$ rpki-client -vvf rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft File: owkQUxBPCE11ymUhc2bq35hJE8E.mft (raw, json) Hash identifier: Aso2u9Z3tzszPCNRUxbl3eKYfVYIKKf8sq1O5n60QuM= Subject key identifier: 7A:C0:86:E8:E7:6C:4D:62:4B:E6:26:6B:64:08:F7:44:BF:06:AC:02 Authority key identifier: A3:09:10:53:10:4F:08:4D:75:CA:65:21:73:66:EA:DF:98:49:13:C1 Certificate issuer: /CN=A912C12B/serialNumber=A3091053104F084D75CA65217366EADF984913C1 Certificate serial: 0C9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft Manifest number: 0C90 Signing time: Fri 22 Aug 2025 18:21:36 +0000 Manifest this update: Fri 22 Aug 2025 18:21:35 +0000 Manifest next update: Fri 29 Aug 2025 18:21:35 +0000 Files and hashes: 1: owkQUxBPCE11ymUhc2bq35hJE8E.crl (hash: D8Lg6A/qEUFCc8WNiuL/DPzi1ngie1s1ayWoEvzmqhE=) 2: 38D7B616768D11EB94573712C4F9AE02.roa (hash: osYkBFEZo4TGPYEkCTIfOfI2cJcgpXjHG6X4+VVwtkw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.crl rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:21:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3226 (0xc9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C12B, serialNumber=A3091053104F084D75CA65217366EADF984913C1 Validity Not Before: Aug 22 18:21:35 2025 GMT Not After : Aug 29 18:21:35 2025 GMT Subject: CN=68a8b52f-4b68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:db:be:63:c5:38:29:16:fd:31:4a:37:a7:b0: 1e:c2:fa:dc:7d:58:66:6d:7e:09:cc:d4:4e:50:e8: f1:f2:a1:26:79:d3:e5:33:40:2d:82:4b:b3:94:16: 36:df:b3:77:32:96:c8:ca:d4:e9:2c:40:4e:8e:f1: 7e:7d:1a:99:2f:55:7a:4a:33:92:77:7b:b6:4d:50: 9e:57:39:ea:c2:d3:10:e8:43:6e:11:ea:09:e9:29: e8:56:d3:f7:15:0b:46:57:4b:4f:99:8b:e3:6f:bf: bf:b3:6f:ee:0b:e2:e5:7a:be:04:de:17:8c:34:53: e7:b7:6f:00:87:94:4b:b7:8b:b0:af:b2:ad:31:e1: e6:6d:c7:25:f7:bb:80:73:12:c3:b7:13:e2:f2:f1: a5:cb:5f:53:cb:0f:71:5f:fb:27:8f:e5:14:cd:6c: 34:a3:4d:55:33:17:7a:69:15:96:2a:b2:66:67:cb: 92:a9:60:8d:cf:12:2c:08:2c:0d:ce:8e:af:3d:ef: df:01:27:9f:34:07:f1:1a:0b:69:5b:62:47:12:b1: 30:69:7a:f8:94:9a:c7:2b:fd:d6:35:38:73:29:a4: 60:85:d3:ca:84:ce:4d:68:70:cc:b8:ec:c6:29:24: f5:6f:a7:78:8e:34:56:d4:d2:40:65:43:49:1e:02: 8d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:C0:86:E8:E7:6C:4D:62:4B:E6:26:6B:64:08:F7:44:BF:06:AC:02 X509v3 Authority Key Identifier: keyid:A3:09:10:53:10:4F:08:4D:75:CA:65:21:73:66:EA:DF:98:49:13:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:e5:18:73:cf:63:e6:99:e9:0c:c3:5f:97:9a:01:88:e0:97: 8e:d1:5b:f7:f5:52:1c:cc:b9:f3:81:d8:60:42:e1:c4:6a:bc: 42:c9:5f:c7:df:80:1f:b9:a7:7f:56:cc:f7:ac:e5:f5:03:96: 80:11:67:5b:35:9d:e6:7d:90:94:c8:82:ef:be:36:4e:ae:95: e8:ca:fb:4a:07:44:03:d8:46:ea:4f:ca:cc:40:70:02:5d:20: fd:a0:34:29:12:84:05:5c:e4:2c:fb:e1:11:ad:c0:f5:20:2f: 94:c6:36:e5:b8:a5:1d:25:7c:78:d5:c5:14:18:e8:a9:fd:21: 5c:16:ec:f4:1d:09:bd:4d:ed:7f:e6:31:14:96:a9:0b:fb:3e: 32:19:1b:0e:fb:05:13:d2:3d:2c:e1:13:27:91:02:81:2c:e0: 3c:3c:35:85:34:ec:13:13:c7:f2:53:60:8a:f5:dd:9a:7b:ba: 7b:45:54:49:70:43:a2:e4:d0:0e:fe:5a:0c:2b:9b:13:db:25: bf:19:27:88:3f:eb:20:cf:02:c5:3d:15:ec:d7:34:fe:40:91: 99:76:ed:03:a5:53:b1:89:18:84:66:77:cb:2d:74:83:2f:75: 72:3e:24:c8:7d:e1:b2:4f:3e:87:67:df:28:31:09:f3:ed:39: 90:3a:d1:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMxMkIxMTAvBgNVBAUTKEEzMDkxMDUzMTA0RjA4NEQ3NUNBNjUyMTczNjZFQURG OTg0OTEzQzEwHhcNMjUwODIyMTgyMTM1WhcNMjUwODI5MTgyMTM1WjAYMRYwFAYD VQQDEw02OGE4YjUyZi00YjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvtu+Y8U4KRb9MUo3p7AewvrcfVhmbX4JzNROUOjx8qEmedPlM0AtgkuzlBY2 37N3MpbIytTpLEBOjvF+fRqZL1V6SjOSd3u2TVCeVznqwtMQ6ENuEeoJ6SnoVtP3 FQtGV0tPmYvjb7+/s2/uC+Ller4E3heMNFPnt28Ah5RLt4uwr7KtMeHmbccl97uA cxLDtxPi8vGly19Tyw9xX/snj+UUzWw0o01VMxd6aRWWKrJmZ8uSqWCNzxIsCCwN zo6vPe/fASefNAfxGgtpW2JHErEwaXr4lJrHK/3WNThzKaRghdPKhM5NaHDMuOzG KST1b6d4jjRW1NJAZUNJHgKNJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHrAhujn bE1iS+Yma2QI90S/BqwCMB8GA1UdIwQYMBaAFKMJEFMQTwhNdcplIXNm6t+YSRPB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzEyQi9GOUZFRDRDMkZG OUQxMUU5OTk2ODk1NzdDNEY5QUUwMi9vd2tRVXhCUENFMTF5bVVoYzJicTM1aEpF OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL293a1FVeEJQQ0UxMXltVWhjMmJxMzVoSkU4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzEyQi9GOUZFRDRDMkZGOUQxMUU5OTk2ODk1NzdDNEY5QUUwMi9vd2tRVXhCUENF MTF5bVVoYzJicTM1aEpFOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDD5Rhzz2PmmekMw1+XmgGI4JeO0Vv39VIczLnzgdhgQuHEarxCyV/H 34Afuad/Vsz3rOX1A5aAEWdbNZ3mfZCUyILvvjZOrpXoyvtKB0QD2EbqT8rMQHAC XSD9oDQpEoQFXOQs++ERrcD1IC+UxjbluKUdJXx41cUUGOip/SFcFuz0HQm9Te1/ 5jEUlqkL+z4yGRsO+wUT0j0s4RMnkQKBLOA8PDWFNOwTE8fyU2CK9d2ae7p7RVRJ cEOi5NAO/loMK5sT2yW/GSeIP+sgzwLFPRXs1zT+QJGZdu0DpVOxiRiEZnfLLXSD L3VyPiTIfeGyTz6HZ98oMQnz7TmQOtHj -----END CERTIFICATE-----Generated at Sat Aug 23 20:27:43 2025 by rpki-client