$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.mft File: o7CyBZyzB2t17aMkt2UH08KVUoM.mft (raw, json) Hash identifier: 9lc3zwijPDiFVdg7Zhf2VkoK6fPHvq4aqR8W49j79l8= Subject key identifier: 89:0A:C9:8F:DD:26:DD:44:D5:8A:B8:D1:68:0B:AF:71:42:A7:A0:B5 Authority key identifier: A3:B0:B2:05:9C:B3:07:6B:75:ED:A3:24:B7:65:07:D3:C2:95:52:83 Certificate issuer: /CN=A91C2AAE/serialNumber=A3B0B2059CB3076B75EDA324B76507D3C2955283 Certificate serial: 0A49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7CyBZyzB2t17aMkt2UH08KVUoM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.mft Manifest number: 0A42 Signing time: Fri 08 Aug 2025 20:02:09 +0000 Manifest this update: Fri 08 Aug 2025 20:02:08 +0000 Manifest next update: Fri 15 Aug 2025 20:02:08 +0000 Files and hashes: 1: o7CyBZyzB2t17aMkt2UH08KVUoM.crl (hash: Yf2RuSFqUjeYy8oMtH9I05sFqrlyT1OdoWjwI2ML7IY=) 2: 11502BAC719111EAAC505266C4F9AE02.roa (hash: 88XJabgqaxcByEwqNaBfgRLdg8FbkNPUbRQuluXcClA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.crl rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7CyBZyzB2t17aMkt2UH08KVUoM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2633 (0xa49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2AAE, serialNumber=A3B0B2059CB3076B75EDA324B76507D3C2955283 Validity Not Before: Aug 8 20:02:08 2025 GMT Not After : Aug 15 20:02:08 2025 GMT Subject: CN=689657c0-51bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c7:83:2f:11:f6:05:62:ac:54:b2:c6:f6:b8: 2f:5f:e7:ee:ea:f7:72:39:33:5f:d3:d8:63:0c:23: 9f:b1:fa:13:38:6c:9d:00:a3:45:21:9c:68:0c:76: 6e:32:f1:a9:74:7a:6b:b2:3f:ea:41:6f:f2:c9:9f: 7d:22:a9:e9:1a:fa:c0:b4:83:ca:58:e0:2e:ec:28: 45:11:a9:cd:83:35:67:20:1e:91:a3:a4:74:94:c2: e7:65:e1:f8:32:9f:76:39:d2:28:03:48:4d:48:ce: d3:2b:8b:8d:d8:38:29:e0:93:ff:c9:63:6c:2c:05: a1:a0:4c:89:05:85:2c:04:79:8b:30:8c:f1:8c:1a: 43:89:07:f7:b1:85:8e:a7:af:14:8c:1b:f9:c0:bb: 00:1c:86:07:3f:fb:03:a8:c5:bb:82:d7:c3:7e:ac: 6e:f9:83:4e:1c:a8:cc:7f:ec:74:48:36:79:4b:34: 12:87:d7:d8:a3:21:e1:d0:35:c4:a5:2e:fe:76:d0: 1e:16:b2:84:8f:6d:89:8a:02:fc:c7:f9:92:26:5e: 69:dc:ea:f9:aa:c4:8c:39:62:80:23:e1:cd:69:3b: e9:36:e1:1c:f9:96:f2:86:ba:11:b9:ae:d4:e5:b9: 0e:7a:a0:16:a3:01:9f:a7:1b:0d:e0:ee:91:cd:41: 9c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:0A:C9:8F:DD:26:DD:44:D5:8A:B8:D1:68:0B:AF:71:42:A7:A0:B5 X509v3 Authority Key Identifier: keyid:A3:B0:B2:05:9C:B3:07:6B:75:ED:A3:24:B7:65:07:D3:C2:95:52:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7CyBZyzB2t17aMkt2UH08KVUoM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:5e:7d:e5:f7:17:65:e0:6d:68:ce:e3:7b:52:1f:7c:81:1e: 14:94:6c:79:1b:92:f7:c3:77:1c:28:96:2b:d2:16:fd:97:54: 4a:da:fd:c9:11:53:8e:9c:9b:92:e2:c0:77:0c:16:64:70:95: 75:dd:8c:fe:b5:b8:96:84:f6:d3:c1:c1:c2:80:bb:e1:1c:ff: 2d:69:4a:d4:42:73:8f:92:9f:7f:e7:38:60:5f:2a:c0:5b:bc: 33:f2:f7:2e:16:fa:bf:41:14:63:76:8e:e6:7a:ea:75:77:a2: 90:0a:e5:9e:6b:88:73:e7:ae:63:68:51:6c:7e:81:0b:43:92: ad:6f:ba:5e:28:f0:e5:93:e1:98:42:f5:6e:b3:c2:47:51:16: 85:69:ac:af:ee:50:68:c1:b0:c9:62:8b:e7:cc:fe:45:aa:8a: 44:a3:80:c1:52:0a:ad:45:f0:79:77:54:56:85:b5:66:76:05: 52:c5:4f:fa:cf:bb:38:b4:0a:ec:7a:a2:ad:67:ff:46:5d:55: 1b:92:ba:1c:86:29:bc:63:cf:a2:fa:b2:a3:a3:cd:ce:2d:70: 13:83:ac:32:c9:1c:73:f0:35:1b:69:17:48:a3:00:40:68:e8: e9:4c:01:ff:8b:ed:0b:af:6b:e3:63:a4:6d:57:a4:8c:e7:dc: c9:56:89:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJBQUUxMTAvBgNVBAUTKEEzQjBCMjA1OUNCMzA3NkI3NUVEQTMyNEI3NjUwN0Qz QzI5NTUyODMwHhcNMjUwODA4MjAwMjA4WhcNMjUwODE1MjAwMjA4WjAYMRYwFAYD VQQDEw02ODk2NTdjMC01MWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqceDLxH2BWKsVLLG9rgvX+fu6vdyOTNf09hjDCOfsfoTOGydAKNFIZxoDHZu MvGpdHprsj/qQW/yyZ99IqnpGvrAtIPKWOAu7ChFEanNgzVnIB6Ro6R0lMLnZeH4 Mp92OdIoA0hNSM7TK4uN2Dgp4JP/yWNsLAWhoEyJBYUsBHmLMIzxjBpDiQf3sYWO p68UjBv5wLsAHIYHP/sDqMW7gtfDfqxu+YNOHKjMf+x0SDZ5SzQSh9fYoyHh0DXE pS7+dtAeFrKEj22JigL8x/mSJl5p3Or5qsSMOWKAI+HNaTvpNuEc+ZbyhroRua7U 5bkOeqAWowGfpxsN4O6RzUGctwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIkKyY/d Jt1E1Yq40WgLr3FCp6C1MB8GA1UdIwQYMBaAFKOwsgWcswdrde2jJLdlB9PClVKD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkFBRS81NzUzN0Q1RTcw NDUxMUVBOEE5NDFEMUFDNEY5QUUwMi9vN0N5Qlp5ekIydDE3YU1rdDJVSDA4S1ZV b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL283Q3lCWnl6QjJ0MTdhTWt0MlVIMDhLVlVvTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkFBRS81NzUzN0Q1RTcwNDUxMUVBOEE5NDFEMUFDNEY5QUUwMi9vN0N5Qlp5ekIy dDE3YU1rdDJVSDA4S1ZVb00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdXn3l9xdl4G1ozuN7Uh98gR4UlGx5G5L3w3ccKJYr0hb9l1RK2v3J EVOOnJuS4sB3DBZkcJV13Yz+tbiWhPbTwcHCgLvhHP8taUrUQnOPkp9/5zhgXyrA W7wz8vcuFvq/QRRjdo7meup1d6KQCuWea4hz565jaFFsfoELQ5Ktb7peKPDlk+GY QvVus8JHURaFaayv7lBowbDJYovnzP5FqopEo4DBUgqtRfB5d1RWhbVmdgVSxU/6 z7s4tArseqKtZ/9GXVUbkrochim8Y8+i+rKjo83OLXATg6wyyRxz8DUbaRdIowBA aOjpTAH/i+0Lr2vjY6RtV6SM59zJVol+ -----END CERTIFICATE-----Generated at Sat Aug 9 22:50:27 2025 by rpki-client