$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft File: OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft (raw, json) Hash identifier: KrMf0Zr17zduvLBqikDw8y5b8DdLG/UYq31Tnc7mqxs= Subject key identifier: 5D:C6:4B:E9:9A:49:E2:13:16:29:BE:E5:ED:3F:58:D6:58:B4:9D:AC Authority key identifier: 38:C0:B1:C5:8D:00:DE:3F:73:AD:5B:58:87:D4:24:9B:DE:E7:BB:A2 Certificate issuer: /CN=A91D1200/serialNumber=38C0B1C58D00DE3F73AD5B5887D4249BDEE7BBA2 Certificate serial: 01DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OMCxxY0A3j9zrVtYh9Qkm97nu6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft Manifest number: 01D1 Signing time: Thu 21 Aug 2025 03:03:15 +0000 Manifest this update: Thu 21 Aug 2025 03:03:14 +0000 Manifest next update: Thu 28 Aug 2025 03:03:14 +0000 Files and hashes: 1: OMCxxY0A3j9zrVtYh9Qkm97nu6I.crl (hash: R+G221QQLp/R06azm/2PQjcdWaqdvINTUERJtqNPsMQ=) 2: 3FD9A0B2CC6411EDA7970484C4F9AE02.roa (hash: 57nO5jOvkVp0+vX7iv3bKgXM7+O7quZxwLxBFz3+RLU=) 3: 3F3E2A10CC6411EDA7970484C4F9AE02.roa (hash: zTbUbYoqbVGTCB7vV/9Oi8BgtnQrV/KuVcCelWmi5sI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.crl rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OMCxxY0A3j9zrVtYh9Qkm97nu6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 03:03:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 477 (0x1dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1200, serialNumber=38C0B1C58D00DE3F73AD5B5887D4249BDEE7BBA2 Validity Not Before: Aug 21 03:03:14 2025 GMT Not After : Aug 28 03:03:14 2025 GMT Subject: CN=68a68c73-5213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b7:89:92:07:ea:5d:fe:54:a8:71:fb:94:f4: 4a:9e:58:aa:92:0e:7a:ba:1b:f1:f3:88:28:0a:7c: c5:ac:ee:85:0e:42:8a:f5:ad:76:58:51:20:ab:fa: 5e:31:b2:c3:63:2d:9a:74:1f:f5:b4:ce:bf:33:c9: d9:e6:34:90:25:5b:d8:f6:7d:c8:d5:19:69:e8:0d: 59:2a:c4:2a:6e:10:f8:77:13:11:1d:1c:7d:b6:a5: 5c:06:23:6d:ce:a9:95:29:3d:de:b2:2d:ae:66:5a: 67:4b:2a:95:fe:d6:a0:49:99:cd:88:97:c8:62:67: d4:dd:db:4f:e9:94:00:2b:1f:e5:23:bd:02:0e:ee: 43:43:46:ef:9f:e2:ac:49:60:0c:aa:7a:02:07:b2: 7a:4a:03:ff:a0:25:2f:3c:46:a1:b4:47:c7:be:50: 13:6d:43:43:6d:1e:a8:87:95:b3:a5:18:c8:ae:d8: c1:52:73:f2:50:97:90:06:07:ee:fb:12:56:dc:66: 6b:ba:e3:46:2d:5c:89:02:91:6d:6b:47:fd:1b:20: 62:61:0d:d5:1b:d4:6b:8f:21:5c:45:2f:f0:cb:b7: 30:ec:af:68:e7:48:d3:48:0d:22:9f:8c:25:cb:3d: d4:8d:c1:c7:31:c8:28:df:9e:2d:8d:ca:5e:bc:9d: ea:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:C6:4B:E9:9A:49:E2:13:16:29:BE:E5:ED:3F:58:D6:58:B4:9D:AC X509v3 Authority Key Identifier: keyid:38:C0:B1:C5:8D:00:DE:3F:73:AD:5B:58:87:D4:24:9B:DE:E7:BB:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OMCxxY0A3j9zrVtYh9Qkm97nu6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:61:74:13:63:24:9b:ed:8d:b6:e0:ed:45:f1:2a:40:d8:bf: 9b:6c:3e:e8:45:d1:e4:f9:8b:95:5a:a9:68:59:24:34:0c:82: 14:4b:ca:f2:80:41:44:60:8a:85:36:d0:b3:84:e2:0f:22:85: 40:45:19:fa:da:b8:d0:81:bf:3f:6e:eb:99:31:b1:5c:c2:bf: cc:91:ae:1e:50:88:f7:20:67:6d:61:3f:b0:06:41:af:42:11: 75:1f:64:d2:da:66:a8:bf:86:5a:0c:9f:1d:73:58:7e:5d:f6: 94:48:f5:23:75:82:fe:f1:60:9c:71:4f:df:28:e5:a6:a7:5c: 23:19:75:1f:ff:53:94:f7:69:85:23:44:bb:5c:45:47:7b:be: 6e:ab:9d:7d:c1:03:bc:3d:c6:17:71:1f:34:c4:ce:63:46:c1: 52:7b:bf:67:ae:de:17:95:d2:33:8d:80:98:c8:d7:2c:87:5f: 79:dc:90:c7:a6:bc:9f:30:6b:c8:9c:bf:f3:33:21:0b:c8:6b: e7:41:1e:d9:11:23:e6:3c:41:2a:85:0f:2f:94:8f:b7:c2:0a: 0a:ea:0c:98:3c:af:30:cd:32:e2:83:d6:02:8f:e4:18:50:17: 9c:40:a4:2e:ce:ab:10:08:25:70:d3:1e:e2:26:05:c3:ff:17: e9:b0:e4:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDEyMDAxMTAvBgNVBAUTKDM4QzBCMUM1OEQwMERFM0Y3M0FENUI1ODg3RDQyNDlC REVFN0JCQTIwHhcNMjUwODIxMDMwMzE0WhcNMjUwODI4MDMwMzE0WjAYMRYwFAYD VQQDEw02OGE2OGM3My01MjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvLeJkgfqXf5UqHH7lPRKnliqkg56uhvx84goCnzFrO6FDkKK9a12WFEgq/pe MbLDYy2adB/1tM6/M8nZ5jSQJVvY9n3I1Rlp6A1ZKsQqbhD4dxMRHRx9tqVcBiNt zqmVKT3esi2uZlpnSyqV/tagSZnNiJfIYmfU3dtP6ZQAKx/lI70CDu5DQ0bvn+Ks SWAMqnoCB7J6SgP/oCUvPEahtEfHvlATbUNDbR6oh5WzpRjIrtjBUnPyUJeQBgfu +xJW3GZruuNGLVyJApFta0f9GyBiYQ3VG9RrjyFcRS/wy7cw7K9o50jTSA0in4wl yz3UjcHHMcgo354tjcpevJ3qYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF3GS+ma SeITFim+5e0/WNZYtJ2sMB8GA1UdIwQYMBaAFDjAscWNAN4/c61bWIfUJJve57ui MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTIwMC9GNUE5NTJFMEND MDMxMUVEQTk3QUNBNURDNEY5QUUwMi9PTUN4eFkwQTNqOXpyVnRZaDlRa205N251 NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09NQ3h4WTBBM2o5enJWdFloOVFrbTk3bnU2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTIwMC9GNUE5NTJFMENDMDMxMUVEQTk3QUNBNURDNEY5QUUwMi9PTUN4eFkwQTNq OXpyVnRZaDlRa205N251NkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSYXQTYySb7Y224O1F8SpA2L+bbD7oRdHk+YuVWqloWSQ0DIIUS8ry gEFEYIqFNtCzhOIPIoVARRn62rjQgb8/buuZMbFcwr/Mka4eUIj3IGdtYT+wBkGv QhF1H2TS2maov4ZaDJ8dc1h+XfaUSPUjdYL+8WCccU/fKOWmp1wjGXUf/1OU92mF I0S7XEVHe75uq519wQO8PcYXcR80xM5jRsFSe79nrt4XldIzjYCYyNcsh1953JDH pryfMGvInL/zMyELyGvnQR7ZESPmPEEqhQ8vlI+3wgoK6gyYPK8wzTLig9YCj+QY UBecQKQuzqsQCCVw0x7iJgXD/xfpsOR6 -----END CERTIFICATE-----Generated at Fri Aug 22 16:36:06 2025 by rpki-client