$ rpki-client -vvf rpki.apnic.net/member_repository/A9151638/12711732476C11EC89EF6239C4F9AE02/OFkvBW-DzNQKYq4RYCkmlChaLPQ.mft File: OFkvBW-DzNQKYq4RYCkmlChaLPQ.mft (raw, json) Hash identifier: POFPhwyYiNy8e6RxBWyTNnxHQ4AxxrVWFCdIO8lBaIU= Subject key identifier: F8:A0:1F:8F:67:3E:A6:97:D7:FC:88:AB:38:47:4A:20:72:CF:98:A0 Authority key identifier: 38:59:2F:05:6F:83:CC:D4:0A:62:AE:11:60:29:26:94:28:5A:2C:F4 Certificate issuer: /CN=A9151638/serialNumber=38592F056F83CCD40A62AE1160292694285A2CF4 Certificate serial: 04A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OFkvBW-DzNQKYq4RYCkmlChaLPQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151638/12711732476C11EC89EF6239C4F9AE02/OFkvBW-DzNQKYq4RYCkmlChaLPQ.mft Manifest number: 04A0 Signing time: Sat 23 Aug 2025 00:11:26 +0000 Manifest this update: Sat 23 Aug 2025 00:11:26 +0000 Manifest next update: Sat 30 Aug 2025 00:11:26 +0000 Files and hashes: 1: OFkvBW-DzNQKYq4RYCkmlChaLPQ.crl (hash: WSffAVlc8NyRBfL7vENN6G7XGda7AaYGvcCNjtl3DSc=) 2: 2404BA68477011EC8A31B762C4F9AE02.roa (hash: LZSDyQE8pTBtNGB8AYE8ckz2kTeKfiBGL7LhbO/Zt7g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151638/12711732476C11EC89EF6239C4F9AE02/OFkvBW-DzNQKYq4RYCkmlChaLPQ.crl rsync://rpki.apnic.net/member_repository/A9151638/12711732476C11EC89EF6239C4F9AE02/OFkvBW-DzNQKYq4RYCkmlChaLPQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OFkvBW-DzNQKYq4RYCkmlChaLPQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:11:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1190 (0x4a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151638, serialNumber=38592F056F83CCD40A62AE1160292694285A2CF4 Validity Not Before: Aug 23 00:11:26 2025 GMT Not After : Aug 30 00:11:26 2025 GMT Subject: CN=68a9072e-1652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:3f:2b:c3:fe:7a:e4:74:c7:1d:2d:e8:3b:8a: e6:74:f4:f5:c9:d3:da:4f:95:43:87:fd:6b:9f:0f: 35:ad:58:81:a3:63:f5:69:2e:40:1f:2b:74:21:9f: ef:6c:2c:26:01:e8:9e:8f:60:dd:69:94:82:bb:46: 30:8a:e7:4e:6c:24:81:81:be:13:f6:5e:fc:ab:44: 71:4c:53:48:0f:da:60:a0:cb:27:40:49:ee:eb:b9: 3e:a6:f4:e8:29:32:4f:fb:bd:84:fe:b1:e4:d1:d3: a5:37:fd:28:ef:b4:89:61:b8:20:ab:24:c2:82:dc: 27:af:b2:14:9c:21:62:f6:96:c3:48:59:0a:13:09: 3b:aa:72:ee:a8:6a:71:69:f1:15:d1:d6:d9:01:b0: 73:f4:a2:c6:df:f2:46:04:c9:16:58:bb:24:5c:3a: cd:ed:7c:14:a8:de:a2:a2:7f:0e:37:30:3e:58:75: ef:5d:b0:1c:b4:52:2f:a3:3a:53:4a:89:d9:bb:d6: 58:a9:66:9b:6a:a8:5d:ec:f4:52:d3:f6:14:c4:d3: 72:46:f4:07:7e:57:ac:55:29:0e:90:13:5e:f3:e3: c0:a0:fa:3c:29:14:8e:d3:15:24:0e:88:53:ac:cf: e1:bc:55:f9:2f:4a:19:a0:16:82:5e:2c:aa:28:2d: f5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:A0:1F:8F:67:3E:A6:97:D7:FC:88:AB:38:47:4A:20:72:CF:98:A0 X509v3 Authority Key Identifier: keyid:38:59:2F:05:6F:83:CC:D4:0A:62:AE:11:60:29:26:94:28:5A:2C:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151638/12711732476C11EC89EF6239C4F9AE02/OFkvBW-DzNQKYq4RYCkmlChaLPQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OFkvBW-DzNQKYq4RYCkmlChaLPQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151638/12711732476C11EC89EF6239C4F9AE02/OFkvBW-DzNQKYq4RYCkmlChaLPQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:89:86:ed:ad:30:ff:14:93:02:ec:07:ea:79:6e:1d:3a:a7: e4:8d:e5:e2:53:25:84:c2:e4:a5:ac:56:10:36:47:77:ac:c4: 9c:69:22:0a:92:5b:54:0f:e3:43:b7:c0:f9:cf:0e:da:60:d1: 28:1b:db:c0:32:93:b9:38:03:d9:4e:2e:af:e2:e7:12:7e:3b: 3c:7b:77:b5:f0:2d:8f:7e:80:22:62:0d:c6:dd:0b:c0:a8:67: e7:39:48:90:74:9b:48:00:c0:d9:be:b3:44:18:b6:8c:ab:13: ee:7a:39:57:8f:1e:0d:b2:50:92:17:4f:ba:c4:de:c7:73:86: 86:2d:57:58:fc:a3:9d:9a:e2:17:35:01:a6:6a:53:54:b6:54: 8b:6f:86:8e:78:b5:da:23:73:f2:49:67:d0:7c:4c:9e:2a:e7: e9:12:8b:d4:a6:a9:9e:c4:66:a0:ed:84:74:f5:f1:da:df:91: 65:51:22:f7:6f:da:c7:5b:ce:86:00:7c:4e:9d:64:b2:97:1c: b0:55:cb:2d:d7:9e:03:98:78:09:7b:bf:d2:20:b3:f6:cf:79: 9c:c5:96:86:a2:1c:7d:6d:6f:b4:9b:63:3c:bc:5d:07:5f:c3: 6b:83:cc:20:56:31:06:73:5f:e3:e8:3a:d2:e0:c5:16:3a:9e: be:5f:f4:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE2MzgxMTAvBgNVBAUTKDM4NTkyRjA1NkY4M0NDRDQwQTYyQUUxMTYwMjkyNjk0 Mjg1QTJDRjQwHhcNMjUwODIzMDAxMTI2WhcNMjUwODMwMDAxMTI2WjAYMRYwFAYD VQQDEw02OGE5MDcyZS0xNjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4j8rw/565HTHHS3oO4rmdPT1ydPaT5VDh/1rnw81rViBo2P1aS5AHyt0IZ/v bCwmAeiej2DdaZSCu0YwiudObCSBgb4T9l78q0RxTFNID9pgoMsnQEnu67k+pvTo KTJP+72E/rHk0dOlN/0o77SJYbggqyTCgtwnr7IUnCFi9pbDSFkKEwk7qnLuqGpx afEV0dbZAbBz9KLG3/JGBMkWWLskXDrN7XwUqN6ion8ONzA+WHXvXbActFIvozpT SonZu9ZYqWabaqhd7PRS0/YUxNNyRvQHflesVSkOkBNe8+PAoPo8KRSO0xUkDohT rM/hvFX5L0oZoBaCXiyqKC314wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPigH49n PqaX1/yIqzhHSiByz5igMB8GA1UdIwQYMBaAFDhZLwVvg8zUCmKuEWApJpQoWiz0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTYzOC8xMjcxMTczMjQ3 NkMxMUVDODlFRjYyMzlDNEY5QUUwMi9PRmt2QlctRHpOUUtZcTRSWUNrbWxDaGFM UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09Ga3ZCVy1Eek5RS1lxNFJZQ2ttbENoYUxQUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTYzOC8xMjcxMTczMjQ3NkMxMUVDODlFRjYyMzlDNEY5QUUwMi9PRmt2QlctRHpO UUtZcTRSWUNrbWxDaGFMUFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUiYbtrTD/FJMC7AfqeW4dOqfkjeXiUyWEwuSlrFYQNkd3rMScaSIK kltUD+NDt8D5zw7aYNEoG9vAMpO5OAPZTi6v4ucSfjs8e3e18C2PfoAiYg3G3QvA qGfnOUiQdJtIAMDZvrNEGLaMqxPuejlXjx4NslCSF0+6xN7Hc4aGLVdY/KOdmuIX NQGmalNUtlSLb4aOeLXaI3PySWfQfEyeKufpEovUpqmexGag7YR09fHa35FlUSL3 b9rHW86GAHxOnWSylxywVcst154DmHgJe7/SILP2z3mcxZaGohx9bW+0m2M8vF0H X8Nrg8wgVjEGc1/j6DrS4MUWOp6+X/Ts -----END CERTIFICATE-----Generated at Sat Aug 23 14:22:34 2025 by rpki-client