$ rpki-client -vvf rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft File: OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft (raw, json) Hash identifier: R5D0Tzvzi1gGugX6xNCQXPay+TgxPK9MFbheJaYrPuU= Subject key identifier: 32:4D:C5:25:74:1A:03:51:59:8F:E0:45:8D:84:83:58:82:B8:E9:A1 Authority key identifier: 3B:0B:C5:56:50:AA:46:B1:78:B3:E1:74:23:00:0B:D9:81:CA:67:36 Certificate issuer: /CN=A9186C66/serialNumber=3B0BC55650AA46B178B3E17423000BD981CA6736 Certificate serial: 2648 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OwvFVlCqRrF4s-F0IwAL2YHKZzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft Manifest number: 2637 Signing time: Wed 20 Aug 2025 15:44:22 +0000 Manifest this update: Wed 20 Aug 2025 15:44:22 +0000 Manifest next update: Wed 27 Aug 2025 15:44:21 +0000 Files and hashes: 1: OwvFVlCqRrF4s-F0IwAL2YHKZzY.crl (hash: uTW7QAQGYUvzst+SO8Hc3JblderZqNvHgdPtN4uBqgw=) 2: 02DB5704B0F211E58974874FC4F9AE02.roa (hash: 80axerWiZ6cd/ywlGklwH07eZfaJzXVmfhf4nrdmoFQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.crl rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OwvFVlCqRrF4s-F0IwAL2YHKZzY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 15:44:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9800 (0x2648) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186C66, serialNumber=3B0BC55650AA46B178B3E17423000BD981CA6736 Validity Not Before: Aug 20 15:44:22 2025 GMT Not After : Aug 27 15:44:21 2025 GMT Subject: CN=68a5ed56-0026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:fb:df:ef:b2:32:74:80:00:35:be:b6:99:f5: f8:19:df:f3:ff:a9:3a:d7:e2:fe:0c:33:5d:a1:84: 0b:5d:3e:e4:11:32:7b:44:20:0c:57:f3:c9:c7:91: d1:58:d6:05:67:39:10:4a:20:d1:ff:89:34:7a:22: 0e:22:52:8c:05:bf:b4:62:81:8f:90:49:9a:80:6d: dd:90:2c:1e:61:18:dc:4c:cf:74:d3:8e:81:64:8c: 11:af:75:71:6d:c8:58:2b:56:4d:45:a2:31:ba:47: e7:d6:e0:04:37:c9:82:e9:0b:f8:09:f4:f3:e7:6d: fa:49:99:20:78:2b:11:4d:28:68:78:c2:7f:d1:12: ad:26:51:e6:92:c5:28:40:1a:a9:1e:d1:5b:c2:20: d8:19:dd:a2:0f:04:b3:49:6e:b8:2a:8a:a0:cb:19: f4:24:f4:e9:1c:a6:93:53:61:06:2a:24:da:31:ff: e2:7e:24:59:3b:60:37:ba:13:dd:be:26:4d:48:40: 2b:b3:5c:20:99:06:6a:32:7f:14:c4:13:23:a4:de: 5b:da:23:a1:50:0f:c6:6e:aa:77:07:4f:00:7f:d6: a2:1f:2f:d3:16:ab:2a:ab:f2:b5:1d:86:d0:41:48: 3d:f0:36:1b:16:e6:f4:de:73:30:16:87:a0:4b:64: 6c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:4D:C5:25:74:1A:03:51:59:8F:E0:45:8D:84:83:58:82:B8:E9:A1 X509v3 Authority Key Identifier: keyid:3B:0B:C5:56:50:AA:46:B1:78:B3:E1:74:23:00:0B:D9:81:CA:67:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OwvFVlCqRrF4s-F0IwAL2YHKZzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:31:b9:da:fb:18:3e:69:ce:2c:71:b9:a5:7f:b3:0b:6e:33: 52:dd:2d:f1:23:ee:3e:7e:76:f1:0f:c6:d1:a0:bc:98:49:3b: 35:a9:2c:f6:d7:65:e6:bb:48:bd:8d:63:12:fe:ef:3c:ac:e7: 40:19:28:4d:f8:07:be:fe:28:5b:3f:02:5e:74:3e:e2:0e:77: bd:ac:29:e7:02:bc:5e:f7:35:82:83:6f:00:7b:c2:79:24:71: 2c:a6:f1:f3:0e:5e:6b:44:ce:f8:38:0d:0c:33:99:e8:12:5f: 74:9b:37:1a:e2:2d:de:39:ed:fd:ff:c6:ed:26:8b:98:1b:77: d7:81:ff:e4:46:d7:0d:08:11:42:85:aa:1e:43:e6:56:f0:75: 45:6c:f8:fa:4b:8e:56:13:e2:04:72:88:da:12:a3:36:b4:4d: 49:e0:e0:b0:f0:53:52:3f:8b:e3:bc:0d:7f:93:26:c9:4c:57: 13:1a:5b:08:c6:eb:08:ac:2c:ef:db:07:d9:55:43:ee:ac:7e: 45:da:9b:df:37:d8:1c:c3:4b:41:1e:76:58:ca:26:4b:b6:ad: 97:e1:0b:f5:5f:ab:26:13:74:d4:fe:ca:d8:98:86:55:a2:6b: a5:cb:38:f9:22:8b:4d:73:3e:2a:c7:27:79:5a:8d:10:78:9c: 18:10:10:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZDNjYxMTAvBgNVBAUTKDNCMEJDNTU2NTBBQTQ2QjE3OEIzRTE3NDIzMDAwQkQ5 ODFDQTY3MzYwHhcNMjUwODIwMTU0NDIyWhcNMjUwODI3MTU0NDIxWjAYMRYwFAYD VQQDEw02OGE1ZWQ1Ni0wMDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5fvf77IydIAANb62mfX4Gd/z/6k61+L+DDNdoYQLXT7kETJ7RCAMV/PJx5HR WNYFZzkQSiDR/4k0eiIOIlKMBb+0YoGPkEmagG3dkCweYRjcTM90046BZIwRr3Vx bchYK1ZNRaIxukfn1uAEN8mC6Qv4CfTz5236SZkgeCsRTShoeMJ/0RKtJlHmksUo QBqpHtFbwiDYGd2iDwSzSW64Koqgyxn0JPTpHKaTU2EGKiTaMf/ifiRZO2A3uhPd viZNSEArs1wgmQZqMn8UxBMjpN5b2iOhUA/Gbqp3B08Af9aiHy/TFqsqq/K1HYbQ QUg98DYbFub03nMwFoegS2Rs2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDJNxSV0 GgNRWY/gRY2Eg1iCuOmhMB8GA1UdIwQYMBaAFDsLxVZQqkaxeLPhdCMAC9mBymc2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkM2Ni84RkI5NThGQUY4 NkIxMUU0ODMxNjczNjBDNEY5QUUwMi9Pd3ZGVmxDcVJyRjRzLUYwSXdBTDJZSEta elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL093dkZWbENxUnJGNHMtRjBJd0FMMllIS1p6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkM2Ni84RkI5NThGQUY4NkIxMUU0ODMxNjczNjBDNEY5QUUwMi9Pd3ZGVmxDcVJy RjRzLUYwSXdBTDJZSEtaelkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUMbna+xg+ac4scbmlf7MLbjNS3S3xI+4+fnbxD8bRoLyYSTs1qSz2 12Xmu0i9jWMS/u88rOdAGShN+Ae+/ihbPwJedD7iDne9rCnnArxe9zWCg28Ae8J5 JHEspvHzDl5rRM74OA0MM5noEl90mzca4i3eOe39/8btJouYG3fXgf/kRtcNCBFC haoeQ+ZW8HVFbPj6S45WE+IEcojaEqM2tE1J4OCw8FNSP4vjvA1/kybJTFcTGlsI xusIrCzv2wfZVUPurH5F2pvfN9gcw0tBHnZYyiZLtq2X4Qv1X6smE3TU/srYmIZV omulyzj5IotNcz4qxyd5Wo0QeJwYEBA+ -----END CERTIFICATE-----Generated at Fri Aug 22 16:36:06 2025 by rpki-client