$ rpki-client -vvf rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.mft File: oxnfTQtEZSzooFXCNSUBGLSUBYU.mft (raw, json) Hash identifier: JNBdVhIELuKsZyLXrDIRgqJeYlBeGvpYSwoUIwrAQpE= Subject key identifier: A6:60:84:81:9F:43:87:F4:68:D5:F8:17:D5:BA:8A:2E:71:FF:EE:75 Authority key identifier: A3:19:DF:4D:0B:44:65:2C:E8:A0:55:C2:35:25:01:18:B4:94:05:85 Certificate issuer: /CN=A913E881/serialNumber=A319DF4D0B44652CE8A055C235250118B4940585 Certificate serial: 0795 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxnfTQtEZSzooFXCNSUBGLSUBYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.mft Manifest number: 078C Signing time: Fri 22 Aug 2025 21:37:36 +0000 Manifest this update: Fri 22 Aug 2025 21:37:35 +0000 Manifest next update: Fri 29 Aug 2025 21:37:35 +0000 Files and hashes: 1: oxnfTQtEZSzooFXCNSUBGLSUBYU.crl (hash: nET+DGUOCVC3Faj2dKf1fKdH0rfiDwKLk4thXRmr9Ig=) 2: 29F6C42C1FD311EBA5D83A1EC4F9AE02.roa (hash: epre9gPrGweKOSwkMZsEVYJd5/RVczknOfwPtxQUKwY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.crl rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxnfTQtEZSzooFXCNSUBGLSUBYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:37:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1941 (0x795) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E881, serialNumber=A319DF4D0B44652CE8A055C235250118B4940585 Validity Not Before: Aug 22 21:37:35 2025 GMT Not After : Aug 29 21:37:35 2025 GMT Subject: CN=68a8e31f-5ed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bd:d5:45:e1:07:71:02:89:46:70:73:a0:3e: ce:27:f3:75:2e:9a:6a:23:5f:d1:c7:6e:7e:5d:bf: cf:c5:78:24:ef:1b:ba:2e:85:6f:29:00:76:cb:c3: ba:00:b4:2a:e6:92:76:05:31:3d:0c:d5:c6:31:2b: 93:60:55:39:40:db:de:ad:c6:53:f8:6f:df:7e:15: 14:06:d0:01:eb:e0:32:65:50:1e:85:94:f4:62:5c: 73:50:18:98:f7:d6:8f:32:22:2d:d1:c2:f1:a6:36: 46:43:44:e8:ac:38:96:4b:d3:6f:48:3b:c2:e9:f1: 08:d9:a3:c2:0f:e3:28:9b:00:e4:15:e6:b8:51:68: bb:69:ae:69:9b:e1:f7:97:cf:5e:9e:52:db:b5:95: 5c:26:07:fe:04:8d:57:a5:f6:2c:4f:83:d8:07:49: 9c:89:56:3d:67:64:08:73:9b:1d:a3:93:25:99:be: 97:32:0a:50:b8:81:62:6d:0b:69:fb:a5:d0:59:85: 8b:1e:33:0c:9f:ed:5f:ac:78:56:cb:b7:98:a2:da: af:9e:10:10:10:71:3b:96:ec:34:10:e8:86:01:7a: 64:72:31:ef:63:0b:f2:b8:9a:c6:86:31:ee:0d:8b: 36:1a:4b:c1:73:23:ce:8c:86:60:a2:38:3d:b6:a6: d8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:60:84:81:9F:43:87:F4:68:D5:F8:17:D5:BA:8A:2E:71:FF:EE:75 X509v3 Authority Key Identifier: keyid:A3:19:DF:4D:0B:44:65:2C:E8:A0:55:C2:35:25:01:18:B4:94:05:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxnfTQtEZSzooFXCNSUBGLSUBYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:e2:b2:8c:bf:3b:fb:cd:2a:05:fb:2c:bc:80:3b:87:fc:42: f7:e9:a0:a1:f6:c9:f3:f8:97:db:f7:b8:99:9c:f3:b0:ee:70: 29:c3:eb:4a:5b:af:39:0c:54:dc:a3:a2:51:1d:06:02:6b:0a: 47:70:e2:ea:86:6f:f9:41:ac:1d:dd:e5:0f:f2:eb:7e:ff:a7: 65:89:41:3f:ff:39:7d:77:65:4c:77:70:f7:8b:17:86:2e:e6: 11:cf:eb:d0:9b:3b:53:5b:42:a1:d1:6d:10:b5:b0:5b:7f:94: 9e:df:a2:dc:8c:5c:5e:d6:40:3b:ee:2b:c6:01:fe:ba:3b:fe: 7e:cc:f7:b4:13:41:b2:5e:fd:ce:9b:a3:ad:04:d8:67:9a:7e: f6:2d:ab:56:18:fa:6d:c0:83:b2:53:ea:ee:2e:8c:69:3e:56: 69:58:2c:a4:91:61:cf:39:26:7b:80:c2:d2:ba:f0:e3:35:ea: 11:9d:24:55:02:47:55:a6:06:19:b3:53:02:49:4c:e5:b9:4b: 47:e1:0b:10:cf:d1:05:67:59:ea:f7:d7:a3:6e:95:8b:30:63: 50:03:1a:77:78:19:09:93:84:c2:26:f1:a3:de:b4:1b:a8:d9: b8:0b:92:c1:d6:3f:3e:8b:99:9a:a3:07:85:50:67:c7:41:1d: 34:07:e3:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U4ODExMTAvBgNVBAUTKEEzMTlERjREMEI0NDY1MkNFOEEwNTVDMjM1MjUwMTE4 QjQ5NDA1ODUwHhcNMjUwODIyMjEzNzM1WhcNMjUwODI5MjEzNzM1WjAYMRYwFAYD VQQDEw02OGE4ZTMxZi01ZWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyL3VReEHcQKJRnBzoD7OJ/N1LppqI1/Rx25+Xb/PxXgk7xu6LoVvKQB2y8O6 ALQq5pJ2BTE9DNXGMSuTYFU5QNvercZT+G/ffhUUBtAB6+AyZVAehZT0YlxzUBiY 99aPMiIt0cLxpjZGQ0TorDiWS9NvSDvC6fEI2aPCD+MomwDkFea4UWi7aa5pm+H3 l89enlLbtZVcJgf+BI1XpfYsT4PYB0mciVY9Z2QIc5sdo5Mlmb6XMgpQuIFibQtp +6XQWYWLHjMMn+1frHhWy7eYotqvnhAQEHE7luw0EOiGAXpkcjHvYwvyuJrGhjHu DYs2GkvBcyPOjIZgojg9tqbYpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKZghIGf Q4f0aNX4F9W6ii5x/+51MB8GA1UdIwQYMBaAFKMZ300LRGUs6KBVwjUlARi0lAWF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTg4MS8xRTY0MkVFNDFG RDExMUVCQTU3RTc0MUNDNEY5QUUwMi9veG5mVFF0RVpTem9vRlhDTlNVQkdMU1VC WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL294bmZUUXRFWlN6b29GWENOU1VCR0xTVUJZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTg4MS8xRTY0MkVFNDFGRDExMUVCQTU3RTc0MUNDNEY5QUUwMi9veG5mVFF0RVpT em9vRlhDTlNVQkdMU1VCWVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDG4rKMvzv7zSoF+yy8gDuH/EL36aCh9snz+Jfb97iZnPOw7nApw+tK W685DFTco6JRHQYCawpHcOLqhm/5Qawd3eUP8ut+/6dliUE//zl9d2VMd3D3ixeG LuYRz+vQmztTW0Kh0W0QtbBbf5Se36LcjFxe1kA77ivGAf66O/5+zPe0E0GyXv3O m6OtBNhnmn72LatWGPptwIOyU+ruLoxpPlZpWCykkWHPOSZ7gMLSuvDjNeoRnSRV AkdVpgYZs1MCSUzluUtH4QsQz9EFZ1nq99ejbpWLMGNQAxp3eBkJk4TCJvGj3rQb qNm4C5LB1j8+i5maoweFUGfHQR00B+PE -----END CERTIFICATE-----Generated at Sat Aug 23 17:55:14 2025 by rpki-client