$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.mft File: OBfP4ApfGsw2O0cvT2nag761ZhM.mft (raw, json) Hash identifier: 2kOMwm1gGEF9MwLBJ6D+b/obaOan2XqQOSEG3SeOjgw= Subject key identifier: B9:FB:07:DA:34:8A:30:91:E2:10:59:A7:75:EC:AC:BA:D9:DC:37:13 Authority key identifier: 38:17:CF:E0:0A:5F:1A:CC:36:3B:47:2F:4F:69:DA:83:BE:B5:66:13 Certificate issuer: /CN=A91B9AB9/serialNumber=3817CFE00A5F1ACC363B472F4F69DA83BEB56613 Certificate serial: A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBfP4ApfGsw2O0cvT2nag761ZhM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.mft Manifest number: A0 Signing time: Sat 19 Jul 2025 06:28:02 +0000 Manifest this update: Sat 19 Jul 2025 06:28:01 +0000 Manifest next update: Sat 26 Jul 2025 06:28:01 +0000 Files and hashes: 1: OBfP4ApfGsw2O0cvT2nag761ZhM.crl (hash: 4EZHKhj8YTwCxewVJvFN/s6DN3/Q9+ToSBDe829j9uc=) 2: A06AB21E6E8811EF95434073C4F9AE02.roa (hash: vppFtWXOaW/ZHVpNFmtwJ9lUk75Frb5HKq6ZQsHZOpc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.crl rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBfP4ApfGsw2O0cvT2nag761ZhM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:28:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9AB9, serialNumber=3817CFE00A5F1ACC363B472F4F69DA83BEB56613 Validity Not Before: Jul 19 06:28:01 2025 GMT Not After : Jul 26 06:28:01 2025 GMT Subject: CN=687b3af1-75d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ea:bf:01:04:80:cb:a9:b2:c2:57:94:46:cb: c5:a3:1d:55:1d:78:c2:33:b2:8b:1f:05:31:36:35: 6a:fb:29:1d:38:0f:fe:02:4b:95:c4:18:37:81:ef: 01:5f:79:6e:a3:47:f9:89:2a:47:9d:92:cc:55:a4: 03:d9:dd:34:83:a4:90:ab:d3:81:d3:0d:6a:4c:bb: a2:91:66:a2:9d:cd:82:5a:8a:69:97:e8:74:7e:b4: 22:9f:2b:de:f3:36:5e:f9:1c:1d:36:3c:29:84:b6: 91:ba:ba:d9:a0:b2:4d:e2:12:3f:e4:bb:94:81:6a: 5d:b3:9f:51:51:3d:62:8c:d5:ac:9f:87:fc:40:7d: 4a:12:7a:7d:b8:c6:1b:44:af:78:ad:38:db:51:c6: f1:a3:a7:03:8c:75:aa:91:de:db:5f:a0:bd:31:c4: 5f:52:42:d6:c5:6c:f6:34:bb:97:66:e8:d7:64:a0: a2:3f:0e:63:ce:7e:61:ae:0e:55:03:40:b4:18:11: d2:40:f0:37:16:17:f8:3d:d3:a7:1e:76:57:f7:8f: a9:f4:c4:63:f4:be:76:ef:d9:ad:b2:af:26:30:dc: 22:21:e0:bd:50:69:1b:a5:2a:74:fe:a4:14:67:ef: e5:08:22:ff:01:fd:ac:76:ca:de:14:33:44:3f:b1: a4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:FB:07:DA:34:8A:30:91:E2:10:59:A7:75:EC:AC:BA:D9:DC:37:13 X509v3 Authority Key Identifier: keyid:38:17:CF:E0:0A:5F:1A:CC:36:3B:47:2F:4F:69:DA:83:BE:B5:66:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBfP4ApfGsw2O0cvT2nag761ZhM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:f0:d7:5a:f8:2e:bf:6f:34:4e:1f:15:25:5c:68:bf:22:87: 73:ab:02:e6:09:20:d2:82:ab:6f:a6:aa:40:32:f9:7e:a0:c2: df:b7:88:f7:6c:74:05:76:74:31:90:97:3b:fb:2c:b1:36:4a: 3c:72:a6:37:b5:a3:c5:fe:c5:ee:74:76:fb:49:9e:d7:93:9b: 03:1c:9f:31:9e:9d:3f:e6:ae:75:d4:ce:10:c7:2a:75:df:e9: ae:1b:3b:80:ed:37:ce:2b:ff:f0:58:d4:04:d5:db:ba:27:17: 0e:26:a5:8c:a4:24:b7:e1:59:df:0e:af:1e:38:1f:c3:da:16: a0:8e:4b:a2:b8:70:e9:40:61:87:86:38:3c:af:3e:65:a1:20: a5:a4:03:35:6b:eb:ba:7d:9f:ee:4d:4a:85:c2:74:b1:be:d0: b9:f2:c1:e7:f6:b7:39:ba:f6:57:09:a4:ff:f0:ef:bb:4e:dc: f6:83:0c:57:e8:96:c0:c8:b4:26:b4:ee:fb:9e:4f:f2:54:b1: b6:ee:1c:6f:0b:42:db:fd:3c:97:7e:3f:44:f4:78:fb:0f:02: 05:b3:43:d4:71:a5:af:e6:f9:cf:da:64:52:41:8d:2e:cc:4f: e7:f6:68:4e:3e:29:3b:ae:ed:6c:03:3e:f1:e0:e4:bf:a6:94: bd:80:6c:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlBQjkxMTAvBgNVBAUTKDM4MTdDRkUwMEE1RjFBQ0MzNjNCNDcyRjRGNjlEQTgz QkVCNTY2MTMwHhcNMjUwNzE5MDYyODAxWhcNMjUwNzI2MDYyODAxWjAYMRYwFAYD VQQDEw02ODdiM2FmMS03NWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArOq/AQSAy6mywleURsvFox1VHXjCM7KLHwUxNjVq+ykdOA/+AkuVxBg3ge8B X3luo0f5iSpHnZLMVaQD2d00g6SQq9OB0w1qTLuikWainc2CWoppl+h0frQinyve 8zZe+RwdNjwphLaRurrZoLJN4hI/5LuUgWpds59RUT1ijNWsn4f8QH1KEnp9uMYb RK94rTjbUcbxo6cDjHWqkd7bX6C9McRfUkLWxWz2NLuXZujXZKCiPw5jzn5hrg5V A0C0GBHSQPA3Fhf4PdOnHnZX94+p9MRj9L5279mtsq8mMNwiIeC9UGkbpSp0/qQU Z+/lCCL/Af2sdsreFDNEP7GkewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLn7B9o0 ijCR4hBZp3XsrLrZ3DcTMB8GA1UdIwQYMBaAFDgXz+AKXxrMNjtHL09p2oO+tWYT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUFCOS9EMTE4QzBCQzZF ODQxMUVGQTNDRDk4M0ZDNEY5QUUwMi9PQmZQNEFwZkdzdzJPMGN2VDJuYWc3NjFa aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09CZlA0QXBmR3N3Mk8wY3ZUMm5hZzc2MVpoTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUFCOS9EMTE4QzBCQzZFODQxMUVGQTNDRDk4M0ZDNEY5QUUwMi9PQmZQNEFwZkdz dzJPMGN2VDJuYWc3NjFaaE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+8Nda+C6/bzROHxUlXGi/IodzqwLmCSDSgqtvpqpAMvl+oMLft4j3 bHQFdnQxkJc7+yyxNko8cqY3taPF/sXudHb7SZ7Xk5sDHJ8xnp0/5q511M4Qxyp1 3+muGzuA7TfOK//wWNQE1du6JxcOJqWMpCS34VnfDq8eOB/D2hagjkuiuHDpQGGH hjg8rz5loSClpAM1a+u6fZ/uTUqFwnSxvtC58sHn9rc5uvZXCaT/8O+7Ttz2gwxX 6JbAyLQmtO77nk/yVLG27hxvC0Lb/TyXfj9E9Hj7DwIFs0PUcaWv5vnP2mRSQY0u zE/n9mhOPik7ru1sAz7x4OS/ppS9gGxi -----END CERTIFICATE-----Generated at Mon Jul 21 02:07:38 2025 by rpki-client