$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft File: OU6gholcbxfZNlSKMiOLgs95KU0.mft (raw, json) Hash identifier: bIhEVPA+es1r4Jk6E2wBnPCnL5xT3nz3H1YlUaU+lL0= Subject key identifier: 35:2A:31:98:1B:BD:12:E5:22:2D:4C:78:11:A6:89:BD:6C:E9:14:4B Authority key identifier: 39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D Certificate issuer: /CN=A91AAE16/serialNumber=394EA086895C6F17D936548A32238B82CF79294D Certificate serial: 0FDE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft Manifest number: 0FCF Signing time: Fri 08 Aug 2025 17:42:10 +0000 Manifest this update: Fri 08 Aug 2025 17:42:10 +0000 Manifest next update: Fri 15 Aug 2025 17:42:10 +0000 Files and hashes: 1: OU6gholcbxfZNlSKMiOLgs95KU0.crl (hash: c0m0r64ax/k1lBqZVybRAkng2fLg05gKey/aSGlvSUY=) 2: 68DA14E65BB211E9BF474F16C4F9AE02.roa (hash: +yhzJzGn+WxW2d4EtUHBstgfBIaoIoaYoJwg0N+/u2I=) 3: B2409F28DF9311EEBF6BC36DC4F9AE02.roa (hash: bOx/MaRmXB38ne/1h1RZYscRhBFAXmNorXwlc1KE7w8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.crl rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4062 (0xfde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAE16, serialNumber=394EA086895C6F17D936548A32238B82CF79294D Validity Not Before: Aug 8 17:42:10 2025 GMT Not After : Aug 15 17:42:10 2025 GMT Subject: CN=689636f2-b8ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:11:29:8f:e5:8d:7e:dc:12:9a:16:3c:43:55: 9c:e0:42:48:65:09:1a:9a:31:02:a6:23:b2:02:73: 2c:d7:e4:53:64:65:c9:50:c5:34:57:58:d3:e3:69: cc:18:f1:64:ca:e9:c7:3e:25:98:01:20:7e:2f:56: 2e:0b:d9:db:c5:65:38:90:78:a0:d7:69:5b:b5:e3: 5e:2d:24:45:c3:6c:ec:90:73:ad:30:26:c0:40:1b: f0:19:62:00:28:26:93:86:e9:56:6e:6e:29:86:5d: 2b:5e:13:6c:58:27:41:23:6c:fe:61:74:76:8a:09: 0b:a7:09:08:e3:60:0a:0a:8d:c3:dc:6a:9b:71:11: 01:3a:37:19:a6:3d:3c:6e:7d:5a:f9:43:fa:80:91: 65:0c:97:fa:e5:20:6c:ed:a8:7e:ef:40:b5:66:07: 07:6c:4c:4c:fa:8c:f2:6d:b1:78:be:91:e3:83:b8: e1:46:15:e9:5f:59:e9:90:01:43:1c:6b:35:d9:95: 22:6b:2e:d7:ea:1d:0e:1f:f0:26:9a:36:a8:40:8c: 0e:30:c9:51:ba:a5:7b:44:7b:0d:e5:cf:90:91:54: a2:76:09:75:a6:0c:1e:58:81:ee:a3:8c:c7:07:23: 96:06:e2:fb:1d:50:5e:ba:27:fe:05:f8:21:5d:f2: af:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:2A:31:98:1B:BD:12:E5:22:2D:4C:78:11:A6:89:BD:6C:E9:14:4B X509v3 Authority Key Identifier: keyid:39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:cb:09:dd:56:4d:3b:8c:9a:94:6d:17:7e:c8:9a:0a:d1:29: 46:63:05:74:54:84:3a:82:cb:9c:fc:5b:55:09:a4:6a:a3:d4: 01:9c:9b:da:7b:ad:68:98:db:1f:de:f3:bd:1d:10:28:af:b2: 8c:7b:d1:15:69:11:31:b6:c1:1e:40:f5:d2:27:a6:ef:1a:e2: f5:a7:f5:df:cf:24:62:e7:b6:e6:f5:fd:c5:fa:57:aa:1f:12: 03:9c:78:47:57:5a:41:1a:35:cc:88:42:e9:39:60:2e:ff:2a: d5:95:37:5f:e9:a8:33:ec:c0:fa:b4:14:08:da:13:46:0d:fb: 55:fd:a4:39:46:5e:0a:f3:3d:17:80:10:ca:a4:d9:e6:8a:95: 00:36:79:39:e1:fe:02:18:38:bf:b8:7b:18:9a:54:1c:1c:fd: 56:12:77:fc:d8:07:f2:05:6c:25:9d:c9:31:e1:01:36:13:be: fb:31:6b:ef:39:a4:51:7f:40:b4:fa:62:80:05:e5:15:cb:03: a8:0b:8b:e3:ed:12:e5:7b:46:22:c7:f6:08:21:f4:11:82:92: 9f:2a:3c:cc:6e:eb:5c:0a:e6:60:25:ca:30:db:24:4f:75:6b: 6d:03:6d:b9:07:4b:46:98:1e:39:3b:6f:c4:38:4d:16:90:54: e5:90:83:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFMTYxMTAvBgNVBAUTKDM5NEVBMDg2ODk1QzZGMTdEOTM2NTQ4QTMyMjM4Qjgy Q0Y3OTI5NEQwHhcNMjUwODA4MTc0MjEwWhcNMjUwODE1MTc0MjEwWjAYMRYwFAYD VQQDEw02ODk2MzZmMi1iOGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvhEpj+WNftwSmhY8Q1Wc4EJIZQkamjECpiOyAnMs1+RTZGXJUMU0V1jT42nM GPFkyunHPiWYASB+L1YuC9nbxWU4kHig12lbteNeLSRFw2zskHOtMCbAQBvwGWIA KCaThulWbm4phl0rXhNsWCdBI2z+YXR2igkLpwkI42AKCo3D3GqbcREBOjcZpj08 bn1a+UP6gJFlDJf65SBs7ah+70C1ZgcHbExM+ozybbF4vpHjg7jhRhXpX1npkAFD HGs12ZUiay7X6h0OH/AmmjaoQIwOMMlRuqV7RHsN5c+QkVSidgl1pgweWIHuo4zH ByOWBuL7HVBeuif+BfghXfKvuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDUqMZgb vRLlIi1MeBGmib1s6RRLMB8GA1UdIwQYMBaAFDlOoIaJXG8X2TZUijIji4LPeSlN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUUxNi8xNzQ4ODU1MDVC QjExMUU5OEIxMDNCMTNDNEY5QUUwMi9PVTZnaG9sY2J4ZlpObFNLTWlPTGdzOTVL VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09VNmdob2xjYnhmWk5sU0tNaU9MZ3M5NUtVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUUxNi8xNzQ4ODU1MDVCQjExMUU5OEIxMDNCMTNDNEY5QUUwMi9PVTZnaG9sY2J4 ZlpObFNLTWlPTGdzOTVLVTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtywndVk07jJqUbRd+yJoK0SlGYwV0VIQ6gsuc/FtVCaRqo9QBnJva e61omNsf3vO9HRAor7KMe9EVaRExtsEeQPXSJ6bvGuL1p/XfzyRi57bm9f3F+leq HxIDnHhHV1pBGjXMiELpOWAu/yrVlTdf6agz7MD6tBQI2hNGDftV/aQ5Rl4K8z0X gBDKpNnmipUANnk54f4CGDi/uHsYmlQcHP1WEnf82AfyBWwlnckx4QE2E777MWvv OaRRf0C0+mKABeUVywOoC4vj7RLle0Yix/YIIfQRgpKfKjzMbutcCuZgJcow2yRP dWttA225B0tGmB45O2/EOE0WkFTlkIN9 -----END CERTIFICATE-----Generated at Sun Aug 10 18:29:55 2025 by rpki-client