$ rpki-client -vvf rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft File: Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft (raw, json) Hash identifier: GO1GKSR5KfA0brfD2fkifmBsv9DkUz0Ju4bHu6mdO3c= Subject key identifier: D7:8C:1F:7D:10:A8:AB:A9:3A:A8:4D:A5:FD:E8:08:31:3C:7E:91:05 Authority key identifier: 3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60 Certificate issuer: /CN=A91188EE/serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360 Certificate serial: 011A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft Manifest number: 0111 Signing time: Tue 09 Sep 2025 05:06:42 +0000 Manifest this update: Tue 09 Sep 2025 05:06:41 +0000 Manifest next update: Tue 16 Sep 2025 05:06:41 +0000 Files and hashes: 1: Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl (hash: EJerhRcjZIlSefXMn5a3EhgnP+lHgt6OWMFb0DmSsK0=) 2: 6313E67C8D5711EFB5214A3AC4F9AE02.roa (hash: UMBCus9VAbAkM2YZxZd1UFTLKpMxYrragyckv395K7k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 05:06:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 282 (0x11a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91188EE, serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360 Validity Not Before: Sep 9 05:06:41 2025 GMT Not After : Sep 16 05:06:41 2025 GMT Subject: CN=68bfb5e2-6717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:90:ac:6b:3b:79:30:65:38:43:db:01:d4:f2: 80:d1:04:82:0f:35:ce:e1:30:32:b9:92:3c:6d:a9: 0f:06:36:e7:ad:1c:b9:8f:09:13:9c:ce:dc:88:ae: a2:e6:f3:8c:de:7d:36:90:af:49:54:88:11:37:fd: 2d:02:f3:ee:50:e5:36:ec:34:d7:67:21:25:8b:4d: 8f:1e:21:91:c0:81:e3:6d:a3:6a:bf:b4:59:38:93: e4:25:37:3f:2a:28:75:6c:ad:58:d9:a7:17:56:fa: 72:14:b3:59:05:62:03:97:f5:61:67:ce:0e:f3:0b: e4:23:f7:48:6b:34:da:a2:3f:f8:a2:dd:f8:dc:5d: b2:e5:7c:b7:39:58:85:ff:19:3d:35:ad:94:ea:a0: c0:0d:0f:62:69:ce:be:b2:4d:0c:06:db:97:49:41: e1:51:73:0a:7d:16:bb:b8:49:4f:6d:a4:07:3c:f0: 82:1a:aa:6b:40:8c:bd:48:2d:24:08:09:fa:83:e0: a1:1e:01:92:ae:ea:d2:2e:20:f0:99:71:20:be:9d: 59:0d:97:83:85:27:ce:b9:63:e6:12:62:85:a5:12: 96:a8:a0:ec:52:a9:5d:dd:e5:31:2a:e4:f9:ae:4b: 9e:74:ea:1f:c7:08:65:1f:08:4a:4e:e2:d5:31:ad: 5a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:8C:1F:7D:10:A8:AB:A9:3A:A8:4D:A5:FD:E8:08:31:3C:7E:91:05 X509v3 Authority Key Identifier: keyid:3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:2d:63:85:b9:30:8f:85:13:f1:56:87:22:d1:f6:59:84:15: 28:4f:ea:80:a1:1a:6a:f0:62:5f:57:bb:eb:59:c2:51:7e:e6: a7:59:f9:09:be:f8:69:47:45:bc:5a:ee:eb:f7:92:fa:f9:36: d4:d9:14:11:cc:b9:7c:e8:de:f4:5a:32:30:1a:61:d4:38:f6: 40:b0:43:e9:1d:ca:13:b1:ae:de:5f:e0:52:21:b6:6a:ff:4b: 24:6f:e0:10:b2:ef:09:31:81:d4:9a:2c:fa:c7:25:56:f8:a6: 56:1d:bf:4e:3e:90:5c:73:ac:f3:2d:0e:19:ed:d0:57:1e:30: 3a:07:49:bd:bb:68:8d:e8:78:d1:67:1a:8a:f6:4c:95:63:56: 46:e2:a1:6d:cc:50:ad:c1:e9:1e:ca:2c:0e:82:ac:e0:26:6d: 73:c6:72:b4:ab:c9:a1:f4:37:fa:86:75:0b:67:da:60:2b:8c: 74:db:67:ae:5e:83:8b:06:a0:f5:a4:f9:5c:3f:76:f8:7c:47: 0a:2a:a8:11:10:a2:85:8e:ad:09:32:0c:9d:24:d3:24:3c:fc: a2:3c:53:bf:d7:93:84:30:46:d3:37:17:bc:2c:21:44:a6:9b: bd:8b:ee:0b:4c:8c:d8:d8:e0:c4:6c:68:cc:ba:31:09:db:7a: 94:f6:a8:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg4RUUxMTAvBgNVBAUTKDNBRURBODA0MDdENzdCQjUyODQ4QUJEOUY3MjU5QkQ4 MDdBNUQzNjAwHhcNMjUwOTA5MDUwNjQxWhcNMjUwOTE2MDUwNjQxWjAYMRYwFAYD VQQDEw02OGJmYjVlMi02NzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5JCsazt5MGU4Q9sB1PKA0QSCDzXO4TAyuZI8bakPBjbnrRy5jwkTnM7ciK6i 5vOM3n02kK9JVIgRN/0tAvPuUOU27DTXZyEli02PHiGRwIHjbaNqv7RZOJPkJTc/ Kih1bK1Y2acXVvpyFLNZBWIDl/VhZ84O8wvkI/dIazTaoj/4ot343F2y5Xy3OViF /xk9Na2U6qDADQ9iac6+sk0MBtuXSUHhUXMKfRa7uElPbaQHPPCCGqprQIy9SC0k CAn6g+ChHgGSrurSLiDwmXEgvp1ZDZeDhSfOuWPmEmKFpRKWqKDsUqld3eUxKuT5 rkuedOofxwhlHwhKTuLVMa1aCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNeMH30Q qKupOqhNpf3oCDE8fpEFMB8GA1UdIwQYMBaAFDrtqAQH13u1KEir2fclm9gHpdNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODhFRS8zMjA5NzMxQUZC QUYxMUVFQTZCQzM5NTJDNEY5QUUwMi9PdTJvQkFmWGU3VW9TS3ZaOXlXYjJBZWww MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL091Mm9CQWZYZTdVb1NLdlo5eVdiMkFlbDAyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODhFRS8zMjA5NzMxQUZCQUYxMUVFQTZCQzM5NTJDNEY5QUUwMi9PdTJvQkFmWGU3 VW9TS3ZaOXlXYjJBZWwwMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0LWOFuTCPhRPxVoci0fZZhBUoT+qAoRpq8GJfV7vrWcJRfuanWfkJ vvhpR0W8Wu7r95L6+TbU2RQRzLl86N70WjIwGmHUOPZAsEPpHcoTsa7eX+BSIbZq /0skb+AQsu8JMYHUmiz6xyVW+KZWHb9OPpBcc6zzLQ4Z7dBXHjA6B0m9u2iN6HjR ZxqK9kyVY1ZG4qFtzFCtwekeyiwOgqzgJm1zxnK0q8mh9Df6hnULZ9pgK4x022eu XoOLBqD1pPlcP3b4fEcKKqgREKKFjq0JMgydJNMkPPyiPFO/15OEMEbTNxe8LCFE ppu9i+4LTIzY2ODEbGjMujEJ23qU9qgG -----END CERTIFICATE-----Generated at Tue Sep 9 09:02:46 2025 by rpki-client