$ rpki-client -vvf rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft File: OSQdwqlJIur_mC2bQID4vkD3tr0.mft (raw, json) Hash identifier: LoyeqnfhkChaR5mmPpL51aYDc44XvuJsGgclJ+JZPk4= Subject key identifier: 44:7C:00:99:D4:CF:C9:22:E3:96:3D:4A:6E:83:A6:E4:B2:F3:9B:D2 Authority key identifier: 39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD Certificate issuer: /CN=A91E17F3/serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft Manifest number: 4F Signing time: Tue 05 Aug 2025 07:58:15 +0000 Manifest this update: Tue 05 Aug 2025 07:58:14 +0000 Manifest next update: Tue 12 Aug 2025 07:58:14 +0000 Files and hashes: 1: OSQdwqlJIur_mC2bQID4vkD3tr0.crl (hash: 8eoKyN05pDsLFZQbjZWIcbt03nOZE9d6xsNSwW57/Cw=) 2: B0C47BF26CFE11F09B124778C4F9AE02.roa (hash: n88ojmtdqrdiflLIe0+SBb0jpSl3tXT/vbn9UpYcLtE=) 3: 7B3E74A6025011F096E34819C4F9AE02.roa (hash: WR0rb26sSd7NNnmbaBSVENCtgD1Go/mwg9p/vOPLcpI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 07:58:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E17F3, serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD Validity Not Before: Aug 5 07:58:14 2025 GMT Not After : Aug 12 07:58:14 2025 GMT Subject: CN=6891b996-f68c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:fa:43:d1:66:fe:80:ad:a8:bd:3e:20:95:e3: 19:10:43:f8:d7:d3:68:72:97:32:53:f7:71:f9:42: 46:3d:da:88:11:69:8c:80:e5:49:44:1e:10:3c:b5: 61:0a:e3:b5:2a:73:2e:b9:58:9c:db:53:72:03:c4: ca:f8:77:5b:e1:33:81:9a:cc:69:81:ae:8c:9a:7d: 54:c8:c9:b2:f2:95:65:3a:e3:e9:4a:c9:32:7f:34: e9:30:bb:35:38:84:bc:6b:1e:20:15:c6:0c:d3:7e: 97:77:24:73:75:d9:40:cb:95:64:f3:a2:55:d6:d9: 14:a4:91:b6:b9:0a:9a:47:3a:7f:1b:b5:e3:17:6c: ab:3a:48:69:00:d0:10:75:60:8d:88:87:bd:5d:06: 7f:4e:47:3f:17:6e:87:b0:8d:10:72:ee:c8:b7:f0: 4d:6b:5a:51:a6:e8:28:eb:03:02:bf:a0:93:34:f2: f5:c1:c1:bf:5e:e3:78:a0:5d:af:29:2c:1c:8e:59: bf:18:c0:a0:70:eb:e0:bf:e0:9a:a7:3d:68:15:24: 55:e4:a3:46:be:b7:f8:e3:5e:34:bc:e0:fe:df:21: 06:e0:71:c1:f0:3a:c5:65:70:5f:5e:77:e5:f0:5d: 32:78:c0:cf:5e:0a:b1:4f:10:7e:08:ed:8a:d8:d3: d9:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:7C:00:99:D4:CF:C9:22:E3:96:3D:4A:6E:83:A6:E4:B2:F3:9B:D2 X509v3 Authority Key Identifier: keyid:39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:0f:a1:84:4c:83:33:cb:89:8a:5c:52:66:ea:ab:7f:3b:70: 06:59:49:a9:1b:f7:4c:70:88:55:d6:2a:e2:93:ea:26:bc:fb: 28:60:bf:0c:b2:97:2a:e3:77:d3:39:36:87:38:96:69:2a:7f: 5d:14:6b:93:14:1c:7e:a1:ca:06:30:d9:f4:f7:12:5c:2d:84: 00:4b:33:8f:61:ac:4f:99:2b:61:e7:13:95:68:89:3a:62:f7: 81:5c:03:c8:f8:e9:f9:e2:28:4e:84:da:0d:07:0c:aa:ab:ec: f2:56:4b:b5:38:2f:6b:05:91:79:e4:04:06:8e:fa:55:c5:36: cc:f4:38:8e:cd:6b:7a:0b:c9:45:33:52:d4:c7:25:54:25:d9: 66:d9:e9:ad:dc:ec:93:31:75:24:98:c9:8d:87:a9:e5:db:ee: 2f:e4:6e:93:e2:f1:04:07:a2:e9:76:67:ae:7b:ab:b2:67:65: ff:40:03:0e:3b:9c:95:20:e1:b4:0c:e6:f0:16:91:e2:ef:6a: be:86:08:45:94:bc:92:bc:2c:1b:13:96:03:5a:cb:b0:d4:9a: 98:79:55:ae:54:a1:f9:47:71:89:47:4c:fe:6c:38:e3:79:95: 05:05:8d:01:23:d6:4b:1a:76:d0:2a:82:a1:d3:f3:c1:4e:a8: 76:45:1b:32 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MTdGMzExMC8GA1UEBRMoMzkyNDFEQzJBOTQ5MjJFQUZGOTgyRDlCNDA4MEY4QkU0 MEY3QjZCRDAeFw0yNTA4MDUwNzU4MTRaFw0yNTA4MTIwNzU4MTRaMBgxFjAUBgNV BAMTDTY4OTFiOTk2LWY2OGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCf+kPRZv6Arai9PiCV4xkQQ/jX02hylzJT93H5QkY92ogRaYyA5UlEHhA8tWEK 47Uqcy65WJzbU3IDxMr4d1vhM4GazGmBroyafVTIybLylWU64+lKyTJ/NOkwuzU4 hLxrHiAVxgzTfpd3JHN12UDLlWTzolXW2RSkkba5CppHOn8bteMXbKs6SGkA0BB1 YI2Ih71dBn9ORz8XboewjRBy7si38E1rWlGm6CjrAwK/oJM08vXBwb9e43igXa8p LByOWb8YwKBw6+C/4JqnPWgVJFXko0a+t/jjXjS84P7fIQbgccHwOsVlcF9ed+Xw XTJ4wM9eCrFPEH4I7YrY09mZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURHwAmdTP ySLjlj1KboOm5LLzm9IwHwYDVR0jBBgwFoAUOSQdwqlJIur/mC2bQID4vkD3tr0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxN0YzLzlBOUZCOEYyRkZF QzExRUZCRjU1QkI2RkM0RjlBRTAyL09TUWR3cWxKSXVyX21DMmJRSUQ0dmtEM3Ry MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT1NRZHdxbEpJdXJfbUMyYlFJRDR2a0QzdHIwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx N0YzLzlBOUZCOEYyRkZFQzExRUZCRjU1QkI2RkM0RjlBRTAyL09TUWR3cWxKSXVy X21DMmJRSUQ0dmtEM3RyMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJkPoYRMgzPLiYpcUmbqq387cAZZSakb90xwiFXWKuKT6ia8+yhgvwyy lyrjd9M5Noc4lmkqf10Ua5MUHH6hygYw2fT3ElwthABLM49hrE+ZK2HnE5VoiTpi 94FcA8j46fniKE6E2g0HDKqr7PJWS7U4L2sFkXnkBAaO+lXFNsz0OI7Na3oLyUUz UtTHJVQl2WbZ6a3c7JMxdSSYyY2HqeXb7i/kbpPi8QQHoul2Z657q7JnZf9AAw47 nJUg4bQM5vAWkeLvar6GCEWUvJK8LBsTlgNay7DUmph5Va5UoflHcYlHTP5sOON5 lQUFjQEj1ksadtAqgqHT88FOqHZFGzI= -----END CERTIFICATE-----Generated at Thu Aug 7 04:00:56 2025 by rpki-client