$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft File: 40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft (raw, json) Hash identifier: V2F3dl+UlZtNUI7L6EHrJl4urtEVxtrz1tEzeJSfp2c= Subject key identifier: 28:7B:BF:FD:47:AC:59:47:28:51:59:E8:BE:F5:A7:B2:AF:5D:28:27 Authority key identifier: E3:43:84:05:47:64:02:A3:AA:8F:98:7C:3A:FA:06:90:D9:6E:D4:74 Certificate issuer: /CN=A91E9406/serialNumber=E3438405476402A3AA8F987C3AFA0690D96ED474 Certificate serial: 0287 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OEBUdkAqOqj5h8OvoGkNlu1HQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft Manifest number: 0282 Signing time: Sat 09 Aug 2025 02:14:18 +0000 Manifest this update: Sat 09 Aug 2025 02:14:18 +0000 Manifest next update: Sat 16 Aug 2025 02:14:18 +0000 Files and hashes: 1: 40OEBUdkAqOqj5h8OvoGkNlu1HQ.crl (hash: 2E4XunkpRj/Z3E5H8a5BsCbX4OQc365O0GQKCWpp9ng=) 2: F76D8A5C170D11EDA7EC2F87C4F9AE02.roa (hash: bEQWXluQGkjHtzXhhM0LUOXQhLNvUEvMyEXkpICCpAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.crl rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OEBUdkAqOqj5h8OvoGkNlu1HQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 647 (0x287) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9406, serialNumber=E3438405476402A3AA8F987C3AFA0690D96ED474 Validity Not Before: Aug 9 02:14:18 2025 GMT Not After : Aug 16 02:14:18 2025 GMT Subject: CN=6896aefa-426d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:09:d4:15:e0:28:59:fb:5e:ce:3d:e1:5f:cd: a4:62:da:47:84:84:be:11:99:89:49:e0:1c:00:48: 4d:fa:fd:af:70:af:97:45:b5:01:bb:0d:e2:e5:e1: 22:b5:a1:71:d9:87:b0:05:d8:4c:24:e2:d8:eb:ff: 8a:c2:2f:5d:37:a1:db:0a:fe:54:3c:54:62:32:8c: 04:b0:17:51:3d:1b:8e:53:1f:b3:a6:b3:96:b2:b5: 3e:67:f0:0c:15:27:2f:9d:c4:9b:15:52:91:02:c3: ad:39:b7:a2:2c:ca:0e:40:6f:0b:b8:74:5b:31:ff: 13:e6:fc:59:60:eb:4d:5d:65:84:67:b4:1c:5d:fe: 14:35:b9:11:b4:b9:d9:27:f5:dc:c5:2f:ab:80:49: 13:a0:99:02:f1:2d:11:d9:2e:37:db:54:31:0b:cf: 24:d7:49:e5:07:f0:2e:da:26:6a:64:1a:45:81:8a: 01:f5:ca:8e:71:0b:77:ba:3c:9f:70:c9:05:51:21: 32:22:8f:30:60:82:46:3c:e8:b1:08:7b:d5:95:2e: 4b:c0:dc:c4:d6:08:53:1c:f4:ae:c1:53:91:87:6c: a6:f7:cb:1b:42:69:c4:08:30:c9:31:ec:ec:bd:e7: 55:12:b1:00:f8:01:35:94:6f:d1:12:10:5e:c3:fa: db:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:7B:BF:FD:47:AC:59:47:28:51:59:E8:BE:F5:A7:B2:AF:5D:28:27 X509v3 Authority Key Identifier: keyid:E3:43:84:05:47:64:02:A3:AA:8F:98:7C:3A:FA:06:90:D9:6E:D4:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OEBUdkAqOqj5h8OvoGkNlu1HQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:82:fb:57:58:45:46:3c:00:e6:59:c5:22:3c:c1:df:fe:d0: 9f:9a:19:4f:40:62:d6:f6:f3:4d:39:5d:3f:33:bf:dc:4a:3c: 7b:8e:1f:04:9e:60:d6:37:7e:43:08:c2:4e:3a:ed:b4:7c:59: 4c:91:1a:bb:cd:53:cb:ca:09:53:4d:46:2a:fe:97:fa:da:57: fc:a4:a0:59:7e:7a:ff:87:b2:3e:46:d3:f4:3c:da:ad:e3:7a: 95:ef:69:62:3b:46:ed:0d:eb:18:91:3b:a1:0e:62:56:99:90: 0c:eb:b3:43:3f:4e:97:4f:0a:26:ff:b6:ae:3c:9f:65:74:03: a9:ae:8b:c7:35:0f:fe:c7:92:c4:56:ac:b9:73:61:ae:f9:f4: 9f:ff:be:d6:02:83:b7:7e:50:b0:0b:1e:90:b4:ad:71:83:fa: bb:2e:46:02:1b:41:57:06:03:7e:35:98:aa:23:db:d7:9d:15: 6d:dc:bc:ae:27:11:43:1b:7f:d4:b9:ef:d8:0b:5f:27:57:d6: 78:b4:53:2a:76:22:cf:af:8e:ab:3c:44:84:6c:6e:1c:f1:cc: 1a:ce:15:39:da:b5:ce:bd:fd:a7:6e:b0:dc:db:da:39:ad:a6: 10:5f:a2:1a:d1:b4:bb:d4:8c:da:74:9f:df:27:91:b9:f7:57: a5:1e:3d:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk0MDYxMTAvBgNVBAUTKEUzNDM4NDA1NDc2NDAyQTNBQThGOTg3QzNBRkEwNjkw RDk2RUQ0NzQwHhcNMjUwODA5MDIxNDE4WhcNMjUwODE2MDIxNDE4WjAYMRYwFAYD VQQDEw02ODk2YWVmYS00MjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgnUFeAoWftezj3hX82kYtpHhIS+EZmJSeAcAEhN+v2vcK+XRbUBuw3i5eEi taFx2YewBdhMJOLY6/+Kwi9dN6HbCv5UPFRiMowEsBdRPRuOUx+zprOWsrU+Z/AM FScvncSbFVKRAsOtObeiLMoOQG8LuHRbMf8T5vxZYOtNXWWEZ7QcXf4UNbkRtLnZ J/XcxS+rgEkToJkC8S0R2S4321QxC88k10nlB/Au2iZqZBpFgYoB9cqOcQt3ujyf cMkFUSEyIo8wYIJGPOixCHvVlS5LwNzE1ghTHPSuwVORh2ym98sbQmnECDDJMezs vedVErEA+AE1lG/REhBew/rbbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCh7v/1H rFlHKFFZ6L71p7KvXSgnMB8GA1UdIwQYMBaAFONDhAVHZAKjqo+YfDr6BpDZbtR0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTQwNi85ODY4QTlGMDE3 MDkxMUVEQjZGODA4NjhDNEY5QUUwMi80ME9FQlVka0FxT3FqNWg4T3ZvR2tObHUx SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQwT0VCVWRrQXFPcWo1aDhPdm9Ha05sdTFIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTQwNi85ODY4QTlGMDE3MDkxMUVEQjZGODA4NjhDNEY5QUUwMi80ME9FQlVka0Fx T3FqNWg4T3ZvR2tObHUxSFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGgvtXWEVGPADmWcUiPMHf/tCfmhlPQGLW9vNNOV0/M7/cSjx7jh8E nmDWN35DCMJOOu20fFlMkRq7zVPLyglTTUYq/pf62lf8pKBZfnr/h7I+RtP0PNqt 43qV72liO0btDesYkTuhDmJWmZAM67NDP06XTwom/7auPJ9ldAOprovHNQ/+x5LE Vqy5c2Gu+fSf/77WAoO3flCwCx6QtK1xg/q7LkYCG0FXBgN+NZiqI9vXnRVt3Lyu JxFDG3/Uue/YC18nV9Z4tFMqdiLPr46rPESEbG4c8cwazhU52rXOvf2nbrDc29o5 raYQX6Ia0bS71IzadJ/fJ5G591elHj3Z -----END CERTIFICATE-----Generated at Sun Aug 10 16:10:38 2025 by rpki-client