$ rpki-client -vvf rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft File: OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft (raw, json) Hash identifier: skV2gEZFwfawgqw0viLbfL6iwGL4yYcnVBQqKDIMMdU= Subject key identifier: 2E:D1:23:E3:57:F1:09:C3:C9:B9:3E:8A:23:9C:2C:BC:16:51:CA:98 Authority key identifier: 39:58:C7:8E:DB:2C:BD:A4:6B:66:A6:7E:B9:34:AA:7B:D3:C3:86:5E Certificate issuer: /CN=A912EFA6/serialNumber=3958C78EDB2CBDA46B66A67EB934AA7BD3C3865E Certificate serial: 060A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft Manifest number: 0604 Signing time: Mon 08 Sep 2025 22:56:27 +0000 Manifest this update: Mon 08 Sep 2025 22:56:27 +0000 Manifest next update: Mon 15 Sep 2025 22:56:26 +0000 Files and hashes: 1: OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl (hash: sMNTfYadZ3yxE30f5wpTD3c3sbBB8X9/TAlPCVEZdqo=) 2: 73F5DB88BC9C11EB9AC8E073C4F9AE02.roa (hash: B/l1/qnG+ox/f3khU2Qu7i7cTmOVlXxBXIJAWV1sQEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 22:56:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1546 (0x60a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EFA6, serialNumber=3958C78EDB2CBDA46B66A67EB934AA7BD3C3865E Validity Not Before: Sep 8 22:56:27 2025 GMT Not After : Sep 15 22:56:26 2025 GMT Subject: CN=68bf5f1b-7e7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:a0:1c:e1:aa:5c:44:76:e9:82:ae:6a:f2:86: 34:a0:62:cf:1b:2f:63:4c:c0:74:97:00:38:d5:b2: 93:dd:e5:e2:e2:31:f1:84:07:5f:a0:18:4d:16:4d: 8d:d9:d1:bf:7f:3f:4b:66:01:c0:e2:80:1c:2e:d2: d1:41:ef:10:fd:6b:16:fc:e7:6b:66:c4:10:3f:86: 56:f7:00:e6:f1:1b:90:0b:df:40:5f:0a:3f:d7:8b: 75:47:68:7c:53:03:10:5b:4d:60:dd:b0:e8:31:97: 90:8e:e6:4a:1e:fb:9b:c7:6e:49:e9:44:7e:ad:7b: 67:d4:bf:d5:ae:4e:50:06:06:46:e5:72:2f:63:79: 69:d9:ed:02:66:bb:63:99:f2:52:4e:66:ff:61:69: 97:1c:7a:1a:ba:3b:5c:ef:91:c1:23:9e:24:23:34: 89:fb:3f:24:12:a2:35:9b:22:a3:3d:ca:cb:5c:41: ee:c9:b5:1a:59:38:5a:c8:44:1b:86:a4:f0:29:93: 24:84:b5:22:04:ad:78:65:5e:5c:54:d8:96:cc:25: c2:75:a2:4a:d9:f8:9a:b9:3e:b7:34:d3:83:a3:3a: b7:16:61:28:de:19:fc:d7:8d:ea:e3:1a:2b:63:38: 47:6b:27:bd:ba:6e:fb:1f:de:30:40:e0:98:05:bf: b4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:D1:23:E3:57:F1:09:C3:C9:B9:3E:8A:23:9C:2C:BC:16:51:CA:98 X509v3 Authority Key Identifier: keyid:39:58:C7:8E:DB:2C:BD:A4:6B:66:A6:7E:B9:34:AA:7B:D3:C3:86:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:3d:9b:0c:e7:f3:6f:f4:23:9b:17:89:be:8a:45:41:dc:85: c5:97:00:be:2a:ce:f9:f1:61:ab:0f:fe:4c:6f:45:64:88:ee: 8a:ea:4e:d6:48:3a:0e:6c:44:d0:a2:78:22:9b:b9:14:7c:86: 95:a2:e5:a5:8c:dc:7a:f2:3d:3c:dc:e5:de:09:3a:ae:02:1a: 9b:5a:8b:37:41:14:52:93:58:e3:2d:4b:23:17:24:e2:ea:9e: 8a:3c:34:76:1e:4f:a4:02:ce:bc:2d:57:68:01:d6:21:ed:aa: 6d:4c:b1:1d:91:f2:10:bb:7b:85:fb:3e:39:ad:d4:f1:cf:1b: de:19:b6:47:4c:c0:4e:32:ce:31:7f:d4:e9:58:28:22:7a:69: 13:33:45:74:b7:15:5e:f1:56:69:53:74:10:e3:6e:98:8b:2c: bd:b7:86:3c:6e:22:71:71:ed:7e:1c:3a:94:68:af:49:76:a4: 85:77:9a:ba:17:28:14:b6:4d:64:d3:84:fa:99:d9:e5:ff:14: c2:3b:61:94:50:ef:33:1d:cd:42:90:1b:c6:c6:f8:96:f2:49: 5e:1c:5d:6c:a3:be:06:39:8a:91:47:ff:f5:b0:d5:78:60:f2: 80:21:c4:ce:4e:96:17:cb:05:63:3f:65:21:a2:54:e0:19:c4: c7:d0:46:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkVGQTYxMTAvBgNVBAUTKDM5NThDNzhFREIyQ0JEQTQ2QjY2QTY3RUI5MzRBQTdC RDNDMzg2NUUwHhcNMjUwOTA4MjI1NjI3WhcNMjUwOTE1MjI1NjI2WjAYMRYwFAYD VQQDEw02OGJmNWYxYi03ZTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6aAc4apcRHbpgq5q8oY0oGLPGy9jTMB0lwA41bKT3eXi4jHxhAdfoBhNFk2N 2dG/fz9LZgHA4oAcLtLRQe8Q/WsW/OdrZsQQP4ZW9wDm8RuQC99AXwo/14t1R2h8 UwMQW01g3bDoMZeQjuZKHvubx25J6UR+rXtn1L/Vrk5QBgZG5XIvY3lp2e0CZrtj mfJSTmb/YWmXHHoaujtc75HBI54kIzSJ+z8kEqI1myKjPcrLXEHuybUaWThayEQb hqTwKZMkhLUiBK14ZV5cVNiWzCXCdaJK2fiauT63NNODozq3FmEo3hn8143q4xor YzhHaye9um77H94wQOCYBb+0nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC7RI+NX 8QnDybk+iiOcLLwWUcqYMB8GA1UdIwQYMBaAFDlYx47bLL2ka2amfrk0qnvTw4Ze MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRUZBNi8wNjE2RTg0MkJD OUIxMUVCOTZGMzVGNkJDNEY5QUUwMi9PVmpIanRzc3ZhUnJacVotdVRTcWU5UERo bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09WakhqdHNzdmFSclpxWi11VFNxZTlQRGhsNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RUZBNi8wNjE2RTg0MkJDOUIxMUVCOTZGMzVGNkJDNEY5QUUwMi9PVmpIanRzc3Zh UnJacVotdVRTcWU5UERobDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7PZsM5/Nv9CObF4m+ikVB3IXFlwC+Ks758WGrD/5Mb0VkiO6K6k7W SDoObETQongim7kUfIaVouWljNx68j083OXeCTquAhqbWos3QRRSk1jjLUsjFyTi 6p6KPDR2Hk+kAs68LVdoAdYh7aptTLEdkfIQu3uF+z45rdTxzxveGbZHTMBOMs4x f9TpWCgiemkTM0V0txVe8VZpU3QQ426Yiyy9t4Y8biJxce1+HDqUaK9JdqSFd5q6 FygUtk1k04T6mdnl/xTCO2GUUO8zHc1CkBvGxviW8kleHF1so74GOYqRR//1sNV4 YPKAIcTOTpYXywVjP2UholTgGcTH0Ebb -----END CERTIFICATE-----Generated at Tue Sep 9 09:33:21 2025 by rpki-client