$ rpki-client -vvf rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft File: oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft (raw, json) Hash identifier: hutEywEa1Xn+Vpocab0ZFhmMXdKQSGDD5sQtPraaV7A= Subject key identifier: 4F:6D:FD:4B:15:42:CB:40:1E:36:E6:DE:D7:D2:A6:A9:EF:A5:45:B0 Authority key identifier: A1:4B:DA:A3:15:76:A6:36:7A:0B:5C:3A:CA:B9:1C:4E:9F:31:18:EF Certificate issuer: /CN=A917604B/serialNumber=A14BDAA31576A6367A0B5C3ACAB91C4E9F3118EF Certificate serial: 015E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft Manifest number: 015B Signing time: Sat 23 Aug 2025 04:12:07 +0000 Manifest this update: Sat 23 Aug 2025 04:12:07 +0000 Manifest next update: Sat 30 Aug 2025 04:12:07 +0000 Files and hashes: 1: oUvaoxV2pjZ6C1w6yrkcTp8xGO8.crl (hash: OB5o57GyHV8rIyWxilE5/WC0hqWJ6HVTZMUOVAfM43c=) 2: 2D7DCF98BA1411EFBD0C393DC4F9AE02.roa (hash: fg42UFyy2LFjnZK3Qasj9lnWcNe6AFnhvIhyePUvpAM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.crl rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:12:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 350 (0x15e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917604B, serialNumber=A14BDAA31576A6367A0B5C3ACAB91C4E9F3118EF Validity Not Before: Aug 23 04:12:07 2025 GMT Not After : Aug 30 04:12:07 2025 GMT Subject: CN=68a93f97-f908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:46:c8:b0:54:ca:e9:f0:3f:35:31:3f:b7:91: a6:fd:af:e7:a2:04:8a:5d:d1:c8:36:75:24:30:9f: f3:9e:fb:9b:ec:21:c7:09:c2:5c:23:c1:5b:45:93: 85:d4:1b:d8:02:1e:1e:7d:01:26:54:bf:f2:a6:bc: c6:a2:48:b4:d2:e4:fb:e6:7d:8c:65:b2:3d:13:28: 35:e4:9e:4a:dd:c7:91:bf:ef:31:f1:77:0e:d1:11: 69:74:c2:81:dd:c5:ef:89:40:89:f7:33:10:89:b2: 80:35:b6:31:fa:3d:2c:1c:8b:60:5d:54:0b:09:58: 3f:83:f9:c6:4f:8b:6d:9b:92:d7:22:11:1d:9d:7b: f9:e1:c5:da:c0:45:52:83:9b:dd:40:9b:13:43:6c: bb:f9:c8:e4:f3:19:e6:81:9a:34:51:9c:f4:31:2a: cd:0b:1c:47:ae:f9:72:53:8c:cd:18:5b:e3:41:39: ba:88:20:00:03:dd:4b:3d:33:fb:eb:31:a1:fd:3e: 7f:a7:93:f2:5d:4d:4b:d9:4a:fd:6e:2f:fd:87:ee: 73:75:49:fc:00:73:4f:ec:52:54:66:b2:66:da:78: c6:32:68:19:13:60:ba:16:ed:7b:92:bf:0b:31:b6: 17:b8:62:9e:21:5e:67:31:86:a3:21:53:9a:48:76: af:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:6D:FD:4B:15:42:CB:40:1E:36:E6:DE:D7:D2:A6:A9:EF:A5:45:B0 X509v3 Authority Key Identifier: keyid:A1:4B:DA:A3:15:76:A6:36:7A:0B:5C:3A:CA:B9:1C:4E:9F:31:18:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:df:6e:07:73:a3:a1:df:c5:b5:74:91:38:3c:b3:98:37:25: 01:c6:17:cd:87:15:32:9f:0f:b4:b4:5c:5e:aa:9e:30:2f:3b: 5c:36:fb:f4:7c:ed:68:b9:99:c0:3b:67:3e:02:51:b6:26:49: 92:33:2c:48:4f:f2:78:e8:42:af:5a:51:32:64:17:d2:fd:6c: 60:4b:09:08:f9:0f:02:ce:90:00:df:ca:e9:4b:26:f5:51:47: 6d:d8:86:d5:67:db:05:72:a8:2c:ba:47:e4:d5:b2:82:1a:8c: 16:a1:48:87:8d:7a:c5:02:76:47:c5:96:64:31:43:c6:71:a1: e9:b4:e2:d7:f1:20:f0:e0:b7:ad:d8:25:45:b9:d8:17:85:2f: e7:84:fd:88:84:c2:70:5c:5d:ad:b8:cc:6b:40:85:0b:c7:47: 1c:f1:06:24:a2:91:e1:64:78:26:fc:44:66:c5:cc:af:b9:14: 16:99:ec:dd:eb:6c:23:71:1f:22:1f:8d:36:b4:6b:5a:79:87: 61:d7:59:a5:75:b0:e7:14:0c:af:c1:fa:6a:e2:53:2c:53:af: c9:b9:93:1d:d0:eb:29:79:21:77:a0:51:18:7c:78:a4:e6:9e: 0e:de:a2:6e:52:03:9a:03:ba:bd:28:02:37:b5:87:d6:ec:3e: 2f:3f:80:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzYwNEIxMTAvBgNVBAUTKEExNEJEQUEzMTU3NkE2MzY3QTBCNUMzQUNBQjkxQzRF OUYzMTE4RUYwHhcNMjUwODIzMDQxMjA3WhcNMjUwODMwMDQxMjA3WjAYMRYwFAYD VQQDEw02OGE5M2Y5Ny1mOTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2EbIsFTK6fA/NTE/t5Gm/a/nogSKXdHINnUkMJ/znvub7CHHCcJcI8FbRZOF 1BvYAh4efQEmVL/yprzGoki00uT75n2MZbI9Eyg15J5K3ceRv+8x8XcO0RFpdMKB 3cXviUCJ9zMQibKANbYx+j0sHItgXVQLCVg/g/nGT4ttm5LXIhEdnXv54cXawEVS g5vdQJsTQ2y7+cjk8xnmgZo0UZz0MSrNCxxHrvlyU4zNGFvjQTm6iCAAA91LPTP7 6zGh/T5/p5PyXU1L2Ur9bi/9h+5zdUn8AHNP7FJUZrJm2njGMmgZE2C6Fu17kr8L MbYXuGKeIV5nMYajIVOaSHavCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE9t/UsV QstAHjbm3tfSpqnvpUWwMB8GA1UdIwQYMBaAFKFL2qMVdqY2egtcOsq5HE6fMRjv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjA0Qi80MUMwMTM1QzZE QUUxMUVFQTgwRDA1NzRDNEY5QUUwMi9vVXZhb3hWMnBqWjZDMXc2eXJrY1RwOHhH TzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29VdmFveFYycGpaNkMxdzZ5cmtjVHA4eEdPOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjA0Qi80MUMwMTM1QzZEQUUxMUVFQTgwRDA1NzRDNEY5QUUwMi9vVXZhb3hWMnBq WjZDMXc2eXJrY1RwOHhHTzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCf324Hc6Oh38W1dJE4PLOYNyUBxhfNhxUynw+0tFxeqp4wLztcNvv0 fO1ouZnAO2c+AlG2JkmSMyxIT/J46EKvWlEyZBfS/WxgSwkI+Q8CzpAA38rpSyb1 UUdt2IbVZ9sFcqgsukfk1bKCGowWoUiHjXrFAnZHxZZkMUPGcaHptOLX8SDw4Let 2CVFudgXhS/nhP2IhMJwXF2tuMxrQIULx0cc8QYkopHhZHgm/ERmxcyvuRQWmezd 62wjcR8iH402tGtaeYdh11mldbDnFAyvwfpq4lMsU6/JuZMd0OspeSF3oFEYfHik 5p4O3qJuUgOaA7q9KAI3tYfW7D4vP4AV -----END CERTIFICATE-----Generated at Sat Aug 23 19:37:28 2025 by rpki-client