$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft File: OddGjPgMUFXp0EybT60xF1wU1l8.mft (raw, json) Hash identifier: OSsNLx4PH6Mskq6iScK+nQtYTEBwf1ekXKH9sQthS7w= Subject key identifier: 51:0B:99:69:C7:B8:4B:21:4D:B8:F5:C8:F9:C3:A2:BC:49:EF:24:93 Authority key identifier: 39:D7:46:8C:F8:0C:50:55:E9:D0:4C:9B:4F:AD:31:17:5C:14:D6:5F Certificate issuer: /CN=A91AD643/serialNumber=39D7468CF80C5055E9D04C9B4FAD31175C14D65F Certificate serial: 06FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft Manifest number: 06F0 Signing time: Tue 12 Aug 2025 22:20:01 +0000 Manifest this update: Tue 12 Aug 2025 22:20:00 +0000 Manifest next update: Tue 19 Aug 2025 22:20:00 +0000 Files and hashes: 1: OddGjPgMUFXp0EybT60xF1wU1l8.crl (hash: M8hPgOidw/7dY2jXRHf29jl2pzkzsjJPTfDqmLn0WlY=) 2: 865F2F80EE8911EBB390AC76C4F9AE02.roa (hash: 0ULrTT5sEmnlV5jXg9GCbo9G2IRIBRTqvgY01zsRTW8=) 3: 81E9653E5B8A11EB857A3F77C4F9AE02.roa (hash: hFkz2Rxz8bjHa9W5ewxpkxAw84TOeg9mnyL9BGUNw+E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.crl rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 22:19:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1788 (0x6fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD643, serialNumber=39D7468CF80C5055E9D04C9B4FAD31175C14D65F Validity Not Before: Aug 12 22:20:00 2025 GMT Not After : Aug 19 22:20:00 2025 GMT Subject: CN=689bbe10-eb8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:eb:fe:c2:b6:10:32:30:64:07:93:40:07:77: 6f:ef:e2:3f:53:d0:70:e2:c2:9f:cc:55:36:57:48: d0:06:1c:70:d2:57:bd:a4:87:e8:7f:d2:4a:29:f8: ec:7f:20:e8:65:28:2b:d0:e6:e9:77:c8:2d:47:99: 28:aa:5a:ce:f0:70:7c:18:18:2a:30:66:8e:62:cf: 15:ee:10:44:60:94:1b:e6:70:ed:1c:8a:39:c5:9f: 82:45:d7:7c:35:d7:0d:4a:7e:ec:ae:52:54:a8:e3: 99:a1:4f:b6:ca:e7:e5:5d:a9:59:a4:89:a3:aa:c9: 29:a6:89:fb:39:c9:a8:1e:c6:ff:09:61:65:06:fe: af:bf:eb:14:1b:41:d9:f6:e6:0c:82:ea:ea:e1:04: c2:d6:26:d4:c6:a6:22:9b:19:17:a0:f5:5f:d8:d0: 40:2b:5b:5c:4b:1c:16:46:23:f2:d2:89:cf:4e:4d: 7d:cb:ac:0d:dd:90:d6:f9:81:7c:2f:d6:86:d2:5b: 5a:df:59:ce:8c:9f:64:03:2f:1d:39:19:31:98:40: 1d:a3:42:91:0e:66:bb:a8:bd:d1:9c:15:c4:1d:51: d1:23:ea:1d:ab:af:1d:e2:46:ca:08:7d:dd:fb:cb: b1:fb:99:23:a4:f0:e5:02:75:f8:60:1f:ec:b3:8d: 88:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:0B:99:69:C7:B8:4B:21:4D:B8:F5:C8:F9:C3:A2:BC:49:EF:24:93 X509v3 Authority Key Identifier: keyid:39:D7:46:8C:F8:0C:50:55:E9:D0:4C:9B:4F:AD:31:17:5C:14:D6:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:39:22:d0:7f:8c:64:5a:92:57:6b:bc:01:0b:da:dd:f6:e2: 16:28:68:06:33:ab:9c:8f:6a:bf:fb:61:56:e0:86:20:9b:af: 65:58:fc:32:82:8c:9e:6b:8a:3c:24:65:74:90:58:55:4e:a5: a6:e3:0e:ae:84:66:2a:75:0d:b3:ba:74:30:23:dd:56:5b:d5: d2:21:7d:70:56:68:32:34:ed:e1:c4:4a:de:28:ad:1d:11:5c: ec:ff:7f:b3:bd:f3:da:ef:fb:ee:48:0f:c7:1f:a2:e6:97:d4: 76:8e:c9:ae:88:ae:03:31:1b:6f:d9:49:f7:00:4a:1b:44:c1: d7:43:b8:69:66:d8:16:df:41:b9:a2:80:f8:2c:16:7a:10:69: 22:18:b8:be:21:d6:79:3a:b6:4e:2d:9d:95:2c:80:1b:aa:a2: e2:d6:a1:4b:3a:a5:31:af:cb:59:41:83:06:90:28:27:ee:e6: 11:94:58:36:b4:8b:fe:ff:8d:bd:45:44:e1:7f:c5:c0:68:b8: b5:f8:17:52:8f:31:57:45:65:30:f3:6f:70:8a:a7:c2:c7:d1: 52:e7:44:50:95:23:2a:42:40:e2:12:73:e6:37:3c:8f:66:89: 6e:89:4a:f3:5b:dc:a8:0c:da:1d:ba:24:0a:e5:13:f3:44:42: ef:dd:7f:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ2NDMxMTAvBgNVBAUTKDM5RDc0NjhDRjgwQzUwNTVFOUQwNEM5QjRGQUQzMTE3 NUMxNEQ2NUYwHhcNMjUwODEyMjIyMDAwWhcNMjUwODE5MjIyMDAwWjAYMRYwFAYD VQQDEw02ODliYmUxMC1lYjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxev+wrYQMjBkB5NAB3dv7+I/U9Bw4sKfzFU2V0jQBhxw0le9pIfof9JKKfjs fyDoZSgr0Obpd8gtR5koqlrO8HB8GBgqMGaOYs8V7hBEYJQb5nDtHIo5xZ+CRdd8 NdcNSn7srlJUqOOZoU+2yuflXalZpImjqskppon7OcmoHsb/CWFlBv6vv+sUG0HZ 9uYMgurq4QTC1ibUxqYimxkXoPVf2NBAK1tcSxwWRiPy0onPTk19y6wN3ZDW+YF8 L9aG0lta31nOjJ9kAy8dORkxmEAdo0KRDma7qL3RnBXEHVHRI+odq68d4kbKCH3d +8ux+5kjpPDlAnX4YB/ss42I4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFELmWnH uEshTbj1yPnDorxJ7ySTMB8GA1UdIwQYMBaAFDnXRoz4DFBV6dBMm0+tMRdcFNZf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDY0My9FRkJFNkVCMjVC ODgxMUVCQkQ1RjMwNzZDNEY5QUUwMi9PZGRHalBnTVVGWHAwRXliVDYweEYxd1Ux bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09kZEdqUGdNVUZYcDBFeWJUNjB4RjF3VTFsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDY0My9FRkJFNkVCMjVCODgxMUVCQkQ1RjMwNzZDNEY5QUUwMi9PZGRHalBnTVVG WHAwRXliVDYweEYxd1UxbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7OSLQf4xkWpJXa7wBC9rd9uIWKGgGM6ucj2q/+2FW4IYgm69lWPwy goyea4o8JGV0kFhVTqWm4w6uhGYqdQ2zunQwI91WW9XSIX1wVmgyNO3hxEreKK0d EVzs/3+zvfPa7/vuSA/HH6Lml9R2jsmuiK4DMRtv2Un3AEobRMHXQ7hpZtgW30G5 ooD4LBZ6EGkiGLi+IdZ5OrZOLZ2VLIAbqqLi1qFLOqUxr8tZQYMGkCgn7uYRlFg2 tIv+/429RUThf8XAaLi1+BdSjzFXRWUw829wiqfCx9FS50RQlSMqQkDiEnPmNzyP ZoluiUrzW9yoDNoduiQK5RPzRELv3X+g -----END CERTIFICATE-----Generated at Wed Aug 13 02:51:51 2025 by rpki-client