$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft File: OvCdKMpIepMmYxpr6b2b26oY2nU.mft (raw, json) Hash identifier: MaqGE7+j4PjeOwq786TEURctiMZE00GYlJuLYWG6tCg= Subject key identifier: D2:2E:D3:7E:43:3B:8E:0D:0F:84:7F:46:A7:6A:41:34:0C:7F:B8:56 Authority key identifier: 3A:F0:9D:28:CA:48:7A:93:26:63:1A:6B:E9:BD:9B:DB:AA:18:DA:75 Certificate issuer: /CN=A91AB74D/serialNumber=3AF09D28CA487A9326631A6BE9BD9BDBAA18DA75 Certificate serial: 0645 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OvCdKMpIepMmYxpr6b2b26oY2nU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft Manifest number: 063A Signing time: Thu 04 Sep 2025 22:57:58 +0000 Manifest this update: Thu 04 Sep 2025 22:57:58 +0000 Manifest next update: Thu 11 Sep 2025 22:57:58 +0000 Files and hashes: 1: OvCdKMpIepMmYxpr6b2b26oY2nU.crl (hash: PiLfdILTEWzBNH0gDjPrxgumNjfo1BSwayFhFMiAhww=) 2: 1A704D8CADB511EBB5CFE734C4F9AE02.roa (hash: vcP/S0izUQbA7Z/0jbMqfJjGpHZIaNp2jddGsZhjHPI=) 3: 1B16F1A0ADB511EBB5CFE734C4F9AE02.roa (hash: EoEXlCI1GOehyvV1dOn2OebjZ7e0VJ5M5h2oFDhhyXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.crl rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OvCdKMpIepMmYxpr6b2b26oY2nU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 22:57:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1605 (0x645) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB74D, serialNumber=3AF09D28CA487A9326631A6BE9BD9BDBAA18DA75 Validity Not Before: Sep 4 22:57:58 2025 GMT Not After : Sep 11 22:57:58 2025 GMT Subject: CN=68ba1976-931b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:57:6e:6a:69:51:ae:a0:2f:fb:d6:06:09:28: b5:fd:14:b9:d7:74:3c:58:37:5d:37:b9:d3:e6:90: 46:a5:2a:d7:29:ed:ce:e3:80:39:a0:58:f8:cf:9d: 93:45:b3:0a:57:a1:1b:ee:8b:3d:50:5c:db:c7:01: 7e:b2:38:d1:64:64:67:24:56:17:a6:28:a3:58:1b: 42:07:e7:bb:7a:cf:ed:22:42:66:4f:0b:3d:a3:b8: af:76:e3:72:93:cc:20:e7:35:88:2b:b7:e4:90:8e: 4b:8c:24:73:ee:03:60:ab:25:75:c1:e4:fe:c7:39: 04:58:07:96:06:70:30:28:a6:17:02:98:2e:97:66: 72:bd:e4:bf:fd:43:71:a1:e6:a2:dd:b2:d1:69:0b: de:64:2c:6b:ad:4b:bc:94:95:aa:43:01:c2:d2:84: 7d:56:4c:63:1f:ad:96:b7:b3:03:fa:68:79:8f:3e: 15:15:b9:2e:18:8d:5c:44:20:64:d2:50:73:9f:e7: 8b:01:ab:89:8a:ba:7f:2f:1a:e3:cf:75:af:fc:fa: 8a:1b:a5:c3:22:7b:04:32:14:2f:fd:88:54:b7:54: 7c:4a:f1:86:fd:4d:03:3c:68:9d:d7:40:b8:19:ca: 6c:a0:ec:a1:ec:85:89:59:8d:3e:80:0c:76:46:db: c2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:2E:D3:7E:43:3B:8E:0D:0F:84:7F:46:A7:6A:41:34:0C:7F:B8:56 X509v3 Authority Key Identifier: keyid:3A:F0:9D:28:CA:48:7A:93:26:63:1A:6B:E9:BD:9B:DB:AA:18:DA:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OvCdKMpIepMmYxpr6b2b26oY2nU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:cb:ff:d5:a9:5f:f5:ca:5b:73:3d:b0:25:c6:6f:4e:59:ce: b0:b9:2c:f8:81:f3:78:81:94:60:d4:39:ce:6f:05:26:fd:0b: b4:9f:c6:32:f4:04:e6:6d:d6:73:22:b3:85:02:ad:9a:e4:96: 42:d1:f3:6a:40:ba:ea:41:48:e7:c4:5b:1c:c4:11:ae:41:fb: d8:9f:56:e0:e0:a9:6a:cd:97:d6:c4:d1:2d:26:df:f2:a7:34: d4:02:30:7c:8e:4f:51:f7:16:5b:cc:4e:af:a7:3e:4c:f7:b1: 9f:44:e2:3e:67:d9:b3:18:4b:fd:e2:e1:84:96:69:3b:1e:a3: 28:f8:52:c8:0b:09:4a:df:09:a1:f6:75:5f:c3:0a:dd:3e:cf: a7:b7:04:70:b8:63:5d:40:73:0e:c4:73:4e:71:81:bf:c7:82: 0a:e6:87:0c:1b:68:eb:ae:33:25:02:5c:10:5e:72:f7:6a:1c: fe:ac:5f:8d:56:af:9c:37:69:8e:92:08:92:4e:8f:a8:a9:4b: 12:33:19:2e:3c:b1:9a:38:5b:54:22:c7:22:52:5a:ef:d0:5b: 50:cf:70:76:aa:ee:7a:b4:af:10:42:79:50:1f:62:b0:30:4b: 91:aa:48:e8:d1:67:23:aa:c9:24:8d:8c:49:56:45:bb:7b:e7: 26:0b:39:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI3NEQxMTAvBgNVBAUTKDNBRjA5RDI4Q0E0ODdBOTMyNjYzMUE2QkU5QkQ5QkRC QUExOERBNzUwHhcNMjUwOTA0MjI1NzU4WhcNMjUwOTExMjI1NzU4WjAYMRYwFAYD VQQDEw02OGJhMTk3Ni05MzFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnFduamlRrqAv+9YGCSi1/RS513Q8WDddN7nT5pBGpSrXKe3O44A5oFj4z52T RbMKV6Eb7os9UFzbxwF+sjjRZGRnJFYXpiijWBtCB+e7es/tIkJmTws9o7ivduNy k8wg5zWIK7fkkI5LjCRz7gNgqyV1weT+xzkEWAeWBnAwKKYXApgul2ZyveS//UNx oeai3bLRaQveZCxrrUu8lJWqQwHC0oR9VkxjH62Wt7MD+mh5jz4VFbkuGI1cRCBk 0lBzn+eLAauJirp/Lxrjz3Wv/PqKG6XDInsEMhQv/YhUt1R8SvGG/U0DPGid10C4 GcpsoOyh7IWJWY0+gAx2RtvCSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNIu035D O44ND4R/RqdqQTQMf7hWMB8GA1UdIwQYMBaAFDrwnSjKSHqTJmMaa+m9m9uqGNp1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjc0RC9EMzU5NTY4Q0E4 REMxMUVCOTc5REE1MEVDNEY5QUUwMi9PdkNkS01wSWVwTW1ZeHByNmIyYjI2b1ky blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL092Q2RLTXBJZXBNbVl4cHI2YjJiMjZvWTJuVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Qjc0RC9EMzU5NTY4Q0E4REMxMUVCOTc5REE1MEVDNEY5QUUwMi9PdkNkS01wSWVw TW1ZeHByNmIyYjI2b1kyblUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRy//VqV/1yltzPbAlxm9OWc6wuSz4gfN4gZRg1DnObwUm/Qu0n8Yy 9ATmbdZzIrOFAq2a5JZC0fNqQLrqQUjnxFscxBGuQfvYn1bg4KlqzZfWxNEtJt/y pzTUAjB8jk9R9xZbzE6vpz5M97GfROI+Z9mzGEv94uGElmk7HqMo+FLICwlK3wmh 9nVfwwrdPs+ntwRwuGNdQHMOxHNOcYG/x4IK5ocMG2jrrjMlAlwQXnL3ahz+rF+N Vq+cN2mOkgiSTo+oqUsSMxkuPLGaOFtUIsciUlrv0FtQz3B2qu56tK8QQnlQH2Kw MEuRqkjo0WcjqskkjYxJVkW7e+cmCzkz -----END CERTIFICATE-----Generated at Sat Sep 6 21:01:23 2025 by rpki-client