$ rpki-client -vvf rpki.apnic.net/member_repository/A91498A4/ECF30A9E905311EB9CA8721DC4F9AE02/OjOl2tw3NyZBfd1W5GeQ_4S7ztE.mft File: OjOl2tw3NyZBfd1W5GeQ_4S7ztE.mft (raw, json) Hash identifier: iPWaYfK1cFxvCtpfJ/9tZrkW4um2vyuFj7Q8UxkNCJA= Subject key identifier: 26:0C:78:91:58:B9:7C:A3:BB:68:9A:23:D5:47:FD:20:B6:D5:CF:D0 Authority key identifier: 3A:33:A5:DA:DC:37:37:26:41:7D:DD:56:E4:67:90:FF:84:BB:CE:D1 Certificate issuer: /CN=A91498A4/serialNumber=3A33A5DADC373726417DDD56E46790FF84BBCED1 Certificate serial: 0669 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OjOl2tw3NyZBfd1W5GeQ_4S7ztE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91498A4/ECF30A9E905311EB9CA8721DC4F9AE02/OjOl2tw3NyZBfd1W5GeQ_4S7ztE.mft Manifest number: 0663 Signing time: Fri 08 Aug 2025 22:55:55 +0000 Manifest this update: Fri 08 Aug 2025 22:55:54 +0000 Manifest next update: Fri 15 Aug 2025 22:55:54 +0000 Files and hashes: 1: OjOl2tw3NyZBfd1W5GeQ_4S7ztE.crl (hash: 5TtciQi5ScfRPx7SDJdtRMitJE/2ZUEykvscINb2ikU=) 2: A7A77B96911111EBA69D2641C4F9AE02.roa (hash: VESDtzqVBQrTGjrRN3bP0bonHePhKHgrwV/FIae5l4Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91498A4/ECF30A9E905311EB9CA8721DC4F9AE02/OjOl2tw3NyZBfd1W5GeQ_4S7ztE.crl rsync://rpki.apnic.net/member_repository/A91498A4/ECF30A9E905311EB9CA8721DC4F9AE02/OjOl2tw3NyZBfd1W5GeQ_4S7ztE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OjOl2tw3NyZBfd1W5GeQ_4S7ztE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1641 (0x669) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91498A4, serialNumber=3A33A5DADC373726417DDD56E46790FF84BBCED1 Validity Not Before: Aug 8 22:55:54 2025 GMT Not After : Aug 15 22:55:54 2025 GMT Subject: CN=6896807a-b501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:49:80:0c:13:db:0c:be:0e:f7:f9:8a:7a:98: bb:d9:91:53:55:4c:22:41:9d:9d:2c:28:44:49:f3: d4:c4:fd:bc:3b:e0:9c:24:9f:45:38:b5:cd:b3:de: b0:63:d8:9d:a1:e2:dc:ee:35:4e:85:a1:65:7f:7f: 6e:a1:87:d8:e5:16:ba:16:05:dc:75:a0:2c:e2:3b: 72:8a:5e:c9:dd:a6:19:f1:b2:96:3a:e5:13:67:f0: 6f:63:88:c7:6c:5f:a4:1f:56:f9:f0:74:41:44:b9: 6d:f0:b9:b7:ef:de:70:1a:f8:50:a3:c0:db:61:5e: 38:11:29:7d:cc:e7:df:3c:43:6a:d6:84:6c:b3:a6: 7c:75:a9:f5:36:85:d3:4f:ea:48:6a:94:0e:32:bd: cf:97:b1:57:a5:1d:af:af:f3:44:36:ce:0a:10:25: 27:e5:70:2d:9b:1e:2f:3a:f9:85:d5:f1:75:a2:f4: 56:56:ba:7c:b4:24:23:2f:49:5b:7c:a4:51:af:bd: fe:47:d4:b7:50:14:3d:bf:74:53:86:e3:ed:d5:0e: 13:a7:30:17:4f:fc:93:b4:32:a7:d9:bc:2e:af:ea: 61:34:87:d8:b3:92:3d:42:51:57:2f:4a:b0:1b:eb: 92:b6:1a:a2:c6:a8:6e:44:d5:67:33:73:31:0d:c9: cc:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:0C:78:91:58:B9:7C:A3:BB:68:9A:23:D5:47:FD:20:B6:D5:CF:D0 X509v3 Authority Key Identifier: keyid:3A:33:A5:DA:DC:37:37:26:41:7D:DD:56:E4:67:90:FF:84:BB:CE:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91498A4/ECF30A9E905311EB9CA8721DC4F9AE02/OjOl2tw3NyZBfd1W5GeQ_4S7ztE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OjOl2tw3NyZBfd1W5GeQ_4S7ztE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91498A4/ECF30A9E905311EB9CA8721DC4F9AE02/OjOl2tw3NyZBfd1W5GeQ_4S7ztE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:05:1c:cf:3f:7a:af:bb:d2:9e:4d:32:0c:85:44:1d:49:a3: 29:42:f6:c8:6c:4b:15:02:21:a1:ca:4c:ba:84:0e:c3:04:e6: c1:8d:0d:f1:fb:3d:da:b2:00:30:08:ac:f2:aa:65:68:20:88: b8:62:9c:8e:e6:1f:39:9c:5b:05:d1:da:d0:d8:b0:6c:0e:bf: 70:52:b4:81:e5:e7:c5:db:2b:ec:b0:1a:ac:1e:cd:a9:47:a4: 85:ed:0a:2c:19:a5:8d:bd:60:27:3e:df:a2:6d:73:e0:03:77: e1:3a:6f:e2:53:44:f9:3a:30:be:96:92:8b:42:ad:be:9b:78: b9:6a:58:76:a3:ac:3c:9f:f4:56:fa:da:62:27:96:96:63:7e: 9b:dd:6d:48:c4:5d:67:c1:86:2d:df:a6:2f:63:d6:a0:03:13: ed:15:b0:7a:63:b2:49:a4:68:0f:68:fb:c8:8f:08:76:dc:01: e9:b5:ef:a9:48:13:19:8d:62:1b:a3:39:7c:28:71:d4:47:9e: af:a9:b0:8e:87:11:ae:b4:19:f2:e0:1c:60:82:b7:54:ab:1c: e4:ef:c8:10:60:e4:ad:49:50:08:92:a5:72:99:64:f3:a2:b2: f1:5a:ae:5e:f7:ca:74:b7:fc:96:00:15:2f:3b:27:f3:00:c1: c0:08:18:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk4QTQxMTAvBgNVBAUTKDNBMzNBNURBREMzNzM3MjY0MTdEREQ1NkU0Njc5MEZG ODRCQkNFRDEwHhcNMjUwODA4MjI1NTU0WhcNMjUwODE1MjI1NTU0WjAYMRYwFAYD VQQDEw02ODk2ODA3YS1iNTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2EmADBPbDL4O9/mKepi72ZFTVUwiQZ2dLChESfPUxP28O+CcJJ9FOLXNs96w Y9idoeLc7jVOhaFlf39uoYfY5Ra6FgXcdaAs4jtyil7J3aYZ8bKWOuUTZ/BvY4jH bF+kH1b58HRBRLlt8Lm3795wGvhQo8DbYV44ESl9zOffPENq1oRss6Z8dan1NoXT T+pIapQOMr3Pl7FXpR2vr/NENs4KECUn5XAtmx4vOvmF1fF1ovRWVrp8tCQjL0lb fKRRr73+R9S3UBQ9v3RThuPt1Q4TpzAXT/yTtDKn2bwur+phNIfYs5I9QlFXL0qw G+uSthqixqhuRNVnM3MxDcnMCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCYMeJFY uXyju2iaI9VH/SC21c/QMB8GA1UdIwQYMBaAFDozpdrcNzcmQX3dVuRnkP+Eu87R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OThBNC9FQ0YzMEE5RTkw NTMxMUVCOUNBODcyMURDNEY5QUUwMi9Pak9sMnR3M055WkJmZDFXNUdlUV80Uzd6 dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09qT2wydHczTnlaQmZkMVc1R2VRXzRTN3p0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OThBNC9FQ0YzMEE5RTkwNTMxMUVCOUNBODcyMURDNEY5QUUwMi9Pak9sMnR3M055 WkJmZDFXNUdlUV80Uzd6dEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsBRzPP3qvu9KeTTIMhUQdSaMpQvbIbEsVAiGhyky6hA7DBObBjQ3x +z3asgAwCKzyqmVoIIi4YpyO5h85nFsF0drQ2LBsDr9wUrSB5efF2yvssBqsHs2p R6SF7QosGaWNvWAnPt+ibXPgA3fhOm/iU0T5OjC+lpKLQq2+m3i5alh2o6w8n/RW +tpiJ5aWY36b3W1IxF1nwYYt36YvY9agAxPtFbB6Y7JJpGgPaPvIjwh23AHpte+p SBMZjWIbozl8KHHUR56vqbCOhxGutBny4BxggrdUqxzk78gQYOStSVAIkqVymWTz orLxWq5e98p0t/yWABUvOyfzAMHACBgc -----END CERTIFICATE-----Generated at Sat Aug 9 15:13:44 2025 by rpki-client