$ rpki-client -vvf rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft File: OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft (raw, json) Hash identifier: Ss6UUOmbM73sm5wcJKiysFtoDVWwE2HjgqaEmxu2u2s= Subject key identifier: BE:DC:40:33:54:BC:45:DE:E3:E2:58:7F:A8:59:D6:CF:F7:AE:AA:67 Authority key identifier: 3B:0B:C5:56:50:AA:46:B1:78:B3:E1:74:23:00:0B:D9:81:CA:67:36 Certificate issuer: /CN=A9186C66/serialNumber=3B0BC55650AA46B178B3E17423000BD981CA6736 Certificate serial: 2643 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OwvFVlCqRrF4s-F0IwAL2YHKZzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft Manifest number: 2632 Signing time: Sun 10 Aug 2025 15:38:34 +0000 Manifest this update: Sun 10 Aug 2025 15:38:34 +0000 Manifest next update: Sun 17 Aug 2025 15:38:34 +0000 Files and hashes: 1: OwvFVlCqRrF4s-F0IwAL2YHKZzY.crl (hash: 4Unn6E84fdS94FpdKNnvZUeZuUusELDMrRUGQBTrVRc=) 2: 02DB5704B0F211E58974874FC4F9AE02.roa (hash: 80axerWiZ6cd/ywlGklwH07eZfaJzXVmfhf4nrdmoFQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.crl rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OwvFVlCqRrF4s-F0IwAL2YHKZzY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9795 (0x2643) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186C66, serialNumber=3B0BC55650AA46B178B3E17423000BD981CA6736 Validity Not Before: Aug 10 15:38:34 2025 GMT Not After : Aug 17 15:38:34 2025 GMT Subject: CN=6898bcfa-54f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:54:c7:f4:00:bb:3a:94:fb:84:02:c4:90:b6: 2a:ef:37:dc:0e:bc:f0:99:ef:a6:1e:ec:24:f8:71: 25:c8:2c:4b:ef:a4:6b:4c:d1:ef:75:a4:27:0d:d6: 80:0c:fb:19:f4:ab:45:3f:3a:4c:98:c4:37:f4:29: f1:01:6a:26:3e:e5:99:4b:d5:12:0f:d6:22:66:cb: 37:c7:e0:80:48:6c:3c:2b:63:70:01:9f:c7:3c:8d: bc:e6:a9:4b:d6:96:3f:0f:61:d0:63:77:95:7c:e3: b8:a7:15:5a:6d:71:fa:2a:44:f7:dd:f8:11:16:54: d2:8e:88:c8:2f:cb:37:c4:69:a4:d4:cf:f2:cd:8e: 96:d8:26:21:f7:e7:5a:68:cc:9e:e2:37:86:e7:89: d4:df:a3:ae:48:f2:b1:86:97:4e:0d:33:ac:dc:38: 14:54:ad:9b:82:13:36:2a:d7:3c:59:1b:6e:74:1c: f4:80:06:39:d6:a1:66:47:ca:19:d2:8c:e1:23:ba: 5f:9a:47:11:1d:8c:da:72:62:28:75:96:14:ea:7b: bd:27:92:dc:78:d8:8e:17:8a:61:57:51:0f:ee:2e: c5:0d:a4:42:b4:c0:28:35:13:a7:0f:c1:83:d5:a9: 28:2c:21:d6:09:8b:53:92:b5:41:6d:4a:26:a8:4f: 62:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:DC:40:33:54:BC:45:DE:E3:E2:58:7F:A8:59:D6:CF:F7:AE:AA:67 X509v3 Authority Key Identifier: keyid:3B:0B:C5:56:50:AA:46:B1:78:B3:E1:74:23:00:0B:D9:81:CA:67:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OwvFVlCqRrF4s-F0IwAL2YHKZzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:d1:2d:3f:d0:1a:dd:20:15:e5:b1:c1:4b:5c:fe:00:ff:07: 04:19:1a:83:1e:f0:f0:c4:34:5f:f9:86:2c:6d:4d:c9:e0:61: 1b:87:6b:42:88:7f:e3:28:7b:2c:08:4c:8f:7d:6f:99:86:f9: 95:f2:6e:4e:78:2b:f6:8b:14:ad:c1:32:d9:22:11:ec:e1:00: 1c:f0:83:b5:8c:d6:9f:2d:49:3b:82:16:13:25:fe:16:04:fe: 5b:d2:1c:bf:56:98:5e:4c:0e:f9:b3:3f:33:46:51:bc:40:f6: 4a:21:ea:cf:60:e3:62:00:70:b6:a4:34:3e:58:92:c1:fe:ea: 22:22:68:84:e9:96:8a:27:bd:c9:6e:a1:0e:50:e9:3f:d4:90: cd:9b:3d:59:97:1c:30:95:06:fc:81:a0:07:77:17:a2:5c:57: 51:30:51:9d:47:62:23:08:06:c3:cb:5e:78:b6:24:11:5c:04: 74:9f:0a:f1:96:2d:e6:2f:ed:da:3c:08:ad:cb:c5:a4:d1:f7: b8:fd:b3:e5:1b:3e:e2:92:3a:55:05:07:03:03:ed:a5:00:b7: 83:ff:ed:41:d7:2f:e5:c0:b4:a5:30:6c:62:df:5e:73:70:3f: f8:52:04:15:d4:2e:95:1d:fb:b5:8e:53:3a:1d:e8:e5:99:4d: 60:73:e8:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZDNjYxMTAvBgNVBAUTKDNCMEJDNTU2NTBBQTQ2QjE3OEIzRTE3NDIzMDAwQkQ5 ODFDQTY3MzYwHhcNMjUwODEwMTUzODM0WhcNMjUwODE3MTUzODM0WjAYMRYwFAYD VQQDEw02ODk4YmNmYS01NGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3FTH9AC7OpT7hALEkLYq7zfcDrzwme+mHuwk+HElyCxL76RrTNHvdaQnDdaA DPsZ9KtFPzpMmMQ39CnxAWomPuWZS9USD9YiZss3x+CASGw8K2NwAZ/HPI285qlL 1pY/D2HQY3eVfOO4pxVabXH6KkT33fgRFlTSjojIL8s3xGmk1M/yzY6W2CYh9+da aMye4jeG54nU36OuSPKxhpdODTOs3DgUVK2bghM2Ktc8WRtudBz0gAY51qFmR8oZ 0ozhI7pfmkcRHYzacmIodZYU6nu9J5LceNiOF4phV1EP7i7FDaRCtMAoNROnD8GD 1akoLCHWCYtTkrVBbUomqE9iHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL7cQDNU vEXe4+JYf6hZ1s/3rqpnMB8GA1UdIwQYMBaAFDsLxVZQqkaxeLPhdCMAC9mBymc2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkM2Ni84RkI5NThGQUY4 NkIxMUU0ODMxNjczNjBDNEY5QUUwMi9Pd3ZGVmxDcVJyRjRzLUYwSXdBTDJZSEta elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL093dkZWbENxUnJGNHMtRjBJd0FMMllIS1p6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkM2Ni84RkI5NThGQUY4NkIxMUU0ODMxNjczNjBDNEY5QUUwMi9Pd3ZGVmxDcVJy RjRzLUYwSXdBTDJZSEtaelkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAO0S0/0BrdIBXlscFLXP4A/wcEGRqDHvDwxDRf+YYsbU3J4GEbh2tC iH/jKHssCEyPfW+ZhvmV8m5OeCv2ixStwTLZIhHs4QAc8IO1jNafLUk7ghYTJf4W BP5b0hy/VpheTA75sz8zRlG8QPZKIerPYONiAHC2pDQ+WJLB/uoiImiE6ZaKJ73J bqEOUOk/1JDNmz1ZlxwwlQb8gaAHdxeiXFdRMFGdR2IjCAbDy154tiQRXAR0nwrx li3mL+3aPAity8Wk0fe4/bPlGz7ikjpVBQcDA+2lALeD/+1B1y/lwLSlMGxi315z cD/4UgQV1C6VHfu1jlM6HejlmU1gc+il -----END CERTIFICATE-----Generated at Mon Aug 11 10:48:41 2025 by rpki-client