$ rpki-client -vvf rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.mft File: opgFnwZTffjAi4klX3lZQaMcGAA.mft (raw, json) Hash identifier: cIVNfkthtdnntK2xZzsSrBp81szKvd4NoaBaoJ/gTz4= Subject key identifier: 97:58:F7:79:25:22:27:18:AD:AC:C2:7C:C0:2D:45:4B:14:DE:CA:87 Authority key identifier: A2:98:05:9F:06:53:7D:F8:C0:8B:89:25:5F:79:59:41:A3:1C:18:00 Certificate issuer: /CN=A9144CB7/serialNumber=A298059F06537DF8C08B89255F795941A31C1800 Certificate serial: 6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opgFnwZTffjAi4klX3lZQaMcGAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.mft Manifest number: 69 Signing time: Sat 23 Aug 2025 07:12:52 +0000 Manifest this update: Sat 23 Aug 2025 07:12:51 +0000 Manifest next update: Sat 30 Aug 2025 07:12:51 +0000 Files and hashes: 1: opgFnwZTffjAi4klX3lZQaMcGAA.crl (hash: PnYVj8/Z0XynnGCoD+3GjVAhvwQBwkC+GA4Xg2pOyso=) 2: E8716FD4EA3511EF89116C52C4F9AE02.roa (hash: /ib2O66BEz/+EIpjbYLfsm9ZEc6Tr2GDRN2PvAJwp9o=) 3: 903E0F1652BD11F0A9261F57C4F9AE02.roa (hash: wehugKaizIxEhZtf3yJWa3v9WBxQforOS0s0qf27ViE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.crl rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opgFnwZTffjAi4klX3lZQaMcGAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:12:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144CB7, serialNumber=A298059F06537DF8C08B89255F795941A31C1800 Validity Not Before: Aug 23 07:12:51 2025 GMT Not After : Aug 30 07:12:51 2025 GMT Subject: CN=68a969f3-3bbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ed:50:48:51:cf:6e:f8:67:9f:5c:a3:9f:33: 43:85:15:00:a5:c1:44:d1:41:61:05:89:ce:e7:c4: 49:92:2f:ad:7e:f2:f8:34:c6:bb:45:76:3b:6a:c9: 42:b6:7b:b2:5e:79:61:2e:5e:1f:52:46:8a:3c:f0: 92:c0:2c:50:f7:ff:75:d1:82:f2:f5:d8:64:14:41: 67:3f:ee:d2:1e:6c:52:4b:c6:86:08:97:1a:e3:0b: 7e:62:61:8e:ee:18:86:e2:a5:26:95:69:7d:98:d6: 30:13:a2:5f:61:b5:9f:52:94:68:01:74:77:aa:db: 58:d7:ac:16:3a:c1:e9:24:f1:65:77:30:79:24:cd: f2:7c:59:d6:86:2c:51:e8:25:3e:81:db:30:29:8d: 65:af:20:b1:d6:c5:7b:d5:64:62:54:3b:51:bd:09: 02:b2:c6:1b:da:35:e5:fb:2d:26:42:6f:85:af:1b: c5:7c:2b:75:e1:f6:a1:a9:32:71:9d:95:05:0c:20: 89:e3:3b:f9:3c:8f:34:be:52:68:62:1a:cb:85:8d: 4b:00:c8:2a:b7:1f:b1:8f:95:78:d6:d4:38:b9:17: 9f:f6:69:e0:40:96:a9:45:07:5b:65:a7:73:3d:24: 70:9f:37:72:e2:30:9f:50:69:47:f4:c6:d5:77:fa: 86:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:58:F7:79:25:22:27:18:AD:AC:C2:7C:C0:2D:45:4B:14:DE:CA:87 X509v3 Authority Key Identifier: keyid:A2:98:05:9F:06:53:7D:F8:C0:8B:89:25:5F:79:59:41:A3:1C:18:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opgFnwZTffjAi4klX3lZQaMcGAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:93:57:84:55:82:f0:26:38:95:10:43:17:ea:09:a0:06:95: 3e:f3:8a:0c:20:95:9f:60:fd:20:72:d3:31:57:00:80:42:df: 3a:ce:26:48:9c:ca:18:80:d9:86:09:12:7f:69:98:49:59:10: a4:49:ed:10:9f:db:73:a9:c0:51:a2:2f:11:17:99:fc:a3:af: bb:4e:ec:2d:38:fb:1d:98:21:b1:25:39:9c:b6:35:e7:08:1d: ec:ed:ea:35:20:10:79:20:34:f0:1a:33:dd:42:34:9e:27:0e: 5a:94:e9:80:e6:bc:e3:9d:51:7c:95:65:4f:eb:09:a5:0e:84: c4:ce:ad:bb:7b:fd:0a:ce:91:dc:e6:0e:ef:86:b2:62:e4:22: 03:72:c7:a5:f1:dc:2e:2c:73:64:be:9e:d5:fc:48:40:5a:b5: d9:78:b9:82:66:52:72:57:30:96:0d:26:37:15:b5:5d:1f:32: 11:43:bf:09:f4:3b:9c:da:11:0d:9a:e2:d7:58:ef:20:bf:b0: 6a:5d:a2:94:c6:52:26:6e:d8:b3:1c:49:e3:25:ca:44:f6:03: 37:50:ab:09:e8:44:c3:fa:9e:32:11:11:fd:58:f5:82:47:e4: cb:20:20:a5:27:82:4d:9b:ed:4f:8b:bf:06:1c:ca:fc:d8:86: dd:d7:af:17 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NENCNzExMC8GA1UEBRMoQTI5ODA1OUYwNjUzN0RGOEMwOEI4OTI1NUY3OTU5NDFB MzFDMTgwMDAeFw0yNTA4MjMwNzEyNTFaFw0yNTA4MzAwNzEyNTFaMBgxFjAUBgNV BAMTDTY4YTk2OWYzLTNiYmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDO7VBIUc9u+GefXKOfM0OFFQClwUTRQWEFic7nxEmSL61+8vg0xrtFdjtqyUK2 e7JeeWEuXh9SRoo88JLALFD3/3XRgvL12GQUQWc/7tIebFJLxoYIlxrjC35iYY7u GIbipSaVaX2Y1jATol9htZ9SlGgBdHeq21jXrBY6wekk8WV3MHkkzfJ8WdaGLFHo JT6B2zApjWWvILHWxXvVZGJUO1G9CQKyxhvaNeX7LSZCb4WvG8V8K3Xh9qGpMnGd lQUMIInjO/k8jzS+UmhiGsuFjUsAyCq3H7GPlXjW1Di5F5/2aeBAlqlFB1tlp3M9 JHCfN3LiMJ9QaUf0xtV3+oZ/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUl1j3eSUi JxitrMJ8wC1FSxTeyocwHwYDVR0jBBgwFoAUopgFnwZTffjAi4klX3lZQaMcGAAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0Q0I3LzhDOTNGNzZDRTE3 NjExRUZCNzk4MUIxOUM0RjlBRTAyL29wZ0Zud1pUZmZqQWk0a2xYM2xaUWFNY0dB QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb3BnRm53WlRmZmpBaTRrbFgzbFpRYU1jR0FBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0 Q0I3LzhDOTNGNzZDRTE3NjExRUZCNzk4MUIxOUM0RjlBRTAyL29wZ0Zud1pUZmZq QWk0a2xYM2xaUWFNY0dBQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFGTV4RVgvAmOJUQQxfqCaAGlT7zigwglZ9g/SBy0zFXAIBC3zrOJkic yhiA2YYJEn9pmElZEKRJ7RCf23OpwFGiLxEXmfyjr7tO7C04+x2YIbElOZy2NecI Hezt6jUgEHkgNPAaM91CNJ4nDlqU6YDmvOOdUXyVZU/rCaUOhMTOrbt7/QrOkdzm Du+GsmLkIgNyx6Xx3C4sc2S+ntX8SEBatdl4uYJmUnJXMJYNJjcVtV0fMhFDvwn0 O5zaEQ2a4tdY7yC/sGpdopTGUiZu2LMcSeMlykT2AzdQqwnoRMP6njIREf1Y9YJH 5MsgIKUngk2b7U+LvwYcyvzYht3Xrxc= -----END CERTIFICATE-----Generated at Sat Aug 23 20:29:06 2025 by rpki-client