$ rpki-client -vvf rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft File: UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft (raw, json) Hash identifier: aJtc8KzAK6zI84JSIBhzvXeZWgbfRB9hiCA68IGgqa4= Subject key identifier: 2A:71:E0:B5:ED:2E:EB:AA:6E:3E:4F:A5:5C:74:68:24:E5:74:08:44 Authority key identifier: 50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F Certificate issuer: /CN=A913B1DA/serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F Certificate serial: 30AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft Manifest number: 309A Signing time: Fri 22 Aug 2025 15:29:22 +0000 Manifest this update: Fri 22 Aug 2025 15:29:21 +0000 Manifest next update: Fri 29 Aug 2025 15:29:21 +0000 Files and hashes: 1: UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl (hash: NwEBE11vTXPYrH+UvHA3IzlXgTF4e47AlP0Zb8/AsPw=) 2: E5DB5238DFBD11EC8E203126C4F9AE02.roa (hash: ZrmmPRVPNdXmVUqASzwRt7WIJ8A+6EE3tmK84hv8/3g=) 3: B8B02658C16B11EEA7D01A7DC4F9AE02.roa (hash: inEKK4l1A/n9MCoAdqgbUu3ySJUn1ofzfsmCuXBMLoQ=) 4: 446A425EA6BB11ED9D458785C4F9AE02.roa (hash: b3tJCOFhrOxNwX+xrXj/RF8CaJdbbK6dUe5Fw9N8cng=) 5: 43DADDD0A6BB11ED9D458785C4F9AE02.roa (hash: pqhARhh64EGCd2MgnNHnrxWDNycvjlNc8wDHcPRwifg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:29:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12460 (0x30ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B1DA, serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F Validity Not Before: Aug 22 15:29:21 2025 GMT Not After : Aug 29 15:29:21 2025 GMT Subject: CN=68a88cd2-3289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c2:8c:65:95:83:25:08:6f:94:32:1f:97:cd: b5:24:2f:bc:92:b7:65:67:ab:3a:f7:ff:54:ce:0e: f2:1d:b9:64:e0:4e:e8:17:fa:26:99:a9:fe:fc:d5: 7a:55:a4:30:0a:48:f1:5e:d7:67:b2:96:e6:62:36: af:dc:aa:59:43:ff:ba:e4:11:86:65:6d:92:dc:98: d5:e6:e4:62:8a:b2:93:5c:16:f0:0a:8b:5e:0d:e0: cc:9b:7c:7e:c0:0c:ca:ef:3a:ee:ff:64:0c:e3:e9: 74:96:a7:00:ba:c1:09:f0:3e:1e:9e:70:39:2a:bb: fe:28:c6:26:1b:50:74:94:6f:22:39:0e:54:be:93: 45:8f:1a:ac:8a:19:d9:a3:ab:a3:c7:99:a2:01:ef: 01:cd:2c:04:20:91:fc:32:8f:e9:c7:3f:1f:23:52: bb:6a:12:a0:4d:3c:ea:70:9f:88:42:70:4d:7a:33: c3:23:b4:e1:e3:7e:4c:9b:e4:e4:42:40:44:4e:db: 9e:20:22:c3:9f:4a:ad:49:ef:49:12:12:70:d7:74: 67:2b:5b:f0:c3:88:12:14:74:ea:50:74:7c:ab:80: f7:92:12:0c:8a:4e:66:ee:38:cc:b1:19:35:51:7f: 6e:63:eb:4d:13:10:47:26:63:c6:a1:f3:e7:d7:70: 34:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:71:E0:B5:ED:2E:EB:AA:6E:3E:4F:A5:5C:74:68:24:E5:74:08:44 X509v3 Authority Key Identifier: keyid:50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:f6:8f:6a:58:4f:e8:76:b3:df:77:28:a0:31:06:c9:54:18: 0b:f8:0e:ed:7c:7e:5a:ff:a2:9c:93:d1:03:42:0f:d7:af:56: fd:aa:8c:5b:9b:42:25:51:93:f9:9f:c1:0b:98:10:71:e6:00: 27:40:8c:04:08:0f:75:61:82:e9:7c:06:fa:42:e3:f8:43:9f: b2:49:fd:cc:79:f7:4c:ec:d0:83:8c:10:23:5a:a9:32:55:d2: fd:03:90:93:31:e9:36:0c:5f:7e:c2:71:94:48:7b:40:7b:03: 11:1e:ae:9a:a5:f3:22:d6:bb:c4:a4:c0:15:8d:f6:72:e2:96: 07:d8:03:a5:29:09:d3:67:fb:53:d9:4c:64:7a:61:75:93:de: a3:c7:1c:bc:eb:01:50:40:36:dc:aa:3e:37:61:e2:ee:eb:88: 40:f9:91:d6:43:5b:13:9a:fc:39:0d:fa:7b:75:14:3f:53:17: 2b:cf:2a:60:ed:63:06:84:11:d3:12:a8:fe:4c:a2:7a:50:78: 40:32:42:12:25:3d:0c:fe:a8:75:c2:f1:ac:f9:d4:72:ad:47: 2f:dd:e0:92:60:86:9e:b4:a2:68:82:45:88:80:df:ae:8e:7b: fb:5a:94:a1:da:1c:e0:60:6e:a6:ad:3c:8d:56:d5:26:ef:41: 21:df:ff:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IxREExMTAvBgNVBAUTKDUwRTY2ODNBNkFGNDY0NEI2OEExMUMyMkRBN0YzQTY1 QjMxMkMwNkYwHhcNMjUwODIyMTUyOTIxWhcNMjUwODI5MTUyOTIxWjAYMRYwFAYD VQQDEw02OGE4OGNkMi0zMjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1MKMZZWDJQhvlDIfl821JC+8krdlZ6s69/9Uzg7yHblk4E7oF/omman+/NV6 VaQwCkjxXtdnspbmYjav3KpZQ/+65BGGZW2S3JjV5uRiirKTXBbwCoteDeDMm3x+ wAzK7zru/2QM4+l0lqcAusEJ8D4ennA5Krv+KMYmG1B0lG8iOQ5UvpNFjxqsihnZ o6ujx5miAe8BzSwEIJH8Mo/pxz8fI1K7ahKgTTzqcJ+IQnBNejPDI7Th435Mm+Tk QkBETtueICLDn0qtSe9JEhJw13RnK1vww4gSFHTqUHR8q4D3khIMik5m7jjMsRk1 UX9uY+tNExBHJmPGofPn13A0RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCpx4LXt Luuqbj5PpVx0aCTldAhEMB8GA1UdIwQYMBaAFFDmaDpq9GRLaKEcItp/OmWzEsBv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjFEQS8xNEI3NkJDOEVE MEIxMUUyQTM1REM2NDg1OTExRUEzMi9VT1pvT21yMFpFdG9vUndpMm44NlpiTVN3 RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VPWm9PbXIwWkV0b29Sd2kybjg2WmJNU3dHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjFEQS8xNEI3NkJDOEVEMEIxMUUyQTM1REM2NDg1OTExRUEzMi9VT1pvT21yMFpF dG9vUndpMm44NlpiTVN3RzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAo9o9qWE/odrPfdyigMQbJVBgL+A7tfH5a/6Kck9EDQg/Xr1b9qoxb m0IlUZP5n8ELmBBx5gAnQIwECA91YYLpfAb6QuP4Q5+ySf3MefdM7NCDjBAjWqky VdL9A5CTMek2DF9+wnGUSHtAewMRHq6apfMi1rvEpMAVjfZy4pYH2AOlKQnTZ/tT 2UxkemF1k96jxxy86wFQQDbcqj43YeLu64hA+ZHWQ1sTmvw5Dfp7dRQ/Uxcrzypg 7WMGhBHTEqj+TKJ6UHhAMkISJT0M/qh1wvGs+dRyrUcv3eCSYIaetKJogkWIgN+u jnv7WpSh2hzgYG6mrTyNVtUm70Eh3//L -----END CERTIFICATE-----Generated at Sat Aug 23 10:44:36 2025 by rpki-client