$ rpki-client -vvf rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.mft File: oxnfTQtEZSzooFXCNSUBGLSUBYU.mft (raw, json) Hash identifier: Pe3fDxIkJiCKK/2gm/mUgD/kgsCm6mGeMnhsShig/dY= Subject key identifier: 40:3D:3F:4E:09:AD:58:32:D5:04:03:D0:FC:C1:F3:57:65:C8:E6:35 Authority key identifier: A3:19:DF:4D:0B:44:65:2C:E8:A0:55:C2:35:25:01:18:B4:94:05:85 Certificate issuer: /CN=A913E881/serialNumber=A319DF4D0B44652CE8A055C235250118B4940585 Certificate serial: 0779 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxnfTQtEZSzooFXCNSUBGLSUBYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.mft Manifest number: 0770 Signing time: Sat 28 Jun 2025 21:12:16 +0000 Manifest this update: Sat 28 Jun 2025 21:12:15 +0000 Manifest next update: Sat 05 Jul 2025 21:12:15 +0000 Files and hashes: 1: oxnfTQtEZSzooFXCNSUBGLSUBYU.crl (hash: cXZWQvF01SbhM+FWIhMU8upXIFjWfpWOdPBAnHyxzWI=) 2: 29F6C42C1FD311EBA5D83A1EC4F9AE02.roa (hash: epre9gPrGweKOSwkMZsEVYJd5/RVczknOfwPtxQUKwY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.crl rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxnfTQtEZSzooFXCNSUBGLSUBYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 21:12:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1913 (0x779) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E881, serialNumber=A319DF4D0B44652CE8A055C235250118B4940585 Validity Not Before: Jun 28 21:12:15 2025 GMT Not After : Jul 5 21:12:15 2025 GMT Subject: CN=68605aaf-455d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f5:9d:e3:b5:d4:1e:fa:c7:7e:6b:32:99:43: ec:23:57:93:a3:50:6c:8a:1e:16:4a:9a:c2:f9:e7: 51:2e:f1:76:9a:8f:2d:f5:9a:f0:d0:40:84:95:3b: a7:ba:b4:6a:74:5e:1f:82:86:61:b1:1a:ab:01:47: 1f:1d:1a:36:f0:b4:50:69:f8:7c:36:20:fe:00:00: 80:48:3f:e0:d4:b8:df:8f:56:12:13:60:27:85:99: 51:bb:fd:ac:cf:e5:61:40:3d:f4:79:e1:5b:36:eb: c4:aa:29:da:ce:cf:6d:58:55:db:e2:ae:59:79:ee: bf:60:0b:6d:2c:67:04:5f:ba:4b:3b:8a:65:e1:51: c9:27:80:f3:e0:af:24:bd:e8:4c:10:16:4e:b0:71: 4c:ff:c0:df:ac:14:ef:98:65:49:f0:24:35:2b:13: 62:c0:92:b9:61:ad:73:6f:d4:bb:e1:b4:5f:08:8b: 6b:e9:74:46:55:56:2f:e0:5d:98:d8:72:9d:d6:8f: a2:85:b6:0f:d0:44:0e:a9:a3:c4:32:c3:b3:a6:9a: 1c:9b:a5:97:08:e9:44:dd:46:a0:e9:37:42:65:73: fa:db:52:e8:90:49:fd:05:eb:df:87:a5:96:75:e1: 17:3d:bf:cc:a9:57:fc:f6:e3:6b:aa:6a:81:39:0e: 3c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:3D:3F:4E:09:AD:58:32:D5:04:03:D0:FC:C1:F3:57:65:C8:E6:35 X509v3 Authority Key Identifier: keyid:A3:19:DF:4D:0B:44:65:2C:E8:A0:55:C2:35:25:01:18:B4:94:05:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxnfTQtEZSzooFXCNSUBGLSUBYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:e8:8f:40:db:61:da:65:27:f4:a4:61:2b:17:18:93:0e:94: 94:d0:d7:e6:59:94:a9:9a:6e:6e:a7:e4:92:0b:c0:13:e8:4e: d0:74:e2:23:08:d8:53:f1:c6:29:06:3b:2e:b0:e7:84:af:2a: 95:3c:0a:4c:80:8f:5e:38:4d:b8:60:9a:9e:0e:ca:3a:62:b5: 01:b7:1c:6f:ca:da:fc:23:e9:68:c0:ca:80:54:59:cc:a9:d6: 8f:ef:a8:10:19:e5:6b:22:54:b5:08:3c:5b:21:28:59:60:cc: 9f:52:66:43:d2:4c:5f:2e:c8:b0:a4:e6:8f:df:00:f4:88:12: 82:c8:8a:0e:a6:e6:53:f6:e8:e0:b4:4b:6f:f0:29:bd:4a:53: da:42:23:b4:34:83:bf:84:f3:49:d5:66:b4:67:75:28:e9:af: 25:0b:38:66:f3:04:6e:48:6a:62:0b:d8:fb:1f:95:3f:0e:bc: cf:f7:34:86:3b:a4:ea:ae:c7:a6:89:18:2e:8f:54:7e:29:ad: 77:73:d5:09:16:99:c2:9d:e5:c1:25:cc:09:8b:22:82:e8:4c: 44:c3:c9:3b:a2:11:c4:ac:02:85:8d:99:89:8b:89:67:39:fc: 1c:c7:ed:21:e2:3d:ab:75:53:05:ef:cb:fb:75:36:6e:ed:0e: 4e:24:8d:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U4ODExMTAvBgNVBAUTKEEzMTlERjREMEI0NDY1MkNFOEEwNTVDMjM1MjUwMTE4 QjQ5NDA1ODUwHhcNMjUwNjI4MjExMjE1WhcNMjUwNzA1MjExMjE1WjAYMRYwFAYD VQQDEw02ODYwNWFhZi00NTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1/Wd47XUHvrHfmsymUPsI1eTo1Bsih4WSprC+edRLvF2mo8t9Zrw0ECElTun urRqdF4fgoZhsRqrAUcfHRo28LRQafh8NiD+AACASD/g1Ljfj1YSE2AnhZlRu/2s z+VhQD30eeFbNuvEqinazs9tWFXb4q5Zee6/YAttLGcEX7pLO4pl4VHJJ4Dz4K8k vehMEBZOsHFM/8DfrBTvmGVJ8CQ1KxNiwJK5Ya1zb9S74bRfCItr6XRGVVYv4F2Y 2HKd1o+ihbYP0EQOqaPEMsOzppocm6WXCOlE3Uag6TdCZXP621LokEn9Bevfh6WW deEXPb/MqVf89uNrqmqBOQ48gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEA9P04J rVgy1QQD0PzB81dlyOY1MB8GA1UdIwQYMBaAFKMZ300LRGUs6KBVwjUlARi0lAWF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTg4MS8xRTY0MkVFNDFG RDExMUVCQTU3RTc0MUNDNEY5QUUwMi9veG5mVFF0RVpTem9vRlhDTlNVQkdMU1VC WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL294bmZUUXRFWlN6b29GWENOU1VCR0xTVUJZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTg4MS8xRTY0MkVFNDFGRDExMUVCQTU3RTc0MUNDNEY5QUUwMi9veG5mVFF0RVpT em9vRlhDTlNVQkdMU1VCWVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCx6I9A22HaZSf0pGErFxiTDpSU0NfmWZSpmm5up+SSC8AT6E7QdOIj CNhT8cYpBjsusOeEryqVPApMgI9eOE24YJqeDso6YrUBtxxvytr8I+lowMqAVFnM qdaP76gQGeVrIlS1CDxbIShZYMyfUmZD0kxfLsiwpOaP3wD0iBKCyIoOpuZT9ujg tEtv8Cm9SlPaQiO0NIO/hPNJ1Wa0Z3Uo6a8lCzhm8wRuSGpiC9j7H5U/DrzP9zSG O6TqrsemiRguj1R+Ka13c9UJFpnCneXBJcwJiyKC6ExEw8k7ohHErAKFjZmJi4ln Ofwcx+0h4j2rdVMF78v7dTZu7Q5OJI20 -----END CERTIFICATE-----Generated at Sun Jun 29 14:03:42 2025 by rpki-client