$ rpki-client -vvf rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft File: O6JVjKXxoDfZaW9WeugTZ8buNeY.mft (raw, json) Hash identifier: GRAPhjF7bRDgxUPfJ6XVL5gbIJKH5RUog4jLu24R6jM= Subject key identifier: 7C:89:83:2C:FE:52:8A:7D:6B:1D:FE:60:80:37:1D:C3:F3:7F:56:BE Authority key identifier: 3B:A2:55:8C:A5:F1:A0:37:D9:69:6F:56:7A:E8:13:67:C6:EE:35:E6 Certificate issuer: /CN=A91C022C/serialNumber=3BA2558CA5F1A037D9696F567AE81367C6EE35E6 Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6JVjKXxoDfZaW9WeugTZ8buNeY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft Manifest number: 77 Signing time: Fri 05 Sep 2025 07:16:54 +0000 Manifest this update: Fri 05 Sep 2025 07:16:53 +0000 Manifest next update: Fri 12 Sep 2025 07:16:53 +0000 Files and hashes: 1: O6JVjKXxoDfZaW9WeugTZ8buNeY.crl (hash: QqaXzQPzZ6T9nLWDZc6OOQ7DowDvyxtue1X1i/M+7qw=) 2: 372B21F6D4BA11EFA5BAA345C4F9AE02.roa (hash: 0VQHEL6AI7GrKoKG052X6QJW7qwnCtlNzYdHLuxNwGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.crl rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6JVjKXxoDfZaW9WeugTZ8buNeY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 07:16:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C022C, serialNumber=3BA2558CA5F1A037D9696F567AE81367C6EE35E6 Validity Not Before: Sep 5 07:16:53 2025 GMT Not After : Sep 12 07:16:53 2025 GMT Subject: CN=68ba8e66-9b9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:48:59:09:e4:36:1b:a7:c9:80:c5:30:ba:7b: 5f:8e:b9:96:55:50:21:39:22:df:95:c5:ab:17:d8: 16:55:6e:2e:98:ca:59:eb:e4:9b:00:4b:4e:13:9c: 4a:85:47:8f:04:6c:7d:d7:be:03:bf:67:99:76:fb: a5:8f:24:72:eb:8f:29:e2:af:41:86:33:40:77:5a: 94:fb:86:15:81:21:be:82:ae:68:86:8a:22:5a:d5: 75:75:47:4c:a5:eb:75:52:a5:d7:28:e9:ff:8c:ad: 48:39:57:54:9e:2f:83:8e:7f:5e:aa:94:f2:ba:34: 10:7d:18:08:54:bf:6d:0e:39:50:7b:09:15:a7:16: 4a:29:7c:17:0f:0f:0e:f9:96:e9:16:77:f1:04:22: 50:49:d5:61:58:8b:6a:ae:9d:97:68:a7:73:ee:62: 15:4d:b7:47:34:2e:c8:7d:6d:50:bc:98:b8:17:24: 5f:18:ba:34:f5:b8:15:73:70:17:ff:ca:bb:b3:89: 23:08:28:f1:cb:15:3d:f5:1d:7d:4f:d2:40:83:da: b7:a7:98:a6:34:a8:1a:a2:87:86:d4:f2:0e:96:c0: 14:5d:ed:5f:cd:29:23:f0:c9:fd:39:b6:71:66:dd: 27:04:b4:af:7d:ad:2c:e8:24:5f:6d:72:59:73:51: fb:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:89:83:2C:FE:52:8A:7D:6B:1D:FE:60:80:37:1D:C3:F3:7F:56:BE X509v3 Authority Key Identifier: keyid:3B:A2:55:8C:A5:F1:A0:37:D9:69:6F:56:7A:E8:13:67:C6:EE:35:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6JVjKXxoDfZaW9WeugTZ8buNeY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:c7:72:6f:91:9d:1b:67:75:56:eb:9a:f5:51:dd:26:84:1a: c5:ba:03:9a:ec:c8:09:1b:fb:88:b3:59:27:cc:0b:05:25:9a: c6:4c:29:d5:37:80:18:52:14:ad:df:63:5e:55:83:1e:08:42: 24:9c:16:75:99:d7:d0:23:64:f1:39:7e:6b:0e:b7:3c:85:6a: 41:ce:c0:f4:cf:f7:2b:a1:dd:b2:67:e1:af:ab:87:e9:38:cd: 5e:1f:ba:a2:90:39:c8:e0:8c:d5:3e:4c:9f:8d:5c:f8:70:32: 4a:69:01:9e:9f:93:6e:3c:06:11:5d:9c:87:f2:9f:94:81:db: ea:6b:50:4c:83:68:ad:fb:6c:bf:e3:5f:9d:76:72:c2:cd:df: f1:5c:ed:19:99:61:ed:28:77:e2:2c:bf:b5:4c:f8:7a:89:68: 50:65:8a:10:68:84:1f:10:a4:40:0f:17:67:dd:75:17:3d:b8: 2e:a5:14:a0:4e:d2:42:aa:4f:30:d9:4e:a1:97:52:42:0a:13: e7:44:37:14:01:cd:cb:01:ca:07:3c:62:85:ad:cd:2a:e5:fb: e8:71:88:fe:85:f8:6c:3a:b9:8e:64:be:66:fa:9a:c7:ad:9b: 83:12:66:95:c0:be:7e:db:c8:3b:4c:f8:a4:e9:bb:d7:05:1e: f1:cb:83:17 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MDIyQzExMC8GA1UEBRMoM0JBMjU1OENBNUYxQTAzN0Q5Njk2RjU2N0FFODEzNjdD NkVFMzVFNjAeFw0yNTA5MDUwNzE2NTNaFw0yNTA5MTIwNzE2NTNaMBgxFjAUBgNV BAMTDTY4YmE4ZTY2LTliOWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5SFkJ5DYbp8mAxTC6e1+OuZZVUCE5It+VxasX2BZVbi6Yylnr5JsAS04TnEqF R48EbH3XvgO/Z5l2+6WPJHLrjynir0GGM0B3WpT7hhWBIb6CrmiGiiJa1XV1R0yl 63VSpdco6f+MrUg5V1SeL4OOf16qlPK6NBB9GAhUv20OOVB7CRWnFkopfBcPDw75 lukWd/EEIlBJ1WFYi2qunZdop3PuYhVNt0c0Lsh9bVC8mLgXJF8YujT1uBVzcBf/ yruziSMIKPHLFT31HX1P0kCD2renmKY0qBqih4bU8g6WwBRd7V/NKSPwyf05tnFm 3ScEtK99rSzoJF9tcllzUfu9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfImDLP5S in1rHf5ggDcdw/N/Vr4wHwYDVR0jBBgwFoAUO6JVjKXxoDfZaW9WeugTZ8buNeYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMwMjJDL0IxQzE4MjMwRDRC OTExRUY5RkE4RTI0RkM0RjlBRTAyL082SlZqS1h4b0RmWmFXOVdldWdUWjhidU5l WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTzZKVmpLWHhvRGZaYVc5V2V1Z1RaOGJ1TmVZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMw MjJDL0IxQzE4MjMwRDRCOTExRUY5RkE4RTI0RkM0RjlBRTAyL082SlZqS1h4b0Rm WmFXOVdldWdUWjhidU5lWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI/Hcm+RnRtndVbrmvVR3SaEGsW6A5rsyAkb+4izWSfMCwUlmsZMKdU3 gBhSFK3fY15Vgx4IQiScFnWZ19AjZPE5fmsOtzyFakHOwPTP9yuh3bJn4a+rh+k4 zV4fuqKQOcjgjNU+TJ+NXPhwMkppAZ6fk248BhFdnIfyn5SB2+prUEyDaK37bL/j X512csLN3/Fc7RmZYe0od+Isv7VM+HqJaFBlihBohB8QpEAPF2fddRc9uC6lFKBO 0kKqTzDZTqGXUkIKE+dENxQBzcsBygc8YoWtzSrl++hxiP6F+Gw6uY5kvmb6mset m4MSZpXAvn7byDtM+KTpu9cFHvHLgxc= -----END CERTIFICATE-----Generated at Sat Sep 6 21:07:26 2025 by rpki-client