$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0F0F/5C18A6125DE711F0A867914EC4F9AE02/OOsNjnrx6xh9WqP8X3lBkTOL22Y.mft File: OOsNjnrx6xh9WqP8X3lBkTOL22Y.mft (raw, json) Hash identifier: k4B3XxMfHiqbj1ymlusxU9NJwByHld5qj8lTN1Ef0ag= Subject key identifier: 71:48:76:B1:28:F5:7B:14:C7:8C:2E:87:03:B9:E7:1C:BE:E3:99:20 Authority key identifier: 38:EB:0D:8E:7A:F1:EB:18:7D:5A:A3:FC:5F:79:41:91:33:8B:DB:66 Certificate issuer: /CN=A91D0F0F/serialNumber=38EB0D8E7AF1EB187D5AA3FC5F794191338BDB66 Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOsNjnrx6xh9WqP8X3lBkTOL22Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0F0F/5C18A6125DE711F0A867914EC4F9AE02/OOsNjnrx6xh9WqP8X3lBkTOL22Y.mft Manifest number: 11 Signing time: Sat 09 Aug 2025 08:33:54 +0000 Manifest this update: Sat 09 Aug 2025 08:33:54 +0000 Manifest next update: Sat 16 Aug 2025 08:33:54 +0000 Files and hashes: 1: OOsNjnrx6xh9WqP8X3lBkTOL22Y.crl (hash: h1jl7D0yOYGc04nPT21uKhFtbHYcu3cHBSGY0P1FK9Y=) 2: CCD6F0DE5DE711F0BC6E0A50C4F9AE02.roa (hash: SbNim6olcnK9HKDq/sPOQqnjuBHhomhQ4KRgrPuZckw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0F0F/5C18A6125DE711F0A867914EC4F9AE02/OOsNjnrx6xh9WqP8X3lBkTOL22Y.crl rsync://rpki.apnic.net/member_repository/A91D0F0F/5C18A6125DE711F0A867914EC4F9AE02/OOsNjnrx6xh9WqP8X3lBkTOL22Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOsNjnrx6xh9WqP8X3lBkTOL22Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0F0F, serialNumber=38EB0D8E7AF1EB187D5AA3FC5F794191338BDB66 Validity Not Before: Aug 9 08:33:54 2025 GMT Not After : Aug 16 08:33:54 2025 GMT Subject: CN=689707f2-b599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:52:f8:15:b4:ff:68:4b:3e:da:91:b0:8f:1c: c1:97:ec:ef:a6:74:9e:70:df:e8:7e:e1:35:a1:59: 69:5b:86:21:7e:57:bb:cc:56:d1:81:04:41:9a:8e: 91:93:c4:1c:46:2c:67:73:76:48:ab:8c:74:a8:3c: 76:f3:4e:13:d3:55:74:7d:ba:8e:89:bc:7e:e9:39: be:bb:02:78:84:58:ff:62:d7:64:4e:cc:76:7e:0f: 7b:89:33:23:46:f4:df:e0:af:5f:23:b4:45:a9:4e: 96:70:05:18:a7:68:90:7d:32:41:95:da:4d:12:8c: 1f:2c:1d:3e:8b:da:b7:0f:65:43:76:b3:52:05:9a: cb:ee:99:a7:21:bc:b1:69:44:03:40:28:bf:df:31: 1b:b3:7f:7e:55:9c:07:92:32:77:f0:6a:26:95:c4: 49:1b:53:37:3a:c6:0c:f6:1d:18:56:3c:b7:87:a7: fd:a2:3a:54:dc:64:79:d4:3c:60:1b:ab:39:05:77: 0f:6f:9b:32:4c:a3:05:df:38:c8:91:e7:d5:9e:21: c3:fe:9f:ed:8d:e9:81:30:b7:2b:52:cd:cc:20:ea: e2:b0:46:50:41:23:64:2d:39:78:82:3c:0d:ac:c7: 62:4b:b2:b7:9f:92:5a:69:80:fb:cc:50:12:fa:7c: 4b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:48:76:B1:28:F5:7B:14:C7:8C:2E:87:03:B9:E7:1C:BE:E3:99:20 X509v3 Authority Key Identifier: keyid:38:EB:0D:8E:7A:F1:EB:18:7D:5A:A3:FC:5F:79:41:91:33:8B:DB:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0F0F/5C18A6125DE711F0A867914EC4F9AE02/OOsNjnrx6xh9WqP8X3lBkTOL22Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOsNjnrx6xh9WqP8X3lBkTOL22Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0F0F/5C18A6125DE711F0A867914EC4F9AE02/OOsNjnrx6xh9WqP8X3lBkTOL22Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:23:1f:a4:a4:86:87:ac:93:4b:d3:a7:c6:70:82:ce:7d:2d: 9a:6e:c0:3c:46:e4:42:5d:54:f8:be:67:f0:7e:79:00:3c:20: 11:a6:ec:f6:e2:71:15:ed:22:5e:ef:61:08:fc:7a:eb:72:1a: 4f:71:ef:cd:26:00:a7:9f:83:cd:d7:00:77:55:33:3e:4d:ad: 16:c3:fb:4b:63:dd:69:ad:15:3e:e1:61:70:12:43:de:ce:a9: 7d:00:36:a5:db:0a:a2:1c:ab:5e:13:73:92:4f:e2:2c:83:51: 2c:ec:92:f1:7e:9c:86:eb:a5:25:25:77:d6:84:d8:1b:a8:7b: 13:59:6b:60:27:bc:3d:0c:f7:8d:64:15:b7:13:39:8b:19:e7: 24:1c:7b:f5:ea:0e:67:e1:47:39:3b:a7:70:d3:de:82:06:21: 76:03:c5:96:45:2d:7d:1a:19:53:2f:fa:8e:f8:7a:c1:88:62: 4a:9d:05:de:15:d9:b4:05:5e:9f:c0:0f:c0:17:f8:87:a7:42: db:29:c1:08:0f:e3:95:46:10:19:fa:22:d7:8d:54:fb:bd:82: c8:58:e8:63:ee:8d:a5:fc:6f:06:c2:49:17:6e:50:dc:b5:20: f3:ce:fb:ca:6c:f1:b4:dc:02:a3:12:d8:0f:88:2a:a7:50:55: b3:58:3f:d0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MEYwRjExMC8GA1UEBRMoMzhFQjBEOEU3QUYxRUIxODdENUFBM0ZDNUY3OTQxOTEz MzhCREI2NjAeFw0yNTA4MDkwODMzNTRaFw0yNTA4MTYwODMzNTRaMBgxFjAUBgNV BAMTDTY4OTcwN2YyLWI1OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzUvgVtP9oSz7akbCPHMGX7O+mdJ5w3+h+4TWhWWlbhiF+V7vMVtGBBEGajpGT xBxGLGdzdkirjHSoPHbzThPTVXR9uo6JvH7pOb67AniEWP9i12ROzHZ+D3uJMyNG 9N/gr18jtEWpTpZwBRinaJB9MkGV2k0SjB8sHT6L2rcPZUN2s1IFmsvumachvLFp RANAKL/fMRuzf35VnAeSMnfwaiaVxEkbUzc6xgz2HRhWPLeHp/2iOlTcZHnUPGAb qzkFdw9vmzJMowXfOMiR59WeIcP+n+2N6YEwtytSzcwg6uKwRlBBI2QtOXiCPA2s x2JLsrefklppgPvMUBL6fEv9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcUh2sSj1 exTHjC6HA7nnHL7jmSAwHwYDVR0jBBgwFoAUOOsNjnrx6xh9WqP8X3lBkTOL22Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwRjBGLzVDMThBNjEyNURF NzExRjBBODY3OTE0RUM0RjlBRTAyL09Pc05qbnJ4NnhoOVdxUDhYM2xCa1RPTDIy WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT09zTmpucng2eGg5V3FQOFgzbEJrVE9MMjJZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQw RjBGLzVDMThBNjEyNURFNzExRjBBODY3OTE0RUM0RjlBRTAyL09Pc05qbnJ4Nnho OVdxUDhYM2xCa1RPTDIyWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHsjH6Skhoesk0vTp8Zwgs59LZpuwDxG5EJdVPi+Z/B+eQA8IBGm7Pbi cRXtIl7vYQj8eutyGk9x780mAKefg83XAHdVMz5NrRbD+0tj3WmtFT7hYXASQ97O qX0ANqXbCqIcq14Tc5JP4iyDUSzskvF+nIbrpSUld9aE2BuoexNZa2AnvD0M941k FbcTOYsZ5yQce/XqDmfhRzk7p3DT3oIGIXYDxZZFLX0aGVMv+o74esGIYkqdBd4V 2bQFXp/AD8AX+IenQtspwQgP45VGEBn6IteNVPu9gshY6GPujaX8bwbCSRduUNy1 IPPO+8ps8bTcAqMS2A+IKqdQVbNYP9A= -----END CERTIFICATE-----Generated at Sun Aug 10 18:17:48 2025 by rpki-client