$ rpki-client -vvf rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.mft File: oNZvEXVTOiOoUulRUGXIWjOec4Y.mft (raw, json) Hash identifier: uZAap0dFKgar57anta0LIj4cMjYPVItScZSSioWdkrc= Subject key identifier: 56:68:83:C2:BD:6C:43:81:C2:01:1D:5B:E6:CF:54:F1:6F:FD:19:6E Authority key identifier: A0:D6:6F:11:75:53:3A:23:A8:52:E9:51:50:65:C8:5A:33:9E:73:86 Certificate issuer: /CN=A9158547/serialNumber=A0D66F1175533A23A852E9515065C85A339E7386 Certificate serial: 012A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNZvEXVTOiOoUulRUGXIWjOec4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.mft Manifest number: 0128 Signing time: Sat 05 Jul 2025 04:55:34 +0000 Manifest this update: Sat 05 Jul 2025 04:55:34 +0000 Manifest next update: Sat 12 Jul 2025 04:55:33 +0000 Files and hashes: 1: oNZvEXVTOiOoUulRUGXIWjOec4Y.crl (hash: tPUWdV3xQvcSQ4/8NQhXO7ObmB3+eBHMbBxbqAPBoJk=) 2: 6E7BFE7092A611EEBD5D8720C4F9AE02.roa (hash: nLAI2KpHv4yGG3LNJRHSRrSrOVvhwD5I70+pJLgB34A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.crl rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNZvEXVTOiOoUulRUGXIWjOec4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 298 (0x12a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158547, serialNumber=A0D66F1175533A23A852E9515065C85A339E7386 Validity Not Before: Jul 5 04:55:34 2025 GMT Not After : Jul 12 04:55:33 2025 GMT Subject: CN=6868b046-25bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:be:50:99:e5:a8:55:40:d5:3e:02:48:91:83: d3:50:be:fd:eb:24:3e:70:14:bb:70:0e:1b:5e:6a: 5e:63:bf:c6:10:f3:53:b1:7e:2a:6a:39:f3:74:bc: a4:c7:3d:67:d0:c9:4c:d7:ed:5c:c4:ac:c2:90:f1: 6b:49:40:2e:86:19:f8:a9:71:65:df:29:13:2a:75: d0:1e:48:04:36:96:47:55:6e:6f:02:7e:3a:48:c3: 74:70:40:0b:86:4a:f4:50:81:9f:a5:c4:d8:22:43: c8:9c:9a:1f:76:d8:22:39:15:83:a5:76:85:07:1d: 1c:68:50:a5:70:5a:e5:1a:bd:2b:f8:c9:06:c2:59: df:9c:2c:04:34:bc:2c:75:ed:29:4c:42:42:8d:80: 3b:e5:f3:c4:d4:32:cb:69:5b:87:6f:25:e5:d5:5c: 8c:76:8b:20:15:37:59:46:83:53:60:2d:37:d5:16: 56:8d:c7:92:9c:2e:9a:e4:3f:da:90:06:b7:fe:25: 59:18:54:f1:e3:e6:1c:30:90:aa:7c:be:39:6e:ca: 36:e7:40:6d:10:23:e7:5e:45:e0:45:56:34:ed:a9: a9:1b:43:d3:a7:a3:be:c0:93:4c:5e:90:52:a1:da: 83:ad:c2:f9:20:d6:08:fd:ca:6f:42:1d:a3:4d:19: 6b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:68:83:C2:BD:6C:43:81:C2:01:1D:5B:E6:CF:54:F1:6F:FD:19:6E X509v3 Authority Key Identifier: keyid:A0:D6:6F:11:75:53:3A:23:A8:52:E9:51:50:65:C8:5A:33:9E:73:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNZvEXVTOiOoUulRUGXIWjOec4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:80:9e:7e:30:c1:26:54:f2:3b:f7:c8:3f:45:6d:b2:c1:28: c2:14:5d:da:18:6e:00:72:79:23:1c:e7:0a:75:da:ce:19:5f: 89:64:f7:d9:7d:8e:22:0d:90:01:b1:1a:8f:f1:5f:79:5a:9f: c8:3e:e5:aa:fa:37:18:b2:6b:88:54:f0:24:6a:af:3c:21:4d: 10:e0:35:0d:4e:b4:e1:90:f8:0f:f3:34:81:77:f6:d2:ab:d1: 17:c9:11:99:06:c4:3f:cf:b2:fd:9b:76:2c:42:aa:73:b6:65: 71:cc:93:1e:e0:41:60:be:0c:52:ff:94:fb:20:43:8f:e2:c6: c2:82:ad:c8:27:0f:ac:19:7a:24:32:3b:ff:96:1b:6a:24:0c: ca:5b:92:44:1f:90:4f:fe:7c:b4:27:21:64:5c:d5:cd:ce:44: 8d:50:d0:9f:00:2f:77:82:4c:4c:c4:59:1b:bd:e4:30:c0:bf: e7:9b:d7:72:84:0a:35:71:48:6b:cc:03:51:d5:cc:56:67:a9: 4b:42:fa:43:3b:79:7b:ac:bf:24:01:35:ae:d0:2d:aa:c3:c2: 82:ee:39:2f:0c:ec:1e:85:84:ee:89:ae:8a:2c:3c:70:db:27: ce:65:0b:d6:42:6a:2e:b3:5e:5c:f7:3e:0c:82:ab:e7:9c:a9: 34:43:4f:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg1NDcxMTAvBgNVBAUTKEEwRDY2RjExNzU1MzNBMjNBODUyRTk1MTUwNjVDODVB MzM5RTczODYwHhcNMjUwNzA1MDQ1NTM0WhcNMjUwNzEyMDQ1NTMzWjAYMRYwFAYD VQQDEw02ODY4YjA0Ni0yNWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyr5QmeWoVUDVPgJIkYPTUL796yQ+cBS7cA4bXmpeY7/GEPNTsX4qajnzdLyk xz1n0MlM1+1cxKzCkPFrSUAuhhn4qXFl3ykTKnXQHkgENpZHVW5vAn46SMN0cEAL hkr0UIGfpcTYIkPInJofdtgiORWDpXaFBx0caFClcFrlGr0r+MkGwlnfnCwENLws de0pTEJCjYA75fPE1DLLaVuHbyXl1VyMdosgFTdZRoNTYC031RZWjceSnC6a5D/a kAa3/iVZGFTx4+YcMJCqfL45bso250BtECPnXkXgRVY07ampG0PTp6O+wJNMXpBS odqDrcL5INYI/cpvQh2jTRlrvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFZog8K9 bEOBwgEdW+bPVPFv/RluMB8GA1UdIwQYMBaAFKDWbxF1UzojqFLpUVBlyFoznnOG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODU0Ny9CMzg2NjhFNDky QTUxMUVFOENEOTVCMUVDNEY5QUUwMi9vTlp2RVhWVE9pT29VdWxSVUdYSVdqT2Vj NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29OWnZFWFZUT2lPb1V1bFJVR1hJV2pPZWM0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODU0Ny9CMzg2NjhFNDkyQTUxMUVFOENEOTVCMUVDNEY5QUUwMi9vTlp2RVhWVE9p T29VdWxSVUdYSVdqT2VjNFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYgJ5+MMEmVPI798g/RW2ywSjCFF3aGG4AcnkjHOcKddrOGV+JZPfZ fY4iDZABsRqP8V95Wp/IPuWq+jcYsmuIVPAkaq88IU0Q4DUNTrThkPgP8zSBd/bS q9EXyRGZBsQ/z7L9m3YsQqpztmVxzJMe4EFgvgxS/5T7IEOP4sbCgq3IJw+sGXok Mjv/lhtqJAzKW5JEH5BP/ny0JyFkXNXNzkSNUNCfAC93gkxMxFkbveQwwL/nm9dy hAo1cUhrzANR1cxWZ6lLQvpDO3l7rL8kATWu0C2qw8KC7jkvDOwehYTuia6KLDxw 2yfOZQvWQmous15c9z4MgqvnnKk0Q0/7 -----END CERTIFICATE-----Generated at Sat Jul 5 22:17:07 2025 by rpki-client