$ rpki-client -vvf rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft File: OGxcstbg7GFBrrc_STUhsFIKPPo.mft (raw, json) Hash identifier: 77tROD669xGwWzotLxI2M8NZmJEUNX74QNPcsO46h7M= Subject key identifier: 7E:48:BC:DE:0B:DA:CC:9E:23:D9:98:6E:3A:DF:D2:9B:43:EE:1B:F3 Authority key identifier: 38:6C:5C:B2:D6:E0:EC:61:41:AE:B7:3F:49:35:21:B0:52:0A:3C:FA Certificate issuer: /CN=A9123AB4/serialNumber=386C5CB2D6E0EC6141AEB73F493521B0520A3CFA Certificate serial: 1D54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft Manifest number: 1D45 Signing time: Wed 02 Jul 2025 16:15:46 +0000 Manifest this update: Wed 02 Jul 2025 16:15:46 +0000 Manifest next update: Wed 09 Jul 2025 16:15:46 +0000 Files and hashes: 1: OGxcstbg7GFBrrc_STUhsFIKPPo.crl (hash: 3xLmSNyNyytbbwCb0ON1eaJQQrNFBSsKdt5tt/g3BSA=) 2: DE5B018C8D8B11EBB959991DC4F9AE02.roa (hash: GTYplA3+/oqNyhCsSIMGIT62xAe/H3EJbhvf29oZLZM=) 3: DD9C07828D8B11EBB959991DC4F9AE02.roa (hash: KcmqJfHxUpDuc0ECvYHJhDG4s7ZruYPj6RgZ3nxOtpo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.crl rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:15:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7508 (0x1d54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123AB4, serialNumber=386C5CB2D6E0EC6141AEB73F493521B0520A3CFA Validity Not Before: Jul 2 16:15:46 2025 GMT Not After : Jul 9 16:15:46 2025 GMT Subject: CN=68655b32-e66b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:39:e0:c3:c7:d9:13:df:c0:49:69:a9:77:64: 5d:3b:06:69:05:24:93:7b:f1:55:84:8a:48:c7:c8: 49:d9:cf:ff:0f:15:c4:a1:49:c3:c1:6f:b3:48:f1: 2c:ab:ae:21:50:c6:ff:a5:ff:a9:c3:32:c8:61:e4: 7d:b4:b2:b9:fb:0d:d1:08:f2:aa:c7:25:6e:37:f5: e0:30:de:a0:ca:ac:61:ec:f3:fa:20:a9:79:a2:70: 64:fd:54:7f:03:f7:ff:53:72:df:28:f1:15:c8:cd: 76:b1:c9:67:f5:85:04:0f:14:8e:ad:cf:63:ae:7f: 02:70:c9:be:3b:37:0c:c5:da:d7:6f:05:c1:65:96: 68:bb:15:64:93:55:c4:17:6b:1d:f7:f6:3d:7e:f4: 1d:8b:f0:36:45:4d:cd:cf:93:1a:b7:63:15:a8:a8: 8e:35:04:02:10:48:f8:69:84:a5:58:8e:3e:d3:0c: 6f:25:95:d7:d5:22:bf:4f:a0:14:cb:0c:82:aa:ed: f5:d1:62:65:c8:0f:a3:bc:d7:01:78:b5:63:60:11: a2:70:84:86:18:f1:58:6a:a9:e0:a7:d3:a2:ee:d0: 99:23:d6:51:47:4e:a7:e5:db:0f:dc:67:3e:bb:4e: a7:34:ef:2b:47:30:de:67:d6:37:2e:8e:6d:70:27: 8a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:48:BC:DE:0B:DA:CC:9E:23:D9:98:6E:3A:DF:D2:9B:43:EE:1B:F3 X509v3 Authority Key Identifier: keyid:38:6C:5C:B2:D6:E0:EC:61:41:AE:B7:3F:49:35:21:B0:52:0A:3C:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:46:41:68:06:f8:28:17:f9:10:bc:75:fa:04:02:3a:82:4a: 5d:d1:19:5e:8a:70:83:1e:a4:7e:d4:7c:03:e2:20:6f:24:2b: f7:f3:b6:7f:ad:c4:8e:cf:f6:d3:63:a2:ba:7c:4e:de:33:ec: 11:d4:b1:11:05:f3:d6:79:a0:19:5a:d4:fd:41:2e:5d:41:69: 2d:43:43:b4:8a:fd:79:27:ff:b2:62:56:1f:96:a6:90:e0:2f: 58:69:27:0e:a7:fe:d7:e1:b6:4a:e5:39:7d:78:6f:cd:af:26: ed:21:8e:17:65:59:ae:a9:2f:3c:d9:a5:a6:6b:d8:9c:ac:74: 26:4e:50:45:f4:e9:5e:de:a1:6e:e2:26:25:49:8a:44:c2:82: e4:0c:8c:ad:f4:a0:39:10:c7:9d:3a:16:2b:40:15:b5:c0:99: 25:92:e3:db:bf:04:d2:ef:24:dc:25:55:de:3b:6e:5d:50:84: 8f:fd:43:1a:95:00:de:d1:d7:99:87:99:6b:ea:0f:57:3b:34: d7:6a:47:d6:74:09:de:e8:09:8b:4a:ab:6f:33:dd:6e:da:bc: 24:4b:1d:47:30:83:0d:bb:83:61:5d:70:0a:71:26:f8:2b:cf: 22:eb:42:12:d4:29:8b:a3:c3:de:89:25:95:d1:3b:e6:38:62: 89:0f:29:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNBQjQxMTAvBgNVBAUTKDM4NkM1Q0IyRDZFMEVDNjE0MUFFQjczRjQ5MzUyMUIw NTIwQTNDRkEwHhcNMjUwNzAyMTYxNTQ2WhcNMjUwNzA5MTYxNTQ2WjAYMRYwFAYD VQQDEw02ODY1NWIzMi1lNjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArzngw8fZE9/ASWmpd2RdOwZpBSSTe/FVhIpIx8hJ2c//DxXEoUnDwW+zSPEs q64hUMb/pf+pwzLIYeR9tLK5+w3RCPKqxyVuN/XgMN6gyqxh7PP6IKl5onBk/VR/ A/f/U3LfKPEVyM12scln9YUEDxSOrc9jrn8CcMm+OzcMxdrXbwXBZZZouxVkk1XE F2sd9/Y9fvQdi/A2RU3Nz5Mat2MVqKiONQQCEEj4aYSlWI4+0wxvJZXX1SK/T6AU ywyCqu310WJlyA+jvNcBeLVjYBGicISGGPFYaqngp9Oi7tCZI9ZRR06n5dsP3Gc+ u06nNO8rRzDeZ9Y3Lo5tcCeKqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH5IvN4L 2syeI9mYbjrf0ptD7hvzMB8GA1UdIwQYMBaAFDhsXLLW4OxhQa63P0k1IbBSCjz6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0FCNC8xRkIwNDBBMEIx NzQxMUU2OEVDODg1MThDNEY5QUUwMi9PR3hjc3RiZzdHRkJycmNfU1RVaHNGSUtQ UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09HeGNzdGJnN0dGQnJyY19TVFVoc0ZJS1BQby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0FCNC8xRkIwNDBBMEIxNzQxMUU2OEVDODg1MThDNEY5QUUwMi9PR3hjc3RiZzdH RkJycmNfU1RVaHNGSUtQUG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZRkFoBvgoF/kQvHX6BAI6gkpd0RleinCDHqR+1HwD4iBvJCv387Z/ rcSOz/bTY6K6fE7eM+wR1LERBfPWeaAZWtT9QS5dQWktQ0O0iv15J/+yYlYflqaQ 4C9YaScOp/7X4bZK5Tl9eG/NrybtIY4XZVmuqS882aWma9icrHQmTlBF9Ole3qFu 4iYlSYpEwoLkDIyt9KA5EMedOhYrQBW1wJklkuPbvwTS7yTcJVXeO25dUISP/UMa lQDe0deZh5lr6g9XOzTXakfWdAne6AmLSqtvM91u2rwkSx1HMIMNu4NhXXAKcSb4 K88i60IS1CmLo8PeiSWV0TvmOGKJDymj -----END CERTIFICATE-----Generated at Thu Jul 3 00:29:42 2025 by rpki-client