFPTYMoc8QMkyWGhgT -----END CERTIFICATE-----Generated at Sat Aug 23 20:59:22 2025 by rpki-client