$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.mft File: o7CyBZyzB2t17aMkt2UH08KVUoM.mft (raw, json) Hash identifier: zECO7N4TmnJD9RbJ594t87w0GJIdHBJdfjIb9R+XsqE= Subject key identifier: EF:84:C7:94:DB:B3:8B:D2:72:FA:AC:83:31:2F:04:E4:3C:ED:26:CB Authority key identifier: A3:B0:B2:05:9C:B3:07:6B:75:ED:A3:24:B7:65:07:D3:C2:95:52:83 Certificate issuer: /CN=A91C2AAE/serialNumber=A3B0B2059CB3076B75EDA324B76507D3C2955283 Certificate serial: 0A51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7CyBZyzB2t17aMkt2UH08KVUoM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.mft Manifest number: 0A4A Signing time: Sun 24 Aug 2025 19:42:53 +0000 Manifest this update: Sun 24 Aug 2025 19:42:53 +0000 Manifest next update: Sun 31 Aug 2025 19:42:53 +0000 Files and hashes: 1: o7CyBZyzB2t17aMkt2UH08KVUoM.crl (hash: ytK6z7hwOpff6Gf1eVyaQ7tUyy+aY2U45LDdtEaYtos=) 2: 11502BAC719111EAAC505266C4F9AE02.roa (hash: 88XJabgqaxcByEwqNaBfgRLdg8FbkNPUbRQuluXcClA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.crl rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7CyBZyzB2t17aMkt2UH08KVUoM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 19:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2641 (0xa51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2AAE, serialNumber=A3B0B2059CB3076B75EDA324B76507D3C2955283 Validity Not Before: Aug 24 19:42:53 2025 GMT Not After : Aug 31 19:42:53 2025 GMT Subject: CN=68ab6b3d-34b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4d:65:24:cb:2b:a8:03:cf:3c:de:6e:31:88: df:54:48:e4:21:18:65:ce:47:62:86:26:17:c8:a6: de:d9:f2:8e:07:d3:eb:4d:e1:94:7c:df:65:72:fe: 99:6c:19:94:38:ff:74:21:b3:ea:50:4d:76:d8:8f: 45:95:e6:32:7b:db:91:5b:81:8f:43:b4:75:0e:a8: b8:05:1c:24:a4:d1:c7:ae:b5:57:6a:14:a9:cc:42: f7:97:23:ce:19:9d:63:26:30:3f:2a:81:82:f6:5c: 2d:0a:60:7d:56:9a:6a:65:9f:e9:0f:7e:34:87:63: 09:9d:11:ad:3c:a4:bc:ea:8a:39:1c:28:a6:a7:00: fa:b6:6d:1d:98:a6:d8:cf:96:91:e5:d9:ad:21:e5: b1:ab:16:6c:80:bc:d4:ec:e7:30:c4:9a:7d:16:11: a0:da:ea:3f:5a:ea:ab:9c:53:d4:81:c0:4c:3a:a1: 8e:4d:7e:17:5d:5c:93:ba:fe:bd:33:10:a7:dd:b1: 32:94:05:7f:67:3d:10:f6:00:34:df:60:48:14:f1: 13:0f:15:ce:f3:19:5d:35:ff:35:30:31:7e:c4:a2: bf:5a:b9:ad:7b:51:58:ab:b1:b9:70:d2:51:d1:ba: 40:4a:14:d6:47:23:1a:3f:c1:87:f4:c6:5c:12:20: 5a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:84:C7:94:DB:B3:8B:D2:72:FA:AC:83:31:2F:04:E4:3C:ED:26:CB X509v3 Authority Key Identifier: keyid:A3:B0:B2:05:9C:B3:07:6B:75:ED:A3:24:B7:65:07:D3:C2:95:52:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7CyBZyzB2t17aMkt2UH08KVUoM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:84:40:8f:da:96:b3:c5:ea:13:77:73:c5:5b:89:e4:9e:ef: fd:bb:6b:48:c1:52:42:ab:5b:da:53:50:32:60:a8:13:97:3a: f1:e8:50:68:b1:8c:73:1f:79:cf:ec:ad:26:e5:09:c3:51:ce: 92:9a:03:da:5d:e5:a6:46:26:4b:06:ee:e5:16:84:bd:53:91: 12:43:2e:dc:e4:a1:08:b8:ef:e3:69:89:1b:4c:44:9a:1c:fd: 9c:5c:b7:01:ee:ee:e4:3b:d4:36:bb:5d:0e:ec:6e:40:74:af: 21:6a:9e:ca:16:0e:2d:38:ab:ca:05:b2:03:94:5c:0b:cd:ac: 41:88:bf:4c:43:a0:c4:e1:8f:b9:49:ff:c5:82:93:40:59:f9: 4b:ab:d7:46:23:7a:3d:a3:59:2c:56:ec:b1:d0:b4:0a:38:c6: a3:c9:94:a7:d8:c6:f9:f8:c6:53:30:f4:7c:4f:96:d4:16:80: 95:39:18:aa:29:d5:78:ed:74:3c:cb:dd:6b:8f:6d:02:5c:99: c1:c0:53:d0:bb:b9:e0:d8:0a:b7:09:9e:3d:45:b8:c8:83:41: 6d:88:70:3e:38:57:2d:2e:4d:2e:63:b2:b0:0e:73:c2:fa:62: f2:2f:11:48:2d:39:a8:b4:30:09:bd:29:85:15:53:1e:08:2c: a3:d0:e2:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJBQUUxMTAvBgNVBAUTKEEzQjBCMjA1OUNCMzA3NkI3NUVEQTMyNEI3NjUwN0Qz QzI5NTUyODMwHhcNMjUwODI0MTk0MjUzWhcNMjUwODMxMTk0MjUzWjAYMRYwFAYD VQQDEw02OGFiNmIzZC0zNGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnU1lJMsrqAPPPN5uMYjfVEjkIRhlzkdihiYXyKbe2fKOB9PrTeGUfN9lcv6Z bBmUOP90IbPqUE122I9FleYye9uRW4GPQ7R1Dqi4BRwkpNHHrrVXahSpzEL3lyPO GZ1jJjA/KoGC9lwtCmB9VppqZZ/pD340h2MJnRGtPKS86oo5HCimpwD6tm0dmKbY z5aR5dmtIeWxqxZsgLzU7OcwxJp9FhGg2uo/WuqrnFPUgcBMOqGOTX4XXVyTuv69 MxCn3bEylAV/Zz0Q9gA032BIFPETDxXO8xldNf81MDF+xKK/Wrmte1FYq7G5cNJR 0bpAShTWRyMaP8GH9MZcEiBaDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO+Ex5Tb s4vScvqsgzEvBOQ87SbLMB8GA1UdIwQYMBaAFKOwsgWcswdrde2jJLdlB9PClVKD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkFBRS81NzUzN0Q1RTcw NDUxMUVBOEE5NDFEMUFDNEY5QUUwMi9vN0N5Qlp5ekIydDE3YU1rdDJVSDA4S1ZV b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL283Q3lCWnl6QjJ0MTdhTWt0MlVIMDhLVlVvTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkFBRS81NzUzN0Q1RTcwNDUxMUVBOEE5NDFEMUFDNEY5QUUwMi9vN0N5Qlp5ekIy dDE3YU1rdDJVSDA4S1ZVb00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzhECP2pazxeoTd3PFW4nknu/9u2tIwVJCq1vaU1AyYKgTlzrx6FBo sYxzH3nP7K0m5QnDUc6SmgPaXeWmRiZLBu7lFoS9U5ESQy7c5KEIuO/jaYkbTESa HP2cXLcB7u7kO9Q2u10O7G5AdK8hap7KFg4tOKvKBbIDlFwLzaxBiL9MQ6DE4Y+5 Sf/FgpNAWflLq9dGI3o9o1ksVuyx0LQKOMajyZSn2Mb5+MZTMPR8T5bUFoCVORiq KdV47XQ8y91rj20CXJnBwFPQu7ng2Aq3CZ49RbjIg0FtiHA+OFctLk0uY7KwDnPC +mLyLxFILTmotDAJvSmFFVMeCCyj0OIW -----END CERTIFICATE-----Generated at Sun Aug 24 22:04:54 2025 by rpki-client