$ rpki-client -vvf rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft File: O4dpDvQFVnODtvcv3TARYM6CHys.mft (raw, json) Hash identifier: F7xAwLC2yKINiotFY9GVTFZ7kLLbDSkyxKf8hHfb9mA= Subject key identifier: E6:09:75:1B:AA:85:52:76:4B:F3:A3:6F:70:BB:7B:83:CD:CB:20:CC Authority key identifier: 3B:87:69:0E:F4:05:56:73:83:B6:F7:2F:DD:30:11:60:CE:82:1F:2B Certificate issuer: /CN=A91F81AD/serialNumber=3B87690EF405567383B6F72FDD301160CE821F2B Certificate serial: 025F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft Manifest number: 0259 Signing time: Fri 05 Sep 2025 02:08:28 +0000 Manifest this update: Fri 05 Sep 2025 02:08:27 +0000 Manifest next update: Fri 12 Sep 2025 02:08:27 +0000 Files and hashes: 1: O4dpDvQFVnODtvcv3TARYM6CHys.crl (hash: rXy/Yq1AufgA6FenlH7KVJdCJmTg2L9eMj/p+mMuGCo=) 2: F9424C6C80FA11ED9B35954DC4F9AE02.roa (hash: GNMO+8voOxNBOb5ixsUP/MtpdlZbS27Vb7o1TavyMdI=) 3: F86A2F7680FA11ED9B35954DC4F9AE02.roa (hash: vq0srwLbA5KHVy52W5biflCYsAzYNYb+3xV7SnajFW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.crl rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 02:08:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 607 (0x25f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F81AD, serialNumber=3B87690EF405567383B6F72FDD301160CE821F2B Validity Not Before: Sep 5 02:08:27 2025 GMT Not After : Sep 12 02:08:27 2025 GMT Subject: CN=68ba461c-532d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b9:14:b3:dd:a4:b7:31:58:c6:68:9e:9c:30: 8b:32:c3:85:95:47:ad:0d:a5:f0:d4:08:61:f9:59: 8f:2b:08:7c:98:d9:08:92:3a:3a:1f:74:ef:72:42: 06:34:9e:0d:53:71:e7:d1:a0:90:b9:f7:0e:60:e6: 33:6f:21:7f:d3:95:69:cb:a2:8d:45:e2:89:cd:ae: 05:90:ee:14:44:b9:83:c5:90:d0:5f:ec:99:57:b2: 19:12:2b:3b:b2:93:71:16:a2:ea:5f:52:06:f7:04: 05:ab:ec:fb:41:2d:75:b3:2e:a8:52:a8:6c:89:91: 40:8b:0a:7f:8f:3f:e7:a9:04:8e:da:88:29:cc:24: fd:65:be:53:4b:87:6d:f6:a1:9e:e6:95:a8:a7:e1: 4f:1b:e6:84:a6:e4:aa:8b:9d:55:8c:ee:42:a5:51: 15:12:2a:ff:01:ba:53:49:bd:00:4b:f2:50:76:88: 25:18:5f:8e:2e:0a:31:3d:ae:34:02:22:8c:5d:71: d5:82:61:47:1a:cb:ae:a0:d9:75:ea:09:cf:c0:a7: 62:3d:82:c1:35:5b:c1:8d:9b:56:9c:a8:bb:ff:f9: 23:bc:77:fa:d9:e6:41:44:a1:0d:4d:b2:06:47:19: a7:26:bf:57:a4:b5:56:ba:d7:a5:5c:b5:c6:9b:32: 3e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:09:75:1B:AA:85:52:76:4B:F3:A3:6F:70:BB:7B:83:CD:CB:20:CC X509v3 Authority Key Identifier: keyid:3B:87:69:0E:F4:05:56:73:83:B6:F7:2F:DD:30:11:60:CE:82:1F:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:b2:80:8c:1a:88:53:e8:52:d5:a3:a2:ce:d1:77:ec:47:46: 3b:6c:00:76:c0:a2:13:8d:a2:d0:16:f6:e1:db:fa:20:9c:62: a4:7f:b6:dd:d1:06:90:c3:ec:ac:bc:60:01:7f:31:5b:50:23: 47:94:41:95:28:ae:77:d0:af:17:da:e4:21:ee:bf:bb:c5:19: 49:7a:b9:7f:2c:a1:81:12:d8:a5:da:72:42:46:9b:b0:6c:6f: 1f:95:a2:2a:c0:08:d1:9d:a7:b6:d2:26:f5:3e:30:09:63:ae: 16:b8:f3:c3:ab:fd:ff:73:85:9a:e9:f7:39:38:71:57:58:2e: ce:f4:31:86:93:9e:6e:16:b1:38:9e:a7:c4:61:f6:52:5c:a5: 89:ae:91:1a:1c:1d:aa:38:a9:63:f7:d1:7a:cd:f1:5d:f5:fb: c3:27:57:da:9e:51:d1:dd:5d:46:d1:36:52:2f:83:01:a5:21: dd:36:b5:13:cd:7f:d0:20:86:0e:b6:40:57:a1:03:d9:d2:85: 7f:54:ed:d3:93:e7:88:84:62:64:42:b7:76:0b:f2:0c:57:37: fa:a3:cd:d0:85:bd:17:a4:e9:0c:83:7c:50:81:30:5a:69:1d: 54:86:ae:4d:80:dd:da:06:74:5f:38:fd:8f:d9:3a:75:18:73: 5e:72:e1:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgxQUQxMTAvBgNVBAUTKDNCODc2OTBFRjQwNTU2NzM4M0I2RjcyRkREMzAxMTYw Q0U4MjFGMkIwHhcNMjUwOTA1MDIwODI3WhcNMjUwOTEyMDIwODI3WjAYMRYwFAYD VQQDEw02OGJhNDYxYy01MzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy7kUs92ktzFYxmienDCLMsOFlUetDaXw1Ahh+VmPKwh8mNkIkjo6H3TvckIG NJ4NU3Hn0aCQufcOYOYzbyF/05Vpy6KNReKJza4FkO4URLmDxZDQX+yZV7IZEis7 spNxFqLqX1IG9wQFq+z7QS11sy6oUqhsiZFAiwp/jz/nqQSO2ogpzCT9Zb5TS4dt 9qGe5pWop+FPG+aEpuSqi51VjO5CpVEVEir/AbpTSb0AS/JQdoglGF+OLgoxPa40 AiKMXXHVgmFHGsuuoNl16gnPwKdiPYLBNVvBjZtWnKi7//kjvHf62eZBRKENTbIG RxmnJr9XpLVWutelXLXGmzI+zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOYJdRuq hVJ2S/Ojb3C7e4PNyyDMMB8GA1UdIwQYMBaAFDuHaQ70BVZzg7b3L90wEWDOgh8r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODFBRC80M0E1MTFBRTJD QkUxMUVEOTk4MjRCNENDNEY5QUUwMi9PNGRwRHZRRlZuT0R0dmN2M1RBUllNNkNI eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL080ZHBEdlFGVm5PRHR2Y3YzVEFSWU02Q0h5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODFBRC80M0E1MTFBRTJDQkUxMUVEOTk4MjRCNENDNEY5QUUwMi9PNGRwRHZRRlZu T0R0dmN2M1RBUllNNkNIeXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxsoCMGohT6FLVo6LO0XfsR0Y7bAB2wKITjaLQFvbh2/ognGKkf7bd 0QaQw+ysvGABfzFbUCNHlEGVKK530K8X2uQh7r+7xRlJerl/LKGBEtil2nJCRpuw bG8flaIqwAjRnae20ib1PjAJY64WuPPDq/3/c4Wa6fc5OHFXWC7O9DGGk55uFrE4 nqfEYfZSXKWJrpEaHB2qOKlj99F6zfFd9fvDJ1fanlHR3V1G0TZSL4MBpSHdNrUT zX/QIIYOtkBXoQPZ0oV/VO3Tk+eIhGJkQrd2C/IMVzf6o83Qhb0XpOkMg3xQgTBa aR1Uhq5NgN3aBnRfOP2P2Tp1GHNecuGo -----END CERTIFICATE-----Generated at Sat Sep 6 21:12:13 2025 by rpki-client