$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/oA4C3Hg_kIQCHflPdYYmTsR9NDg.mft File: oA4C3Hg_kIQCHflPdYYmTsR9NDg.mft (raw, json) Hash identifier: Lrgjzq8Ja13cP/EOAlB/IwR6iqzaL0VH9GverchsreQ= Subject key identifier: 55:84:C5:CF:23:E6:BF:E3:11:DB:AC:F1:19:D8:E0:8F:89:B1:F8:BD Authority key identifier: A0:0E:02:DC:78:3F:90:84:02:1D:F9:4F:75:86:26:4E:C4:7D:34:38 Certificate issuer: /CN=A91EE5E5/serialNumber=A00E02DC783F9084021DF94F7586264EC47D3438 Certificate serial: 8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oA4C3Hg_kIQCHflPdYYmTsR9NDg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/oA4C3Hg_kIQCHflPdYYmTsR9NDg.mft Manifest number: 89 Signing time: Sat 23 Aug 2025 06:49:33 +0000 Manifest this update: Sat 23 Aug 2025 06:49:32 +0000 Manifest next update: Sat 30 Aug 2025 06:49:32 +0000 Files and hashes: 1: oA4C3Hg_kIQCHflPdYYmTsR9NDg.crl (hash: qpfkgT20En7vjAkcXA2ErWgDOrolLR3FtFuku4g/SpE=) 2: 5D5CEDCEAFC011EFAA2E3455C4F9AE02.roa (hash: 7A02Qe5tU1BaVkRNS6N9PAYKa4qN0Lgazu0at/u/nBw=) 3: 1597CAC6B00711EF863A582EC4F9AE02.roa (hash: ELgn79sVAW9E3JP6Gcqdp6NoM1aGV5NXuDSvgrgOR0o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/oA4C3Hg_kIQCHflPdYYmTsR9NDg.crl rsync://rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/oA4C3Hg_kIQCHflPdYYmTsR9NDg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oA4C3Hg_kIQCHflPdYYmTsR9NDg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:49:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE5E5, serialNumber=A00E02DC783F9084021DF94F7586264EC47D3438 Validity Not Before: Aug 23 06:49:32 2025 GMT Not After : Aug 30 06:49:32 2025 GMT Subject: CN=68a9647d-247a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:52:de:51:02:42:8d:4e:2a:ef:85:1b:d5:da: a2:e8:8e:d2:de:b2:fe:cf:04:c2:bd:d3:93:94:f7: b3:ce:a1:bf:bb:13:0c:23:02:96:2b:f2:fb:f6:6d: 72:8f:c6:92:55:89:18:0d:ef:e8:ae:49:45:ec:c2: 03:9c:34:76:26:fa:fe:78:4b:79:64:bd:79:5d:5f: 09:96:fa:69:d5:31:ae:96:f6:3f:c7:fe:1e:29:e8: f1:cd:b4:3e:32:3a:2f:59:a2:0a:69:58:58:f5:0a: f2:43:5f:68:dd:0e:5e:e3:72:5a:30:f8:1a:b5:60: c7:9f:2d:50:e8:29:3f:f5:44:6b:35:d0:a3:57:91: 98:f2:35:d7:e7:b1:58:ea:f5:3c:dc:d4:b7:e4:80: ae:dd:b3:a8:12:67:8a:61:50:31:35:df:b1:a4:5c: 46:ae:2d:97:da:26:d8:d6:01:92:51:d7:b5:4e:c7: 18:e7:78:e8:12:9c:86:71:ea:6f:ec:b9:a5:e1:be: 57:53:0d:3a:88:6e:81:c1:d2:5f:5d:62:5d:2d:4f: 89:13:c0:71:e8:9e:ea:0d:40:fc:d6:cf:80:6a:58: a5:f9:c4:26:8d:ae:fd:bc:71:75:40:c8:19:83:cb: b1:f5:25:6f:3f:da:d5:3f:3f:8c:1d:c4:d6:a4:c8: 5d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:84:C5:CF:23:E6:BF:E3:11:DB:AC:F1:19:D8:E0:8F:89:B1:F8:BD X509v3 Authority Key Identifier: keyid:A0:0E:02:DC:78:3F:90:84:02:1D:F9:4F:75:86:26:4E:C4:7D:34:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/oA4C3Hg_kIQCHflPdYYmTsR9NDg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oA4C3Hg_kIQCHflPdYYmTsR9NDg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/oA4C3Hg_kIQCHflPdYYmTsR9NDg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:49:a8:49:9a:cf:ff:a3:27:9d:10:b5:1f:1a:97:c2:5a:57: 5f:bb:df:5f:df:7b:20:68:1f:9f:e5:4d:a1:f4:fa:1f:76:9a: 69:76:86:34:a6:fc:46:bb:2f:20:17:18:95:9f:69:ea:af:4b: 4d:6c:ac:26:6f:bb:42:43:ef:11:64:37:d2:90:8a:24:b0:54: ef:8d:ff:cc:8d:4a:56:81:fc:eb:d9:39:2a:a8:ab:c3:2a:ca: 36:33:9c:89:c2:93:09:02:7e:5d:1a:d6:65:f2:74:89:b5:07: f0:ee:ef:16:ac:0b:8e:01:fe:92:fe:cd:c9:57:3d:cc:ec:6f: d1:74:37:fd:ec:87:32:94:e5:68:d6:76:bc:60:4a:23:74:ec: 59:bb:9d:7b:14:83:2e:50:8d:ec:31:02:73:c7:77:25:d6:72: f7:1a:15:34:2a:e7:a1:ad:80:59:1e:ca:d4:d7:0b:c7:66:6a: 3f:06:bf:f4:50:7d:ef:0e:44:3e:7f:75:10:6e:3d:29:d5:e1: e5:0a:4e:8d:93:2c:d7:b7:66:89:e1:87:fe:54:5a:f1:16:9e: 36:c2:f0:af:05:f8:d4:1a:b5:34:38:31:b6:49:a2:d4:6b:48: e5:0f:23:b7:0d:b9:04:1b:8b:ee:92:fc:67:70:6d:36:5f:48: 10:67:45:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUU1RTUxMTAvBgNVBAUTKEEwMEUwMkRDNzgzRjkwODQwMjFERjk0Rjc1ODYyNjRF QzQ3RDM0MzgwHhcNMjUwODIzMDY0OTMyWhcNMjUwODMwMDY0OTMyWjAYMRYwFAYD VQQDEw02OGE5NjQ3ZC0yNDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs1LeUQJCjU4q74Ub1dqi6I7S3rL+zwTCvdOTlPezzqG/uxMMIwKWK/L79m1y j8aSVYkYDe/orklF7MIDnDR2Jvr+eEt5ZL15XV8Jlvpp1TGulvY/x/4eKejxzbQ+ MjovWaIKaVhY9QryQ19o3Q5e43JaMPgatWDHny1Q6Ck/9URrNdCjV5GY8jXX57FY 6vU83NS35ICu3bOoEmeKYVAxNd+xpFxGri2X2ibY1gGSUde1TscY53joEpyGcepv 7Lml4b5XUw06iG6BwdJfXWJdLU+JE8Bx6J7qDUD81s+Aalil+cQmja79vHF1QMgZ g8ux9SVvP9rVPz+MHcTWpMhdUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFWExc8j 5r/jEdus8RnY4I+Jsfi9MB8GA1UdIwQYMBaAFKAOAtx4P5CEAh35T3WGJk7EfTQ4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTVFNS9GOTdCQzMwMkFG QkYxMUVGQTI4QTM2NTRDNEY5QUUwMi9vQTRDM0hnX2tJUUNIZmxQZFlZbVRzUjlO RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29BNEMzSGdfa0lRQ0hmbFBkWVltVHNSOU5EZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTVFNS9GOTdCQzMwMkFGQkYxMUVGQTI4QTM2NTRDNEY5QUUwMi9vQTRDM0hnX2tJ UUNIZmxQZFlZbVRzUjlORGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnSahJms//oyedELUfGpfCWldfu99f33sgaB+f5U2h9PofdpppdoY0 pvxGuy8gFxiVn2nqr0tNbKwmb7tCQ+8RZDfSkIoksFTvjf/MjUpWgfzr2TkqqKvD Kso2M5yJwpMJAn5dGtZl8nSJtQfw7u8WrAuOAf6S/s3JVz3M7G/RdDf97IcylOVo 1na8YEojdOxZu517FIMuUI3sMQJzx3cl1nL3GhU0KuehrYBZHsrU1wvHZmo/Br/0 UH3vDkQ+f3UQbj0p1eHlCk6NkyzXt2aJ4Yf+VFrxFp42wvCvBfjUGrU0ODG2SaLU a0jlDyO3DbkEG4vukvxncG02X0gQZ0Ul -----END CERTIFICATE-----Generated at Sat Aug 23 14:16:49 2025 by rpki-client