$ rpki-client -vvf rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft File: O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft (raw, json) Hash identifier: 2rKLep48Ip9Blb48Av2fbxfoP7hPoxwlOGl/sYPpkA8= Subject key identifier: 49:52:A3:D0:A5:64:3E:A7:43:FE:78:2C:5F:78:08:DF:9D:92:A5:D1 Authority key identifier: 3B:62:40:7E:2E:54:F4:2F:80:90:E2:C0:D8:6F:D2:C3:A6:13:30:B3 Certificate issuer: /CN=A91579E2/serialNumber=3B62407E2E54F42F8090E2C0D86FD2C3A61330B3 Certificate serial: 01BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft Manifest number: 01B6 Signing time: Wed 17 Sep 2025 03:34:26 +0000 Manifest this update: Wed 17 Sep 2025 03:34:25 +0000 Manifest next update: Wed 24 Sep 2025 03:34:25 +0000 Files and hashes: 1: O2JAfi5U9C-AkOLA2G_Sw6YTMLM.crl (hash: L4Vd6MQcg+adjmUowUOcdrvpTgAigrFyxU8x+zgq9Qs=) 2: 62923A1EF2B711EDAA29717AC4F9AE02.roa (hash: oxGjZ2qP5KAlzJWT8zUJKcB63LEiuvqe3on36ROaH3g=) 3: 631D6D82F2B711EDAA29717AC4F9AE02.roa (hash: Ugoz9OgYhjx5n/wKBryzHZ0lteBuyiXAGZkUzpN/sg4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.crl rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 03:34:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 445 (0x1bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91579E2, serialNumber=3B62407E2E54F42F8090E2C0D86FD2C3A61330B3 Validity Not Before: Sep 17 03:34:25 2025 GMT Not After : Sep 24 03:34:25 2025 GMT Subject: CN=68ca2c42-7161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6b:53:d0:03:f0:10:99:de:54:4c:9a:4e:cd: c6:a3:29:b4:3b:cd:b3:eb:da:6c:6b:99:51:fc:48: ab:e7:bf:0f:0d:0a:e0:bb:a5:49:f6:f3:08:f9:10: 49:ef:40:12:58:df:52:54:20:c6:79:61:ff:89:3a: 96:28:0a:f8:7a:9d:52:e1:0a:88:3f:14:b3:48:d8: 96:28:db:85:f4:c8:83:bb:83:58:cc:68:bb:ad:c0: f8:91:0d:b4:89:c1:53:4d:fe:31:f7:64:6b:bc:c8: e7:ca:73:35:d7:fd:f2:83:73:f2:d1:bb:cc:c4:b4: 6d:cd:3a:cd:4a:bc:28:eb:cb:94:36:fc:49:29:d4: 6f:cf:5b:33:ba:ff:3d:ee:ba:b2:5b:a7:6c:b6:f9: b3:ae:c6:66:24:cb:7c:81:ab:f4:5d:52:a6:6f:c4: df:0a:48:40:b3:58:55:a9:1a:45:34:56:c9:25:b2: 6c:04:cc:c0:37:f7:43:cb:64:d9:ff:46:01:d4:03: ff:f4:8a:26:33:0f:95:a0:9e:8f:a0:75:ca:c0:25: 99:50:fd:6e:65:a3:2d:eb:a7:e6:4d:26:1c:40:65: c6:8a:28:5b:d6:26:03:12:6f:a0:e9:05:b8:5f:9f: b9:7e:0c:03:e6:b0:24:dc:3f:05:21:18:02:53:c8: 02:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:52:A3:D0:A5:64:3E:A7:43:FE:78:2C:5F:78:08:DF:9D:92:A5:D1 X509v3 Authority Key Identifier: keyid:3B:62:40:7E:2E:54:F4:2F:80:90:E2:C0:D8:6F:D2:C3:A6:13:30:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:59:47:55:d7:9a:6a:4d:db:2a:29:99:ff:63:a2:f9:ea:8f: ad:46:99:6e:de:78:25:86:46:8a:ee:5e:4a:90:9c:9d:ad:54: fa:5c:d8:c4:48:16:c9:74:e5:4c:6e:29:64:cc:4d:12:64:d4: 67:58:c1:5d:50:33:de:93:3f:b1:c8:da:57:88:1f:72:42:b4: 14:db:41:8d:01:4b:d3:df:35:df:18:ce:a8:25:fd:86:29:ec: a5:0b:24:71:21:8f:57:eb:47:82:1b:fa:b2:01:31:cd:b9:29: 96:cd:71:64:23:c2:34:68:27:7c:d8:d9:6d:f7:6e:df:cc:5c: 02:22:45:3c:30:13:db:d7:61:fa:c7:f8:83:e7:a4:1e:02:32: 83:c0:73:a6:e1:07:60:dd:60:e8:ad:03:40:06:85:c3:8a:96: 26:4b:65:95:e6:3f:f0:f1:5c:78:5d:2b:64:64:d1:27:ac:d9: f5:4e:bb:f8:b6:e2:63:f5:33:7a:f5:71:81:62:ee:02:74:96: 92:56:10:43:fd:57:49:57:1f:3f:d0:5f:cf:77:76:e7:3a:16: b8:4c:88:df:fa:fd:d9:00:da:af:4c:ac:ac:51:dc:56:d3:6e: 4b:58:7c:79:ec:fa:63:46:30:f9:d0:f6:db:70:6d:f7:e4:de: f6:c3:83:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc5RTIxMTAvBgNVBAUTKDNCNjI0MDdFMkU1NEY0MkY4MDkwRTJDMEQ4NkZEMkMz QTYxMzMwQjMwHhcNMjUwOTE3MDMzNDI1WhcNMjUwOTI0MDMzNDI1WjAYMRYwFAYD VQQDEw02OGNhMmM0Mi03MTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuWtT0APwEJneVEyaTs3Goym0O82z69psa5lR/Eir578PDQrgu6VJ9vMI+RBJ 70ASWN9SVCDGeWH/iTqWKAr4ep1S4QqIPxSzSNiWKNuF9MiDu4NYzGi7rcD4kQ20 icFTTf4x92RrvMjnynM11/3yg3Py0bvMxLRtzTrNSrwo68uUNvxJKdRvz1szuv89 7rqyW6dstvmzrsZmJMt8gav0XVKmb8TfCkhAs1hVqRpFNFbJJbJsBMzAN/dDy2TZ /0YB1AP/9IomMw+VoJ6PoHXKwCWZUP1uZaMt66fmTSYcQGXGiihb1iYDEm+g6QW4 X5+5fgwD5rAk3D8FIRgCU8gCxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFElSo9Cl ZD6nQ/54LF94CN+dkqXRMB8GA1UdIwQYMBaAFDtiQH4uVPQvgJDiwNhv0sOmEzCz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzlFMi83M0FGMkY3QUYy QjAxMUVEQTQyQjQ0NzBDNEY5QUUwMi9PMkpBZmk1VTlDLUFrT0xBMkdfU3c2WVRN TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL08ySkFmaTVVOUMtQWtPTEEyR19TdzZZVE1MTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzlFMi83M0FGMkY3QUYyQjAxMUVEQTQyQjQ0NzBDNEY5QUUwMi9PMkpBZmk1VTlD LUFrT0xBMkdfU3c2WVRNTE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoWUdV15pqTdsqKZn/Y6L56o+tRplu3nglhkaK7l5KkJydrVT6XNjE SBbJdOVMbilkzE0SZNRnWMFdUDPekz+xyNpXiB9yQrQU20GNAUvT3zXfGM6oJf2G KeylCyRxIY9X60eCG/qyATHNuSmWzXFkI8I0aCd82Nlt927fzFwCIkU8MBPb12H6 x/iD56QeAjKDwHOm4Qdg3WDorQNABoXDipYmS2WV5j/w8Vx4XStkZNEnrNn1Trv4 tuJj9TN69XGBYu4CdJaSVhBD/VdJVx8/0F/Pd3bnOha4TIjf+v3ZANqvTKysUdxW 025LWHx57PpjRjD50PbbcG335N72w4OH -----END CERTIFICATE-----Generated at Fri Sep 19 00:34:34 2025 by rpki-client