$ rpki-client -vvf rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft File: OGxcstbg7GFBrrc_STUhsFIKPPo.mft (raw, json) Hash identifier: LNlJPWKls+tFuCKyxrY9yuklvI68imcFuTrd3AaEdIQ= Subject key identifier: 5F:B5:1B:B8:99:CB:79:D7:DE:DA:03:34:9E:F2:40:F7:87:AB:35:13 Authority key identifier: 38:6C:5C:B2:D6:E0:EC:61:41:AE:B7:3F:49:35:21:B0:52:0A:3C:FA Certificate issuer: /CN=A9123AB4/serialNumber=386C5CB2D6E0EC6141AEB73F493521B0520A3CFA Certificate serial: 1D6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft Manifest number: 1D5F Signing time: Fri 22 Aug 2025 16:11:27 +0000 Manifest this update: Fri 22 Aug 2025 16:11:26 +0000 Manifest next update: Fri 29 Aug 2025 16:11:26 +0000 Files and hashes: 1: OGxcstbg7GFBrrc_STUhsFIKPPo.crl (hash: bnY6NsPVXzJsMOdAgv4GqIA8XsZTlrAXNR7mfKMsuwA=) 2: DE5B018C8D8B11EBB959991DC4F9AE02.roa (hash: GTYplA3+/oqNyhCsSIMGIT62xAe/H3EJbhvf29oZLZM=) 3: DD9C07828D8B11EBB959991DC4F9AE02.roa (hash: KcmqJfHxUpDuc0ECvYHJhDG4s7ZruYPj6RgZ3nxOtpo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.crl rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:11:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7534 (0x1d6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123AB4, serialNumber=386C5CB2D6E0EC6141AEB73F493521B0520A3CFA Validity Not Before: Aug 22 16:11:26 2025 GMT Not After : Aug 29 16:11:26 2025 GMT Subject: CN=68a896af-edbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8d:f8:6d:f6:d2:ae:85:49:9e:c6:87:7b:59: fb:da:82:f6:35:6b:5b:6d:9a:1f:5e:01:87:26:0e: 70:74:09:41:1c:90:c9:5c:9e:f8:e7:73:07:95:e1: cc:97:dc:93:7f:f3:0d:cb:8f:e5:33:07:4e:f4:38: fb:2c:90:44:f9:1f:68:ba:bc:fb:a1:02:3d:a6:15: aa:83:7c:bf:fd:2b:ae:23:9a:70:6f:47:6e:a3:ca: b3:96:fd:4f:45:92:7c:2a:28:69:9e:8f:0f:27:ff: 28:07:b2:7d:9a:fc:f9:b0:76:b0:20:0c:d8:a2:80: 80:52:7a:86:78:c4:e5:f1:97:0f:da:c6:1c:fa:20: ec:7e:95:95:db:8b:bd:10:56:12:bd:3d:2e:9a:04: a5:20:1d:9f:d1:24:0b:1c:1c:08:7e:ca:a4:b5:7d: 1b:a1:31:fe:f0:8b:60:76:b3:78:56:92:ed:bf:20: ef:49:7d:82:d5:66:cb:26:ab:18:69:45:18:78:99: 7c:26:04:48:b2:d8:ab:5b:5c:3b:42:24:9b:3f:e9: a8:fd:1c:8f:89:ef:d4:6f:1c:7c:dc:db:25:39:06: 76:ba:ea:7c:00:5f:5f:3f:88:ff:31:3f:61:2d:92: b9:7c:81:97:c6:1d:86:ef:53:43:76:0b:94:02:b0: 77:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:B5:1B:B8:99:CB:79:D7:DE:DA:03:34:9E:F2:40:F7:87:AB:35:13 X509v3 Authority Key Identifier: keyid:38:6C:5C:B2:D6:E0:EC:61:41:AE:B7:3F:49:35:21:B0:52:0A:3C:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:42:1f:65:84:ae:ce:cd:27:7e:aa:b4:57:54:c1:35:0b:5a: d6:43:ae:82:5c:b4:58:ca:1e:ee:7c:74:79:70:82:c6:34:f7: 63:5b:20:98:71:0b:b8:ae:eb:5d:4f:42:41:10:1e:fd:36:19: 32:71:51:a5:11:06:aa:d1:cc:90:35:f8:94:59:4d:4e:cb:00: ba:b6:ac:5c:af:e2:9f:54:f2:02:5d:f7:81:f5:f0:bc:76:b3: 8d:b1:5d:96:46:53:1d:c3:0e:f4:15:70:76:fc:6b:c3:2f:f0: b2:79:fb:96:8a:bb:5f:e9:05:4d:03:6d:fe:2d:1c:23:48:e7: da:c2:a8:93:68:cc:3b:b0:a9:43:60:32:bc:1a:51:5a:e4:d7: b7:a7:51:5d:79:d8:9e:e6:14:b8:aa:a5:75:7a:a5:ea:01:61: 02:e5:77:a9:00:af:06:d0:97:2e:70:09:d0:e7:87:42:ab:11: d5:bb:92:41:d0:2a:79:22:35:a5:ca:78:73:e2:44:ff:73:86: 47:2f:3a:16:4d:99:a7:4a:8e:2b:bf:68:d3:6d:d3:36:6b:d3: da:f5:07:ba:11:b3:97:72:5a:58:1d:32:cb:da:ee:18:25:08: fc:10:29:68:37:02:8d:52:2f:a0:59:1b:8b:70:d5:f3:ba:79: 96:56:6e:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNBQjQxMTAvBgNVBAUTKDM4NkM1Q0IyRDZFMEVDNjE0MUFFQjczRjQ5MzUyMUIw NTIwQTNDRkEwHhcNMjUwODIyMTYxMTI2WhcNMjUwODI5MTYxMTI2WjAYMRYwFAYD VQQDEw02OGE4OTZhZi1lZGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvY34bfbSroVJnsaHe1n72oL2NWtbbZofXgGHJg5wdAlBHJDJXJ7453MHleHM l9yTf/MNy4/lMwdO9Dj7LJBE+R9ourz7oQI9phWqg3y//SuuI5pwb0duo8qzlv1P RZJ8Kihpno8PJ/8oB7J9mvz5sHawIAzYooCAUnqGeMTl8ZcP2sYc+iDsfpWV24u9 EFYSvT0umgSlIB2f0SQLHBwIfsqktX0boTH+8ItgdrN4VpLtvyDvSX2C1WbLJqsY aUUYeJl8JgRIstirW1w7QiSbP+mo/RyPie/Ubxx83NslOQZ2uup8AF9fP4j/MT9h LZK5fIGXxh2G71NDdguUArB3IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+1G7iZ y3nX3toDNJ7yQPeHqzUTMB8GA1UdIwQYMBaAFDhsXLLW4OxhQa63P0k1IbBSCjz6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0FCNC8xRkIwNDBBMEIx NzQxMUU2OEVDODg1MThDNEY5QUUwMi9PR3hjc3RiZzdHRkJycmNfU1RVaHNGSUtQ UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09HeGNzdGJnN0dGQnJyY19TVFVoc0ZJS1BQby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0FCNC8xRkIwNDBBMEIxNzQxMUU2OEVDODg1MThDNEY5QUUwMi9PR3hjc3RiZzdH RkJycmNfU1RVaHNGSUtQUG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNQh9lhK7OzSd+qrRXVME1C1rWQ66CXLRYyh7ufHR5cILGNPdjWyCY cQu4rutdT0JBEB79NhkycVGlEQaq0cyQNfiUWU1OywC6tqxcr+KfVPICXfeB9fC8 drONsV2WRlMdww70FXB2/GvDL/CyefuWirtf6QVNA23+LRwjSOfawqiTaMw7sKlD YDK8GlFa5Ne3p1Fdedie5hS4qqV1eqXqAWEC5XepAK8G0JcucAnQ54dCqxHVu5JB 0Cp5IjWlynhz4kT/c4ZHLzoWTZmnSo4rv2jTbdM2a9Pa9Qe6EbOXclpYHTLL2u4Y JQj8ECloNwKNUi+gWRuLcNXzunmWVm46 -----END CERTIFICATE-----Generated at Sat Aug 23 19:34:25 2025 by rpki-client