$ rpki-client -vvf rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft File: oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft (raw, json) Hash identifier: ancpAt2hvdpClxvjwuE/t/UvgterLSWK7psBrr6txHg= Subject key identifier: DE:99:AA:4C:F2:D6:0C:7B:56:63:D7:F8:1A:8D:F6:E1:9D:F4:B9:77 Authority key identifier: A1:06:03:30:2B:FE:C8:2A:07:F8:C5:D4:2E:45:8B:76:C5:FF:91:A4 Certificate issuer: /CN=A916A3BE/serialNumber=A10603302BFEC82A07F8C5D42E458B76C5FF91A4 Certificate serial: 0A01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft Manifest number: 09EF Signing time: Fri 22 Aug 2025 20:03:34 +0000 Manifest this update: Fri 22 Aug 2025 20:03:34 +0000 Manifest next update: Fri 29 Aug 2025 20:03:34 +0000 Files and hashes: 1: oQYDMCv-yCoH-MXULkWLdsX_kaQ.crl (hash: wHjcigFwtLEUathX/kPU0h9iH5EYfFQW4CNmndTZ+Cg=) 2: 9FC3DC92883311EDB7271C62C4F9AE02.roa (hash: Cf8bqRacvTWl+UzpH6e1kxekXSzzSxIQ9wSazOTj5Ck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.crl rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2561 (0xa01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A3BE, serialNumber=A10603302BFEC82A07F8C5D42E458B76C5FF91A4 Validity Not Before: Aug 22 20:03:34 2025 GMT Not After : Aug 29 20:03:34 2025 GMT Subject: CN=68a8cd16-e365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a7:c0:4f:91:4e:1d:cc:00:a2:2e:5b:ca:fc: 90:4f:83:4c:4b:a5:be:58:97:57:53:28:a9:65:73: 68:6f:6d:0c:7f:ef:ca:25:ca:cc:29:dd:3d:b8:ec: ec:a9:99:e8:71:70:27:e2:46:57:b6:ab:bd:fd:11: 6a:b0:c3:d3:37:cd:a2:bf:a0:b6:a4:c3:6d:7c:45: f5:18:b7:24:1d:54:16:db:a3:0d:fb:50:28:fb:47: 7a:c7:05:e0:21:dd:28:85:f7:2f:30:df:2c:7d:23: 94:4a:6f:96:39:aa:45:83:04:29:81:77:96:25:ac: a0:17:cd:4c:39:63:5a:c9:ef:82:a0:09:db:5a:20: a7:bb:d2:b6:a4:13:92:da:90:27:3e:18:c2:74:a7: 9c:1e:3f:f5:02:20:8f:e7:a8:e2:d8:cf:1b:52:a4: 44:b4:0c:46:cb:1a:90:23:8a:a2:de:23:ee:ba:8f: bf:d0:a4:27:27:18:a5:49:d1:50:96:f4:17:09:87: b5:29:1c:1f:fa:eb:c7:bb:c8:9c:9a:dd:da:1c:54: 69:91:53:51:25:11:88:12:c3:58:ce:ef:07:9a:49: 81:05:a8:e2:15:ab:6e:28:76:5e:61:95:3e:66:ee: d8:88:1a:ad:02:8a:99:ac:fd:63:98:6d:d0:a5:89: 9d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:99:AA:4C:F2:D6:0C:7B:56:63:D7:F8:1A:8D:F6:E1:9D:F4:B9:77 X509v3 Authority Key Identifier: keyid:A1:06:03:30:2B:FE:C8:2A:07:F8:C5:D4:2E:45:8B:76:C5:FF:91:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:22:82:f7:9f:37:08:6b:92:db:bb:55:15:7b:f2:0c:36:49: 00:4c:c0:7b:68:ca:8d:85:70:d8:74:87:b3:98:da:63:5f:7f: 49:a7:b0:81:93:6c:6e:4d:e5:2c:aa:bf:99:d0:5b:07:17:3a: bb:2e:57:57:92:82:90:b3:4d:35:bf:65:22:80:86:8a:4c:51: e6:6b:72:35:9d:1a:43:fa:d1:ce:5b:9f:43:a3:05:b0:92:8a: 59:1f:63:4e:6b:64:72:6b:2b:58:1b:ab:01:63:dc:ba:1c:af: de:64:90:65:2c:40:76:2e:2c:2e:a7:35:9f:8d:68:5e:12:a3: 90:fd:24:99:72:08:c5:e2:db:c4:2d:08:74:c6:8f:b5:1b:30: ef:77:12:66:a9:01:22:18:03:24:3c:ef:fe:a2:6c:85:84:10: 45:7d:5e:cc:96:e0:6c:12:2e:05:05:81:59:ed:0f:0b:e6:52: 6a:21:04:36:c4:a5:53:53:40:f4:48:64:99:36:bc:13:8b:49: 82:ce:e1:8f:ad:69:1e:14:0b:95:e1:a8:41:f1:7e:ad:20:7e: 5b:39:c0:c0:59:28:94:8e:89:57:5e:8b:a1:b3:39:1b:7e:78: 1a:83:f1:a4:8e:05:c5:dd:44:78:d2:bc:ee:9f:0a:8e:a1:d7: dd:42:85:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEzQkUxMTAvBgNVBAUTKEExMDYwMzMwMkJGRUM4MkEwN0Y4QzVENDJFNDU4Qjc2 QzVGRjkxQTQwHhcNMjUwODIyMjAwMzM0WhcNMjUwODI5MjAwMzM0WjAYMRYwFAYD VQQDEw02OGE4Y2QxNi1lMzY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3afAT5FOHcwAoi5byvyQT4NMS6W+WJdXUyipZXNob20Mf+/KJcrMKd09uOzs qZnocXAn4kZXtqu9/RFqsMPTN82iv6C2pMNtfEX1GLckHVQW26MN+1Ao+0d6xwXg Id0ohfcvMN8sfSOUSm+WOapFgwQpgXeWJaygF81MOWNaye+CoAnbWiCnu9K2pBOS 2pAnPhjCdKecHj/1AiCP56ji2M8bUqREtAxGyxqQI4qi3iPuuo+/0KQnJxilSdFQ lvQXCYe1KRwf+uvHu8icmt3aHFRpkVNRJRGIEsNYzu8HmkmBBajiFatuKHZeYZU+ Zu7YiBqtAoqZrP1jmG3QpYmd6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN6Zqkzy 1gx7VmPX+BqN9uGd9Ll3MB8GA1UdIwQYMBaAFKEGAzAr/sgqB/jF1C5Fi3bF/5Gk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTNCRS84OUI0RjY3ODg0 MTkxMUVBOThGRjA2MzdDNEY5QUUwMi9vUVlETUN2LXlDb0gtTVhVTGtXTGRzWF9r YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29RWURNQ3YteUNvSC1NWFVMa1dMZHNYX2thUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTNCRS84OUI0RjY3ODg0MTkxMUVBOThGRjA2MzdDNEY5QUUwMi9vUVlETUN2LXlD b0gtTVhVTGtXTGRzWF9rYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3IoL3nzcIa5Lbu1UVe/IMNkkATMB7aMqNhXDYdIezmNpjX39Jp7CB k2xuTeUsqr+Z0FsHFzq7LldXkoKQs001v2UigIaKTFHma3I1nRpD+tHOW59DowWw kopZH2NOa2RyaytYG6sBY9y6HK/eZJBlLEB2LiwupzWfjWheEqOQ/SSZcgjF4tvE LQh0xo+1GzDvdxJmqQEiGAMkPO/+omyFhBBFfV7MluBsEi4FBYFZ7Q8L5lJqIQQ2 xKVTU0D0SGSZNrwTi0mCzuGPrWkeFAuV4ahB8X6tIH5bOcDAWSiUjolXXouhszkb fngag/GkjgXF3UR40rzunwqOodfdQoVX -----END CERTIFICATE-----Generated at Sat Aug 23 21:38:31 2025 by rpki-client