$ rpki-client -vvf rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft File: o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft (raw, json) Hash identifier: MeQOoaV9izRnPwAXQz1oXMYmqBuh8SDmCECMDE5yreg= Subject key identifier: D3:B7:4E:96:6C:91:5A:B0:27:9D:F4:E3:41:1E:69:ED:A6:21:36:23 Authority key identifier: A3:EB:7C:43:50:63:BC:54:D3:57:3D:81:DB:DC:18:73:98:76:63:E0 Certificate issuer: /CN=A91C77BD/serialNumber=A3EB7C435063BC54D3573D81DBDC1873987663E0 Certificate serial: 2197 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft Manifest number: 218E Signing time: Sun 10 Aug 2025 15:52:08 +0000 Manifest this update: Sun 10 Aug 2025 15:52:07 +0000 Manifest next update: Sun 17 Aug 2025 15:52:07 +0000 Files and hashes: 1: o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl (hash: 73nXqHQK+K2TJopHfJNPpwPIs4EKSyg5+evGmQ3abIA=) 2: A257A95EA9DC11E9AA03780DC4F9AE02.roa (hash: Kqxe3AlQssfHaUaGQ94xh+g433EOzW+NAhxS/kOyvHs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8599 (0x2197) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C77BD, serialNumber=A3EB7C435063BC54D3573D81DBDC1873987663E0 Validity Not Before: Aug 10 15:52:07 2025 GMT Not After : Aug 17 15:52:07 2025 GMT Subject: CN=6898c027-ae9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0f:a7:29:59:10:25:0a:33:53:c8:2b:f0:fd: 42:2d:2e:5e:b3:53:b7:e2:2b:0f:f8:bb:1f:05:2c: 6e:ea:73:b3:38:6b:b0:b3:90:34:ba:7e:14:55:1e: 8d:be:f7:78:ad:2b:95:73:f4:14:a7:bc:04:a0:bb: 07:76:7f:54:2d:ca:9f:8c:36:6c:2c:b8:3b:9a:6f: 5d:e8:5d:09:5a:78:74:b9:32:4d:8d:2c:e2:a5:4d: cd:ef:0d:42:da:9c:d2:30:a6:7c:79:0e:07:b7:c3: 30:c7:c9:34:d2:95:01:7a:9f:ea:e8:73:d3:35:2c: 04:c7:5c:07:a1:85:c8:80:f5:18:ac:4c:92:70:b9: ea:84:b6:a4:fc:6a:23:67:ce:99:d1:5f:47:9d:78: 8f:2c:c3:8a:eb:2a:d7:95:93:da:d4:20:17:47:d2: fe:56:6e:97:a7:a0:1e:fe:1c:1b:ad:53:5c:60:c6: 35:fc:2f:94:fd:f9:8c:97:c0:98:0a:f7:0d:03:f4: e6:8b:2c:14:b7:f1:ea:1a:7a:5b:e9:0b:3b:a7:a0: 3c:c9:ff:cb:03:cd:43:0b:9b:bd:93:0c:ce:c0:b4: 71:ea:49:d0:7a:57:46:45:41:4d:43:5e:8d:79:30: 5b:45:c7:4e:56:1e:8d:83:f9:58:d2:f6:6e:5f:a7: 7c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:B7:4E:96:6C:91:5A:B0:27:9D:F4:E3:41:1E:69:ED:A6:21:36:23 X509v3 Authority Key Identifier: keyid:A3:EB:7C:43:50:63:BC:54:D3:57:3D:81:DB:DC:18:73:98:76:63:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:87:8c:41:9f:a3:a8:65:2d:c3:b3:76:6b:3e:3d:a0:1c:fb: b9:ea:24:8b:4c:6c:61:7d:ed:97:9b:39:9d:1e:76:0a:27:e2: e2:33:a0:d5:9c:52:ea:62:82:2e:de:02:62:70:21:7f:72:c6: c9:97:9d:56:14:b4:38:d3:c4:93:b4:c3:1f:4c:07:2f:a7:b0: 49:24:60:49:c1:75:61:03:ea:6c:62:5f:5f:4d:af:62:6b:b8: e0:6f:0a:e0:e6:48:c7:47:79:9b:56:23:fe:65:e7:b4:bb:cc: af:09:fd:82:5e:87:d7:35:8e:b2:63:8f:78:92:0f:1a:5c:72: 58:38:ab:f6:8f:a6:82:72:92:47:3a:54:6f:bf:a1:28:c0:e7: fb:43:60:a7:05:09:3f:ee:b0:6b:63:38:a5:ae:80:19:1d:9e: 3e:f8:4c:f5:ce:11:61:30:de:17:49:c5:03:a5:45:33:49:8c: 96:ff:3e:61:d9:f4:75:69:b0:22:00:2d:c3:04:09:a3:3c:8f: c0:2b:a7:7c:7d:78:74:5b:27:75:6d:b9:e1:5b:c9:4d:60:76: 61:02:77:46:4a:73:93:c9:77:b1:2c:14:72:11:e2:57:a0:b5: f2:6b:37:4f:97:90:23:e2:77:38:71:1f:f0:59:11:c6:b1:3d: 2c:de:60:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc3QkQxMTAvBgNVBAUTKEEzRUI3QzQzNTA2M0JDNTREMzU3M0Q4MURCREMxODcz OTg3NjYzRTAwHhcNMjUwODEwMTU1MjA3WhcNMjUwODE3MTU1MjA3WjAYMRYwFAYD VQQDEw02ODk4YzAyNy1hZTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArQ+nKVkQJQozU8gr8P1CLS5es1O34isP+LsfBSxu6nOzOGuws5A0un4UVR6N vvd4rSuVc/QUp7wEoLsHdn9ULcqfjDZsLLg7mm9d6F0JWnh0uTJNjSzipU3N7w1C 2pzSMKZ8eQ4Ht8Mwx8k00pUBep/q6HPTNSwEx1wHoYXIgPUYrEyScLnqhLak/Goj Z86Z0V9HnXiPLMOK6yrXlZPa1CAXR9L+Vm6Xp6Ae/hwbrVNcYMY1/C+U/fmMl8CY CvcNA/TmiywUt/HqGnpb6Qs7p6A8yf/LA81DC5u9kwzOwLRx6knQeldGRUFNQ16N eTBbRcdOVh6Ng/lY0vZuX6d8gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNO3TpZs kVqwJ53040Eeae2mITYjMB8GA1UdIwQYMBaAFKPrfENQY7xU01c9gdvcGHOYdmPg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzdCRC8zODkzNzE5OERG NDAxMUU1ODIzMjczNEFDNEY5QUUwMi9vLXQ4UTFCanZGVFRWejJCMjl3WWM1aDJZ LUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28tdDhRMUJqdkZUVFZ6MkIyOXdZYzVoMlktQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzdCRC8zODkzNzE5OERGNDAxMUU1ODIzMjczNEFDNEY5QUUwMi9vLXQ4UTFCanZG VFRWejJCMjl3WWM1aDJZLUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDMh4xBn6OoZS3Ds3ZrPj2gHPu56iSLTGxhfe2XmzmdHnYKJ+LiM6DV nFLqYoIu3gJicCF/csbJl51WFLQ408STtMMfTAcvp7BJJGBJwXVhA+psYl9fTa9i a7jgbwrg5kjHR3mbViP+Zee0u8yvCf2CXofXNY6yY494kg8aXHJYOKv2j6aCcpJH OlRvv6EowOf7Q2CnBQk/7rBrYzilroAZHZ4++Ez1zhFhMN4XScUDpUUzSYyW/z5h 2fR1abAiAC3DBAmjPI/AK6d8fXh0Wyd1bbnhW8lNYHZhAndGSnOTyXexLBRyEeJX oLXyazdPl5Aj4nc4cR/wWRHGsT0s3mDB -----END CERTIFICATE-----Generated at Mon Aug 11 04:28:37 2025 by rpki-client