$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft File: O9MC-nouhmpnmxtglttnRToDq4Y.mft (raw, json) Hash identifier: HQygQORaQTb7iUaJgb4P2h9Pq8uSJo1OvJR5W9tSh6U= Subject key identifier: 17:18:D9:E6:4F:27:30:19:95:EB:F3:EE:19:76:24:08:26:DA:5A:1B Authority key identifier: 3B:D3:02:FA:7A:2E:86:6A:67:9B:1B:60:96:DB:67:45:3A:03:AB:86 Certificate issuer: /CN=A91F7DCD/serialNumber=3BD302FA7A2E866A679B1B6096DB67453A03AB86 Certificate serial: 0A59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft Manifest number: 0A43 Signing time: Fri 22 Aug 2025 19:52:08 +0000 Manifest this update: Fri 22 Aug 2025 19:52:08 +0000 Manifest next update: Fri 29 Aug 2025 19:52:08 +0000 Files and hashes: 1: O9MC-nouhmpnmxtglttnRToDq4Y.crl (hash: kMQ18GGXARqkZDZUU0XXP2bFAwWoG/jx3U2baDWzdsk=) 2: 0791DE6034A511ED9D82D13BC4F9AE02.roa (hash: juMQ71UzLGU0NVMfjPJ2FFyOOWRBZEQJenhZ2xiR7QE=) 3: 62512E2C73D311EABC99D63AC4F9AE02.roa (hash: DFYge5dHCEqKdjq6qJwiRBDOxqQ6gIZRO7JP5sPeXVk=) 4: 27323072FF0E11EFB014CB3CC4F9AE02.roa (hash: Fcw453Ezb9efQnwUieSmXg5daSqXlucP3XjYZWFxjYQ=) 5: 855AECF29B3A11EB9B73EB7BC4F9AE02.roa (hash: R3iQDjS1xmyA/Ti9pGMuv3ByraTjewOpXnxZ6reYInQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.crl rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:52:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2649 (0xa59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7DCD, serialNumber=3BD302FA7A2E866A679B1B6096DB67453A03AB86 Validity Not Before: Aug 22 19:52:08 2025 GMT Not After : Aug 29 19:52:08 2025 GMT Subject: CN=68a8ca68-c173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:06:45:d4:cc:a6:7e:19:25:c3:11:15:82:85: 7b:c8:20:0f:76:9f:96:62:ac:20:da:9c:ac:a8:57: 5e:f2:7a:e1:e5:f2:b0:19:0b:fc:ec:a6:56:42:97: 16:19:4e:b3:be:c3:2b:85:2c:c0:14:2b:ed:9c:eb: d7:ab:6a:e9:9f:58:41:41:6c:98:cb:18:a3:17:72: d2:10:cd:8b:7a:b1:21:65:45:87:8d:fe:e3:c8:18: 7f:ca:42:64:0a:d3:14:1e:29:ae:21:48:aa:d8:89: 07:3c:83:57:a2:d1:aa:cc:ac:e4:1c:a7:a3:d4:22: e3:a6:16:fc:95:08:ea:53:13:4c:c0:50:0c:8e:68: 63:4a:a1:c3:e7:f9:58:80:6b:f7:b0:1b:e2:ce:e6: 4a:79:29:45:97:16:a3:5e:a3:41:c0:19:79:92:90: 75:3e:01:ff:15:17:2d:ab:90:52:5c:4e:53:ec:3c: d2:29:d7:0b:9f:d6:ac:b3:68:39:fe:ca:93:07:c3: 27:f3:ec:81:f9:eb:a3:12:f9:57:1e:76:bc:08:e5: 5d:b1:aa:e1:2e:fd:33:49:02:9d:57:9b:80:96:35: 31:cb:63:20:38:b2:cf:85:8d:cf:f7:20:d6:70:aa: 8c:1c:64:54:c7:d2:c8:bc:6d:c9:48:c0:7c:52:e2: 0f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:18:D9:E6:4F:27:30:19:95:EB:F3:EE:19:76:24:08:26:DA:5A:1B X509v3 Authority Key Identifier: keyid:3B:D3:02:FA:7A:2E:86:6A:67:9B:1B:60:96:DB:67:45:3A:03:AB:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:0a:c7:de:83:92:d4:67:1d:33:3c:47:94:4a:b3:6f:e8:09: 03:61:71:a6:97:80:97:fa:8e:9a:e0:2c:18:9f:a2:a9:aa:5d: 48:e3:f7:4e:34:91:c2:12:85:7b:f4:c3:30:91:6a:22:47:a8: 66:d6:e2:fe:a8:95:94:51:b3:dd:aa:2d:d2:44:51:b9:59:b8: 43:f4:58:c3:69:37:d5:49:d6:dd:c0:70:36:bb:f1:5c:7b:24: 20:c4:a0:b0:53:f8:30:43:3f:bb:45:1c:30:5c:43:d2:49:cc: e2:44:33:31:47:e7:5c:36:28:76:7d:0e:a7:2f:46:7a:ce:64: e1:a3:e0:0b:00:f6:ee:c9:c4:29:39:aa:59:f1:ee:c2:2b:6d: 21:a2:38:0a:e2:88:0e:ce:84:d0:64:fa:1b:7c:e4:f3:38:81: e2:46:82:dd:c0:4a:aa:34:38:3a:a1:04:25:8d:9d:e5:e6:78: ec:13:27:d2:e3:a1:a3:67:76:7e:d5:ee:28:37:38:55:27:ce: ac:b5:70:9c:2d:88:56:55:8d:e9:4f:04:f6:df:91:a7:ba:07: 36:9e:e3:1a:71:66:06:83:93:4b:d0:03:ec:35:a5:91:ac:ad: e9:8c:67:de:1b:fc:bc:61:32:90:bd:0e:cd:1c:92:8e:1e:0f: 79:25:dc:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdEQ0QxMTAvBgNVBAUTKDNCRDMwMkZBN0EyRTg2NkE2NzlCMUI2MDk2REI2NzQ1 M0EwM0FCODYwHhcNMjUwODIyMTk1MjA4WhcNMjUwODI5MTk1MjA4WjAYMRYwFAYD VQQDEw02OGE4Y2E2OC1jMTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsgZF1MymfhklwxEVgoV7yCAPdp+WYqwg2pysqFde8nrh5fKwGQv87KZWQpcW GU6zvsMrhSzAFCvtnOvXq2rpn1hBQWyYyxijF3LSEM2LerEhZUWHjf7jyBh/ykJk CtMUHimuIUiq2IkHPINXotGqzKzkHKej1CLjphb8lQjqUxNMwFAMjmhjSqHD5/lY gGv3sBvizuZKeSlFlxajXqNBwBl5kpB1PgH/FRctq5BSXE5T7DzSKdcLn9ass2g5 /sqTB8Mn8+yB+eujEvlXHna8COVdsarhLv0zSQKdV5uAljUxy2MgOLLPhY3P9yDW cKqMHGRUx9LIvG3JSMB8UuIPyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBcY2eZP JzAZlevz7hl2JAgm2lobMB8GA1UdIwQYMBaAFDvTAvp6LoZqZ5sbYJbbZ0U6A6uG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0RDRC84NDQyOEIwRTcz RDExMUVBOUNERUM1MzRDNEY5QUUwMi9POU1DLW5vdWhtcG5teHRnbHR0blJUb0Rx NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL085TUMtbm91aG1wbm14dGdsdHRuUlRvRHE0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0RDRC84NDQyOEIwRTczRDExMUVBOUNERUM1MzRDNEY5QUUwMi9POU1DLW5vdWht cG5teHRnbHR0blJUb0RxNFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvCsfeg5LUZx0zPEeUSrNv6AkDYXGml4CX+o6a4CwYn6Kpql1I4/dO NJHCEoV79MMwkWoiR6hm1uL+qJWUUbPdqi3SRFG5WbhD9FjDaTfVSdbdwHA2u/Fc eyQgxKCwU/gwQz+7RRwwXEPSScziRDMxR+dcNih2fQ6nL0Z6zmTho+ALAPbuycQp OapZ8e7CK20hojgK4ogOzoTQZPobfOTzOIHiRoLdwEqqNDg6oQQljZ3l5njsEyfS 46GjZ3Z+1e4oNzhVJ86stXCcLYhWVY3pTwT235Gnugc2nuMacWYGg5NL0APsNaWR rK3pjGfeG/y8YTKQvQ7NHJKOHg95Jdye -----END CERTIFICATE-----Generated at Sat Aug 23 17:06:56 2025 by rpki-client