$ rpki-client -vvf rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft File: o_EASaOTr53KRFlmZBZrh0Avgio.mft (raw, json) Hash identifier: mnt8tYnkrMIe8uxuRc0zLw7jN36/xXKtZLkWGzlZGeI= Subject key identifier: F6:65:5C:65:37:F3:45:AB:42:40:E5:1A:10:BC:36:CE:E2:46:9C:2D Authority key identifier: A3:F1:00:49:A3:93:AF:9D:CA:44:59:66:64:16:6B:87:40:2F:82:2A Certificate issuer: /CN=A91877A6/serialNumber=A3F10049A393AF9DCA44596664166B87402F822A Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o_EASaOTr53KRFlmZBZrh0Avgio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft Manifest number: 22 Signing time: Fri 05 Sep 2025 08:21:10 +0000 Manifest this update: Fri 05 Sep 2025 08:21:10 +0000 Manifest next update: Fri 12 Sep 2025 08:21:10 +0000 Files and hashes: 1: o_EASaOTr53KRFlmZBZrh0Avgio.crl (hash: Cd97B2ibbzhded45AF25VewFwCtousid/p+q3cP3ttI=) 2: 4DC60A785C7F11F089D20138C4F9AE02.roa (hash: 6Vnq1spFXaLfT9Zg1ghh5PPz6XLDWciXVK572d6VJmI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.crl rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o_EASaOTr53KRFlmZBZrh0Avgio.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 08:21:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91877A6, serialNumber=A3F10049A393AF9DCA44596664166B87402F822A Validity Not Before: Sep 5 08:21:10 2025 GMT Not After : Sep 12 08:21:10 2025 GMT Subject: CN=68ba9d76-09df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:76:ef:67:5e:46:42:b3:ca:ff:10:75:84:75: b8:8d:c5:0c:d7:60:74:93:90:06:64:42:51:44:00: 78:fd:82:07:be:da:9f:09:7e:d2:73:74:bc:55:b5: e9:70:55:4a:b6:3c:2b:40:dc:37:8d:5d:9e:4d:7f: f7:1f:d8:63:f9:01:6f:c8:e7:a8:b5:e1:22:74:71: ff:fc:fc:95:a0:0e:c1:29:70:49:10:bd:5f:4e:14: 12:45:6a:db:86:24:14:68:cd:da:0c:99:3e:1d:85: e2:92:d2:21:d5:a0:59:0e:16:35:69:a1:27:04:59: ff:ee:a3:77:17:bb:47:50:bf:be:83:f6:d7:e1:66: 85:27:da:73:a1:fd:fd:f1:26:88:4d:e4:79:bf:2d: 56:d9:6a:9c:f2:d9:5b:a4:16:25:46:3c:5a:6b:0b: db:2d:e2:3e:5d:90:7f:0d:d5:c6:68:41:34:48:7c: 66:ec:30:ab:d2:8b:5d:3e:5a:81:ea:e2:a1:8a:60: 97:8a:56:59:04:8e:14:61:07:d2:76:35:c4:a6:7e: 7a:e2:7e:70:50:a0:68:95:19:50:1a:c0:45:a4:ac: 18:6e:00:4d:82:08:b9:10:ef:2e:14:b7:82:90:5a: 84:9c:d8:21:e5:b7:27:50:49:cf:3f:4a:08:1d:76: 0e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:65:5C:65:37:F3:45:AB:42:40:E5:1A:10:BC:36:CE:E2:46:9C:2D X509v3 Authority Key Identifier: keyid:A3:F1:00:49:A3:93:AF:9D:CA:44:59:66:64:16:6B:87:40:2F:82:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o_EASaOTr53KRFlmZBZrh0Avgio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:b2:77:1d:d2:f8:ea:6d:e2:ae:07:ba:39:8e:65:17:5a:7c: dc:d3:7c:30:c7:e2:7f:7b:5c:7e:b3:d3:81:60:ee:b9:6e:af: 4c:4d:2f:17:31:37:35:f6:cf:57:fc:5d:51:e2:94:20:ba:c7: b7:0f:ed:10:a4:fe:01:aa:57:09:ad:f6:d7:27:f8:52:1d:b3: 18:49:79:b5:87:5c:53:ee:a8:4a:4a:bf:c9:e1:e6:58:4d:4d: 96:4c:5e:15:1b:0a:03:26:fa:e5:0c:86:26:a7:fc:98:88:e9: 7d:26:1b:4c:94:0b:69:46:a2:95:e5:00:c8:39:cb:73:ba:b8: 4e:ed:35:51:a6:4b:0a:98:6d:72:85:62:d1:1d:f4:43:cf:2f: 5e:a3:39:43:9e:a3:e5:15:39:d1:90:87:92:68:cf:f5:8b:05: 07:ca:2e:e5:77:f3:7e:94:4d:f4:0c:85:a7:6d:7c:bc:c4:c8: db:8a:bc:bd:f4:da:29:91:4f:aa:7c:47:5c:ad:32:15:c3:67: 5b:6c:0f:a9:67:a4:7b:fc:b7:da:15:5e:48:0e:f2:a0:4c:f7: dd:06:ab:af:2c:ca:df:07:6c:4e:12:be:ca:fa:5e:ff:9c:be: 42:84:58:a6:bc:e9:63:d6:fd:8d:6c:de:09:66:23:22:8a:ba: 5d:f9:59:95 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NzdBNjExMC8GA1UEBRMoQTNGMTAwNDlBMzkzQUY5RENBNDQ1OTY2NjQxNjZCODc0 MDJGODIyQTAeFw0yNTA5MDUwODIxMTBaFw0yNTA5MTIwODIxMTBaMBgxFjAUBgNV BAMTDTY4YmE5ZDc2LTA5ZGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXdu9nXkZCs8r/EHWEdbiNxQzXYHSTkAZkQlFEAHj9gge+2p8JftJzdLxVtelw VUq2PCtA3DeNXZ5Nf/cf2GP5AW/I56i14SJ0cf/8/JWgDsEpcEkQvV9OFBJFatuG JBRozdoMmT4dheKS0iHVoFkOFjVpoScEWf/uo3cXu0dQv76D9tfhZoUn2nOh/f3x JohN5Hm/LVbZapzy2VukFiVGPFprC9st4j5dkH8N1cZoQTRIfGbsMKvSi10+WoHq 4qGKYJeKVlkEjhRhB9J2NcSmfnrifnBQoGiVGVAawEWkrBhuAE2CCLkQ7y4Ut4KQ WoSc2CHltydQSc8/Sggddg6ZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9mVcZTfz RatCQOUaELw2zuJGnC0wHwYDVR0jBBgwFoAUo/EASaOTr53KRFlmZBZrh0Avgiow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3N0E2L0JERUU3Qjg4NUM3 RTExRjBBNUMzNjAzNkM0RjlBRTAyL29fRUFTYU9UcjUzS1JGbG1aQlpyaDBBdmdp by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvb19FQVNhT1RyNTNLUkZsbVpCWnJoMEF2Z2lvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3 N0E2L0JERUU3Qjg4NUM3RTExRjBBNUMzNjAzNkM0RjlBRTAyL29fRUFTYU9UcjUz S1JGbG1aQlpyaDBBdmdpby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGqydx3S+Opt4q4HujmOZRdafNzTfDDH4n97XH6z04Fg7rlur0xNLxcx NzX2z1f8XVHilCC6x7cP7RCk/gGqVwmt9tcn+FIdsxhJebWHXFPuqEpKv8nh5lhN TZZMXhUbCgMm+uUMhian/JiI6X0mG0yUC2lGopXlAMg5y3O6uE7tNVGmSwqYbXKF YtEd9EPPL16jOUOeo+UVOdGQh5Joz/WLBQfKLuV3836UTfQMhadtfLzEyNuKvL30 2imRT6p8R1ytMhXDZ1tsD6lnpHv8t9oVXkgO8qBM990Gq68syt8HbE4Svsr6Xv+c vkKEWKa86WPW/Y1s3glmIyKKul35WZU= -----END CERTIFICATE-----Generated at Sat Sep 6 21:12:15 2025 by rpki-client