$ rpki-client -vvf rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft File: OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft (raw, json) Hash identifier: lDwReexxd3k4ywD2naqHv/hGUdTtw5CSk/oGCZbW10Q= Subject key identifier: 09:07:4E:5F:E5:BF:33:B5:91:0C:B1:D4:42:60:C4:D1:4E:85:F2:25 Authority key identifier: 38:6C:30:0E:D7:2F:12:B9:05:47:8A:33:CE:F2:77:99:25:4A:69:1C Certificate issuer: /CN=A911E502/serialNumber=386C300ED72F12B905478A33CEF27799254A691C Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft Manifest number: 58 Signing time: Sat 23 Aug 2025 07:25:57 +0000 Manifest this update: Sat 23 Aug 2025 07:25:56 +0000 Manifest next update: Sat 30 Aug 2025 07:25:56 +0000 Files and hashes: 1: OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl (hash: GisUd2tMJh4UY5rKwcNRbIQFKiBK9wnEEfTZfSHD6Ns=) 2: 54DA33D2FB2E11EFB488A95EC4F9AE02.roa (hash: L/7VzM2fbo0IdE808LBeTzf3z0geWQ0SpeUJCZmWPBg=) 3: 53E9C44CFB2E11EFB488A95EC4F9AE02.roa (hash: hzaK0MTBJLVrmr0hWnuGmH3SdcFclIxCzlQUZOQabQ8=) 4: 5460E9C8FB2E11EFB488A95EC4F9AE02.roa (hash: bkhjgOMD/IEHS+ly/VrsRugL9cN6Yu5sgUx5f40TuYM=) 5: 553798E2FB2E11EFB488A95EC4F9AE02.roa (hash: p8161Irka1RhOlKGL72R+iegNNjEoBL5dnyvjeUTVQY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:25:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E502, serialNumber=386C300ED72F12B905478A33CEF27799254A691C Validity Not Before: Aug 23 07:25:56 2025 GMT Not After : Aug 30 07:25:56 2025 GMT Subject: CN=68a96d05-ecd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:03:5f:7c:76:81:b2:b7:e6:4d:77:67:50:2f: 1b:b4:a2:f8:45:de:49:8e:6b:ee:bd:d3:bb:b3:0c: 7c:23:1a:85:18:37:71:cf:46:31:3c:2e:28:97:95: 40:7e:95:4d:94:fa:15:f3:fb:e6:57:49:78:56:0b: 47:7e:35:73:ff:cc:ca:7e:1e:7d:fd:5b:c2:1c:8b: eb:0d:59:27:6c:d3:e8:15:d4:0d:5d:90:41:a9:87: 75:92:0d:25:24:f1:00:ac:46:1b:7c:25:24:15:0d: 7e:c3:79:14:c4:62:2f:7c:87:8c:42:62:b5:4d:a0: d8:b4:1b:48:a1:d7:90:48:67:a9:f7:4a:ec:b1:af: f5:a7:8a:f4:a3:b9:3c:fe:1a:46:7c:97:9b:4e:ca: 73:63:e8:d2:21:07:d4:2d:2e:2f:5c:bc:3d:96:f8: 09:cf:ea:92:1c:65:81:fa:f7:06:d7:67:cc:17:28: 6d:95:ad:65:4e:80:30:14:88:b9:7d:bc:25:26:68: 9d:b2:0a:5d:6d:52:db:2a:5f:69:d3:94:ba:63:6c: 82:ef:56:30:27:f9:0f:3b:86:71:a7:89:23:c4:43: 3c:39:fe:5b:8e:aa:7c:e5:66:c3:71:5c:ca:94:e3: c5:38:bc:d6:f1:c5:00:ad:19:a7:2c:5e:ab:71:75: 1d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:07:4E:5F:E5:BF:33:B5:91:0C:B1:D4:42:60:C4:D1:4E:85:F2:25 X509v3 Authority Key Identifier: keyid:38:6C:30:0E:D7:2F:12:B9:05:47:8A:33:CE:F2:77:99:25:4A:69:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:0e:ad:81:ba:19:52:7b:66:1a:c6:67:26:bf:48:f3:67:fe: af:9b:c7:9b:e9:13:9f:b7:a8:08:24:80:2a:93:b3:c5:2a:58: dc:67:55:9a:7b:4f:bc:01:0b:74:1e:b7:04:72:a7:b4:e1:21: 35:f3:a3:77:6b:98:0c:e8:20:85:d3:2d:c2:f3:2d:16:30:7d: 1f:1b:c3:03:91:6b:17:b3:32:35:cf:6c:8d:b2:ca:5b:64:61: eb:84:02:58:22:f8:39:ec:5a:de:79:8c:25:18:06:df:52:4f: c3:8a:92:2e:e9:5b:1b:13:8d:f9:c0:76:b5:74:c8:43:e8:19: ef:0a:05:bb:cc:cd:34:e5:05:8d:c3:05:32:f1:67:66:ed:92: e0:ef:15:eb:0f:43:82:17:08:d9:0b:26:c7:8e:6f:c0:bb:9c: 29:4c:a6:13:90:46:43:b5:4a:e2:43:c9:3a:48:6f:e2:c5:84: 54:71:75:f4:89:c1:e9:c1:d2:11:2d:17:da:36:7e:c8:54:f7: 00:a3:b2:ac:18:52:28:62:31:cd:e7:33:40:e3:24:3c:07:65: 91:6d:86:ff:3d:0a:d3:92:b7:3e:40:23:cf:77:50:56:3a:e6: a4:8d:a4:1f:d9:e7:88:8d:d3:19:5c:f7:9d:9d:a6:68:43:2b: 32:2f:35:2c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RTUwMjExMC8GA1UEBRMoMzg2QzMwMEVENzJGMTJCOTA1NDc4QTMzQ0VGMjc3OTky NTRBNjkxQzAeFw0yNTA4MjMwNzI1NTZaFw0yNTA4MzAwNzI1NTZaMBgxFjAUBgNV BAMTDTY4YTk2ZDA1LWVjZDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrA198doGyt+ZNd2dQLxu0ovhF3kmOa+6907uzDHwjGoUYN3HPRjE8LiiXlUB+ lU2U+hXz++ZXSXhWC0d+NXP/zMp+Hn39W8Ici+sNWSds0+gV1A1dkEGph3WSDSUk 8QCsRht8JSQVDX7DeRTEYi98h4xCYrVNoNi0G0ih15BIZ6n3Suyxr/WnivSjuTz+ GkZ8l5tOynNj6NIhB9QtLi9cvD2W+AnP6pIcZYH69wbXZ8wXKG2VrWVOgDAUiLl9 vCUmaJ2yCl1tUtsqX2nTlLpjbILvVjAn+Q87hnGniSPEQzw5/luOqnzlZsNxXMqU 48U4vNbxxQCtGacsXqtxdR0hAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCQdOX+W/ M7WRDLHUQmDE0U6F8iUwHwYDVR0jBBgwFoAUOGwwDtcvErkFR4ozzvJ3mSVKaRww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFFNTAyLzg3QzNGRDBBRkIy OTExRUZCNzY2REM3NkM0RjlBRTAyL09Hd3dEdGN2RXJrRlI0b3p6dkozbVNWS2FS dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT0d3d0R0Y3ZFcmtGUjRvenp2SjNtU1ZLYVJ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFF NTAyLzg3QzNGRDBBRkIyOTExRUZCNzY2REM3NkM0RjlBRTAyL09Hd3dEdGN2RXJr RlI0b3p6dkozbVNWS2FSdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEQOrYG6GVJ7ZhrGZya/SPNn/q+bx5vpE5+3qAgkgCqTs8UqWNxnVZp7 T7wBC3QetwRyp7ThITXzo3drmAzoIIXTLcLzLRYwfR8bwwORaxezMjXPbI2yyltk YeuEAlgi+DnsWt55jCUYBt9ST8OKki7pWxsTjfnAdrV0yEPoGe8KBbvMzTTlBY3D BTLxZ2btkuDvFesPQ4IXCNkLJseOb8C7nClMphOQRkO1SuJDyTpIb+LFhFRxdfSJ wenB0hEtF9o2fshU9wCjsqwYUihiMc3nM0DjJDwHZZFthv89CtOStz5AI893UFY6 5qSNpB/Z54iN0xlc952dpmhDKzIvNSw= -----END CERTIFICATE-----Generated at Sat Aug 23 18:41:59 2025 by rpki-client