$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft File: ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft (raw, json) Hash identifier: pYoWx/rNA1lh4z0jq9dyI+QfSamch6hHjR3z0IkAs/I= Subject key identifier: 76:BE:39:D6:A7:20:DB:66:BE:05:D1:3C:CA:74:C3:69:55:43:F6:FC Authority key identifier: A2:0C:57:F5:2C:E9:8C:88:48:F6:36:25:0E:4A:46:70:81:1B:50:76 Certificate issuer: /CN=A91E7656/serialNumber=A20C57F52CE98C8848F636250E4A4670811B5076 Certificate serial: 0C3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft Manifest number: 0C3B Signing time: Wed 20 Aug 2025 18:40:03 +0000 Manifest this update: Wed 20 Aug 2025 18:40:02 +0000 Manifest next update: Wed 27 Aug 2025 18:40:02 +0000 Files and hashes: 1: ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl (hash: lx8061Z1uXjP+WLLEwC9RxFauJHdkTozGyJvv9Tz+oA=) 2: AF73E1423D2011F0ACC34F2BC4F9AE02.roa (hash: 6z4IvdKelJy7fw7SK3RJpHNkKU/zaX8zdMWrochmqvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 18:40:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3132 (0xc3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7656, serialNumber=A20C57F52CE98C8848F636250E4A4670811B5076 Validity Not Before: Aug 20 18:40:02 2025 GMT Not After : Aug 27 18:40:02 2025 GMT Subject: CN=68a61683-7b9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:31:99:19:fa:e0:8b:aa:56:ea:57:d1:29:17: fe:1e:50:43:47:dc:32:2b:84:7f:59:e3:e5:6f:b6: 11:b4:e8:d3:86:6c:f5:df:f1:22:42:3a:46:52:40: ba:1f:c9:a4:97:13:ed:56:c8:cc:1a:da:a4:64:f3: 90:07:a9:0c:e5:f5:b5:c6:eb:c6:7c:b1:18:cd:1d: 01:53:b1:4a:de:8f:4e:1a:17:4c:5a:a4:e4:ef:08: 8b:88:c8:c1:f0:7f:48:e7:84:e2:5e:50:d9:e7:1e: db:16:99:50:56:9a:59:48:bc:d9:0b:1b:e5:59:cb: be:3a:cf:89:f6:4c:bc:c5:40:3a:28:92:6f:75:95: 56:37:95:4e:b2:ce:3d:dc:6c:82:87:20:3d:44:eb: c1:cd:5c:f4:6f:1c:cf:19:e2:f3:a2:4f:79:43:10: b9:c2:3b:97:4a:52:51:5e:fc:38:c7:a1:77:ee:cc: 8c:9c:cb:88:11:c9:ee:8c:a8:eb:7d:81:b3:f8:a0: c8:17:b0:d4:0f:ea:84:9e:be:ab:4e:41:e5:15:79: 59:da:b6:02:71:aa:da:c6:07:36:86:45:c9:d2:7c: 0c:83:63:96:8c:5b:3f:a8:84:8b:1b:2d:ca:16:50: 89:1c:36:13:32:52:31:c4:48:1b:63:24:76:6b:f8: 39:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:BE:39:D6:A7:20:DB:66:BE:05:D1:3C:CA:74:C3:69:55:43:F6:FC X509v3 Authority Key Identifier: keyid:A2:0C:57:F5:2C:E9:8C:88:48:F6:36:25:0E:4A:46:70:81:1B:50:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:b5:cb:05:28:8c:51:e3:00:72:81:77:b7:66:03:3a:8d:52: c6:82:05:4a:f3:6a:19:dd:2a:23:42:de:5e:1b:8b:86:d4:ee: 73:e4:08:10:ff:cb:5a:d4:cf:62:3d:09:06:ac:ef:1e:e3:4d: 59:53:c8:7d:7d:29:bc:7d:a8:17:68:b1:68:9d:1c:96:20:b2: 2f:86:b9:d8:16:67:b1:12:25:0b:42:09:f1:67:f3:5f:ee:9a: e8:b2:3b:aa:48:da:34:46:ae:fe:39:64:8c:61:f3:31:1b:42: a6:7c:97:9b:dc:ef:aa:f9:95:01:08:75:93:55:4d:84:12:59: 92:04:75:17:03:d0:22:42:51:85:fa:14:d1:0b:86:5a:8e:60: a8:f2:96:f7:ad:b0:93:f4:4c:07:05:b2:2a:c7:b0:26:eb:fc: 7b:af:bd:66:6e:4f:ac:77:1f:36:25:35:64:6e:ac:3e:ff:bb: 4b:a6:65:36:93:8b:6c:61:2a:fe:b9:63:bc:1c:b7:73:93:72: b0:4c:70:ba:cc:bf:88:b3:8c:2a:25:7f:9e:94:f8:3b:94:29: dc:a0:90:0c:80:15:2d:b8:03:81:4e:16:71:06:11:5f:13:24: d9:51:12:77:33:cf:bc:97:47:49:f0:30:6f:fa:4d:28:5a:35: d2:9d:80:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc2NTYxMTAvBgNVBAUTKEEyMEM1N0Y1MkNFOThDODg0OEY2MzYyNTBFNEE0Njcw ODExQjUwNzYwHhcNMjUwODIwMTg0MDAyWhcNMjUwODI3MTg0MDAyWjAYMRYwFAYD VQQDEw02OGE2MTY4My03YjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1TGZGfrgi6pW6lfRKRf+HlBDR9wyK4R/WePlb7YRtOjThmz13/EiQjpGUkC6 H8mklxPtVsjMGtqkZPOQB6kM5fW1xuvGfLEYzR0BU7FK3o9OGhdMWqTk7wiLiMjB 8H9I54TiXlDZ5x7bFplQVppZSLzZCxvlWcu+Os+J9ky8xUA6KJJvdZVWN5VOss49 3GyChyA9ROvBzVz0bxzPGeLzok95QxC5wjuXSlJRXvw4x6F37syMnMuIEcnujKjr fYGz+KDIF7DUD+qEnr6rTkHlFXlZ2rYCcaraxgc2hkXJ0nwMg2OWjFs/qISLGy3K FlCJHDYTMlIxxEgbYyR2a/g5BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHa+Odan INtmvgXRPMp0w2lVQ/b8MB8GA1UdIwQYMBaAFKIMV/Us6YyISPY2JQ5KRnCBG1B2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzY1Ni8wRUUzQTVCQzBD RDYxMUVBQkY1NjI1NTNDNEY5QUUwMi9vZ3hYOVN6cGpJaEk5allsRGtwR2NJRWJV SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29neFg5U3pwakloSTlqWWxEa3BHY0lFYlVIWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzY1Ni8wRUUzQTVCQzBDRDYxMUVBQkY1NjI1NTNDNEY5QUUwMi9vZ3hYOVN6cGpJ aEk5allsRGtwR2NJRWJVSFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/tcsFKIxR4wBygXe3ZgM6jVLGggVK82oZ3SojQt5eG4uG1O5z5AgQ /8ta1M9iPQkGrO8e401ZU8h9fSm8fagXaLFonRyWILIvhrnYFmexEiULQgnxZ/Nf 7prosjuqSNo0Rq7+OWSMYfMxG0KmfJeb3O+q+ZUBCHWTVU2EElmSBHUXA9AiQlGF +hTRC4ZajmCo8pb3rbCT9EwHBbIqx7Am6/x7r71mbk+sdx82JTVkbqw+/7tLpmU2 k4tsYSr+uWO8HLdzk3KwTHC6zL+Is4wqJX+elPg7lCncoJAMgBUtuAOBThZxBhFf EyTZURJ3M8+8l0dJ8DBv+k0oWjXSnYBW -----END CERTIFICATE-----Generated at Fri Aug 22 16:32:13 2025 by rpki-client