$ rpki-client -vvf rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.mft File: OLX3py9k7NJYhfi0dYUC4j2oOLs.mft (raw, json) Hash identifier: d/5R+Dxo/ufs007ROZss2CGagYioBxJxBPUI/rlm4rg= Subject key identifier: B1:A3:DF:E4:85:EC:8D:5D:38:56:B1:17:68:96:82:B9:D9:9F:0A:F8 Authority key identifier: 38:B5:F7:A7:2F:64:EC:D2:58:85:F8:B4:75:85:02:E2:3D:A8:38:BB Certificate issuer: /CN=A912C039/serialNumber=38B5F7A72F64ECD25885F8B4758502E23DA838BB Certificate serial: 0A35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OLX3py9k7NJYhfi0dYUC4j2oOLs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.mft Manifest number: 0A20 Signing time: Fri 04 Jul 2025 20:12:05 +0000 Manifest this update: Fri 04 Jul 2025 20:12:05 +0000 Manifest next update: Fri 11 Jul 2025 20:12:05 +0000 Files and hashes: 1: OLX3py9k7NJYhfi0dYUC4j2oOLs.crl (hash: +ZY+sRVII0PfiUCBxPS5Bf3KCM+XdiLvlqfqn1u1nUc=) 2: 2E53CDEC139C11EF8D2CFD84C4F9AE02.roa (hash: +OxVgsTFeHXtInD93OSVx4VoDwnGKpFnWPCaCB5ImQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.crl rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OLX3py9k7NJYhfi0dYUC4j2oOLs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2613 (0xa35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C039, serialNumber=38B5F7A72F64ECD25885F8B4758502E23DA838BB Validity Not Before: Jul 4 20:12:05 2025 GMT Not After : Jul 11 20:12:05 2025 GMT Subject: CN=68683595-b951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a5:72:fc:7a:41:2c:36:a4:a7:7f:6c:b0:06: a8:e6:8a:f8:ba:6f:04:e1:43:aa:4a:7e:f4:dc:e2: 00:e2:d2:44:65:8b:50:69:2d:01:00:13:ba:95:ea: 9e:76:8e:75:fa:20:1f:33:e3:f7:38:6e:b2:11:06: e2:a6:db:e9:5d:a9:a4:55:1f:5f:b8:ea:3b:9c:a1: 83:7b:bb:46:ab:ad:3d:aa:7c:47:27:3e:4e:a9:2d: 55:7f:6f:b3:d2:ee:04:35:b6:8d:bd:a7:b0:1a:b9: ac:29:88:fc:2e:2c:9f:10:d7:3e:7e:0f:90:f1:ec: 08:d0:b4:5f:d9:dd:8f:13:88:16:3e:25:70:a8:a9: ca:2f:4b:6c:fd:3f:34:10:68:81:62:07:de:c2:40: 91:9e:6f:40:d3:95:2d:c8:b8:f0:60:81:a4:80:17: 5f:bd:43:80:92:52:ef:60:57:34:0f:c7:3c:a6:7b: 8b:36:0d:0c:8a:c4:0e:70:b0:7c:da:76:19:b2:ac: a9:8f:31:3b:66:57:9b:97:3b:e3:25:d5:4f:64:2a: fc:69:e9:e3:2c:f3:4e:72:ac:79:b4:36:14:15:b1: a6:b9:cc:a4:fc:e4:c7:4c:d4:04:72:7d:3e:7f:6e: b9:94:72:8a:ae:e0:ef:2d:1e:bb:f9:a4:8d:43:07: 93:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:A3:DF:E4:85:EC:8D:5D:38:56:B1:17:68:96:82:B9:D9:9F:0A:F8 X509v3 Authority Key Identifier: keyid:38:B5:F7:A7:2F:64:EC:D2:58:85:F8:B4:75:85:02:E2:3D:A8:38:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OLX3py9k7NJYhfi0dYUC4j2oOLs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:b8:c1:dc:1e:4b:2f:1c:68:93:24:bf:a5:79:6b:45:84:d3: 84:be:b0:5e:43:10:5f:18:c6:1e:24:5b:d3:90:23:5b:98:f5: 14:13:25:ab:b8:2c:b8:75:a7:1c:53:c9:be:b1:05:eb:e8:de: ff:95:87:a5:14:93:90:cd:a4:93:27:ac:b1:76:5e:46:1c:56: 23:98:69:17:9e:a8:1c:2a:4c:24:6b:98:c2:fd:00:82:2d:03: dc:81:b7:8f:3c:eb:5a:2e:27:cb:10:32:90:50:14:14:be:7e: 1a:f5:45:ab:1a:d9:5b:bc:f8:21:c6:12:e6:0c:b1:c3:24:12: ae:85:c7:d6:da:70:ba:63:c7:75:9c:5a:10:b4:38:f4:b6:9b: 6d:b2:e6:5f:f8:c5:3a:d4:b7:ee:32:a8:58:9c:33:5e:97:b2: 20:a4:8e:98:dd:64:b4:c3:75:c3:d1:6d:24:f7:e7:58:05:6f: 2b:c2:7d:6b:75:71:31:c0:c7:5f:9c:9d:6e:11:6f:d0:68:be: c9:34:ab:cc:00:72:fe:5b:9a:b6:8c:60:17:53:4b:31:37:2d: f8:38:6b:8c:d2:a4:6a:d5:f7:ff:a4:5c:39:81:af:88:a7:ae: 86:15:7f:33:a7:7d:74:c2:c1:6c:ac:58:21:c2:1f:c4:27:f4: 90:3a:03:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMwMzkxMTAvBgNVBAUTKDM4QjVGN0E3MkY2NEVDRDI1ODg1RjhCNDc1ODUwMkUy M0RBODM4QkIwHhcNMjUwNzA0MjAxMjA1WhcNMjUwNzExMjAxMjA1WjAYMRYwFAYD VQQDEw02ODY4MzU5NS1iOTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz6Vy/HpBLDakp39ssAao5or4um8E4UOqSn703OIA4tJEZYtQaS0BABO6leqe do51+iAfM+P3OG6yEQbiptvpXamkVR9fuOo7nKGDe7tGq609qnxHJz5OqS1Vf2+z 0u4ENbaNvaewGrmsKYj8LiyfENc+fg+Q8ewI0LRf2d2PE4gWPiVwqKnKL0ts/T80 EGiBYgfewkCRnm9A05UtyLjwYIGkgBdfvUOAklLvYFc0D8c8pnuLNg0MisQOcLB8 2nYZsqypjzE7ZleblzvjJdVPZCr8aenjLPNOcqx5tDYUFbGmucyk/OTHTNQEcn0+ f265lHKKruDvLR67+aSNQweTywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLGj3+SF 7I1dOFaxF2iWgrnZnwr4MB8GA1UdIwQYMBaAFDi196cvZOzSWIX4tHWFAuI9qDi7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzAzOS9DMjVEMDJGRTc4 OUQxMUVBQkRBNkYwNUZDNEY5QUUwMi9PTFgzcHk5azdOSlloZmkwZFlVQzRqMm9P THMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09MWDNweTlrN05KWWhmaTBkWVVDNGoyb09Mcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzAzOS9DMjVEMDJGRTc4OUQxMUVBQkRBNkYwNUZDNEY5QUUwMi9PTFgzcHk5azdO SlloZmkwZFlVQzRqMm9PTHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8uMHcHksvHGiTJL+leWtFhNOEvrBeQxBfGMYeJFvTkCNbmPUUEyWr uCy4daccU8m+sQXr6N7/lYelFJOQzaSTJ6yxdl5GHFYjmGkXnqgcKkwka5jC/QCC LQPcgbePPOtaLifLEDKQUBQUvn4a9UWrGtlbvPghxhLmDLHDJBKuhcfW2nC6Y8d1 nFoQtDj0tpttsuZf+MU61LfuMqhYnDNel7IgpI6Y3WS0w3XD0W0k9+dYBW8rwn1r dXExwMdfnJ1uEW/QaL7JNKvMAHL+W5q2jGAXU0sxNy34OGuM0qRq1ff/pFw5ga+I p66GFX8zp310wsFsrFghwh/EJ/SQOgN8 -----END CERTIFICATE-----Generated at Sat Jul 5 01:23:00 2025 by rpki-client