$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.mft File: o0K4Har3eauhbTK2-wuDD4ULT_A.mft (raw, json) Hash identifier: WEk0Cy+xE7n5Z1KAcrcKYj/XO3rEgYIssxY3UhGBDQI= Subject key identifier: 0D:58:AA:1A:E6:04:DD:4B:75:7F:81:33:61:B8:25:47:4A:65:8B:19 Authority key identifier: A3:42:B8:1D:AA:F7:79:AB:A1:6D:32:B6:FB:0B:83:0F:85:0B:4F:F0 Certificate issuer: /CN=A91A1205/serialNumber=A342B81DAAF779ABA16D32B6FB0B830F850B4FF0 Certificate serial: 0C05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0K4Har3eauhbTK2-wuDD4ULT_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.mft Manifest number: 0BFF Signing time: Sun 24 Aug 2025 18:44:12 +0000 Manifest this update: Sun 24 Aug 2025 18:44:11 +0000 Manifest next update: Sun 31 Aug 2025 18:44:11 +0000 Files and hashes: 1: o0K4Har3eauhbTK2-wuDD4ULT_A.crl (hash: 8wrD0FYsaQOymvH7G/y9WsbhUc5p5DiVsapGt/E9peQ=) 2: 3D992D3A1A8411EAA026D229C4F9AE02.roa (hash: j0DWhsEHoal3Q4LsD1CyE+J4i6jhKjEMjW9pXFwYCvw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.crl rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0K4Har3eauhbTK2-wuDD4ULT_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 18:44:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3077 (0xc05) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1205, serialNumber=A342B81DAAF779ABA16D32B6FB0B830F850B4FF0 Validity Not Before: Aug 24 18:44:11 2025 GMT Not After : Aug 31 18:44:11 2025 GMT Subject: CN=68ab5d7b-0bd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:23:da:98:f6:25:23:61:15:92:46:1d:1e:88: 5c:fd:7a:b1:5c:d2:d8:c4:1c:2b:5f:99:12:3b:3e: cf:55:2a:5e:bf:88:83:81:8f:10:74:2d:7f:d2:84: d9:f3:58:a7:cc:97:74:89:f6:a8:31:63:79:93:f7: 06:d2:6b:45:9a:2e:3f:12:72:cd:78:2c:a6:8b:a5: 1c:c8:35:04:34:8e:fb:cb:3b:fe:47:d7:3f:16:39: 5c:a0:61:de:76:88:8c:43:1d:8c:1a:81:08:96:9a: 00:e0:fa:05:e0:76:f3:fa:4e:b4:b6:fb:f5:9c:b1: 7b:fd:1b:f6:8a:c6:a5:a2:df:9a:5c:7b:2e:99:2c: 1a:ef:16:fa:08:fd:03:66:b8:7e:f7:80:01:b3:54: 75:82:f1:2b:5a:8e:31:6e:f1:ad:bc:3a:6c:84:7c: 17:a2:83:cc:4a:a8:06:c0:b7:94:3c:cc:5a:e8:9b: 63:63:cd:51:a8:74:cc:b2:38:35:1e:a5:7b:2a:9f: f3:af:ed:da:1a:41:a6:44:68:75:d0:46:c6:1f:bd: 2a:a3:41:78:83:66:0c:48:98:06:e9:dc:0c:cd:37: bb:01:74:fa:8b:a1:43:4a:28:ce:6e:a4:89:8d:86: 0e:a6:31:60:dc:49:5c:3a:38:17:0c:30:9c:91:ad: 6f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:58:AA:1A:E6:04:DD:4B:75:7F:81:33:61:B8:25:47:4A:65:8B:19 X509v3 Authority Key Identifier: keyid:A3:42:B8:1D:AA:F7:79:AB:A1:6D:32:B6:FB:0B:83:0F:85:0B:4F:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0K4Har3eauhbTK2-wuDD4ULT_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:0d:ee:85:d0:d4:a1:83:ea:cd:44:ea:95:33:89:22:9d:9a: 09:4e:da:6f:13:70:d8:ac:f4:66:78:8d:91:7b:32:dd:ef:01: b7:be:a7:db:aa:1f:8f:f2:45:b0:47:70:98:b6:a6:07:a2:3f: 89:2b:d6:97:51:c5:89:e4:5d:8b:ef:3f:fe:0c:92:94:aa:11: 75:ca:e6:93:30:d5:29:c3:40:2d:d3:0d:02:7a:57:a4:78:0b: 51:e2:0c:01:99:a1:e7:c9:19:64:88:46:eb:60:8e:0a:57:5f: 93:42:d7:96:61:5d:88:46:4a:4b:99:80:50:39:af:6c:5f:3d: c0:cd:f3:60:bd:3a:0f:3d:6e:8f:ff:09:c6:4b:01:1b:26:71: d3:e7:48:d3:45:be:a4:a2:5c:09:e3:51:94:6b:c7:10:b5:a9: 31:27:20:a3:4f:5e:8a:ad:c5:fe:48:d6:52:bf:b5:68:de:76: a7:b9:21:b1:74:02:ba:73:68:8f:35:da:f1:6a:f6:e7:5c:a0: ba:69:b1:a5:cf:9c:8f:1f:3e:91:9b:84:72:48:b3:57:a9:b9: 10:47:34:ed:87:93:a6:a3:38:f3:08:db:35:c4:fa:26:42:18: 77:31:93:5b:4a:18:89:c3:9b:fc:e9:8c:65:55:ae:35:4f:d8: ee:5d:c9:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTEyMDUxMTAvBgNVBAUTKEEzNDJCODFEQUFGNzc5QUJBMTZEMzJCNkZCMEI4MzBG ODUwQjRGRjAwHhcNMjUwODI0MTg0NDExWhcNMjUwODMxMTg0NDExWjAYMRYwFAYD VQQDEw02OGFiNWQ3Yi0wYmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsSPamPYlI2EVkkYdHohc/XqxXNLYxBwrX5kSOz7PVSpev4iDgY8QdC1/0oTZ 81inzJd0ifaoMWN5k/cG0mtFmi4/EnLNeCymi6UcyDUENI77yzv+R9c/FjlcoGHe doiMQx2MGoEIlpoA4PoF4Hbz+k60tvv1nLF7/Rv2isalot+aXHsumSwa7xb6CP0D Zrh+94ABs1R1gvErWo4xbvGtvDpshHwXooPMSqgGwLeUPMxa6JtjY81RqHTMsjg1 HqV7Kp/zr+3aGkGmRGh10EbGH70qo0F4g2YMSJgG6dwMzTe7AXT6i6FDSijObqSJ jYYOpjFg3ElcOjgXDDCcka1vGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA1Yqhrm BN1LdX+BM2G4JUdKZYsZMB8GA1UdIwQYMBaAFKNCuB2q93mroW0ytvsLgw+FC0/w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTIwNS83RDIzMUUwNDFB NTUxMUVBODgwNDIyMTFDNEY5QUUwMi9vMEs0SGFyM2VhdWhiVEsyLXd1REQ0VUxU X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28wSzRIYXIzZWF1aGJUSzItd3VERDRVTFRfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTIwNS83RDIzMUUwNDFBNTUxMUVBODgwNDIyMTFDNEY5QUUwMi9vMEs0SGFyM2Vh dWhiVEsyLXd1REQ0VUxUX0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjDe6F0NShg+rNROqVM4kinZoJTtpvE3DYrPRmeI2RezLd7wG3vqfb qh+P8kWwR3CYtqYHoj+JK9aXUcWJ5F2L7z/+DJKUqhF1yuaTMNUpw0At0w0Celek eAtR4gwBmaHnyRlkiEbrYI4KV1+TQteWYV2IRkpLmYBQOa9sXz3AzfNgvToPPW6P /wnGSwEbJnHT50jTRb6kolwJ41GUa8cQtakxJyCjT16KrcX+SNZSv7Vo3nanuSGx dAK6c2iPNdrxavbnXKC6abGlz5yPHz6Rm4RySLNXqbkQRzTth5OmozjzCNs1xPom Qhh3MZNbShiJw5v86YxlVa41T9juXclv -----END CERTIFICATE-----Generated at Sun Aug 24 21:54:11 2025 by rpki-client