$ rpki-client -vvf rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft File: OTVm9EF4bZWNinkRjo71b8hy5cU.mft (raw, json) Hash identifier: x8KWQJguFcGFV1UcIDgB7Nws4Wb8mYzdEjs8kGn07Mc= Subject key identifier: B7:5D:72:CF:BD:10:2D:20:BA:65:E8:3E:C9:A9:EF:5E:B9:5F:68:A0 Authority key identifier: 39:35:66:F4:41:78:6D:95:8D:8A:79:11:8E:8E:F5:6F:C8:72:E5:C5 Certificate issuer: /CN=A91673ED/serialNumber=393566F441786D958D8A79118E8EF56FC872E5C5 Certificate serial: 06A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OTVm9EF4bZWNinkRjo71b8hy5cU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft Manifest number: 0694 Signing time: Wed 06 Aug 2025 22:38:02 +0000 Manifest this update: Wed 06 Aug 2025 22:38:01 +0000 Manifest next update: Wed 13 Aug 2025 22:38:01 +0000 Files and hashes: 1: OTVm9EF4bZWNinkRjo71b8hy5cU.crl (hash: WNXjf53sNPfcsYC7FAnu51P8lADkrXPOTuREqqR31Y4=) 2: CD1F0EC07D4D11EBAE81AF83C4F9AE02.roa (hash: Tn4IiKC/ehOcHKqem3Io6ZVpsXPRVKGONn1yIt6QObo=) 3: BDBFFB867D5411EB8CBE5B57C4F9AE02.roa (hash: rBuNfeeoduUd1I0NoD4IRcILjNn1S7GUQ8XAggSqgBo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.crl rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OTVm9EF4bZWNinkRjo71b8hy5cU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 22:38:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1698 (0x6a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91673ED, serialNumber=393566F441786D958D8A79118E8EF56FC872E5C5 Validity Not Before: Aug 6 22:38:01 2025 GMT Not After : Aug 13 22:38:01 2025 GMT Subject: CN=6893d949-7e4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3d:6f:cf:60:00:e0:fa:bd:96:e9:28:4c:92: 06:f8:99:7c:ad:e3:38:42:ff:09:a1:c8:1e:48:be: 7c:93:e6:90:2d:23:eb:f3:6d:6b:34:40:75:ab:eb: 96:3f:4d:53:12:44:48:60:1e:87:ad:ef:94:38:85: fe:48:b3:bd:4e:40:a3:bf:22:1d:0f:a8:b2:88:6a: f6:66:4a:4e:bd:42:1e:6a:ad:8c:ef:bf:31:37:40: 70:f6:8e:44:cd:0f:e1:d4:f8:75:f9:78:ab:58:05: 56:7a:82:71:86:52:29:c8:4d:48:9f:6d:54:17:64: 90:c4:6b:d7:50:ec:dc:c3:60:5f:90:42:81:da:90: 0c:68:04:85:f0:cd:89:71:fe:5e:67:e1:53:f7:c3: 23:5c:33:8c:96:37:2f:4d:b2:29:0b:60:cd:31:d8: 24:e1:87:81:ab:d7:b4:91:8e:73:d1:aa:d5:2e:f5: 7b:ac:dd:7c:8b:ee:cd:8b:f4:50:e8:12:e1:08:61: 66:c5:2e:c0:ae:c4:c5:cf:e2:ea:8b:45:e3:01:e7: a4:0c:66:d5:d1:e6:37:80:69:c2:52:5f:11:72:b5: 77:aa:c2:66:bb:db:c1:18:74:46:8f:9e:53:0c:08: 79:12:3d:b2:75:71:ab:27:77:95:df:a0:c9:23:f6: b7:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:5D:72:CF:BD:10:2D:20:BA:65:E8:3E:C9:A9:EF:5E:B9:5F:68:A0 X509v3 Authority Key Identifier: keyid:39:35:66:F4:41:78:6D:95:8D:8A:79:11:8E:8E:F5:6F:C8:72:E5:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OTVm9EF4bZWNinkRjo71b8hy5cU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:a1:3d:b5:5b:cc:06:1e:18:93:6f:2e:68:0e:94:3c:07:0d: ca:08:76:a2:37:dc:0d:e8:e2:f9:f9:9e:d3:45:cd:39:21:c1: 02:b2:d7:ea:84:77:c0:9c:a3:2a:ba:77:c8:20:08:1e:f7:d4: 33:49:ad:a4:6b:95:aa:11:fb:a5:5e:35:cb:9d:f7:71:7f:b8: 42:92:11:17:c0:74:7a:21:97:26:ae:00:36:8b:33:b7:08:5c: 92:df:54:3d:c3:88:c7:ea:8c:90:73:48:14:17:bd:6d:bd:10: f4:73:45:1a:5c:02:a8:cb:5f:89:23:c5:db:e1:fb:6b:10:99: e2:77:48:f3:c5:b1:5f:11:1f:24:23:54:5c:82:35:f7:50:ed: c2:14:36:75:41:9d:42:5b:64:e3:c9:63:3e:c5:ff:74:be:3f: 94:5f:0b:f5:3c:af:ff:99:2c:ff:95:2a:dc:8e:89:25:ce:48: dc:74:90:38:b1:6c:b9:d0:7c:2d:0a:20:9f:01:71:34:b5:51: 69:bb:1f:34:16:54:03:f8:00:11:9e:27:8d:b1:7f:8d:5d:7f: 46:f0:42:5c:a4:ae:95:ae:bb:21:08:fb:5e:a3:ca:bb:2f:1c: f1:d4:df:b4:7e:66:54:4a:64:a3:fe:09:4d:d8:08:5a:93:87: c6:f9:70:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjczRUQxMTAvBgNVBAUTKDM5MzU2NkY0NDE3ODZEOTU4RDhBNzkxMThFOEVGNTZG Qzg3MkU1QzUwHhcNMjUwODA2MjIzODAxWhcNMjUwODEzMjIzODAxWjAYMRYwFAYD VQQDEw02ODkzZDk0OS03ZTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxz1vz2AA4Pq9lukoTJIG+Jl8reM4Qv8JocgeSL58k+aQLSPr821rNEB1q+uW P01TEkRIYB6Hre+UOIX+SLO9TkCjvyIdD6iyiGr2ZkpOvUIeaq2M778xN0Bw9o5E zQ/h1Ph1+XirWAVWeoJxhlIpyE1In21UF2SQxGvXUOzcw2BfkEKB2pAMaASF8M2J cf5eZ+FT98MjXDOMljcvTbIpC2DNMdgk4YeBq9e0kY5z0arVLvV7rN18i+7Ni/RQ 6BLhCGFmxS7ArsTFz+Lqi0XjAeekDGbV0eY3gGnCUl8RcrV3qsJmu9vBGHRGj55T DAh5Ej2ydXGrJ3eV36DJI/a3iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLddcs+9 EC0gumXoPsmp7165X2igMB8GA1UdIwQYMBaAFDk1ZvRBeG2VjYp5EY6O9W/IcuXF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzNFRC80RDhGQTIwRTdE NDkxMUVCQTE2NTczN0JDNEY5QUUwMi9PVFZtOUVGNGJaV05pbmtSam83MWI4aHk1 Y1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09UVm05RUY0YlpXTmlua1JqbzcxYjhoeTVjVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzNFRC80RDhGQTIwRTdENDkxMUVCQTE2NTczN0JDNEY5QUUwMi9PVFZtOUVGNGJa V05pbmtSam83MWI4aHk1Y1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpoT21W8wGHhiTby5oDpQ8Bw3KCHaiN9wN6OL5+Z7TRc05IcECstfq hHfAnKMqunfIIAge99QzSa2ka5WqEfulXjXLnfdxf7hCkhEXwHR6IZcmrgA2izO3 CFyS31Q9w4jH6oyQc0gUF71tvRD0c0UaXAKoy1+JI8Xb4ftrEJnid0jzxbFfER8k I1RcgjX3UO3CFDZ1QZ1CW2TjyWM+xf90vj+UXwv1PK//mSz/lSrcjoklzkjcdJA4 sWy50HwtCiCfAXE0tVFpux80FlQD+AARnieNsX+NXX9G8EJcpK6VrrshCPteo8q7 Lxzx1N+0fmZUSmSj/glN2Ahak4fG+XAB -----END CERTIFICATE-----Generated at Fri Aug 8 13:09:47 2025 by rpki-client