$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft File: OddGjPgMUFXp0EybT60xF1wU1l8.mft (raw, json) Hash identifier: EEaWUKzw93ye1yIIlqDk1YdZQbdKLsBvAeYszyixJ5M= Subject key identifier: 11:5E:9B:87:E4:9F:FF:28:9D:99:59:A3:C9:50:1B:41:F1:7F:FF:1A Authority key identifier: 39:D7:46:8C:F8:0C:50:55:E9:D0:4C:9B:4F:AD:31:17:5C:14:D6:5F Certificate issuer: /CN=A91AD643/serialNumber=39D7468CF80C5055E9D04C9B4FAD31175C14D65F Certificate serial: 0709 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft Manifest number: 06FD Signing time: Sat 06 Sep 2025 22:13:12 +0000 Manifest this update: Sat 06 Sep 2025 22:13:12 +0000 Manifest next update: Sat 13 Sep 2025 22:13:12 +0000 Files and hashes: 1: OddGjPgMUFXp0EybT60xF1wU1l8.crl (hash: MvLAYOhNDxMb2t5T3wwYFUBlpRjGdP3G9gLkt1fRJ8c=) 2: 865F2F80EE8911EBB390AC76C4F9AE02.roa (hash: 0ULrTT5sEmnlV5jXg9GCbo9G2IRIBRTqvgY01zsRTW8=) 3: 81E9653E5B8A11EB857A3F77C4F9AE02.roa (hash: hFkz2Rxz8bjHa9W5ewxpkxAw84TOeg9mnyL9BGUNw+E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.crl rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 22:13:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1801 (0x709) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD643, serialNumber=39D7468CF80C5055E9D04C9B4FAD31175C14D65F Validity Not Before: Sep 6 22:13:12 2025 GMT Not After : Sep 13 22:13:12 2025 GMT Subject: CN=68bcb1f8-cef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6a:c0:20:78:0b:d9:dc:dc:61:aa:44:bc:21: 92:7f:4d:4e:c8:88:8c:cb:d6:2c:7f:e2:c2:57:14: 01:1e:36:2c:e2:5b:53:d3:25:8d:10:24:26:c5:72: 50:d6:88:2e:71:93:67:5c:6b:31:60:7e:ba:b8:97: 7f:66:dc:16:6d:5a:89:80:b6:8a:31:5c:c3:2f:d3: 07:88:0e:fd:4a:c5:2e:1f:31:2f:6a:60:a6:8c:4a: 57:11:e5:a9:d0:03:db:4a:74:25:f2:bf:f9:3d:52: 31:be:5c:f7:ea:5b:f2:ca:ab:5b:ed:03:4c:35:ce: eb:0b:0d:fb:ac:dc:23:7c:6e:e5:a8:dc:a2:87:99: 57:fb:60:ef:52:3e:37:09:be:b9:eb:23:96:f0:e6: 0b:e2:8c:23:6e:de:ec:16:c9:94:5d:1f:3a:33:b9: 8c:75:0a:3d:b5:21:ac:4b:c6:7a:ea:b9:50:ee:33: ca:2d:ef:97:29:ff:ce:81:70:89:69:6a:c0:40:ba: b1:4d:cc:c8:19:c9:15:a7:7f:13:1d:1b:70:54:df: ae:08:b0:d9:a6:20:8c:a6:a1:a6:b7:3f:6a:67:84: 7d:93:bf:ee:be:4f:62:c5:15:a1:8b:ef:7e:6b:30: 92:dc:6a:2d:5c:29:53:82:5f:47:b5:df:c8:48:6b: 16:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:5E:9B:87:E4:9F:FF:28:9D:99:59:A3:C9:50:1B:41:F1:7F:FF:1A X509v3 Authority Key Identifier: keyid:39:D7:46:8C:F8:0C:50:55:E9:D0:4C:9B:4F:AD:31:17:5C:14:D6:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:d5:da:02:77:7e:48:92:f9:c7:93:b6:34:cf:3c:68:4b:65: 6a:07:a9:e1:6c:36:c6:5d:57:79:55:53:39:57:5f:6a:7a:47: bf:84:e5:8c:76:62:d5:e9:59:f1:41:03:39:f9:c8:e4:20:7e: 62:b4:7f:22:8e:2e:3b:0f:9a:aa:d2:19:4e:42:bf:f6:53:47: 31:a9:7e:c7:09:40:70:cf:cb:87:83:e2:7f:73:0c:57:83:47: 83:0d:9e:16:33:15:5b:60:06:ea:69:69:bc:eb:ef:05:c2:7b: 05:a0:f4:b6:b8:4f:3b:24:a0:ae:8f:3d:dd:58:02:63:cb:5b: d4:05:ed:ab:79:a0:00:68:6b:9c:0f:09:bf:ba:cc:70:72:f3: 07:b4:4e:82:8c:85:4a:bf:43:7c:2b:43:4b:62:9b:b6:cc:64: 0d:a9:10:e6:3d:7e:49:a9:03:1b:cd:b9:60:ac:f1:e4:e0:5c: a3:17:02:75:29:f9:0b:b8:74:16:5c:e5:50:b6:05:87:14:65: 13:32:b0:47:3a:7e:fc:95:4b:3d:c3:a3:d9:6d:b4:24:7a:71: d2:01:4a:b7:a8:7f:02:66:0a:4c:bb:38:54:aa:66:77:2f:47: 8c:e2:97:10:6b:de:f9:47:db:ef:03:b8:f3:80:c2:f8:19:02: 70:77:e3:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ2NDMxMTAvBgNVBAUTKDM5RDc0NjhDRjgwQzUwNTVFOUQwNEM5QjRGQUQzMTE3 NUMxNEQ2NUYwHhcNMjUwOTA2MjIxMzEyWhcNMjUwOTEzMjIxMzEyWjAYMRYwFAYD VQQDEw02OGJjYjFmOC1jZWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuGrAIHgL2dzcYapEvCGSf01OyIiMy9Ysf+LCVxQBHjYs4ltT0yWNECQmxXJQ 1ogucZNnXGsxYH66uJd/ZtwWbVqJgLaKMVzDL9MHiA79SsUuHzEvamCmjEpXEeWp 0APbSnQl8r/5PVIxvlz36lvyyqtb7QNMNc7rCw37rNwjfG7lqNyih5lX+2DvUj43 Cb656yOW8OYL4owjbt7sFsmUXR86M7mMdQo9tSGsS8Z66rlQ7jPKLe+XKf/OgXCJ aWrAQLqxTczIGckVp38THRtwVN+uCLDZpiCMpqGmtz9qZ4R9k7/uvk9ixRWhi+9+ azCS3GotXClTgl9Htd/ISGsWwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBFem4fk n/8onZlZo8lQG0Hxf/8aMB8GA1UdIwQYMBaAFDnXRoz4DFBV6dBMm0+tMRdcFNZf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDY0My9FRkJFNkVCMjVC ODgxMUVCQkQ1RjMwNzZDNEY5QUUwMi9PZGRHalBnTVVGWHAwRXliVDYweEYxd1Ux bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09kZEdqUGdNVUZYcDBFeWJUNjB4RjF3VTFsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDY0My9FRkJFNkVCMjVCODgxMUVCQkQ1RjMwNzZDNEY5QUUwMi9PZGRHalBnTVVG WHAwRXliVDYweEYxd1UxbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAn1doCd35IkvnHk7Y0zzxoS2VqB6nhbDbGXVd5VVM5V19qeke/hOWM dmLV6VnxQQM5+cjkIH5itH8iji47D5qq0hlOQr/2U0cxqX7HCUBwz8uHg+J/cwxX g0eDDZ4WMxVbYAbqaWm86+8FwnsFoPS2uE87JKCujz3dWAJjy1vUBe2reaAAaGuc Dwm/usxwcvMHtE6CjIVKv0N8K0NLYpu2zGQNqRDmPX5JqQMbzblgrPHk4FyjFwJ1 KfkLuHQWXOVQtgWHFGUTMrBHOn78lUs9w6PZbbQkenHSAUq3qH8CZgpMuzhUqmZ3 L0eM4pcQa975R9vvA7jzgML4GQJwd+O/ -----END CERTIFICATE-----Generated at Mon Sep 8 02:20:14 2025 by rpki-client