$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft File: OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft (raw, json) Hash identifier: danT3UcMgatnH+PzUs8mmwYiJqC4KtRPsLlw69vuhyA= Subject key identifier: D1:C0:4A:EB:12:1F:C2:7C:4A:79:C3:14:80:55:6E:2D:BC:81:B3:6F Authority key identifier: 3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01 Certificate issuer: /CN=A9146A69/serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft Manifest number: 12 Signing time: Sat 23 Aug 2025 08:19:09 +0000 Manifest this update: Sat 23 Aug 2025 08:19:08 +0000 Manifest next update: Sat 30 Aug 2025 08:19:08 +0000 Files and hashes: 1: OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl (hash: NHSe374queSKCWC+NK4xwy3iQjOGR5tVMOnVshqVTYw=) 2: 5089C6286C4C11F090164A17C4F9AE02.roa (hash: J6NfxVye//wKbH6luOaipzXoE8gflP1Zb4ROZKBwOvw=) 3: 1A9D81EE6C4C11F090EC8B16C4F9AE02.roa (hash: nDBN8ofBQzSuZlFacB02+d4KlQaWiR4DsWaWORqlM1w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146A69, serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901 Validity Not Before: Aug 23 08:19:08 2025 GMT Not After : Aug 30 08:19:08 2025 GMT Subject: CN=68a9797c-3556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:df:c5:49:a2:d5:a1:c5:71:bb:81:a5:ab:27: 3f:46:cc:30:12:25:33:e3:b0:e2:32:4c:98:ed:96: 9e:0b:68:27:5e:96:b5:ed:ab:6b:7a:07:4f:d1:76: 00:9c:16:31:a9:cc:3d:a5:db:2e:d2:e9:93:38:8c: 2b:44:81:95:be:29:44:84:36:1f:09:1b:cb:4a:12: a3:28:ae:ff:bf:66:82:38:99:70:53:af:bc:c0:90: e0:e4:8b:b2:54:00:df:ce:82:7e:27:1c:4b:fa:de: ac:f4:5b:b8:02:70:a7:3c:5d:f3:f8:f4:eb:82:cd: 73:77:1a:a0:3b:69:d4:1c:27:be:20:18:b0:ca:c8: bb:2b:7d:06:bb:f8:81:f1:c4:62:0e:61:ad:3e:73: 8e:05:21:6e:8c:cd:ca:a4:af:45:3b:a4:8d:fc:ad: 50:6b:5a:c6:b6:04:cd:58:11:34:93:bc:ad:3f:32: 30:53:b5:fa:db:89:a2:5c:c3:68:8d:6d:38:45:32: 25:05:88:e2:33:43:83:ad:97:b5:67:0b:59:47:fa: 6e:f2:15:e4:22:76:dd:b5:05:03:c8:92:88:6c:ff: e1:a1:7b:4b:6c:72:f0:96:76:e6:44:7b:1c:0a:fe: ed:06:8d:ab:69:31:d9:ca:fe:3d:27:c4:73:74:ea: b9:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:C0:4A:EB:12:1F:C2:7C:4A:79:C3:14:80:55:6E:2D:BC:81:B3:6F X509v3 Authority Key Identifier: keyid:3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:5a:a3:17:c6:ae:fa:36:d1:8b:e2:32:7e:97:6b:4a:1d:11: c2:95:02:6f:e9:19:9b:76:29:e8:7a:6f:14:4f:82:01:5d:b5: 23:ec:9a:7f:e0:0e:ee:ac:ea:da:02:e0:f4:3d:62:71:95:6e: 36:ce:6b:a0:82:33:80:ba:ca:28:95:0e:d3:29:60:12:40:e3: 47:55:7e:3b:7c:da:cf:01:f2:ed:7f:c8:09:de:92:01:5f:f6: c6:b7:9f:fc:ab:57:14:36:71:b9:2d:e4:f4:08:69:b2:c2:2a: 4b:c5:2e:bc:61:f6:b3:f1:c3:00:23:74:10:98:4c:1f:18:f2: 51:49:2b:ba:38:36:43:ce:1e:cd:60:b9:bb:9c:da:6d:95:cc: ae:e4:a8:c1:c2:55:10:24:b2:75:6b:08:8e:ed:1b:e0:4f:d7: ba:d3:d5:af:17:5c:13:29:d0:c5:a3:57:5e:1f:f7:4a:64:03: 41:b9:cf:1f:55:90:91:28:c9:7e:97:87:6c:e1:43:e7:f5:f1: ad:4a:58:56:d7:60:41:e0:fe:cd:25:9b:5b:c1:24:64:c8:79: bd:99:16:45:94:39:56:d2:9e:fb:03:57:ec:c7:d1:1a:a4:da: d7:ba:6a:2a:45:d6:0e:66:64:b5:c9:53:a5:e9:85:03:1f:e2: 52:54:d1:47 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NkE2OTExMC8GA1UEBRMoM0FBNUQ3NEE0OUZFREUwODE3NjZDREFDM0JGN0RERDAz NkJCRjkwMTAeFw0yNTA4MjMwODE5MDhaFw0yNTA4MzAwODE5MDhaMBgxFjAUBgNV BAMTDTY4YTk3OTdjLTM1NTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZ38VJotWhxXG7gaWrJz9GzDASJTPjsOIyTJjtlp4LaCdelrXtq2t6B0/RdgCc FjGpzD2l2y7S6ZM4jCtEgZW+KUSENh8JG8tKEqMorv+/ZoI4mXBTr7zAkODki7JU AN/Ogn4nHEv63qz0W7gCcKc8XfP49OuCzXN3GqA7adQcJ74gGLDKyLsrfQa7+IHx xGIOYa0+c44FIW6Mzcqkr0U7pI38rVBrWsa2BM1YETSTvK0/MjBTtfrbiaJcw2iN bThFMiUFiOIzQ4Otl7VnC1lH+m7yFeQidt21BQPIkohs/+Ghe0tscvCWduZEexwK /u0GjatpMdnK/j0nxHN06rltAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0cBK6xIf wnxKecMUgFVuLbyBs28wHwYDVR0jBBgwFoAUOqXXSkn+3ggXZs2sO/fd0Da7+QEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2QTY5L0NCMUNGRTg0NkM0 QTExRjA5ODczMUQxM0M0RjlBRTAyL09xWFhTa24tM2dnWFpzMnNPX2ZkMERhNy1R RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT3FYWFNrbi0zZ2dYWnMyc09fZmQwRGE3LVFFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2 QTY5L0NCMUNGRTg0NkM0QTExRjA5ODczMUQxM0M0RjlBRTAyL09xWFhTa24tM2dn WFpzMnNPX2ZkMERhNy1RRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFVaoxfGrvo20YviMn6Xa0odEcKVAm/pGZt2Keh6bxRPggFdtSPsmn/g Du6s6toC4PQ9YnGVbjbOa6CCM4C6yiiVDtMpYBJA40dVfjt82s8B8u1/yAnekgFf 9sa3n/yrVxQ2cbkt5PQIabLCKkvFLrxh9rPxwwAjdBCYTB8Y8lFJK7o4NkPOHs1g ubuc2m2VzK7kqMHCVRAksnVrCI7tG+BP17rT1a8XXBMp0MWjV14f90pkA0G5zx9V kJEoyX6Xh2zhQ+f18a1KWFbXYEHg/s0lm1vBJGTIeb2ZFkWUOVbSnvsDV+zH0Rqk 2te6aipF1g5mZLXJU6XphQMf4lJU0Uc= -----END CERTIFICATE-----Generated at Sat Aug 23 17:12:03 2025 by rpki-client