$ rpki-client -vvf rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft File: kOgVQgZDtd1jkSg9Z3RKOrowctM.mft (raw, json) Hash identifier: qNeu7isljIz/TfRyFxDOZi+qWYBfi3LLQcd6f+CZMzg= Subject key identifier: CB:82:24:10:39:A1:CB:AD:FC:A9:9F:D6:F7:91:1A:D4:62:E6:D2:23 Authority key identifier: 90:E8:15:42:06:43:B5:DD:63:91:28:3D:67:74:4A:3A:BA:30:72:D3 Certificate issuer: /CN=A914BB5D/serialNumber=90E815420643B5DD6391283D67744A3ABA3072D3 Certificate serial: 0C25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft Manifest number: 0C19 Signing time: Fri 22 Aug 2025 18:49:46 +0000 Manifest this update: Fri 22 Aug 2025 18:49:45 +0000 Manifest next update: Fri 29 Aug 2025 18:49:45 +0000 Files and hashes: 1: kOgVQgZDtd1jkSg9Z3RKOrowctM.crl (hash: WuiYuQEKHxy2pVPZeQjKyoJPUiVX7b32a8aGXG2HD5k=) 2: B52B819E14F411EA96EC5874C4F9AE02.roa (hash: CgIHdazzVOF6QA1a4XIGPV0wyY67xaJD1pxnbNXHCvI=) 3: B49D829014F411EA96EC5874C4F9AE02.roa (hash: V1tC0MfEENnmWJmQHsKngVqk62NvpQbP2E538Q1fAlM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.crl rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:49:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3109 (0xc25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BB5D, serialNumber=90E815420643B5DD6391283D67744A3ABA3072D3 Validity Not Before: Aug 22 18:49:45 2025 GMT Not After : Aug 29 18:49:45 2025 GMT Subject: CN=68a8bbc9-8b47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3d:10:a9:9e:07:2b:09:a2:34:fe:2e:9f:93: bb:1c:cf:0e:81:0e:8f:37:ad:28:d1:91:51:db:cd: 25:68:48:27:cf:fb:e0:83:93:35:69:1e:28:34:fd: f4:99:92:44:29:45:f9:5f:0f:81:01:4c:03:b6:2b: ac:6b:e3:dd:e4:ba:ff:08:39:ff:62:c4:18:d2:c8: 6e:32:3e:9d:50:1d:2a:6b:3d:14:ac:ce:73:66:34: b2:46:c4:79:c6:6c:21:ab:82:e0:1c:0a:dc:15:29: f6:57:7f:5f:b2:53:7d:f2:64:93:f0:7e:ef:7e:70: c8:d7:7d:9a:e2:d8:37:9c:a9:fd:7b:de:e8:a6:8a: 5b:5f:bd:c4:5a:ef:83:17:26:59:41:13:05:a2:eb: 14:62:b1:8d:da:30:a8:d7:f6:b4:b8:6f:79:1d:8f: de:65:f4:76:87:fc:f1:bb:4b:a7:d0:7c:54:18:c4: c4:0d:ff:b2:6b:9d:0d:d8:e8:ce:25:33:f7:ab:2e: 6a:23:8e:42:02:e7:4c:ad:e1:fd:72:1f:60:72:ce: 1c:8f:f8:d3:7d:0b:08:fc:e5:57:3d:df:38:08:0f: 56:5b:64:0b:04:72:4c:bd:11:17:b1:d9:fa:c4:5a: 8a:bb:3f:fa:09:a6:83:c2:67:55:c3:f0:dd:b0:2b: 64:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:82:24:10:39:A1:CB:AD:FC:A9:9F:D6:F7:91:1A:D4:62:E6:D2:23 X509v3 Authority Key Identifier: keyid:90:E8:15:42:06:43:B5:DD:63:91:28:3D:67:74:4A:3A:BA:30:72:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:8c:79:44:4e:dc:af:e3:6f:97:4d:f8:5d:7b:5f:ea:a8:b1: 02:e2:bb:38:73:b5:c1:7b:33:e7:ab:cc:7d:b4:ba:0f:f2:b4: ad:c5:95:cf:ea:85:c6:6b:96:f8:06:96:10:0e:5e:e1:27:15: 4e:34:9e:c6:cc:5f:55:2a:9e:9b:6d:4f:33:67:fc:6c:a1:da: 32:4f:df:70:6d:cb:13:f2:43:cb:d1:0b:e6:ef:8e:e8:4c:4c: 41:f8:c4:ed:47:74:23:5f:47:fa:e3:43:ba:b8:39:07:58:17: a9:32:27:80:fc:15:e5:e1:18:7e:7d:a4:a0:57:e3:50:a9:3e: 24:1c:8e:57:46:3b:b3:f3:bd:d4:ba:73:17:6a:2d:aa:25:dc: 11:1a:49:68:be:26:67:22:3e:69:f9:a9:5c:0a:b1:db:51:71: 07:25:50:be:a5:95:c4:7f:76:83:df:49:dd:d3:73:c2:86:b7: f2:0d:08:44:73:82:c9:b4:82:5a:97:b1:7d:f3:1c:ac:74:59: 36:21:b5:a5:0d:40:2d:13:da:5f:6e:7f:c0:25:76:5d:87:40: f2:74:57:ab:7a:19:33:6d:47:49:c7:b9:67:80:27:95:e9:3e: f5:14:4f:fa:dc:2d:47:d4:bf:36:57:ca:d2:04:e2:95:17:2f: 39:18:e5:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJCNUQxMTAvBgNVBAUTKDkwRTgxNTQyMDY0M0I1REQ2MzkxMjgzRDY3NzQ0QTNB QkEzMDcyRDMwHhcNMjUwODIyMTg0OTQ1WhcNMjUwODI5MTg0OTQ1WjAYMRYwFAYD VQQDEw02OGE4YmJjOS04YjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0D0QqZ4HKwmiNP4un5O7HM8OgQ6PN60o0ZFR280laEgnz/vgg5M1aR4oNP30 mZJEKUX5Xw+BAUwDtiusa+Pd5Lr/CDn/YsQY0shuMj6dUB0qaz0UrM5zZjSyRsR5 xmwhq4LgHArcFSn2V39fslN98mST8H7vfnDI132a4tg3nKn9e97opopbX73EWu+D FyZZQRMFousUYrGN2jCo1/a0uG95HY/eZfR2h/zxu0un0HxUGMTEDf+ya50N2OjO JTP3qy5qI45CAudMreH9ch9gcs4cj/jTfQsI/OVXPd84CA9WW2QLBHJMvREXsdn6 xFqKuz/6CaaDwmdVw/DdsCtkaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMuCJBA5 ocut/Kmf1veRGtRi5tIjMB8GA1UdIwQYMBaAFJDoFUIGQ7XdY5EoPWd0Sjq6MHLT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkI1RC9GMDI3Q0RCNDE0 RjExMUVBOUEwNjg0NkJDNEY5QUUwMi9rT2dWUWdaRHRkMWprU2c5WjNSS09yb3dj dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tPZ1ZRZ1pEdGQxamtTZzlaM1JLT3Jvd2N0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkI1RC9GMDI3Q0RCNDE0RjExMUVBOUEwNjg0NkJDNEY5QUUwMi9rT2dWUWdaRHRk MWprU2c5WjNSS09yb3djdE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDQjHlETtyv42+XTfhde1/qqLEC4rs4c7XBezPnq8x9tLoP8rStxZXP 6oXGa5b4BpYQDl7hJxVONJ7GzF9VKp6bbU8zZ/xsodoyT99wbcsT8kPL0Qvm747o TExB+MTtR3QjX0f640O6uDkHWBepMieA/BXl4Rh+faSgV+NQqT4kHI5XRjuz873U unMXai2qJdwRGkloviZnIj5p+alcCrHbUXEHJVC+pZXEf3aD30nd03PChrfyDQhE c4LJtIJal7F98xysdFk2IbWlDUAtE9pfbn/AJXZdh0DydFerehkzbUdJx7lngCeV 6T71FE/63C1H1L82V8rSBOKVFy85GOWh -----END CERTIFICATE-----Generated at Sat Aug 23 16:29:32 2025 by rpki-client