$ rpki-client -vvf rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.mft File: OochbBWSc79Rk0f8H-5wYZXMKuY.mft (raw, json) Hash identifier: o2NOKojksRsSogtjq6xLpqi6iOCV8oReJHmZKF/Kego= Subject key identifier: 30:A4:F4:E2:E6:FA:36:B4:19:77:9E:F1:57:ED:27:1E:5E:DC:4C:EF Authority key identifier: 3A:87:21:6C:15:92:73:BF:51:93:47:FC:1F:EE:70:61:95:CC:2A:E6 Certificate issuer: /CN=A91C661C/serialNumber=3A87216C159273BF519347FC1FEE706195CC2AE6 Certificate serial: 06CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OochbBWSc79Rk0f8H-5wYZXMKuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.mft Manifest number: 06C3 Signing time: Sat 06 Sep 2025 22:23:30 +0000 Manifest this update: Sat 06 Sep 2025 22:23:29 +0000 Manifest next update: Sat 13 Sep 2025 22:23:29 +0000 Files and hashes: 1: OochbBWSc79Rk0f8H-5wYZXMKuY.crl (hash: eSLd0xAkfqCNrV2J4hbP5ZnFEtj6DzIdoN5lWhEnSg0=) 2: AABC79100EC411EF858B5255C4F9AE02.roa (hash: xd+kZGDM6lidBL503M6KRPrbZpmB555muvLLsOdJRog=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.crl rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OochbBWSc79Rk0f8H-5wYZXMKuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 22:23:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1742 (0x6ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C661C, serialNumber=3A87216C159273BF519347FC1FEE706195CC2AE6 Validity Not Before: Sep 6 22:23:29 2025 GMT Not After : Sep 13 22:23:29 2025 GMT Subject: CN=68bcb461-3e5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d4:32:35:22:55:9a:1f:d9:3b:d5:37:d2:63: 19:42:60:98:62:12:8b:b3:a4:18:03:10:a7:8f:ff: 10:99:be:37:33:eb:ee:d4:d8:8d:17:41:8b:7e:71: 86:d8:9e:a7:28:6f:58:58:b1:f2:e8:a3:2b:d1:0c: 07:10:df:7f:bb:4d:e6:ed:0b:99:32:41:80:84:37: 34:fd:9f:49:46:11:81:7a:fd:01:3e:01:37:82:8d: 51:1f:aa:8e:63:91:10:cf:f7:6e:1f:bb:a0:f2:cf: e1:88:dd:fe:9d:37:3d:25:7c:ed:60:55:43:d3:8c: 55:a1:49:10:83:62:84:d3:ae:3a:0a:9c:32:63:65: aa:e5:0a:00:d3:ec:8d:1d:f5:8f:75:15:2c:dd:52: 52:d9:e8:40:6c:76:3c:62:b0:f3:59:91:63:ba:36: 13:58:d1:18:08:49:bd:6c:22:0a:cb:69:31:86:62: d1:f0:e0:08:b3:02:61:d9:0a:c0:df:dc:f9:4c:ff: 96:5a:66:31:f9:8c:ac:b1:5e:f7:d3:0b:fe:3d:c1: 33:cb:33:46:f1:85:58:36:cd:0f:fc:5c:66:67:a7: 1e:25:a3:63:23:76:ad:07:77:11:82:2e:d6:87:cd: 1c:67:bb:32:cc:58:af:32:1f:84:13:71:1d:fa:52: 6d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:A4:F4:E2:E6:FA:36:B4:19:77:9E:F1:57:ED:27:1E:5E:DC:4C:EF X509v3 Authority Key Identifier: keyid:3A:87:21:6C:15:92:73:BF:51:93:47:FC:1F:EE:70:61:95:CC:2A:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OochbBWSc79Rk0f8H-5wYZXMKuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:e2:f8:81:0f:f8:d1:f1:ad:52:24:4f:10:b0:90:e4:28:76: 15:13:c8:bc:2e:3d:14:ed:08:b1:58:ee:6d:f9:a9:07:94:d4: 4b:6a:11:00:fd:f9:02:90:dd:3f:00:bb:ea:8a:55:b2:6b:1f: 1f:17:85:06:7c:93:df:e3:21:58:e5:c5:cd:b4:2e:f5:ad:21: 5c:85:4c:07:73:db:c3:de:d6:1b:db:14:1a:b0:b0:5c:1a:85: e6:d8:a0:48:d6:4c:74:17:a0:89:36:83:2e:44:4a:c4:a8:97: 4a:d7:07:ba:8c:b3:2c:34:f3:08:44:56:d2:1c:e4:2a:f2:b4: 01:6e:58:83:fa:79:c6:33:75:b6:d8:a9:3d:da:3b:b9:d6:b7: 57:88:ef:85:62:5f:a3:e0:ab:f4:82:95:02:c6:2d:85:8c:43: 1e:f5:6a:1d:bc:15:91:2c:e7:77:94:ac:81:93:cd:76:e4:86: 0f:5b:6f:d9:2f:c5:ad:f0:bc:df:0b:51:27:1d:4a:94:d1:08: 2b:d0:dd:ed:dd:45:68:01:d3:96:77:11:9c:3c:76:b4:08:8b: 2f:32:10:e7:ac:30:99:b7:00:80:64:51:af:1a:14:6d:cb:6f: 10:a6:06:b9:52:d9:33:b7:28:57:fb:d4:60:72:0b:a1:39:b5: f7:5c:80:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY2MUMxMTAvBgNVBAUTKDNBODcyMTZDMTU5MjczQkY1MTkzNDdGQzFGRUU3MDYx OTVDQzJBRTYwHhcNMjUwOTA2MjIyMzI5WhcNMjUwOTEzMjIyMzI5WjAYMRYwFAYD VQQDEw02OGJjYjQ2MS0zZTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2NQyNSJVmh/ZO9U30mMZQmCYYhKLs6QYAxCnj/8Qmb43M+vu1NiNF0GLfnGG 2J6nKG9YWLHy6KMr0QwHEN9/u03m7QuZMkGAhDc0/Z9JRhGBev0BPgE3go1RH6qO Y5EQz/duH7ug8s/hiN3+nTc9JXztYFVD04xVoUkQg2KE0646CpwyY2Wq5QoA0+yN HfWPdRUs3VJS2ehAbHY8YrDzWZFjujYTWNEYCEm9bCIKy2kxhmLR8OAIswJh2QrA 39z5TP+WWmYx+YyssV730wv+PcEzyzNG8YVYNs0P/FxmZ6ceJaNjI3atB3cRgi7W h80cZ7syzFivMh+EE3Ed+lJt2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDCk9OLm +ja0GXee8VftJx5e3EzvMB8GA1UdIwQYMBaAFDqHIWwVknO/UZNH/B/ucGGVzCrm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjYxQy9GNDU5Mjk5Mjcz NzIxMUVCOTQ3NUNBNURDNEY5QUUwMi9Pb2NoYkJXU2M3OVJrMGY4SC01d1laWE1L dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09vY2hiQldTYzc5UmswZjhILTV3WVpYTUt1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjYxQy9GNDU5Mjk5MjczNzIxMUVCOTQ3NUNBNURDNEY5QUUwMi9Pb2NoYkJXU2M3 OVJrMGY4SC01d1laWE1LdVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAx4viBD/jR8a1SJE8QsJDkKHYVE8i8Lj0U7QixWO5t+akHlNRLahEA /fkCkN0/ALvqilWyax8fF4UGfJPf4yFY5cXNtC71rSFchUwHc9vD3tYb2xQasLBc GoXm2KBI1kx0F6CJNoMuRErEqJdK1we6jLMsNPMIRFbSHOQq8rQBbliD+nnGM3W2 2Kk92ju51rdXiO+FYl+j4Kv0gpUCxi2FjEMe9WodvBWRLOd3lKyBk8125IYPW2/Z L8Wt8LzfC1EnHUqU0Qgr0N3t3UVoAdOWdxGcPHa0CIsvMhDnrDCZtwCAZFGvGhRt y28Qpga5UtkztyhX+9RgcguhObX3XIBg -----END CERTIFICATE-----Generated at Mon Sep 8 01:55:54 2025 by rpki-client