$ rpki-client -vvf rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft File: oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft (raw, json) Hash identifier: VmgAUzIlTCPyvV+E4mqv3e1Z1FsKIxFDXdlpu3XI0XE= Subject key identifier: 88:89:76:EC:9A:33:98:F2:2B:7A:A7:6E:8A:01:2F:CB:3B:32:43:95 Authority key identifier: A0:CB:B2:CF:7A:ED:83:C2:19:73:C7:0B:64:C0:A4:15:6C:5B:F5:D2 Certificate issuer: /CN=A9138B72/serialNumber=A0CBB2CF7AED83C21973C70B64C0A4156C5BF5D2 Certificate serial: 097D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMuyz3rtg8IZc8cLZMCkFWxb9dI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft Manifest number: 0974 Signing time: Fri 22 Aug 2025 20:16:34 +0000 Manifest this update: Fri 22 Aug 2025 20:16:34 +0000 Manifest next update: Fri 29 Aug 2025 20:16:34 +0000 Files and hashes: 1: oMuyz3rtg8IZc8cLZMCkFWxb9dI.crl (hash: ZlH+pwMyEzgIW0wr+TpmjorlxN4s+t11npx13Yx5tCE=) 2: 311647C0896C11EBA85B0747C4F9AE02.roa (hash: MVtlwW2sU7CkBdehjteFY61IQnaVOAPQQ+etloBMPo4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.crl rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMuyz3rtg8IZc8cLZMCkFWxb9dI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:16:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2429 (0x97d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138B72, serialNumber=A0CBB2CF7AED83C21973C70B64C0A4156C5BF5D2 Validity Not Before: Aug 22 20:16:34 2025 GMT Not After : Aug 29 20:16:34 2025 GMT Subject: CN=68a8d022-be90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5a:a1:44:4c:5f:6e:ef:47:b3:f5:c5:75:27: f4:a2:8f:63:3a:db:af:f2:b4:1f:41:3d:21:b1:a4: 91:b5:89:4f:f6:9a:2a:32:9f:f5:44:e9:f9:df:f7: f4:4b:ee:75:dc:05:18:c2:e8:23:82:c2:02:45:84: 5a:0e:14:02:57:79:c3:31:06:19:a8:b9:d7:47:93: a6:eb:da:61:8b:15:9b:fd:5b:0d:e0:a3:22:96:ea: 70:db:3f:5d:76:22:d6:a2:58:5c:e0:c8:94:4b:19: ab:0a:f1:1a:6d:9f:79:24:58:e8:0f:4e:fe:f0:d5: 2f:3d:c8:7d:2f:db:db:71:dd:36:1d:7a:10:a7:90: 54:69:7d:58:9d:3d:f3:54:5b:c7:dd:ff:bc:2e:af: df:af:c7:ba:f2:3a:02:e9:64:06:9e:a0:1e:1f:d3: ab:b1:37:fc:10:31:89:a1:42:93:e5:3d:68:b1:33: d4:31:fe:28:bb:46:a3:68:63:cf:d1:93:da:47:83: 38:fc:92:6e:8f:9a:3f:5d:41:42:da:0b:7c:c5:9d: e1:7c:d2:ab:c7:21:7c:62:a6:12:5e:97:9e:0e:a8: 76:f1:ea:2d:43:bf:17:55:e8:f2:84:5d:37:08:6b: 6d:85:58:69:5a:66:51:ba:c4:e9:6c:92:d7:48:56: 96:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:89:76:EC:9A:33:98:F2:2B:7A:A7:6E:8A:01:2F:CB:3B:32:43:95 X509v3 Authority Key Identifier: keyid:A0:CB:B2:CF:7A:ED:83:C2:19:73:C7:0B:64:C0:A4:15:6C:5B:F5:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMuyz3rtg8IZc8cLZMCkFWxb9dI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:e8:04:f8:bd:4b:a2:42:37:0c:e0:5e:8a:eb:9b:a6:f2:73: 70:e6:47:89:03:49:e3:42:d7:b7:8e:ce:c9:96:cd:75:f5:e6: c9:da:70:ce:95:a1:81:58:62:95:52:5e:8a:57:ec:bc:06:25: eb:20:08:c0:0c:e2:33:67:9e:fc:37:d9:fd:bc:89:00:79:62: d4:e8:5f:c7:de:54:2f:ce:42:1e:a4:00:5f:7a:73:09:d3:98: 08:71:b8:04:ef:5d:de:89:6f:9f:5d:f1:68:8b:39:79:3e:a4: 3c:bd:95:ef:98:50:f2:9c:e6:a0:f1:79:9c:ce:10:fd:04:a8: 68:3a:0d:f0:d6:4b:0f:6d:a9:f0:40:b8:96:21:fb:c5:32:8c: 94:67:ef:05:50:19:35:b7:df:9d:dd:5d:44:7b:52:ee:71:b0: 0f:63:29:f9:b1:a6:44:a1:da:b2:3a:3b:70:88:65:b2:23:2f: 62:3e:79:b2:5a:bd:1e:e3:54:5c:c6:46:45:8e:48:b9:ca:9b: 2c:4e:23:c9:e7:09:a4:9a:7b:09:14:ca:f1:cb:56:b0:80:6c: 95:d3:1b:0d:90:e9:4e:3d:c6:be:ee:d6:22:c1:3b:df:19:98: ba:e3:f4:c9:c0:82:7e:e7:03:2b:c5:b5:22:50:d4:4b:9e:d5: 3d:ce:52:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhCNzIxMTAvBgNVBAUTKEEwQ0JCMkNGN0FFRDgzQzIxOTczQzcwQjY0QzBBNDE1 NkM1QkY1RDIwHhcNMjUwODIyMjAxNjM0WhcNMjUwODI5MjAxNjM0WjAYMRYwFAYD VQQDEw02OGE4ZDAyMi1iZTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2VqhRExfbu9Hs/XFdSf0oo9jOtuv8rQfQT0hsaSRtYlP9poqMp/1ROn53/f0 S+513AUYwugjgsICRYRaDhQCV3nDMQYZqLnXR5Om69phixWb/VsN4KMilupw2z9d diLWolhc4MiUSxmrCvEabZ95JFjoD07+8NUvPch9L9vbcd02HXoQp5BUaX1YnT3z VFvH3f+8Lq/fr8e68joC6WQGnqAeH9OrsTf8EDGJoUKT5T1osTPUMf4ou0ajaGPP 0ZPaR4M4/JJuj5o/XUFC2gt8xZ3hfNKrxyF8YqYSXpeeDqh28eotQ78XVejyhF03 CGtthVhpWmZRusTpbJLXSFaWxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIiJduya M5jyK3qnbooBL8s7MkOVMB8GA1UdIwQYMBaAFKDLss967YPCGXPHC2TApBVsW/XS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEI3Mi8xRTQwMEE5QTlB QjcxMUVBQUIyMkEzN0RDNEY5QUUwMi9vTXV5ejNydGc4SVpjOGNMWk1Da0ZXeGI5 ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29NdXl6M3J0ZzhJWmM4Y0xaTUNrRld4YjlkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEI3Mi8xRTQwMEE5QTlBQjcxMUVBQUIyMkEzN0RDNEY5QUUwMi9vTXV5ejNydGc4 SVpjOGNMWk1Da0ZXeGI5ZEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBU6AT4vUuiQjcM4F6K65um8nNw5keJA0njQte3js7Jls119ebJ2nDO laGBWGKVUl6KV+y8BiXrIAjADOIzZ578N9n9vIkAeWLU6F/H3lQvzkIepABfenMJ 05gIcbgE713eiW+fXfFoizl5PqQ8vZXvmFDynOag8XmczhD9BKhoOg3w1ksPbanw QLiWIfvFMoyUZ+8FUBk1t9+d3V1Ee1LucbAPYyn5saZEodqyOjtwiGWyIy9iPnmy Wr0e41RcxkZFjki5ypssTiPJ5wmkmnsJFMrxy1awgGyV0xsNkOlOPca+7tYiwTvf GZi64/TJwIJ+5wMrxbUiUNRLntU9zlJE -----END CERTIFICATE-----Generated at Sat Aug 23 20:26:45 2025 by rpki-client