$ rpki-client -vvf rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.mft File: OM4nbIW20tDq_p0_ilpQjN26uWg.mft (raw, json) Hash identifier: Zx2HipM3k6gkWCM34KswxuTNx+u6Hr8CtIcn0TmbHTk= Subject key identifier: 42:C0:89:41:50:6A:32:9A:24:A1:EC:27:A4:4A:F8:A9:29:FC:EB:96 Authority key identifier: 38:CE:27:6C:85:B6:D2:D0:EA:FE:9D:3F:8A:5A:50:8C:DD:BA:B9:68 Certificate issuer: /CN=A91F053E/serialNumber=38CE276C85B6D2D0EAFE9D3F8A5A508CDDBAB968 Certificate serial: 06DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OM4nbIW20tDq_p0_ilpQjN26uWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.mft Manifest number: 06D4 Signing time: Sat 06 Sep 2025 22:19:51 +0000 Manifest this update: Sat 06 Sep 2025 22:19:51 +0000 Manifest next update: Sat 13 Sep 2025 22:19:51 +0000 Files and hashes: 1: OM4nbIW20tDq_p0_ilpQjN26uWg.crl (hash: w9Jy8vMmnE1DxaWyBZdJaN13p2Hi5GKzCnOyCfT/9cU=) 2: 6473BE24979811EB97001639C4F9AE02.roa (hash: 2h+gg3bjxIldHS97Lzce3I89lkJGy2giiZHmYtJCKjs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.crl rsync://rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OM4nbIW20tDq_p0_ilpQjN26uWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 22:19:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1755 (0x6db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F053E, serialNumber=38CE276C85B6D2D0EAFE9D3F8A5A508CDDBAB968 Validity Not Before: Sep 6 22:19:51 2025 GMT Not After : Sep 13 22:19:51 2025 GMT Subject: CN=68bcb387-056f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:db:d1:8c:94:30:02:6c:03:57:db:e1:66:f8: fe:af:b6:15:df:5c:53:e4:72:75:f8:d5:aa:46:4b: fe:5e:ef:3e:cf:11:fe:d8:ab:3b:27:5c:1e:d7:03: 5f:fc:73:3c:55:5d:e2:6a:85:fb:d6:d6:3a:3c:fc: 93:90:d8:94:a2:1b:af:d1:12:62:c7:df:2e:0b:9a: 64:ae:10:a0:48:a7:46:bb:6c:58:e8:4f:37:bd:6d: 83:0e:67:e0:8c:49:5a:87:fc:71:30:18:0e:69:0b: d0:ff:87:d8:da:88:3b:65:5c:f1:c6:3a:c9:c9:2d: 5f:51:51:0e:5b:50:b9:98:f2:a6:7e:96:e2:b1:05: 46:bc:e7:b2:f5:4b:89:5d:b2:3d:68:da:65:ac:fc: 2b:ce:5c:1d:a5:3b:f1:88:e0:4f:8d:a2:62:fe:f5: 9c:0d:ae:3c:96:68:69:a7:1a:27:82:25:31:8f:66: f0:57:5c:b7:60:d9:14:2f:ff:1b:77:70:0d:7a:c1: b1:8a:5d:16:2e:28:18:fb:c1:3c:b1:75:f6:81:9a: 1a:73:ca:7d:74:3d:47:e4:67:f8:63:94:80:12:0c: 64:7c:f8:a8:a6:b7:3b:a7:68:b7:73:15:fb:28:56: b9:cb:eb:8f:61:58:7b:12:05:09:f0:c8:3b:71:3e: 1c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C0:89:41:50:6A:32:9A:24:A1:EC:27:A4:4A:F8:A9:29:FC:EB:96 X509v3 Authority Key Identifier: keyid:38:CE:27:6C:85:B6:D2:D0:EA:FE:9D:3F:8A:5A:50:8C:DD:BA:B9:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OM4nbIW20tDq_p0_ilpQjN26uWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:c2:3f:21:39:d9:08:d1:d3:e7:ed:06:ec:d4:f7:aa:56:1b: 93:7f:5c:d9:4f:b9:ba:e1:d7:b8:0d:ce:a1:6e:25:4d:29:91: 62:a8:40:da:b0:7c:9e:f9:18:63:df:0b:0f:8c:73:ad:fc:16: 56:9f:a5:e7:f5:1f:5f:68:f2:72:19:3d:4e:90:e6:06:89:ab: 4e:f3:59:df:b2:6a:d7:b5:79:5b:64:7f:ad:bc:b1:48:c1:c6: a8:f0:09:d4:93:64:1c:b7:42:a1:74:77:7f:a0:cd:35:7e:c8: 0a:fd:b7:22:bc:9b:2f:0c:e0:00:45:96:ff:b2:77:40:3d:d8: 2a:35:a9:39:e5:1d:50:d1:e4:fd:ed:1f:c2:e1:71:ed:03:4d: ed:98:ae:81:e9:51:80:d6:0e:4d:05:95:66:19:c3:4f:49:31: ef:6e:54:92:0b:8c:6b:d4:50:12:88:fa:f4:4c:eb:4c:05:cd: f9:9c:16:37:c1:08:f0:cd:52:1d:81:2c:8c:99:2e:5c:bc:da: 9f:08:c0:13:4d:1f:17:61:e2:4b:b5:f6:11:0a:3f:47:f7:9c: 59:0a:8c:63:00:0e:c5:89:58:1b:f9:92:0d:c2:e2:81:d5:6b: 64:04:12:12:22:e0:34:ae:8f:d7:ec:c1:b4:14:15:b5:7f:c6: b0:96:33:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjA1M0UxMTAvBgNVBAUTKDM4Q0UyNzZDODVCNkQyRDBFQUZFOUQzRjhBNUE1MDhD RERCQUI5NjgwHhcNMjUwOTA2MjIxOTUxWhcNMjUwOTEzMjIxOTUxWjAYMRYwFAYD VQQDEw02OGJjYjM4Ny0wNTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA79vRjJQwAmwDV9vhZvj+r7YV31xT5HJ1+NWqRkv+Xu8+zxH+2Ks7J1we1wNf /HM8VV3iaoX71tY6PPyTkNiUohuv0RJix98uC5pkrhCgSKdGu2xY6E83vW2DDmfg jElah/xxMBgOaQvQ/4fY2og7ZVzxxjrJyS1fUVEOW1C5mPKmfpbisQVGvOey9UuJ XbI9aNplrPwrzlwdpTvxiOBPjaJi/vWcDa48lmhppxongiUxj2bwV1y3YNkUL/8b d3ANesGxil0WLigY+8E8sXX2gZoac8p9dD1H5Gf4Y5SAEgxkfPioprc7p2i3cxX7 KFa5y+uPYVh7EgUJ8Mg7cT4cFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFELAiUFQ ajKaJKHsJ6RK+Kkp/OuWMB8GA1UdIwQYMBaAFDjOJ2yFttLQ6v6dP4paUIzdurlo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDUzRS80RUVCQzIwODZC NkIxMUVCODUxMjRCMkFDNEY5QUUwMi9PTTRuYklXMjB0RHFfcDBfaWxwUWpOMjZ1 V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09NNG5iSVcyMHREcV9wMF9pbHBRak4yNnVXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDUzRS80RUVCQzIwODZCNkIxMUVCODUxMjRCMkFDNEY5QUUwMi9PTTRuYklXMjB0 RHFfcDBfaWxwUWpOMjZ1V2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIwj8hOdkI0dPn7Qbs1PeqVhuTf1zZT7m64de4Dc6hbiVNKZFiqEDa sHye+Rhj3wsPjHOt/BZWn6Xn9R9faPJyGT1OkOYGiatO81nfsmrXtXlbZH+tvLFI wcao8AnUk2Qct0KhdHd/oM01fsgK/bcivJsvDOAARZb/sndAPdgqNak55R1Q0eT9 7R/C4XHtA03tmK6B6VGA1g5NBZVmGcNPSTHvblSSC4xr1FASiPr0TOtMBc35nBY3 wQjwzVIdgSyMmS5cvNqfCMATTR8XYeJLtfYRCj9H95xZCoxjAA7FiVgb+ZINwuKB 1WtkBBISIuA0ro/X7MG0FBW1f8awljOE -----END CERTIFICATE-----Generated at Mon Sep 8 08:15:46 2025 by rpki-client