$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft File: OYVAYLL1jUyRnGTapLfrHwzfaDA.mft (raw, json) Hash identifier: EQAdwjnUvASK6W4elBJ9rZEl1fAPseuHGDSB5vM+c5o= Subject key identifier: 7F:AD:68:04:A7:45:34:0E:9C:30:C5:75:32:12:BF:1A:9D:B2:90:5B Authority key identifier: 39:85:40:60:B2:F5:8D:4C:91:9C:64:DA:A4:B7:EB:1F:0C:DF:68:30 Certificate issuer: /CN=A91A1A51/serialNumber=39854060B2F58D4C919C64DAA4B7EB1F0CDF6830 Certificate serial: 0382 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYVAYLL1jUyRnGTapLfrHwzfaDA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft Manifest number: 0382 Signing time: Fri 19 Sep 2025 01:13:41 +0000 Manifest this update: Fri 19 Sep 2025 01:13:41 +0000 Manifest next update: Fri 26 Sep 2025 01:13:41 +0000 Files and hashes: 1: OYVAYLL1jUyRnGTapLfrHwzfaDA.crl (hash: OmqxdTqHnOK2a6VdqOMW2PA0iP5JnBGHUa8l0r5Ccbs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.crl rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYVAYLL1jUyRnGTapLfrHwzfaDA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 01:13:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 898 (0x382) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1A51, serialNumber=39854060B2F58D4C919C64DAA4B7EB1F0CDF6830 Validity Not Before: Sep 19 01:13:41 2025 GMT Not After : Sep 26 01:13:41 2025 GMT Subject: CN=68ccae45-17bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:38:29:79:4f:cd:55:b0:81:94:95:a0:1c:ec: 5c:4a:77:e6:4e:57:13:d9:86:66:9d:2b:39:22:63: d8:c6:27:08:03:90:d2:72:ea:6b:36:96:d7:28:10: e4:28:90:18:a3:5c:69:f7:79:7a:47:c1:82:7d:13: 23:a1:a6:6c:08:83:1f:95:ef:09:34:b7:5b:10:da: 62:ea:bc:40:f2:3f:af:c1:87:23:49:0d:63:bb:5c: 32:00:82:ae:65:73:fd:d0:fc:71:0a:ca:1e:9f:05: 51:ac:61:55:67:55:b6:dc:86:06:7c:86:8f:e7:85: fa:9e:e4:77:a3:db:9d:fc:20:19:94:c1:cc:a8:2d: b5:a7:bd:2f:c0:2a:23:f5:bd:d8:2c:23:3d:65:e5: 71:8a:51:e1:3f:77:e4:46:52:3e:3f:fe:ea:cd:61: b4:15:de:37:c8:d1:54:2c:f1:02:de:96:09:b3:85: 23:e6:62:c9:f2:59:18:6a:9c:0c:b8:9b:12:30:0b: b1:b2:c1:d0:86:49:75:83:b5:dd:f5:15:d9:71:2a: 21:05:4c:11:7a:4f:df:da:0d:8b:16:af:38:49:00: 80:b2:77:74:73:aa:92:49:a9:33:b6:ac:71:73:ad: 23:f5:c4:73:61:91:c7:21:0b:c9:f1:d7:6c:59:db: 0b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:AD:68:04:A7:45:34:0E:9C:30:C5:75:32:12:BF:1A:9D:B2:90:5B X509v3 Authority Key Identifier: keyid:39:85:40:60:B2:F5:8D:4C:91:9C:64:DA:A4:B7:EB:1F:0C:DF:68:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYVAYLL1jUyRnGTapLfrHwzfaDA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:16:08:f3:4c:32:50:0f:8c:bf:12:94:b8:30:5c:61:d5:95: 38:c1:ad:74:ce:07:82:1f:64:51:b8:43:1a:3a:7a:4b:53:6e: 17:cd:3d:69:11:97:33:d9:49:55:16:6f:a3:24:78:71:89:42: 5d:11:4b:ba:e5:9c:0e:25:67:e2:0a:ff:62:b7:c6:5f:98:1a: 86:a3:ba:66:c5:e9:c8:9c:04:76:2f:19:a9:e4:45:28:c5:fa: 7c:f0:91:f0:15:db:ef:42:64:ca:ad:d1:3a:6c:69:ab:33:1e: 39:d1:77:b1:a5:5d:30:b5:a3:6e:fe:89:8e:8f:1c:2b:53:c2: 9a:08:ed:ec:4e:ee:31:51:b6:69:33:49:79:ff:5d:ad:b3:a1: 54:86:b3:cd:e8:64:69:82:5d:f6:bb:b9:02:27:b2:f2:34:1e: 7f:d8:11:a9:64:6a:19:b7:f5:08:13:ed:06:a5:82:88:a9:0d: 94:d3:a2:ee:1e:df:c6:c1:0a:dd:c3:e0:f2:11:78:37:ec:e1: 52:c3:33:05:a5:10:bf:a0:74:f4:41:c3:2b:f8:7b:98:47:76: 93:99:4e:52:61:a7:40:eb:3c:75:c9:1e:07:3e:ce:3b:df:25: 1e:98:50:f0:24:3e:09:47:71:13:93:f9:58:14:73:b9:c1:76: 12:08:f9:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFBNTExMTAvBgNVBAUTKDM5ODU0MDYwQjJGNThENEM5MTlDNjREQUE0QjdFQjFG MENERjY4MzAwHhcNMjUwOTE5MDExMzQxWhcNMjUwOTI2MDExMzQxWjAYMRYwFAYD VQQDEw02OGNjYWU0NS0xN2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2zgpeU/NVbCBlJWgHOxcSnfmTlcT2YZmnSs5ImPYxicIA5DScuprNpbXKBDk KJAYo1xp93l6R8GCfRMjoaZsCIMfle8JNLdbENpi6rxA8j+vwYcjSQ1ju1wyAIKu ZXP90PxxCsoenwVRrGFVZ1W23IYGfIaP54X6nuR3o9ud/CAZlMHMqC21p70vwCoj 9b3YLCM9ZeVxilHhP3fkRlI+P/7qzWG0Fd43yNFULPEC3pYJs4Uj5mLJ8lkYapwM uJsSMAuxssHQhkl1g7Xd9RXZcSohBUwRek/f2g2LFq84SQCAsnd0c6qSSakztqxx c60j9cRzYZHHIQvJ8ddsWdsL0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH+taASn RTQOnDDFdTISvxqdspBbMB8GA1UdIwQYMBaAFDmFQGCy9Y1MkZxk2qS36x8M32gw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUE1MS9BRjY5MEY2MEI5 MjAxMUVDOTkxNTY3NEZDNEY5QUUwMi9PWVZBWUxMMWpVeVJuR1RhcExmckh3emZh REEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09ZVkFZTEwxalV5Um5HVGFwTGZySHd6ZmFEQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUE1MS9BRjY5MEY2MEI5MjAxMUVDOTkxNTY3NEZDNEY5QUUwMi9PWVZBWUxMMWpV eVJuR1RhcExmckh3emZhREEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKFgjzTDJQD4y/EpS4MFxh1ZU4wa10zgeCH2RRuEMaOnpLU24XzT1p EZcz2UlVFm+jJHhxiUJdEUu65ZwOJWfiCv9it8ZfmBqGo7pmxenInAR2Lxmp5EUo xfp88JHwFdvvQmTKrdE6bGmrMx450XexpV0wtaNu/omOjxwrU8KaCO3sTu4xUbZp M0l5/12ts6FUhrPN6GRpgl32u7kCJ7LyNB5/2BGpZGoZt/UIE+0GpYKIqQ2U06Lu Ht/GwQrdw+DyEXg37OFSwzMFpRC/oHT0QcMr+HuYR3aTmU5SYadA6zx1yR4HPs47 3yUemFDwJD4JR3ETk/lYFHO5wXYSCPm1 -----END CERTIFICATE-----Generated at Fri Sep 19 08:48:37 2025 by rpki-client