$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft File: Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft (raw, json) Hash identifier: WcJIPdMZdVarUMK90mM47XTPcZafGVEqKRvsQPikEtQ= Subject key identifier: 5A:CB:B1:16:AF:6F:FB:A0:41:1F:7B:D2:FF:69:4E:13:20:E9:3F:3A Authority key identifier: 3A:46:FB:0F:40:F6:9D:5E:1D:B7:5D:28:51:F0:40:C1:9F:66:F2:2C Certificate issuer: /CN=A91ACD4D/serialNumber=3A46FB0F40F69D5E1DB75D2851F040C19F66F22C Certificate serial: 1657 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Okb7D0D2nV4dt10oUfBAwZ9m8iw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft Manifest number: 1647 Signing time: Sun 10 Aug 2025 16:41:37 +0000 Manifest this update: Sun 10 Aug 2025 16:41:37 +0000 Manifest next update: Sun 17 Aug 2025 16:41:37 +0000 Files and hashes: 1: Okb7D0D2nV4dt10oUfBAwZ9m8iw.crl (hash: f37XR/+Xo1X5jLADK53JnXRy/vgAK55YkwhxwdJErew=) 2: 268ECB3ED5BD11E894FFC250C4F9AE02.roa (hash: w3oachy62b9vS7wqwD6D3HohJubENRLKhLvYOw/CqsQ=) 3: 3DE1DBC4D81011EC892E8A79C4F9AE02.roa (hash: P/jVLVKJm35tcLY3WNaJuQCIeip3WppGMETv/Tz90FE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.crl rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Okb7D0D2nV4dt10oUfBAwZ9m8iw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5719 (0x1657) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACD4D, serialNumber=3A46FB0F40F69D5E1DB75D2851F040C19F66F22C Validity Not Before: Aug 10 16:41:37 2025 GMT Not After : Aug 17 16:41:37 2025 GMT Subject: CN=6898cbc1-5555 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:42:27:ff:b2:30:08:1a:50:78:c1:9c:0b:45: 96:14:0d:d3:5c:2b:3b:e0:ba:6c:e4:f8:39:56:f4: df:46:65:a6:a2:36:40:6a:f6:6e:33:e6:cb:62:90: 55:bf:86:48:ed:58:99:f7:1f:a3:75:02:f2:d4:a2: 1e:86:93:4f:d6:b8:73:6d:6d:06:d1:ee:ad:ae:94: 1e:3f:d2:8d:7f:ae:90:fe:61:c2:f1:35:a2:e8:d3: b1:68:bf:c9:16:ae:16:28:16:36:81:96:b2:94:e9: ee:75:d6:65:83:8b:2d:84:4f:75:90:94:dd:d6:e0: b7:67:01:f5:6d:27:07:8b:0b:d7:15:e4:05:af:2a: 73:65:6a:48:fb:7c:22:1c:95:79:5b:b1:db:ed:cb: 47:e7:6b:4a:ef:79:d2:a2:03:7c:16:78:f8:e3:22: 19:12:47:70:6a:84:43:0c:84:ae:13:9a:f4:b8:05: f6:86:39:00:12:24:de:68:25:c6:d5:07:bc:95:2e: f9:40:ba:52:2f:db:7f:00:10:df:64:1e:b2:17:a4: f6:d9:4c:ce:72:fa:2a:76:63:7f:79:59:3e:63:b5: 9c:62:e7:28:43:39:a2:18:e9:7d:59:fb:b6:d8:fc: 62:35:89:fe:8e:fb:44:73:d9:2d:f8:f3:f4:82:5f: a4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:CB:B1:16:AF:6F:FB:A0:41:1F:7B:D2:FF:69:4E:13:20:E9:3F:3A X509v3 Authority Key Identifier: keyid:3A:46:FB:0F:40:F6:9D:5E:1D:B7:5D:28:51:F0:40:C1:9F:66:F2:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Okb7D0D2nV4dt10oUfBAwZ9m8iw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:32:de:12:65:21:ff:91:4a:b7:aa:59:c6:7c:3a:03:41:04: c1:35:55:dc:8b:45:f1:da:12:70:5b:a8:40:a7:0a:8f:e3:cd: 61:71:c8:f9:04:4a:59:81:c6:59:ae:59:3b:ae:58:6e:72:48: a9:e4:a0:41:c3:55:18:c1:1e:68:a2:f2:e0:74:cd:ce:ae:74: 66:58:68:77:e4:02:1b:cd:4c:00:43:a4:00:54:0c:92:01:c4: d8:31:93:04:31:a4:10:53:3e:82:34:8b:ee:02:24:04:a5:2e: 3c:a4:30:de:5b:96:df:45:24:c0:cd:87:44:ae:68:66:6f:c4: 71:64:d4:2e:52:76:25:70:3b:c4:8b:86:d5:69:a7:68:d0:73: 7f:ba:93:b6:6a:af:f6:7d:0a:ae:9f:df:ea:84:5b:5b:d0:14: da:07:4c:ba:f3:04:6a:33:b0:d7:80:8d:61:09:96:1c:13:c7: 32:32:da:eb:d2:6d:aa:57:f5:b6:ce:2b:b0:ea:47:dc:91:83: af:bb:03:bc:e0:2e:9e:ad:18:68:e2:56:11:cf:b1:8b:fa:c8: 9d:b0:f3:50:c0:f0:b7:27:12:62:20:45:eb:c4:5a:e3:ec:47: ca:0b:d8:0a:8b:46:17:b0:ca:b8:c9:cb:32:a4:1b:1c:7e:51: 1f:bf:fe:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFlcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNENEQxMTAvBgNVBAUTKDNBNDZGQjBGNDBGNjlENUUxREI3NUQyODUxRjA0MEMx OUY2NkYyMkMwHhcNMjUwODEwMTY0MTM3WhcNMjUwODE3MTY0MTM3WjAYMRYwFAYD VQQDEw02ODk4Y2JjMS01NTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0EIn/7IwCBpQeMGcC0WWFA3TXCs74Lps5Pg5VvTfRmWmojZAavZuM+bLYpBV v4ZI7ViZ9x+jdQLy1KIehpNP1rhzbW0G0e6trpQeP9KNf66Q/mHC8TWi6NOxaL/J Fq4WKBY2gZaylOnuddZlg4sthE91kJTd1uC3ZwH1bScHiwvXFeQFrypzZWpI+3wi HJV5W7Hb7ctH52tK73nSogN8Fnj44yIZEkdwaoRDDISuE5r0uAX2hjkAEiTeaCXG 1Qe8lS75QLpSL9t/ABDfZB6yF6T22UzOcvoqdmN/eVk+Y7WcYucoQzmiGOl9Wfu2 2PxiNYn+jvtEc9kt+PP0gl+k0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFrLsRav b/ugQR970v9pThMg6T86MB8GA1UdIwQYMBaAFDpG+w9A9p1eHbddKFHwQMGfZvIs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0Q0RC8xMzdEMDBENDE2 MEUxMUU4ODUyQzQzN0VDNEY5QUUwMi9Pa2I3RDBEMm5WNGR0MTBvVWZCQXdaOW04 aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09rYjdEMEQyblY0ZHQxMG9VZkJBd1o5bThpdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0Q0RC8xMzdEMDBENDE2MEUxMUU4ODUyQzQzN0VDNEY5QUUwMi9Pa2I3RDBEMm5W NGR0MTBvVWZCQXdaOW04aXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWMt4SZSH/kUq3qlnGfDoDQQTBNVXci0Xx2hJwW6hApwqP481hccj5 BEpZgcZZrlk7rlhuckip5KBBw1UYwR5oovLgdM3OrnRmWGh35AIbzUwAQ6QAVAyS AcTYMZMEMaQQUz6CNIvuAiQEpS48pDDeW5bfRSTAzYdErmhmb8RxZNQuUnYlcDvE i4bVaado0HN/upO2aq/2fQqun9/qhFtb0BTaB0y68wRqM7DXgI1hCZYcE8cyMtrr 0m2qV/W2ziuw6kfckYOvuwO84C6erRho4lYRz7GL+sidsPNQwPC3JxJiIEXrxFrj 7EfKC9gKi0YXsMq4ycsypBscflEfv/6e -----END CERTIFICATE-----Generated at Mon Aug 11 05:56:11 2025 by rpki-client