$ rpki-client -vvf rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft File: 0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft (raw, json) Hash identifier: 7qXGIZbvx9bCOCmduJckA1asIGBm9P8Td7xVs/5atKI= Subject key identifier: EC:C5:5F:23:C8:45:F2:BD:41:F9:66:DD:4B:EA:43:E4:C5:AF:D8:3E Authority key identifier: D2:8C:52:ED:09:0C:53:9C:10:F2:22:DE:EC:D9:A7:3C:49:A1:68:04 Certificate issuer: /CN=A915617E/serialNumber=D28C52ED090C539C10F222DEECD9A73C49A16804 Certificate serial: 0DA6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft Manifest number: 0D9C Signing time: Fri 22 Aug 2025 18:02:13 +0000 Manifest this update: Fri 22 Aug 2025 18:02:12 +0000 Manifest next update: Fri 29 Aug 2025 18:02:12 +0000 Files and hashes: 1: 0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl (hash: pSIlXEwBuLN4pFGgxJKrJgDgvTpPLYr0ya0TyHmCXmw=) 2: 3F67E64E62BD11EE8F393D25C4F9AE02.roa (hash: M//W1UwKYdpgfzirMsSYlccdpo+EbdrSiaWLAUJYdus=) 3: DBDAFF6CC99611E9A41BCF75C4F9AE02.roa (hash: bubDAyNTv3SrURQ57IlrP+BsnMnB0ZguwTBhf+r4Z54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3494 (0xda6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915617E, serialNumber=D28C52ED090C539C10F222DEECD9A73C49A16804 Validity Not Before: Aug 22 18:02:12 2025 GMT Not After : Aug 29 18:02:12 2025 GMT Subject: CN=68a8b0a4-6a51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:80:02:ea:e8:a3:6a:dd:4e:c3:e4:52:4c:9b: aa:1a:c9:2d:30:96:b9:2c:49:e4:57:dd:0c:51:b2: c6:43:b6:9d:fc:44:35:25:92:62:01:51:97:32:e2: 61:d8:fd:ed:20:26:4a:06:48:8f:15:b0:72:22:1f: 8c:ac:c6:ab:23:50:4c:54:ad:2f:d0:9e:58:bd:e5: e3:c4:ab:54:b4:70:45:10:34:15:90:54:18:43:89: 10:71:bd:39:fe:f5:26:ef:2e:b1:63:7c:cc:b7:ef: f8:f2:eb:ae:90:1f:ee:3e:4c:78:5d:8c:dd:76:e1: 33:ab:e6:08:6d:2c:1a:c0:c6:f1:50:ab:28:d1:86: 1b:01:4b:d4:5c:48:87:39:bf:08:0f:dd:42:ca:4f: de:57:d0:c1:6a:fe:62:fc:57:c6:62:b6:6f:76:5f: d5:27:ce:77:11:77:59:1f:c8:23:1e:b6:80:bf:b5: 7f:4f:75:7d:bb:65:b5:7f:bc:8b:64:3b:1f:b7:76: fc:3d:04:67:2b:66:68:e3:83:ae:c0:42:1f:ee:7c: 0f:07:45:8d:d3:cd:ba:5e:c2:c8:8a:a6:7d:18:44: 28:47:c5:eb:9f:2d:97:2d:dd:36:23:97:a3:3f:e9: 37:7c:ee:08:24:40:66:24:4f:ab:9d:49:a1:2c:62: 14:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:C5:5F:23:C8:45:F2:BD:41:F9:66:DD:4B:EA:43:E4:C5:AF:D8:3E X509v3 Authority Key Identifier: keyid:D2:8C:52:ED:09:0C:53:9C:10:F2:22:DE:EC:D9:A7:3C:49:A1:68:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:e8:0e:15:29:f6:1f:a2:52:21:43:e2:e8:0b:99:f7:e1:15: e3:38:33:5b:18:e6:73:de:db:11:cc:84:be:f8:b5:97:16:e5: ba:73:80:07:21:7f:c5:3d:a0:5e:54:5a:e6:2f:8f:74:cd:2d: 7d:af:71:29:e4:0f:27:a2:a9:fd:a8:c1:11:57:38:eb:60:c7: 8e:13:34:18:9b:55:a5:ff:db:46:99:53:a3:e1:1e:93:41:e7: 42:2c:5e:72:38:61:1a:66:1f:7a:84:bb:9a:a1:57:64:e2:e4: 8e:71:eb:f9:38:78:0a:fd:34:17:c8:e1:4b:45:9c:26:68:31: 8c:f5:3b:c1:a5:48:41:c8:51:81:ad:47:c4:a4:5d:29:02:1d: 65:be:ab:4a:e4:e3:2c:f1:d9:50:14:80:0e:41:e2:a4:c1:f5: 60:be:1d:fa:22:8e:f6:dc:13:76:92:6f:b7:18:a8:ee:f7:93: 99:cd:ef:83:a4:4c:9e:a9:e4:de:68:74:b0:7a:25:e2:3a:a7: 7b:c6:dd:65:7c:15:7f:2c:29:04:1c:49:76:d7:5a:b5:fe:fa: 67:90:bb:71:65:92:b0:95:7c:df:db:32:bb:01:2d:c5:56:93: df:cf:b3:b6:6a:4c:75:a3:76:b5:a3:a4:3a:d6:90:2c:d3:a0: e3:01:d7:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYxN0UxMTAvBgNVBAUTKEQyOEM1MkVEMDkwQzUzOUMxMEYyMjJERUVDRDlBNzND NDlBMTY4MDQwHhcNMjUwODIyMTgwMjEyWhcNMjUwODI5MTgwMjEyWjAYMRYwFAYD VQQDEw02OGE4YjBhNC02YTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4AC6uijat1Ow+RSTJuqGsktMJa5LEnkV90MUbLGQ7ad/EQ1JZJiAVGXMuJh 2P3tICZKBkiPFbByIh+MrMarI1BMVK0v0J5YveXjxKtUtHBFEDQVkFQYQ4kQcb05 /vUm7y6xY3zMt+/48uuukB/uPkx4XYzdduEzq+YIbSwawMbxUKso0YYbAUvUXEiH Ob8ID91Cyk/eV9DBav5i/FfGYrZvdl/VJ853EXdZH8gjHraAv7V/T3V9u2W1f7yL ZDsft3b8PQRnK2Zo44OuwEIf7nwPB0WN0826XsLIiqZ9GEQoR8Xrny2XLd02I5ej P+k3fO4IJEBmJE+rnUmhLGIUXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOzFXyPI RfK9Qflm3UvqQ+TFr9g+MB8GA1UdIwQYMBaAFNKMUu0JDFOcEPIi3uzZpzxJoWgE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjE3RS9FMUFEQjc0NkM5 OTUxMUU5QkFBQUIxNzRDNEY5QUUwMi8wb3hTN1FrTVU1d1E4aUxlN05tblBFbWhh QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBveFM3UWtNVTV3UThpTGU3Tm1uUEVtaGFBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjE3RS9FMUFEQjc0NkM5OTUxMUU5QkFBQUIxNzRDNEY5QUUwMi8wb3hTN1FrTVU1 d1E4aUxlN05tblBFbWhhQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCO6A4VKfYfolIhQ+LoC5n34RXjODNbGOZz3tsRzIS++LWXFuW6c4AH IX/FPaBeVFrmL490zS19r3Ep5A8noqn9qMERVzjrYMeOEzQYm1Wl/9tGmVOj4R6T QedCLF5yOGEaZh96hLuaoVdk4uSOcev5OHgK/TQXyOFLRZwmaDGM9TvBpUhByFGB rUfEpF0pAh1lvqtK5OMs8dlQFIAOQeKkwfVgvh36Io723BN2km+3GKju95OZze+D pEyeqeTeaHSweiXiOqd7xt1lfBV/LCkEHEl211q1/vpnkLtxZZKwlXzf2zK7AS3F VpPfz7O2akx1o3a1o6Q61pAs06DjAdfk -----END CERTIFICATE-----Generated at Sat Aug 23 20:39:20 2025 by rpki-client