$ rpki-client -vvf rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft File: OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft (raw, json) Hash identifier: IXiFrkBHtfT1KEUlAxwJz5wcvBYC38IKGIItZFfUcwA= Subject key identifier: C4:32:16:7A:72:8B:B1:6A:E3:BB:29:AE:9F:DF:FC:DD:DB:1B:04:5C Authority key identifier: 3A:5C:08:13:C0:FE:D0:A8:3B:3D:D0:1B:7A:5A:E1:A1:30:82:70:28 Certificate issuer: /CN=A91592B3/serialNumber=3A5C0813C0FED0A83B3DD01B7A5AE1A130827028 Certificate serial: 243B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft Manifest number: 2425 Signing time: Sun 20 Jul 2025 15:49:08 +0000 Manifest this update: Sun 20 Jul 2025 15:49:07 +0000 Manifest next update: Sun 27 Jul 2025 15:49:07 +0000 Files and hashes: 1: OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl (hash: SOj1scDcvnc9zM9eHJJ3K6uS4DxE3+HPHIKvXIPiYZY=) 2: 9876A6C025B211ECB5356475C4F9AE02.roa (hash: DNBT8zhDN25f9UDGQ5nfWBA6s2lB80HUpbXVqjHmAQM=) 3: D8D3FB6414F111F08EE5E32DC4F9AE02.roa (hash: tOvAiPhxRE202cumPZpJeSLK5i3uUM9dNppjhBHTGzA=) 4: 54EE8F7615FE11ECAF541012C4F9AE02.roa (hash: IA4iHCGoqRIo6kbssAA01N8/wPFo68lHVDwSEc9PASs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9275 (0x243b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91592B3, serialNumber=3A5C0813C0FED0A83B3DD01B7A5AE1A130827028 Validity Not Before: Jul 20 15:49:07 2025 GMT Not After : Jul 27 15:49:07 2025 GMT Subject: CN=687d0ff3-4f90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0d:85:3f:bd:42:0a:d6:2a:be:c5:d8:86:d9: 0c:38:77:79:35:21:81:7a:a0:52:ce:5b:46:52:26: b7:65:d7:8b:e5:46:9f:f3:0b:04:7f:11:79:cc:54: fb:6c:6f:8c:df:67:03:3b:bb:56:6a:1e:07:ce:36: b5:15:65:12:5b:14:6f:90:cc:80:b6:e0:24:df:51: e0:c0:b5:ae:e0:45:bc:5f:04:11:f1:bc:e0:da:e4: 2e:d4:70:42:bf:c9:62:b0:f0:9b:41:f9:63:35:41: c8:a0:d4:2c:71:dd:89:d7:61:f8:8b:b3:a3:b8:da: 73:f2:e3:d3:97:b2:6d:f1:4e:f6:0d:76:d8:16:2c: 46:60:9d:f1:7b:bc:e1:57:ee:e2:2f:25:fe:74:40: b2:1a:00:70:64:bc:71:7b:ee:16:9c:7b:b5:24:a6: a5:af:2b:3a:f7:28:b2:91:28:9c:90:b9:29:3c:01: 32:33:e5:9d:e7:ba:5c:9e:2f:07:77:be:5b:4e:ab: 7a:d2:b7:71:af:b9:15:00:1f:68:b7:c4:f4:3d:67: 33:ef:d6:fb:73:2e:92:d3:ee:6a:6b:b9:72:09:80: 5e:49:2b:3b:c7:0b:59:33:ad:73:47:0b:23:2c:ac: 6b:02:c5:84:4f:eb:22:1c:84:09:b5:ae:a4:ec:f6: 01:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:32:16:7A:72:8B:B1:6A:E3:BB:29:AE:9F:DF:FC:DD:DB:1B:04:5C X509v3 Authority Key Identifier: keyid:3A:5C:08:13:C0:FE:D0:A8:3B:3D:D0:1B:7A:5A:E1:A1:30:82:70:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:86:ec:81:08:b5:84:99:52:54:14:04:f9:41:05:be:1f:10: 1c:76:92:17:ca:06:4a:ea:72:a3:a1:9a:ea:5e:77:3a:5d:17: dd:ce:1e:04:b5:5c:35:57:cb:f3:b8:ae:ef:6a:b7:91:3a:ee: 8c:ba:1c:23:78:6b:39:7a:e3:23:45:01:02:81:ca:07:eb:cc: 40:47:b8:fa:0d:b0:12:1d:89:eb:be:54:99:26:e5:cc:c4:1f: f3:d1:ae:2e:48:d9:5f:e7:95:97:3a:b5:80:30:e6:15:22:e6: 56:29:8b:84:04:e4:11:69:62:e1:9d:a5:6d:50:98:9f:6c:d1: a3:72:e3:7f:fb:7e:12:8a:1a:e1:98:8d:10:2b:d3:a3:1d:cf: c7:01:55:d4:92:b8:97:a5:42:23:5f:1d:ef:cb:1d:31:94:dc: 7e:54:8b:09:f6:1c:5e:5e:29:c1:76:46:98:33:db:36:2b:25: 1c:bc:c6:89:e2:b0:a5:86:52:e8:35:8d:42:b6:aa:89:89:7f: a7:75:43:4b:ac:83:da:37:6c:92:f1:33:3e:01:54:f4:43:28: dd:b9:99:db:20:8d:48:ea:65:9f:21:d9:da:b7:a8:bf:a5:26: 39:75:ef:ca:2c:cd:bb:2d:54:aa:19:b7:a0:e1:22:92:fa:7a: 2d:4e:75:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkyQjMxMTAvBgNVBAUTKDNBNUMwODEzQzBGRUQwQTgzQjNERDAxQjdBNUFFMUEx MzA4MjcwMjgwHhcNMjUwNzIwMTU0OTA3WhcNMjUwNzI3MTU0OTA3WjAYMRYwFAYD VQQDEw02ODdkMGZmMy00ZjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAow2FP71CCtYqvsXYhtkMOHd5NSGBeqBSzltGUia3ZdeL5Uaf8wsEfxF5zFT7 bG+M32cDO7tWah4Hzja1FWUSWxRvkMyAtuAk31HgwLWu4EW8XwQR8bzg2uQu1HBC v8lisPCbQfljNUHIoNQscd2J12H4i7OjuNpz8uPTl7Jt8U72DXbYFixGYJ3xe7zh V+7iLyX+dECyGgBwZLxxe+4WnHu1JKalrys69yiykSickLkpPAEyM+Wd57pcni8H d75bTqt60rdxr7kVAB9ot8T0PWcz79b7cy6S0+5qa7lyCYBeSSs7xwtZM61zRwsj LKxrAsWET+siHIQJta6k7PYBkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMQyFnpy i7Fq47sprp/f/N3bGwRcMB8GA1UdIwQYMBaAFDpcCBPA/tCoOz3QG3pa4aEwgnAo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTJCMy84OTE3RkIyQTVE MEUxMUU1QjNCRUFENTdDNEY5QUUwMi9PbHdJRThELTBLZzdQZEFiZWxyaG9UQ0Nj Q2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09sd0lFOEQtMEtnN1BkQWJlbHJob1RDQ2NDZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTJCMy84OTE3RkIyQTVEMEUxMUU1QjNCRUFENTdDNEY5QUUwMi9PbHdJRThELTBL ZzdQZEFiZWxyaG9UQ0NjQ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAthuyBCLWEmVJUFAT5QQW+HxAcdpIXygZK6nKjoZrqXnc6XRfdzh4E tVw1V8vzuK7vareROu6MuhwjeGs5euMjRQECgcoH68xAR7j6DbASHYnrvlSZJuXM xB/z0a4uSNlf55WXOrWAMOYVIuZWKYuEBOQRaWLhnaVtUJifbNGjcuN/+34Sihrh mI0QK9OjHc/HAVXUkriXpUIjXx3vyx0xlNx+VIsJ9hxeXinBdkaYM9s2KyUcvMaJ 4rClhlLoNY1CtqqJiX+ndUNLrIPaN2yS8TM+AVT0QyjduZnbII1I6mWfIdnat6i/ pSY5de/KLM27LVSqGbeg4SKS+notTnX5 -----END CERTIFICATE-----Generated at Sun Jul 20 19:02:57 2025 by rpki-client