$ rpki-client -vvf rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft File: o5hxRib4es6-X2_QHlBwGRWqfRU.mft (raw, json) Hash identifier: yNTDoLTUx4fKGLl1F7JEjoCW69ZbDeMAhxL4V9qo3pk= Subject key identifier: 53:30:09:A4:BC:DB:9D:DD:52:3A:A8:8B:EE:72:62:0F:2C:48:86:FA Authority key identifier: A3:98:71:46:26:F8:7A:CE:BE:5F:6F:D0:1E:50:70:19:15:AA:7D:15 Certificate issuer: /CN=A91827C5/serialNumber=A398714626F87ACEBE5F6FD01E50701915AA7D15 Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5hxRib4es6-X2_QHlBwGRWqfRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft Manifest number: 9A Signing time: Mon 11 Aug 2025 06:32:40 +0000 Manifest this update: Mon 11 Aug 2025 06:32:39 +0000 Manifest next update: Mon 18 Aug 2025 06:32:39 +0000 Files and hashes: 1: o5hxRib4es6-X2_QHlBwGRWqfRU.crl (hash: aynpDA1Jtcm4Ik44BBf4Jxg6FxsuwBz52wNJiz/28Ks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.crl rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5hxRib4es6-X2_QHlBwGRWqfRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91827C5, serialNumber=A398714626F87ACEBE5F6FD01E50701915AA7D15 Validity Not Before: Aug 11 06:32:39 2025 GMT Not After : Aug 18 06:32:39 2025 GMT Subject: CN=68998e88-9b3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:57:57:4b:96:af:d0:64:02:97:88:68:5f:91: 13:47:e3:85:1d:82:3a:3f:a0:6c:af:2e:d0:76:5f: 9e:4c:c8:24:cc:90:2b:09:a8:ee:0f:4f:5b:f1:c7: 0a:27:66:be:eb:a5:21:f5:f4:05:99:c2:40:78:00: 45:9c:92:c6:c1:94:8d:3d:95:a0:85:da:4d:6d:a2: d7:2d:9b:f6:f0:f9:a8:c1:b2:2d:b1:30:54:87:3d: 6d:df:d4:b3:7f:9a:2e:11:6f:eb:9a:60:57:a9:e8: fe:ce:8f:ea:f7:bb:7c:72:3f:6a:ef:96:b8:e8:6b: 7d:a2:6f:3a:a6:44:3d:2a:8d:fa:4f:f1:44:2e:c1: fb:52:08:af:42:19:fb:f8:ed:4f:e5:43:32:0a:62: c1:25:a9:a3:60:c9:87:6f:88:4b:13:aa:95:8a:fb: 6a:0f:6f:99:f5:98:b7:70:9c:74:3a:90:d3:df:df: 0a:c7:18:d3:cf:49:16:69:f2:40:81:71:71:eb:b0: e8:fd:02:e2:3c:2e:9a:b2:d5:f6:9f:27:69:c1:c3: 07:10:76:94:11:9f:72:4a:56:d0:0b:b1:96:ac:cd: f6:8e:5c:ae:92:87:25:dc:1a:c4:ed:96:3f:31:6b: f2:35:5d:86:21:f3:39:d7:c8:bb:b4:34:dc:a0:3f: 90:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:30:09:A4:BC:DB:9D:DD:52:3A:A8:8B:EE:72:62:0F:2C:48:86:FA X509v3 Authority Key Identifier: keyid:A3:98:71:46:26:F8:7A:CE:BE:5F:6F:D0:1E:50:70:19:15:AA:7D:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5hxRib4es6-X2_QHlBwGRWqfRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:0e:eb:49:01:fe:29:23:07:cb:f8:a9:63:b3:1c:8c:6c:8a: 2a:7b:91:4e:be:ad:dd:a2:a1:8b:ac:93:4a:99:10:ce:e8:98: da:d2:48:6d:fc:f0:64:bb:66:f6:30:84:5f:3f:e3:09:03:d5: df:a3:87:03:13:fc:0f:25:6d:bd:8b:18:28:48:55:35:83:df: 02:06:0c:14:1f:e5:0c:c5:c4:ca:35:ec:88:bc:dc:65:c9:2c: e6:02:48:af:60:f7:9f:c7:5b:cd:36:38:10:5d:2d:59:7d:c1: 7a:56:91:86:40:6f:07:df:ae:52:33:30:2d:82:1d:85:29:90: ed:4f:79:99:56:97:ed:ad:4c:20:74:e5:3e:84:b7:a7:fa:f2: ce:73:6a:d7:b5:93:51:91:04:76:e4:fb:fd:e1:69:c5:f4:12: e0:85:64:fc:6a:cb:d0:bf:b0:be:60:cd:da:e1:8e:f3:7a:2c: b0:23:d9:5e:ac:4b:87:f8:fe:77:1d:c4:a8:86:bc:d5:95:ea: d8:ce:fa:91:34:2e:01:98:10:1c:c8:dd:c2:0b:51:ec:16:11: d6:a1:b9:05:1a:6c:c0:98:f8:d3:80:3d:ac:35:9b:77:5e:b2: de:e5:72:92:d3:52:21:0e:51:1b:de:80:10:07:56:3c:91:2f: 00:b7:60:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI3QzUxMTAvBgNVBAUTKEEzOTg3MTQ2MjZGODdBQ0VCRTVGNkZEMDFFNTA3MDE5 MTVBQTdEMTUwHhcNMjUwODExMDYzMjM5WhcNMjUwODE4MDYzMjM5WjAYMRYwFAYD VQQDEw02ODk5OGU4OC05YjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqFdXS5av0GQCl4hoX5ETR+OFHYI6P6Bsry7Qdl+eTMgkzJArCajuD09b8ccK J2a+66Uh9fQFmcJAeABFnJLGwZSNPZWghdpNbaLXLZv28PmowbItsTBUhz1t39Sz f5ouEW/rmmBXqej+zo/q97t8cj9q75a46Gt9om86pkQ9Ko36T/FELsH7UgivQhn7 +O1P5UMyCmLBJamjYMmHb4hLE6qVivtqD2+Z9Zi3cJx0OpDT398KxxjTz0kWafJA gXFx67Do/QLiPC6astX2nydpwcMHEHaUEZ9ySlbQC7GWrM32jlyukocl3BrE7ZY/ MWvyNV2GIfM518i7tDTcoD+QtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFMwCaS8 253dUjqoi+5yYg8sSIb6MB8GA1UdIwQYMBaAFKOYcUYm+HrOvl9v0B5QcBkVqn0V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjdDNS9EOUFBQjgyQzhB RDkxMUVGOTgxQzgyODNDNEY5QUUwMi9vNWh4UmliNGVzNi1YMl9RSGxCd0dSV3Fm UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL281aHhSaWI0ZXM2LVgyX1FIbEJ3R1JXcWZSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjdDNS9EOUFBQjgyQzhBRDkxMUVGOTgxQzgyODNDNEY5QUUwMi9vNWh4UmliNGVz Ni1YMl9RSGxCd0dSV3FmUlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxDutJAf4pIwfL+KljsxyMbIoqe5FOvq3doqGLrJNKmRDO6Jja0kht /PBku2b2MIRfP+MJA9Xfo4cDE/wPJW29ixgoSFU1g98CBgwUH+UMxcTKNeyIvNxl ySzmAkivYPefx1vNNjgQXS1ZfcF6VpGGQG8H365SMzAtgh2FKZDtT3mZVpftrUwg dOU+hLen+vLOc2rXtZNRkQR25Pv94WnF9BLghWT8asvQv7C+YM3a4Y7zeiywI9le rEuH+P53HcSohrzVlerYzvqRNC4BmBAcyN3CC1HsFhHWobkFGmzAmPjTgD2sNZt3 XrLe5XKS01IhDlEb3oAQB1Y8kS8At2CR -----END CERTIFICATE-----Generated at Mon Aug 11 10:06:54 2025 by rpki-client