$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft File: pOaGeeZ7phon9Pib0JKu5cH3ITk.mft (raw, json) Hash identifier: z80NXoIT2FL9cfaqiMjIh6CEjApIxTz5NYl/GiCB85k= Subject key identifier: 54:E4:F3:B3:E0:7E:7B:C9:39:06:2A:A1:BA:E6:CC:D4:B0:7B:63:70 Authority key identifier: A4:E6:86:79:E6:7B:A6:1A:27:F4:F8:9B:D0:92:AE:E5:C1:F7:21:39 Certificate issuer: /CN=A91E1B48/serialNumber=A4E68679E67BA61A27F4F89BD092AEE5C1F72139 Certificate serial: 9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft Manifest number: 9C Signing time: Thu 21 Aug 2025 06:33:42 +0000 Manifest this update: Thu 21 Aug 2025 06:33:41 +0000 Manifest next update: Thu 28 Aug 2025 06:33:41 +0000 Files and hashes: 1: pOaGeeZ7phon9Pib0JKu5cH3ITk.crl (hash: kT06uoDWKsYvqcVFlqq7bW8/AZdDQVomxrB0MjdH6YM=) 2: FB03B42C927411EF870E655AC4F9AE02.roa (hash: 1Pw3F4k0O1ke+ThDTspVWhZWgUjv2zsb15CKjPdj4IQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.crl rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 06:33:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1B48, serialNumber=A4E68679E67BA61A27F4F89BD092AEE5C1F72139 Validity Not Before: Aug 21 06:33:41 2025 GMT Not After : Aug 28 06:33:41 2025 GMT Subject: CN=68a6bdc6-a656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e5:17:ee:de:00:2c:9a:b5:7b:dd:7d:b7:d5: 66:9c:36:ce:5c:63:15:4b:04:4d:37:d8:59:1a:24: 97:91:6b:8d:99:88:cc:3f:56:d8:75:a0:52:50:f3: 2d:c1:c6:fb:7d:63:09:24:e2:c9:b2:37:d3:7f:fd: 79:5c:12:ff:c4:b0:e9:df:87:37:bc:62:bf:c1:01: 34:76:f1:e5:11:72:a6:2c:7b:9d:48:9d:85:79:34: b8:42:14:df:64:e7:65:b4:32:d8:5e:fe:04:a2:81: f9:b0:b5:8d:dd:93:78:a9:6e:6a:f8:f1:43:32:39: 26:d5:4e:0b:9b:bc:a4:4b:8c:0b:c4:34:db:49:79: a1:f4:42:db:50:9b:5e:b6:60:94:86:fa:c9:2b:ee: 3e:69:a6:c6:2a:f8:a9:f8:f6:a9:fb:9e:7e:59:1a: 8b:f2:9c:9e:29:0a:4b:ca:4b:01:50:09:94:83:52: 82:18:a7:63:5c:98:99:86:1a:85:2a:ee:51:f0:9a: a6:6b:68:bd:d9:82:66:6b:7c:04:d7:6a:40:18:f4: a6:22:79:da:26:bc:9c:39:e2:dd:e1:60:05:49:b7: 60:ca:a8:85:64:fa:a8:9d:81:4d:73:a0:fd:36:3e: 7a:53:b7:e0:b8:1b:9b:d9:be:e6:ea:84:14:c3:7f: 5c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:E4:F3:B3:E0:7E:7B:C9:39:06:2A:A1:BA:E6:CC:D4:B0:7B:63:70 X509v3 Authority Key Identifier: keyid:A4:E6:86:79:E6:7B:A6:1A:27:F4:F8:9B:D0:92:AE:E5:C1:F7:21:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:1e:c4:12:10:c4:f1:03:b2:43:f4:ba:30:69:f4:72:c9:07: 23:7a:ba:2f:28:67:34:34:fd:a5:21:e1:b5:0f:41:37:3f:fc: bb:d4:fb:34:c2:26:77:3c:23:4c:f8:94:32:54:04:02:ed:77: 6b:ea:98:33:ec:da:74:99:6a:10:be:25:f9:5e:75:fc:78:e9: b4:a8:47:c3:e4:51:50:93:3b:96:0a:8b:71:1b:1f:e3:af:29: c5:8a:d0:c4:69:b0:9c:c4:83:98:93:7b:9e:55:83:6c:e2:3a: c6:ed:fa:54:83:fe:77:39:3f:e4:86:d5:05:43:ee:25:6c:cf: ea:95:41:e7:d7:3d:9d:63:50:b2:13:0d:ed:2a:72:58:8d:7f: f0:df:c8:e5:0b:51:43:6e:dd:9c:3a:8d:be:3f:44:4a:f8:24: cd:73:a2:7f:70:ec:b1:ae:b3:e6:48:82:c5:48:2d:6b:f8:2c: aa:4f:6b:38:12:c7:96:70:9f:ab:5d:bc:b4:f3:18:bb:06:97: 40:ef:7c:2a:e0:0c:7e:95:d7:4e:30:58:e4:1c:9a:67:2c:ce: ff:c9:cb:dd:7a:26:cb:de:2e:91:99:40:69:fb:50:81:4f:a3: 4f:9e:42:07:99:9f:94:09:17:b8:f6:5b:ed:32:5a:19:7d:2c: bb:cd:f5:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFCNDgxMTAvBgNVBAUTKEE0RTY4Njc5RTY3QkE2MUEyN0Y0Rjg5QkQwOTJBRUU1 QzFGNzIxMzkwHhcNMjUwODIxMDYzMzQxWhcNMjUwODI4MDYzMzQxWjAYMRYwFAYD VQQDEw02OGE2YmRjNi1hNjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAseUX7t4ALJq1e919t9VmnDbOXGMVSwRNN9hZGiSXkWuNmYjMP1bYdaBSUPMt wcb7fWMJJOLJsjfTf/15XBL/xLDp34c3vGK/wQE0dvHlEXKmLHudSJ2FeTS4QhTf ZOdltDLYXv4EooH5sLWN3ZN4qW5q+PFDMjkm1U4Lm7ykS4wLxDTbSXmh9ELbUJte tmCUhvrJK+4+aabGKvip+Pap+55+WRqL8pyeKQpLyksBUAmUg1KCGKdjXJiZhhqF Ku5R8Jqma2i92YJma3wE12pAGPSmInnaJrycOeLd4WAFSbdgyqiFZPqonYFNc6D9 Nj56U7fguBub2b7m6oQUw39cZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFTk87Pg fnvJOQYqobrmzNSwe2NwMB8GA1UdIwQYMBaAFKTmhnnme6YaJ/T4m9CSruXB9yE5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUI0OC82NkY1NzY0NDky NzQxMUVGQkY4NjRBM0RDNEY5QUUwMi9wT2FHZWVaN3Bob245UGliMEpLdTVjSDNJ VGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BPYUdlZVo3cGhvbjlQaWIwSkt1NWNIM0lUay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUI0OC82NkY1NzY0NDkyNzQxMUVGQkY4NjRBM0RDNEY5QUUwMi9wT2FHZWVaN3Bo b245UGliMEpLdTVjSDNJVGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0HsQSEMTxA7JD9LowafRyyQcjerovKGc0NP2lIeG1D0E3P/y71Ps0 wiZ3PCNM+JQyVAQC7Xdr6pgz7Np0mWoQviX5XnX8eOm0qEfD5FFQkzuWCotxGx/j rynFitDEabCcxIOYk3ueVYNs4jrG7fpUg/53OT/khtUFQ+4lbM/qlUHn1z2dY1Cy Ew3tKnJYjX/w38jlC1FDbt2cOo2+P0RK+CTNc6J/cOyxrrPmSILFSC1r+CyqT2s4 EseWcJ+rXby08xi7BpdA73wq4Ax+lddOMFjkHJpnLM7/ycvdeibL3i6RmUBp+1CB T6NPnkIHmZ+UCRe49lvtMloZfSy7zfU7 -----END CERTIFICATE-----Generated at Fri Aug 22 16:30:41 2025 by rpki-client