$ rpki-client -vvf rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.mft File: oNZvEXVTOiOoUulRUGXIWjOec4Y.mft (raw, json) Hash identifier: t2zraDsIi9mNNv94tD+1eEnzsBqbJPDtJE04U1bgnl4= Subject key identifier: C0:E9:3B:E6:30:C2:71:99:82:C2:95:FA:F7:EC:BD:50:8D:94:30:AC Authority key identifier: A0:D6:6F:11:75:53:3A:23:A8:52:E9:51:50:65:C8:5A:33:9E:73:86 Certificate issuer: /CN=A9158547/serialNumber=A0D66F1175533A23A852E9515065C85A339E7386 Certificate serial: 0143 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNZvEXVTOiOoUulRUGXIWjOec4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.mft Manifest number: 0141 Signing time: Sat 23 Aug 2025 04:29:48 +0000 Manifest this update: Sat 23 Aug 2025 04:29:48 +0000 Manifest next update: Sat 30 Aug 2025 04:29:48 +0000 Files and hashes: 1: oNZvEXVTOiOoUulRUGXIWjOec4Y.crl (hash: AxP156bmCCbQDZK27l7zWFvy68qCL5pOvu/Ilu+/SqU=) 2: 6E7BFE7092A611EEBD5D8720C4F9AE02.roa (hash: nLAI2KpHv4yGG3LNJRHSRrSrOVvhwD5I70+pJLgB34A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.crl rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNZvEXVTOiOoUulRUGXIWjOec4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:29:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 323 (0x143) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158547, serialNumber=A0D66F1175533A23A852E9515065C85A339E7386 Validity Not Before: Aug 23 04:29:48 2025 GMT Not After : Aug 30 04:29:48 2025 GMT Subject: CN=68a943bc-68cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7b:9e:f4:00:04:87:3d:e0:51:01:b8:c9:52: 0f:f3:06:1b:66:e7:35:5f:c5:69:0f:2b:13:85:bb: ff:10:b6:ba:d6:6d:90:17:c8:6a:23:fa:de:3d:de: 68:0f:e0:1b:d0:7c:5f:e7:5d:49:1f:b3:1e:25:43: c9:ab:5a:09:c7:79:bb:5f:74:44:f0:84:6f:cb:e9: 3d:ae:8e:7a:a1:05:2b:38:a5:1b:12:6a:c1:43:29: 4c:13:ca:c0:73:14:2d:90:44:9e:9a:43:4c:15:b6: 63:04:1a:e3:fa:ac:44:6c:29:9f:00:8f:c9:eb:99: f5:12:3e:e3:2d:da:55:3c:63:d6:74:1a:d7:86:0b: 52:bd:10:30:e6:32:c7:85:1c:11:d5:ab:17:2d:97: ae:c0:62:18:54:8a:38:38:0a:bc:b0:b1:0c:37:f7: 67:e1:e3:ea:d4:f1:78:62:b2:b4:bc:03:1f:91:cd: 0c:97:20:41:58:0f:77:d3:77:cb:4e:02:be:37:a2: b3:93:df:8e:5c:22:21:af:24:9d:38:ba:a4:57:8c: aa:1e:18:ed:63:8a:b2:11:2b:c7:db:d0:2f:70:d6: 79:41:75:61:77:6b:66:74:fc:42:ee:b7:c6:a8:0b: 3a:bb:8d:5a:ba:27:5a:bb:25:32:80:8e:ac:ed:75: 11:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:E9:3B:E6:30:C2:71:99:82:C2:95:FA:F7:EC:BD:50:8D:94:30:AC X509v3 Authority Key Identifier: keyid:A0:D6:6F:11:75:53:3A:23:A8:52:E9:51:50:65:C8:5A:33:9E:73:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNZvEXVTOiOoUulRUGXIWjOec4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:1b:99:34:00:f1:38:29:66:82:91:19:7f:59:47:56:d7:ad: 9e:46:ee:a3:67:bb:e1:86:c3:dd:8c:40:d5:8d:39:4f:65:f1: 6b:d0:49:d6:83:0f:39:94:af:c8:ab:3c:66:bc:13:42:77:bd: 17:1d:72:af:00:a7:c8:50:6a:85:90:e8:87:bc:9c:39:68:b5: f5:2c:99:48:88:be:62:9d:9e:fb:cd:a5:d3:f3:9d:cc:4a:e1: 3b:1a:7d:62:bf:a2:b7:2f:ed:65:61:23:a0:51:57:83:7b:d6: 8e:23:5c:db:65:63:4b:b8:3b:6d:56:18:c5:fe:1c:91:6d:a3: b7:92:16:e2:e9:e5:15:1f:e1:af:2d:ae:12:87:4b:49:25:56: 7f:fb:c2:15:68:64:6e:2f:83:d3:04:da:9c:1e:ee:36:aa:45: 26:8b:3f:4a:fd:93:7c:6f:5c:15:4d:60:19:b8:a3:ba:c6:cb: c2:c7:2f:a7:6e:3b:b3:8e:d6:4b:21:d0:ac:7a:e6:bb:e1:53: ed:ed:2e:26:3b:4c:0d:08:64:45:fe:04:bc:60:35:6d:1f:16: ef:cc:2f:32:63:77:94:cd:3c:c0:ec:b2:46:3e:2b:f2:2d:69: 44:ea:38:1f:b7:3b:18:37:56:94:0b:7e:ee:94:2e:de:63:16: 7f:3a:78:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg1NDcxMTAvBgNVBAUTKEEwRDY2RjExNzU1MzNBMjNBODUyRTk1MTUwNjVDODVB MzM5RTczODYwHhcNMjUwODIzMDQyOTQ4WhcNMjUwODMwMDQyOTQ4WjAYMRYwFAYD VQQDEw02OGE5NDNiYy02OGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy3ue9AAEhz3gUQG4yVIP8wYbZuc1X8VpDysThbv/ELa61m2QF8hqI/rePd5o D+Ab0Hxf511JH7MeJUPJq1oJx3m7X3RE8IRvy+k9ro56oQUrOKUbEmrBQylME8rA cxQtkESemkNMFbZjBBrj+qxEbCmfAI/J65n1Ej7jLdpVPGPWdBrXhgtSvRAw5jLH hRwR1asXLZeuwGIYVIo4OAq8sLEMN/dn4ePq1PF4YrK0vAMfkc0MlyBBWA9303fL TgK+N6Kzk9+OXCIhrySdOLqkV4yqHhjtY4qyESvH29AvcNZ5QXVhd2tmdPxC7rfG qAs6u41auidauyUygI6s7XURkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMDpO+Yw wnGZgsKV+vfsvVCNlDCsMB8GA1UdIwQYMBaAFKDWbxF1UzojqFLpUVBlyFoznnOG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODU0Ny9CMzg2NjhFNDky QTUxMUVFOENEOTVCMUVDNEY5QUUwMi9vTlp2RVhWVE9pT29VdWxSVUdYSVdqT2Vj NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29OWnZFWFZUT2lPb1V1bFJVR1hJV2pPZWM0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODU0Ny9CMzg2NjhFNDkyQTUxMUVFOENEOTVCMUVDNEY5QUUwMi9vTlp2RVhWVE9p T29VdWxSVUdYSVdqT2VjNFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEG5k0APE4KWaCkRl/WUdW162eRu6jZ7vhhsPdjEDVjTlPZfFr0EnW gw85lK/IqzxmvBNCd70XHXKvAKfIUGqFkOiHvJw5aLX1LJlIiL5inZ77zaXT853M SuE7Gn1iv6K3L+1lYSOgUVeDe9aOI1zbZWNLuDttVhjF/hyRbaO3khbi6eUVH+Gv La4Sh0tJJVZ/+8IVaGRuL4PTBNqcHu42qkUmiz9K/ZN8b1wVTWAZuKO6xsvCxy+n bjuzjtZLIdCseua74VPt7S4mO0wNCGRF/gS8YDVtHxbvzC8yY3eUzTzA7LJGPivy LWlE6jgftzsYN1aUC37ulC7eYxZ/OngO -----END CERTIFICATE-----Generated at Sat Aug 23 19:37:08 2025 by rpki-client