$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft File: OU6gholcbxfZNlSKMiOLgs95KU0.mft (raw, json) Hash identifier: QfWMv38XsnOqLMU2yt/kOjZWEaxhC0ybUMNCb/a82YQ= Subject key identifier: CE:83:58:60:51:50:C3:A6:3D:ED:1E:29:F3:97:2F:49:A9:6D:47:22 Authority key identifier: 39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D Certificate issuer: /CN=A91AAE16/serialNumber=394EA086895C6F17D936548A32238B82CF79294D Certificate serial: 0FD3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft Manifest number: 0FC4 Signing time: Fri 18 Jul 2025 17:40:28 +0000 Manifest this update: Fri 18 Jul 2025 17:40:27 +0000 Manifest next update: Fri 25 Jul 2025 17:40:27 +0000 Files and hashes: 1: OU6gholcbxfZNlSKMiOLgs95KU0.crl (hash: nmIuOC2xgNyREfPBKB2HAk4XkuHyKCnPFVjzN8RVO30=) 2: 68DA14E65BB211E9BF474F16C4F9AE02.roa (hash: +yhzJzGn+WxW2d4EtUHBstgfBIaoIoaYoJwg0N+/u2I=) 3: B2409F28DF9311EEBF6BC36DC4F9AE02.roa (hash: bOx/MaRmXB38ne/1h1RZYscRhBFAXmNorXwlc1KE7w8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.crl rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:40:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4051 (0xfd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAE16, serialNumber=394EA086895C6F17D936548A32238B82CF79294D Validity Not Before: Jul 18 17:40:27 2025 GMT Not After : Jul 25 17:40:27 2025 GMT Subject: CN=687a870c-7abc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ef:3b:44:99:54:29:50:7d:27:05:14:8f:c6: 0d:b4:e5:49:8e:d4:87:f8:ca:4c:51:50:5d:96:8b: eb:0b:3a:11:ad:6e:7c:7f:33:20:9a:08:4e:e5:b2: 36:7e:59:bf:31:05:c8:3c:ba:85:82:4c:4c:20:d4: 0d:09:ce:40:ff:8f:d2:63:6a:52:27:07:5a:19:df: c6:21:b1:4c:91:b5:59:22:7b:ad:10:83:f4:fd:42: e5:13:26:81:16:1a:6b:15:5f:13:db:a1:00:6a:81: 26:30:1c:a4:02:62:dc:1d:2f:ac:95:d3:d2:38:9f: 23:5a:f4:0d:e3:7e:a3:57:e9:5b:d7:84:5f:f6:48: 7a:f5:c2:2a:40:2e:4e:a8:60:4b:3a:dc:ba:e1:65: 8c:ff:ee:da:af:46:59:0f:d7:f2:29:43:30:c9:b8: ac:28:af:46:3f:69:a7:f7:9b:d0:82:4d:2f:db:11: 30:1a:54:96:ec:fa:0a:bd:0c:73:f9:a0:31:19:ad: 1c:31:7e:5d:5f:d6:f7:dd:b5:cd:81:08:63:41:56: c1:1f:44:87:ba:b8:12:b6:61:a2:5d:f5:13:2f:93: c6:14:50:1e:51:97:65:16:a3:f1:3e:4c:47:37:f5: 1e:22:71:45:00:80:9e:9d:90:fa:53:31:e1:10:eb: 5a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:83:58:60:51:50:C3:A6:3D:ED:1E:29:F3:97:2F:49:A9:6D:47:22 X509v3 Authority Key Identifier: keyid:39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:68:44:ad:c2:96:2c:89:d1:01:35:5b:e0:98:cf:25:a9:31: 2f:61:d6:7f:e6:73:ef:49:65:a3:8b:8e:86:51:e5:ea:8c:09: f1:34:b2:9c:12:2e:ab:dd:27:52:c0:8a:2e:f1:e9:e1:22:81: 7e:4e:cb:a9:ad:96:93:7a:87:d9:00:a0:13:09:7f:96:fb:74: 45:e1:d8:01:9b:c6:f0:79:80:aa:83:6d:65:ee:2d:bc:ce:8a: 17:7d:b1:98:d0:a1:6f:65:53:50:07:2b:dd:96:0b:92:85:27: 6b:b0:58:4b:c2:47:08:64:db:88:57:cc:1c:9d:0b:b5:0d:89: 7c:e1:6b:cc:d0:cf:a9:30:04:8c:e9:a8:4a:3e:21:b4:f1:34: d1:a2:0f:e2:63:ee:69:48:5e:43:e5:98:47:ca:f1:b2:3d:7c: 47:dd:8d:0f:df:7a:75:bf:30:fc:41:60:0c:3f:ca:46:1e:19: 93:db:d6:08:84:c1:03:a4:0e:88:bc:44:00:f8:64:61:b6:d2: 0c:90:60:23:87:1d:0f:de:b8:75:85:98:7d:e3:c4:ee:5c:b5: f0:ca:c7:d5:fa:18:80:35:85:da:3b:1c:9b:31:05:b9:06:9f: 1c:b0:c6:54:0e:94:82:c9:1b:45:3b:40:e1:2a:4c:4f:9c:94: 35:49:c3:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFMTYxMTAvBgNVBAUTKDM5NEVBMDg2ODk1QzZGMTdEOTM2NTQ4QTMyMjM4Qjgy Q0Y3OTI5NEQwHhcNMjUwNzE4MTc0MDI3WhcNMjUwNzI1MTc0MDI3WjAYMRYwFAYD VQQDEw02ODdhODcwYy03YWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5e87RJlUKVB9JwUUj8YNtOVJjtSH+MpMUVBdlovrCzoRrW58fzMgmghO5bI2 flm/MQXIPLqFgkxMINQNCc5A/4/SY2pSJwdaGd/GIbFMkbVZInutEIP0/ULlEyaB FhprFV8T26EAaoEmMBykAmLcHS+sldPSOJ8jWvQN436jV+lb14Rf9kh69cIqQC5O qGBLOty64WWM/+7ar0ZZD9fyKUMwybisKK9GP2mn95vQgk0v2xEwGlSW7PoKvQxz +aAxGa0cMX5dX9b33bXNgQhjQVbBH0SHurgStmGiXfUTL5PGFFAeUZdlFqPxPkxH N/UeInFFAICenZD6UzHhEOtaFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM6DWGBR UMOmPe0eKfOXL0mpbUciMB8GA1UdIwQYMBaAFDlOoIaJXG8X2TZUijIji4LPeSlN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUUxNi8xNzQ4ODU1MDVC QjExMUU5OEIxMDNCMTNDNEY5QUUwMi9PVTZnaG9sY2J4ZlpObFNLTWlPTGdzOTVL VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09VNmdob2xjYnhmWk5sU0tNaU9MZ3M5NUtVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUUxNi8xNzQ4ODU1MDVCQjExMUU5OEIxMDNCMTNDNEY5QUUwMi9PVTZnaG9sY2J4 ZlpObFNLTWlPTGdzOTVLVTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1aEStwpYsidEBNVvgmM8lqTEvYdZ/5nPvSWWji46GUeXqjAnxNLKc Ei6r3SdSwIou8enhIoF+TsuprZaTeofZAKATCX+W+3RF4dgBm8bweYCqg21l7i28 zooXfbGY0KFvZVNQByvdlguShSdrsFhLwkcIZNuIV8wcnQu1DYl84WvM0M+pMASM 6ahKPiG08TTRog/iY+5pSF5D5ZhHyvGyPXxH3Y0P33p1vzD8QWAMP8pGHhmT29YI hMEDpA6IvEQA+GRhttIMkGAjhx0P3rh1hZh948TuXLXwysfV+hiANYXaOxybMQW5 Bp8csMZUDpSCyRtFO0DhKkxPnJQ1ScNF -----END CERTIFICATE-----Generated at Sun Jul 20 03:40:15 2025 by rpki-client