$ rpki-client -vvf rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft File: oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft (raw, json) Hash identifier: rQg6Pb8zjOaXnyAd6zGfqD1XKybH+vFdw8fnUkSNuyQ= Subject key identifier: D4:04:3A:FD:EC:4B:72:44:11:A7:28:CA:EA:B2:CB:3E:0B:DD:D6:CC Authority key identifier: A1:4B:DA:A3:15:76:A6:36:7A:0B:5C:3A:CA:B9:1C:4E:9F:31:18:EF Certificate issuer: /CN=A917604B/serialNumber=A14BDAA31576A6367A0B5C3ACAB91C4E9F3118EF Certificate serial: 0145 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft Manifest number: 0142 Signing time: Sat 05 Jul 2025 04:38:08 +0000 Manifest this update: Sat 05 Jul 2025 04:38:07 +0000 Manifest next update: Sat 12 Jul 2025 04:38:07 +0000 Files and hashes: 1: oUvaoxV2pjZ6C1w6yrkcTp8xGO8.crl (hash: kkqp7AXkH5EyQ9N37yn/uS2sLElqN0Fw70HZsToxR1o=) 2: 2D7DCF98BA1411EFBD0C393DC4F9AE02.roa (hash: fg42UFyy2LFjnZK3Qasj9lnWcNe6AFnhvIhyePUvpAM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.crl rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 325 (0x145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917604B, serialNumber=A14BDAA31576A6367A0B5C3ACAB91C4E9F3118EF Validity Not Before: Jul 5 04:38:07 2025 GMT Not After : Jul 12 04:38:07 2025 GMT Subject: CN=6868ac30-75a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:4b:cc:39:21:43:62:41:b4:db:54:e7:fd:41: ba:b5:2e:cc:8c:3b:2a:fb:ae:66:11:e4:ee:11:4c: 72:62:85:da:8e:41:e8:22:9d:53:de:e0:90:9e:de: 35:d4:ee:6f:d0:64:27:54:2b:99:80:e8:6d:d3:8c: 6a:d3:93:55:5a:d9:ad:df:f0:9f:5a:b8:48:71:d4: 53:ca:bc:61:c1:8e:93:2e:a3:81:0b:7f:e1:f1:8a: 52:04:18:84:22:a6:b2:13:c1:aa:0b:f1:89:50:99: aa:fc:cf:2f:14:83:ca:a2:cf:40:2e:3c:2b:83:48: aa:1b:77:78:3a:bd:3c:5b:21:96:2b:b7:59:fc:eb: 21:b0:4e:19:49:09:a8:71:bf:3e:79:96:04:05:1c: 8d:b3:37:26:73:5f:31:c1:91:0f:d7:64:a0:b4:30: 5c:21:31:86:af:23:d9:7a:14:f2:13:12:e5:e9:90: 7b:d9:44:2b:ae:bc:ce:12:d3:7d:91:40:a5:6c:e0: 77:e2:12:3a:6a:e8:32:19:c3:cf:0d:95:97:75:52: 48:6d:34:b5:01:f6:6a:1f:e5:a5:7f:e7:67:8b:e8: 5d:97:f1:01:24:51:05:1a:f8:b0:86:26:a6:4f:68: e3:1e:7f:70:63:c3:7f:e6:ef:0d:e2:50:11:c1:3b: 48:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:04:3A:FD:EC:4B:72:44:11:A7:28:CA:EA:B2:CB:3E:0B:DD:D6:CC X509v3 Authority Key Identifier: keyid:A1:4B:DA:A3:15:76:A6:36:7A:0B:5C:3A:CA:B9:1C:4E:9F:31:18:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:52:83:1d:37:00:1c:f6:5c:cb:fb:78:6b:76:0c:d9:70:d0: 4f:fd:ba:18:56:3d:f1:8c:b7:e7:1e:d1:2d:42:6c:6c:2e:40: 55:86:aa:03:f5:a2:5c:ec:78:68:04:c1:87:53:a5:eb:cd:b8: 15:18:18:9d:9e:33:44:67:a2:43:97:ce:14:46:6a:91:7c:dc: a4:bc:5c:f3:f9:38:71:ba:9f:dc:a9:3c:86:79:2b:7f:d0:e7: ea:26:2f:14:26:45:b4:e4:e0:70:ab:85:7d:19:08:e4:51:0a: fa:ca:3e:bb:80:ed:68:24:74:8e:b8:4d:76:1f:42:81:d6:47: b3:b1:da:e2:81:2a:6d:28:bc:44:e5:2d:7d:c8:e8:20:fb:de: 6e:77:54:43:ae:62:3d:8a:5d:71:e9:81:d3:47:a8:be:96:ad: ba:b2:38:fc:d0:73:d6:42:62:8c:4c:c3:19:6b:80:87:ac:63: 46:99:0f:a2:c9:e3:df:6f:fa:80:7c:c1:4b:e0:03:56:b9:ea: 22:bb:b4:01:d7:91:0b:6e:93:f8:0c:ef:12:9c:f2:36:49:a1: 77:89:00:11:b6:6b:b4:bd:60:95:a9:ee:18:b2:20:de:db:65: 9d:d3:eb:c1:ae:78:29:5d:d3:c9:ed:91:a6:5e:40:b9:02:dc: 55:8d:75:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzYwNEIxMTAvBgNVBAUTKEExNEJEQUEzMTU3NkE2MzY3QTBCNUMzQUNBQjkxQzRF OUYzMTE4RUYwHhcNMjUwNzA1MDQzODA3WhcNMjUwNzEyMDQzODA3WjAYMRYwFAYD VQQDEw02ODY4YWMzMC03NWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkEvMOSFDYkG021Tn/UG6tS7MjDsq+65mEeTuEUxyYoXajkHoIp1T3uCQnt41 1O5v0GQnVCuZgOht04xq05NVWtmt3/CfWrhIcdRTyrxhwY6TLqOBC3/h8YpSBBiE IqayE8GqC/GJUJmq/M8vFIPKos9ALjwrg0iqG3d4Or08WyGWK7dZ/OshsE4ZSQmo cb8+eZYEBRyNszcmc18xwZEP12SgtDBcITGGryPZehTyExLl6ZB72UQrrrzOEtN9 kUClbOB34hI6augyGcPPDZWXdVJIbTS1AfZqH+Wlf+dni+hdl/EBJFEFGviwhiam T2jjHn9wY8N/5u8N4lARwTtIBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNQEOv3s S3JEEacoyuqyyz4L3dbMMB8GA1UdIwQYMBaAFKFL2qMVdqY2egtcOsq5HE6fMRjv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjA0Qi80MUMwMTM1QzZE QUUxMUVFQTgwRDA1NzRDNEY5QUUwMi9vVXZhb3hWMnBqWjZDMXc2eXJrY1RwOHhH TzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29VdmFveFYycGpaNkMxdzZ5cmtjVHA4eEdPOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjA0Qi80MUMwMTM1QzZEQUUxMUVFQTgwRDA1NzRDNEY5QUUwMi9vVXZhb3hWMnBq WjZDMXc2eXJrY1RwOHhHTzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByUoMdNwAc9lzL+3hrdgzZcNBP/boYVj3xjLfnHtEtQmxsLkBVhqoD 9aJc7HhoBMGHU6XrzbgVGBidnjNEZ6JDl84URmqRfNykvFzz+Thxup/cqTyGeSt/ 0OfqJi8UJkW05OBwq4V9GQjkUQr6yj67gO1oJHSOuE12H0KB1kezsdrigSptKLxE 5S19yOgg+95ud1RDrmI9il1x6YHTR6i+lq26sjj80HPWQmKMTMMZa4CHrGNGmQ+i yePfb/qAfMFL4ANWueoiu7QB15ELbpP4DO8SnPI2SaF3iQARtmu0vWCVqe4YsiDe 22Wd0+vBrngpXdPJ7ZGmXkC5AtxVjXXI -----END CERTIFICATE-----Generated at Sun Jul 6 00:53:19 2025 by rpki-client