$ rpki-client -vvf rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft File: OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft (raw, json) Hash identifier: 4ICJnAUrnd702jsgewDXUx65XnTfQXZjE4oI7qqaMGo= Subject key identifier: 02:51:23:A4:FB:52:B2:1D:22:D5:8D:A4:7D:75:6D:37:4C:C3:51:93 Authority key identifier: 39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38 Certificate issuer: /CN=A91613AB/serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838 Certificate serial: 021E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft Manifest number: 0212 Signing time: Sun 07 Sep 2025 02:37:46 +0000 Manifest this update: Sun 07 Sep 2025 02:37:45 +0000 Manifest next update: Sun 14 Sep 2025 02:37:45 +0000 Files and hashes: 1: OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl (hash: FKOzqX1aDXb4nz5xoYJqpts5b7jhHAH9PRJ/Oz3t7VU=) 2: 65AFE18C91DB11EFBC4C2A3EC4F9AE02.roa (hash: LqvEH1o9qv1Spv16C52zEqgMsWnx5LeCvM7wNncYwmQ=) 3: A50FD050DA7911EDB0D3866BC4F9AE02.roa (hash: sq3CtUxJWk/lwN1trxwIddBHXPOdGnUuNzRlPvsNflY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 02:37:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 542 (0x21e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91613AB, serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838 Validity Not Before: Sep 7 02:37:45 2025 GMT Not After : Sep 14 02:37:45 2025 GMT Subject: CN=68bceff9-9e36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:58:97:17:66:17:f2:6d:37:f8:26:b3:24:29: 1b:45:7c:fd:24:9d:69:c6:c2:a3:59:07:c1:37:d2: 83:71:62:02:c2:fb:b7:8c:88:67:8a:9c:b2:bf:88: 5e:2e:6b:83:d8:cc:7b:93:d1:d3:f7:76:15:1d:d3: 2d:7d:00:ac:d0:51:19:e5:07:22:ca:6e:3b:47:d7: 85:b5:80:34:9a:08:6e:10:1e:6c:b4:fa:8a:79:80: aa:5b:35:0a:f9:a4:49:7b:fb:4d:6e:42:e8:e9:eb: 7e:55:e2:73:aa:fd:26:85:db:21:fc:73:f8:26:40: ea:bd:ee:01:de:81:0a:46:b4:9a:5d:a8:01:93:e3: 68:a5:6f:ff:d8:af:1f:eb:75:96:8e:f5:a8:41:4c: 38:3c:c2:0f:30:82:6a:c3:e9:44:7e:56:a8:d9:d5: be:4d:c0:57:de:5a:7e:85:de:39:4b:8f:5a:e0:34: 0e:05:78:dd:34:ed:62:c1:74:4d:4f:a9:5b:48:3a: 51:b7:98:c4:cf:d5:ed:c7:a8:3c:1b:1a:98:2e:8e: a7:3c:80:36:05:7e:2c:2c:f7:c9:60:8b:60:ea:0b: c4:c6:b3:aa:1e:17:ed:44:a0:21:30:8b:3d:1b:d6: 1d:a6:80:df:32:c3:28:93:bc:04:78:83:6d:54:bf: 6d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:51:23:A4:FB:52:B2:1D:22:D5:8D:A4:7D:75:6D:37:4C:C3:51:93 X509v3 Authority Key Identifier: keyid:39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:17:6d:b9:bb:85:b6:3a:ae:98:43:83:02:af:cd:05:4f:3c: ff:ee:76:76:ac:2d:1e:5e:fb:b1:5d:c9:9e:8f:fa:25:2f:66: 96:2a:68:37:a3:4e:e4:27:24:93:40:75:af:1f:c6:7d:ab:a9: 64:e2:a4:f3:00:e5:ae:63:90:6c:f1:85:2c:d6:ab:fd:29:43: fb:13:6d:f8:94:c6:a4:4f:4a:95:f9:dc:39:ab:13:ff:81:d2: 94:46:38:5d:20:b3:e9:ff:a8:81:1a:ee:0c:45:c8:ac:10:dc: 68:58:0d:e5:df:61:c3:e2:79:be:22:e6:55:9a:52:9e:13:aa: 42:aa:19:4e:4d:45:b8:36:b7:5a:4f:cc:bc:96:b8:11:2e:47: b6:56:dd:92:11:0b:69:42:53:63:ef:88:e8:48:ca:30:db:a8: 1e:42:fa:b4:ed:e3:a0:e0:b6:43:41:8b:e0:c4:95:d2:9c:68: ae:a0:e6:b3:07:b7:ff:54:95:41:cf:e8:07:a6:ab:86:49:44: 45:e7:c1:a7:b7:0b:5e:ed:bd:2f:50:0c:9c:f8:83:a0:4e:ea: 6b:34:e3:19:a0:0f:07:9d:21:bd:64:3c:54:26:86:c3:6e:c1: 18:a4:9f:68:b1:7c:ec:83:d6:d3:ff:94:7c:cd:3c:87:f4:c4: 68:92:22:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEzQUIxMTAvBgNVBAUTKDM5MDFBRjRBOTNGRUZBQUVCODc5Q0M5RjU5OTRFNEU3 RjAxQUY4MzgwHhcNMjUwOTA3MDIzNzQ1WhcNMjUwOTE0MDIzNzQ1WjAYMRYwFAYD VQQDEw02OGJjZWZmOS05ZTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs1iXF2YX8m03+CazJCkbRXz9JJ1pxsKjWQfBN9KDcWICwvu3jIhnipyyv4he LmuD2Mx7k9HT93YVHdMtfQCs0FEZ5Qciym47R9eFtYA0mghuEB5stPqKeYCqWzUK +aRJe/tNbkLo6et+VeJzqv0mhdsh/HP4JkDqve4B3oEKRrSaXagBk+NopW//2K8f 63WWjvWoQUw4PMIPMIJqw+lEflao2dW+TcBX3lp+hd45S49a4DQOBXjdNO1iwXRN T6lbSDpRt5jEz9Xtx6g8GxqYLo6nPIA2BX4sLPfJYItg6gvExrOqHhftRKAhMIs9 G9YdpoDfMsMok7wEeINtVL9t7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAJRI6T7 UrIdItWNpH11bTdMw1GTMB8GA1UdIwQYMBaAFDkBr0qT/vquuHnMn1mU5OfwGvg4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTNBQi85Q0Y3RUNEQTZG OEIxMUVEOEZBRTNDMTFDNEY5QUUwMi9PUUd2U3BQLS1xNjRlY3lmV1pUazVfQWEt RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09RR3ZTcFAtLXE2NGVjeWZXWlRrNV9BYS1EZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTNBQi85Q0Y3RUNEQTZGOEIxMUVEOEZBRTNDMTFDNEY5QUUwMi9PUUd2U3BQLS1x NjRlY3lmV1pUazVfQWEtRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyF225u4W2Oq6YQ4MCr80FTzz/7nZ2rC0eXvuxXcmej/olL2aWKmg3 o07kJySTQHWvH8Z9q6lk4qTzAOWuY5Bs8YUs1qv9KUP7E234lMakT0qV+dw5qxP/ gdKURjhdILPp/6iBGu4MRcisENxoWA3l32HD4nm+IuZVmlKeE6pCqhlOTUW4Nrda T8y8lrgRLke2Vt2SEQtpQlNj74joSMow26geQvq07eOg4LZDQYvgxJXSnGiuoOaz B7f/VJVBz+gHpquGSURF58Gntwte7b0vUAyc+IOgTuprNOMZoA8HnSG9ZDxUJobD bsEYpJ9osXzsg9bT/5R8zTyH9MRokiKJ -----END CERTIFICATE-----Generated at Mon Sep 8 00:11:18 2025 by rpki-client