$ rpki-client -vvf rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft File: OVr1eRN2M5r53uVtah4TtHq1xGY.mft (raw, json) Hash identifier: k8pjhFaoES/eCyk+ZIjRxKQQi7d/RxV6NcMO7uTiNbY= Subject key identifier: 54:9C:AF:1A:0A:67:1B:DB:97:11:1A:F5:79:09:1B:28:90:F9:A7:B6 Authority key identifier: 39:5A:F5:79:13:76:33:9A:F9:DE:E5:6D:6A:1E:13:B4:7A:B5:C4:66 Certificate issuer: /CN=A91316B0/serialNumber=395AF5791376339AF9DEE56D6A1E13B47AB5C466 Certificate serial: 0104 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVr1eRN2M5r53uVtah4TtHq1xGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft Manifest number: 057B Signing time: Sun 07 Sep 2025 00:32:29 +0000 Manifest this update: Sun 07 Sep 2025 00:32:28 +0000 Manifest next update: Sun 14 Sep 2025 00:32:28 +0000 Files and hashes: 1: OVr1eRN2M5r53uVtah4TtHq1xGY.crl (hash: IGMpAEnhfG/+iMS3l514tiC4ubhAuYdcykPdTnZyO9g=) 2: C6EFDF5C0C3311EFB37BD03FC4F9AE02.roa (hash: +baf+FBOvTO91WyGSxfLgP4c75Re+v5ehq0gcaeZq1U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.crl rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVr1eRN2M5r53uVtah4TtHq1xGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 00:32:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 260 (0x104) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91316B0, serialNumber=395AF5791376339AF9DEE56D6A1E13B47AB5C466 Validity Not Before: Sep 7 00:32:28 2025 GMT Not After : Sep 14 00:32:28 2025 GMT Subject: CN=68bcd29c-10a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:03:c5:a1:8b:a2:88:4f:20:30:02:38:db:26: 12:38:7e:c8:aa:01:dd:c4:a9:60:fd:b2:f0:a1:7c: e8:9b:f4:25:54:fb:64:64:de:cf:15:fd:3e:ba:cb: 7d:6d:96:87:9f:0a:0a:f9:22:83:0a:12:a4:29:4d: a3:f9:89:6f:3a:e7:1b:91:f1:c1:84:19:1d:30:8f: c4:b6:b6:e9:08:3d:c3:04:11:db:e5:5e:ac:0e:38: 6f:92:1d:e9:0a:fd:ae:0b:1c:3b:01:2e:a9:12:b7: 52:e0:2c:87:5e:68:9c:7c:64:cc:df:a7:74:ac:4f: 63:a9:07:9d:04:26:3a:32:50:10:ae:b2:68:00:8b: 8e:db:57:60:94:cd:b1:de:1a:8f:db:b8:f8:56:7e: f5:39:9c:79:ab:29:6c:77:4c:25:3a:ca:19:00:2d: 15:22:e5:6c:59:44:68:8e:4d:b5:a5:16:cb:f6:53: 8b:59:2a:82:e5:a1:c3:ce:9d:15:45:cb:51:00:f0: 66:69:ae:14:aa:71:ca:ec:6f:76:ab:9f:76:4a:a7: da:8e:b3:c6:22:6e:80:51:ae:40:43:e7:b8:80:f0: 23:24:65:d0:31:90:5b:19:ed:4d:87:f3:9d:95:17: 92:19:b4:f3:6f:2c:dc:7c:84:03:72:b3:77:02:5e: 04:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:9C:AF:1A:0A:67:1B:DB:97:11:1A:F5:79:09:1B:28:90:F9:A7:B6 X509v3 Authority Key Identifier: keyid:39:5A:F5:79:13:76:33:9A:F9:DE:E5:6D:6A:1E:13:B4:7A:B5:C4:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVr1eRN2M5r53uVtah4TtHq1xGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:d4:85:6f:07:9b:a9:94:5b:da:a0:d3:a9:d6:68:f8:0c:8f: 66:7f:15:1c:a8:08:8e:3f:aa:1f:58:b0:2d:c3:7f:a7:b5:2c: b4:40:47:bf:9b:29:64:82:ea:2e:59:17:da:09:de:f0:8e:da: f8:33:24:94:13:91:77:6d:73:f9:67:96:14:c6:6b:f5:3f:c3: f6:82:b5:ab:f6:8f:10:56:87:45:c2:d2:64:07:c5:be:c3:b7: 4b:b2:f9:03:02:dd:b6:07:20:54:af:32:e0:94:ca:ab:d6:fe: 1f:3d:fd:11:c7:f9:79:b6:7d:3c:93:a2:50:8a:73:16:25:4a: 32:af:12:65:d4:38:6d:11:96:7c:9c:57:a8:b8:93:71:17:f1: e4:e3:90:be:97:b4:90:65:7e:f2:0e:7f:a5:84:df:0c:b3:f6: 98:3d:1e:92:fa:88:21:f6:91:6b:57:80:4e:c0:d6:b0:dd:78: a6:a0:56:5f:a2:12:59:60:8e:a3:be:e0:8c:46:97:3b:18:8e: b2:fc:15:2e:2b:b6:a5:51:5b:e1:f0:7f:98:0f:2c:14:7b:92: 70:31:ce:b1:47:e3:ad:f7:f1:be:ae:30:33:24:cd:a4:84:de: 26:c8:8c:65:a6:77:d4:ac:1b:d8:df:51:d5:32:82:01:2d:b1: ed:fb:3c:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE2QjAxMTAvBgNVBAUTKDM5NUFGNTc5MTM3NjMzOUFGOURFRTU2RDZBMUUxM0I0 N0FCNUM0NjYwHhcNMjUwOTA3MDAzMjI4WhcNMjUwOTE0MDAzMjI4WjAYMRYwFAYD VQQDEw02OGJjZDI5Yy0xMGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7APFoYuiiE8gMAI42yYSOH7IqgHdxKlg/bLwoXzom/QlVPtkZN7PFf0+ust9 bZaHnwoK+SKDChKkKU2j+YlvOucbkfHBhBkdMI/EtrbpCD3DBBHb5V6sDjhvkh3p Cv2uCxw7AS6pErdS4CyHXmicfGTM36d0rE9jqQedBCY6MlAQrrJoAIuO21dglM2x 3hqP27j4Vn71OZx5qylsd0wlOsoZAC0VIuVsWURojk21pRbL9lOLWSqC5aHDzp0V RctRAPBmaa4UqnHK7G92q592SqfajrPGIm6AUa5AQ+e4gPAjJGXQMZBbGe1Nh/Od lReSGbTzbyzcfIQDcrN3Al4EgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFScrxoK ZxvblxEa9XkJGyiQ+ae2MB8GA1UdIwQYMBaAFDla9XkTdjOa+d7lbWoeE7R6tcRm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTZCMC8yMzM3RjIzMjVF M0UxMUVDQTFGRkVCNENDNEY5QUUwMi9PVnIxZVJOMk01cjUzdVZ0YWg0VHRIcTF4 R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09WcjFlUk4yTTVyNTN1VnRhaDRUdEhxMXhHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTZCMC8yMzM3RjIzMjVFM0UxMUVDQTFGRkVCNENDNEY5QUUwMi9PVnIxZVJOMk01 cjUzdVZ0YWg0VHRIcTF4R1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAH1IVvB5uplFvaoNOp1mj4DI9mfxUcqAiOP6ofWLAtw3+ntSy0QEe/ mylkguouWRfaCd7wjtr4MySUE5F3bXP5Z5YUxmv1P8P2grWr9o8QVodFwtJkB8W+ w7dLsvkDAt22ByBUrzLglMqr1v4fPf0Rx/l5tn08k6JQinMWJUoyrxJl1DhtEZZ8 nFeouJNxF/Hk45C+l7SQZX7yDn+lhN8Ms/aYPR6S+ogh9pFrV4BOwNaw3XimoFZf ohJZYI6jvuCMRpc7GI6y/BUuK7alUVvh8H+YDywUe5JwMc6xR+Ot9/G+rjAzJM2k hN4myIxlpnfUrBvY31HVMoIBLbHt+zyj -----END CERTIFICATE-----Generated at Mon Sep 8 17:58:41 2025 by rpki-client