$ rpki-client -vvf rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft File: o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft (raw, json) Hash identifier: ZXwIGpSOYsY7qaR5zRcGVWwMFeUpyO4QxgsYl65K7NA= Subject key identifier: D9:8B:3F:DD:3D:07:0C:D7:FF:02:7B:B1:22:41:61:B1:49:54:A2:53 Authority key identifier: A3:65:2D:9E:54:E9:64:68:B2:30:47:93:73:17:FA:4E:CD:7B:36:48 Certificate issuer: /CN=A91A36A7/serialNumber=A3652D9E54E96468B23047937317FA4ECD7B3648 Certificate serial: 0608 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft Manifest number: 0601 Signing time: Sun 10 Aug 2025 22:57:31 +0000 Manifest this update: Sun 10 Aug 2025 22:57:30 +0000 Manifest next update: Sun 17 Aug 2025 22:57:30 +0000 Files and hashes: 1: o2UtnlTpZGiyMEeTcxf6Ts17Nkg.crl (hash: p8OMA4OPheh8mkDnpOlnT9B685i5N1ttXc80y/VT2nw=) 2: F0CA090EB94A11EBAF5BDD5AC4F9AE02.roa (hash: AxnCXioU+pzcVhOQczSiGNqFZn1BtxYji3/Mt/svcQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.crl rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1544 (0x608) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A36A7, serialNumber=A3652D9E54E96468B23047937317FA4ECD7B3648 Validity Not Before: Aug 10 22:57:30 2025 GMT Not After : Aug 17 22:57:30 2025 GMT Subject: CN=689923da-bf96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:48:a4:75:f7:a1:24:5a:61:83:d1:97:92:f5: 76:a7:c9:cc:62:17:13:ce:94:a6:ea:0b:6a:aa:94: 4e:8a:93:b6:33:b3:40:61:c6:ab:2e:01:51:c8:25: 46:b6:99:23:31:eb:9d:25:eb:3b:63:9a:cc:c0:53: 08:f7:a4:cb:bd:19:32:a5:82:9f:1c:76:55:2c:4c: 59:30:d4:fb:22:c7:94:88:0c:8e:18:ee:7e:32:34: c3:30:01:6e:ae:c2:1f:fe:35:0c:27:21:11:d0:40: 21:c3:15:3d:3f:8b:4a:4a:4a:8b:45:74:3c:b8:f2: e1:c6:f1:1c:9d:8e:07:db:df:0a:59:5b:ca:f4:31: cb:4b:fd:a4:6d:be:7e:a7:aa:9e:9f:fc:b8:fc:d3: 96:6d:34:0c:5b:55:c7:0e:28:ea:2e:d0:7d:62:03: b3:a6:4b:17:76:63:75:32:59:c9:7d:f8:9b:06:d2: 7b:0d:99:c6:44:5a:5a:a6:89:3b:59:3e:eb:58:62: a7:28:82:d5:e3:1d:54:2b:f4:97:1c:9b:0c:fb:da: dc:a9:cc:4a:be:36:47:04:4b:e7:d1:c5:76:95:92: 11:9d:ce:82:eb:3a:d1:da:01:dd:44:0d:c2:8c:a1: cd:21:fe:06:fa:b3:bd:0b:b3:b3:8c:94:3b:96:8a: b1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:8B:3F:DD:3D:07:0C:D7:FF:02:7B:B1:22:41:61:B1:49:54:A2:53 X509v3 Authority Key Identifier: keyid:A3:65:2D:9E:54:E9:64:68:B2:30:47:93:73:17:FA:4E:CD:7B:36:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:15:95:42:0e:5c:94:71:7e:85:8f:f3:67:50:0b:42:d6:34: 84:43:c2:4c:a4:4f:33:9c:25:2b:03:dc:37:63:44:d3:3a:27: f3:4d:1f:c5:27:dd:5d:f9:02:78:40:3c:b6:e9:cc:05:27:45: 0c:85:59:d2:12:e0:0f:1b:4e:bb:2e:f9:bd:28:e0:60:64:0d: 3e:ea:39:53:23:76:86:5c:8b:34:f6:bb:19:94:82:66:45:d3: 5c:33:e0:3f:9c:fb:0b:ba:5e:4a:22:30:af:72:3c:6b:e2:ac: c0:74:f6:8b:d3:00:2e:b0:a4:9e:16:b2:37:46:c0:62:30:b3: 3a:f7:a4:aa:f0:01:59:9b:b9:64:a7:f3:05:76:5e:68:95:b0: 1c:a2:45:0e:65:ef:4d:d4:70:b9:d7:14:d1:44:51:62:35:70: b7:70:bf:3f:80:a9:22:3c:8e:aa:1b:6f:77:a7:78:86:4e:81: e3:08:67:a0:2d:7e:1d:ad:66:08:d7:d0:a9:c1:2c:22:90:ba: 39:78:7d:5b:c3:9e:42:a6:de:27:38:a8:97:9a:19:80:6c:a9: 13:b8:43:d6:ba:35:4b:85:ff:02:83:48:80:22:e1:17:40:e1: 0c:d8:91:cd:eb:48:f3:8b:cc:84:20:56:39:56:d4:e7:ba:38: c4:52:4b:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM2QTcxMTAvBgNVBAUTKEEzNjUyRDlFNTRFOTY0NjhCMjMwNDc5MzczMTdGQTRF Q0Q3QjM2NDgwHhcNMjUwODEwMjI1NzMwWhcNMjUwODE3MjI1NzMwWjAYMRYwFAYD VQQDEw02ODk5MjNkYS1iZjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApEikdfehJFphg9GXkvV2p8nMYhcTzpSm6gtqqpROipO2M7NAYcarLgFRyCVG tpkjMeudJes7Y5rMwFMI96TLvRkypYKfHHZVLExZMNT7IseUiAyOGO5+MjTDMAFu rsIf/jUMJyER0EAhwxU9P4tKSkqLRXQ8uPLhxvEcnY4H298KWVvK9DHLS/2kbb5+ p6qen/y4/NOWbTQMW1XHDijqLtB9YgOzpksXdmN1MlnJffibBtJ7DZnGRFpapok7 WT7rWGKnKILV4x1UK/SXHJsM+9rcqcxKvjZHBEvn0cV2lZIRnc6C6zrR2gHdRA3C jKHNIf4G+rO9C7OzjJQ7loqxOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNmLP909 BwzX/wJ7sSJBYbFJVKJTMB8GA1UdIwQYMBaAFKNlLZ5U6WRosjBHk3MX+k7NezZI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzZBNy84QUE2NUFGQ0I5 NDkxMUVCQkJCMzI1NUFDNEY5QUUwMi9vMlV0bmxUcFpHaXlNRWVUY3hmNlRzMTdO a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28yVXRubFRwWkdpeU1FZVRjeGY2VHMxN05rZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzZBNy84QUE2NUFGQ0I5NDkxMUVCQkJCMzI1NUFDNEY5QUUwMi9vMlV0bmxUcFpH aXlNRWVUY3hmNlRzMTdOa2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBFZVCDlyUcX6Fj/NnUAtC1jSEQ8JMpE8znCUrA9w3Y0TTOifzTR/F J91d+QJ4QDy26cwFJ0UMhVnSEuAPG067Lvm9KOBgZA0+6jlTI3aGXIs09rsZlIJm RdNcM+A/nPsLul5KIjCvcjxr4qzAdPaL0wAusKSeFrI3RsBiMLM696Sq8AFZm7lk p/MFdl5olbAcokUOZe9N1HC51xTRRFFiNXC3cL8/gKkiPI6qG293p3iGToHjCGeg LX4drWYI19CpwSwikLo5eH1bw55Cpt4nOKiXmhmAbKkTuEPWujVLhf8Cg0iAIuEX QOEM2JHN60jzi8yEIFY5VtTnujjEUkvy -----END CERTIFICATE-----Generated at Mon Aug 11 04:18:03 2025 by rpki-client