$ rpki-client -vvf rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft File: oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft (raw, json) Hash identifier: o/uoOUXFfqxVBXm8qYd9+VQuTR/+Nkz/AV1nTzBalSk= Subject key identifier: 1E:92:0F:C7:FE:1B:32:AA:56:70:95:D6:E3:97:FB:C6:52:83:FE:ED Authority key identifier: A0:DE:57:2A:46:CF:32:4B:AE:08:C3:E9:30:BC:AF:E7:39:A0:15:D1 Certificate issuer: /CN=A915BF4F/serialNumber=A0DE572A46CF324BAE08C3E930BCAFE739A015D1 Certificate serial: 02CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft Manifest number: 02C1 Signing time: Sat 23 Aug 2025 01:41:34 +0000 Manifest this update: Sat 23 Aug 2025 01:41:33 +0000 Manifest next update: Sat 30 Aug 2025 01:41:33 +0000 Files and hashes: 1: oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl (hash: VpsDgU1PdKyfV4K1lk1N7P7Y5s/UDDFBhict4OJlfS0=) 2: 42D236F0042111ED888BB024C4F9AE02.roa (hash: Sw/iVVZQKRk2IehEH8KSZSL+WBhl3LKTM/sZZ2FNR28=) 3: 41F88F22042111ED888BB024C4F9AE02.roa (hash: bOo49vshLt+uwGwclaQ/vUkNjrTzsnBMVbUbDnocL6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:41:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 716 (0x2cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BF4F, serialNumber=A0DE572A46CF324BAE08C3E930BCAFE739A015D1 Validity Not Before: Aug 23 01:41:33 2025 GMT Not After : Aug 30 01:41:33 2025 GMT Subject: CN=68a91c4e-9528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:af:9b:e6:01:5a:e8:7d:53:d5:5b:eb:23:3b: ad:46:41:2f:63:41:35:29:76:2c:a7:f6:af:42:96: 6a:07:57:d1:58:95:45:87:ee:13:28:10:1a:8c:c0: 06:2f:64:73:8e:87:69:a6:42:fe:1e:30:4f:49:e9: 42:e0:6e:7d:fe:92:2c:0e:b5:43:21:06:23:d1:b9: b2:96:78:32:6c:14:56:be:83:2f:3a:59:4a:aa:72: e1:86:f6:fe:b3:9c:76:7e:c5:7e:a3:e9:90:a1:24: 2f:41:ed:18:bd:f2:fa:ae:ad:34:b4:b0:e3:b9:aa: 6d:7c:a3:c6:d5:ee:16:9a:62:68:39:d1:e8:23:28: e4:bb:aa:37:65:81:54:f9:ae:3d:d1:ef:8b:c2:66: 1d:ea:1b:88:0d:b2:82:b8:eb:1b:81:c4:ad:ba:66: f0:69:05:ee:67:99:b6:ec:28:84:85:64:ed:cb:b4: d9:bb:b8:7d:8b:51:cb:27:a5:97:83:2e:b4:88:2e: 7e:88:e2:1a:41:e9:fb:1d:dc:0b:e6:b0:c2:aa:cc: 27:1e:c9:71:6a:9a:00:07:39:13:b2:9a:fc:39:3d: 83:8e:43:7f:da:b6:c8:cb:8e:09:cd:71:8d:ce:b2: 59:d0:dd:d7:b2:22:fd:6c:3d:2b:52:27:e6:dc:e4: a1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:92:0F:C7:FE:1B:32:AA:56:70:95:D6:E3:97:FB:C6:52:83:FE:ED X509v3 Authority Key Identifier: keyid:A0:DE:57:2A:46:CF:32:4B:AE:08:C3:E9:30:BC:AF:E7:39:A0:15:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:1c:4a:db:58:d0:6b:6b:04:45:10:66:93:61:45:68:ec:42: d8:ec:09:3c:03:00:7f:c0:11:64:f8:5a:4b:8c:a9:ea:69:e2: c3:35:11:d2:3c:54:ba:47:69:50:c1:cb:8a:24:59:61:f0:67: c3:75:51:dd:29:99:56:0a:de:a3:be:8b:c8:d3:57:03:2b:c6: 21:8e:bd:2e:d0:8b:aa:48:6f:b8:97:d7:54:97:6e:82:36:b6: 88:af:60:fa:04:cb:c1:3d:28:36:e3:4c:ca:16:27:19:a3:67: d7:53:cc:46:85:25:90:a6:41:f0:da:44:f3:35:ff:61:0e:e9: b7:ca:01:d3:37:30:77:64:c2:ae:9f:8f:70:a6:3a:1f:5d:30: 5a:68:42:ce:3b:85:26:09:76:43:24:ca:54:50:a5:9d:a2:7f: 89:8b:32:af:c9:67:60:a7:6a:6b:b2:9f:a5:d6:58:82:e1:bc: de:37:72:c0:1d:6f:2f:19:f8:6c:dd:ad:f5:18:6a:b2:42:a1: 21:32:3e:47:c4:5c:38:37:16:db:d3:1a:7a:1d:87:56:b5:ee: d7:a7:59:18:ef:07:74:ef:01:35:94:49:67:73:48:48:22:07: 99:4a:04:9b:8d:da:eb:cb:df:df:e7:79:6d:2a:a4:3c:7c:e5: 89:6e:6a:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJGNEYxMTAvBgNVBAUTKEEwREU1NzJBNDZDRjMyNEJBRTA4QzNFOTMwQkNBRkU3 MzlBMDE1RDEwHhcNMjUwODIzMDE0MTMzWhcNMjUwODMwMDE0MTMzWjAYMRYwFAYD VQQDEw02OGE5MWM0ZS05NTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA06+b5gFa6H1T1VvrIzutRkEvY0E1KXYsp/avQpZqB1fRWJVFh+4TKBAajMAG L2RzjodppkL+HjBPSelC4G59/pIsDrVDIQYj0bmylngybBRWvoMvOllKqnLhhvb+ s5x2fsV+o+mQoSQvQe0YvfL6rq00tLDjuaptfKPG1e4WmmJoOdHoIyjku6o3ZYFU +a490e+LwmYd6huIDbKCuOsbgcStumbwaQXuZ5m27CiEhWTty7TZu7h9i1HLJ6WX gy60iC5+iOIaQen7HdwL5rDCqswnHslxapoABzkTspr8OT2DjkN/2rbIy44JzXGN zrJZ0N3XsiL9bD0rUifm3OSh7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB6SD8f+ GzKqVnCV1uOX+8ZSg/7tMB8GA1UdIwQYMBaAFKDeVypGzzJLrgjD6TC8r+c5oBXR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkY0Ri9DNUUyRDcxRTA0 MTkxMUVEOTE1NzY1MjhDNEY5QUUwMi9vTjVYS2tiUE1rdXVDTVBwTUx5djV6bWdG ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29ONVhLa2JQTWt1dUNNUHBNTHl2NXptZ0ZkRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkY0Ri9DNUUyRDcxRTA0MTkxMUVEOTE1NzY1MjhDNEY5QUUwMi9vTjVYS2tiUE1r dXVDTVBwTUx5djV6bWdGZEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPHErbWNBrawRFEGaTYUVo7ELY7Ak8AwB/wBFk+FpLjKnqaeLDNRHS PFS6R2lQwcuKJFlh8GfDdVHdKZlWCt6jvovI01cDK8Yhjr0u0IuqSG+4l9dUl26C NraIr2D6BMvBPSg240zKFicZo2fXU8xGhSWQpkHw2kTzNf9hDum3ygHTNzB3ZMKu n49wpjofXTBaaELOO4UmCXZDJMpUUKWdon+JizKvyWdgp2prsp+l1liC4bzeN3LA HW8vGfhs3a31GGqyQqEhMj5HxFw4Nxbb0xp6HYdWte7Xp1kY7wd07wE1lElnc0hI IgeZSgSbjdrry9/f53ltKqQ8fOWJbmqt -----END CERTIFICATE-----Generated at Sat Aug 23 17:51:16 2025 by rpki-client